last executing test programs:

3m14.430619542s ago: executing program 2 (id=570):
mknod(&(0x7f0000000280)='./file0\x00', 0x8001420, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r0, 0x4, 0x8e000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000002d40)='./file0\x00', 0x101001, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1)

3m13.491139044s ago: executing program 2 (id=574):
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

3m13.4196342s ago: executing program 2 (id=576):
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)

3m13.324170572s ago: executing program 2 (id=577):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140))
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000200)={0x0, 0x14e1, 0x10, 0x3, 0xb2}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe108, 0x440d, 0x1, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9406, 0x1000, 0xfffffffe, 0x2000006, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2, 0x1, 0x35a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4f6ad, 0x1000, 0x3, 0x38e, 0x0, r0}}], 0x4, &(0x7f0000000540)={0x2e, 0x58, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, 0x0, '\x00', {0x0, 0xc8b, 0x0, 0x0}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

3m12.713358952s ago: executing program 2 (id=589):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x30, r0, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0xf4, 0x42}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4011}, 0x0)

3m11.670657402s ago: executing program 2 (id=610):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

3m11.555991241s ago: executing program 32 (id=610):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

2m52.490800399s ago: executing program 3 (id=932):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setgroups(0x1, &(0x7f0000000080)=[r1])
setuid(0xee00)
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil)

2m52.329523526s ago: executing program 3 (id=934):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101003, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101004, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101005, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)

2m52.158947277s ago: executing program 3 (id=936):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

2m52.158414453s ago: executing program 3 (id=937):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x2814800, &(0x7f0000000100)=ANY=[], 0x3, 0x6c2, &(0x7f0000001600)="$eJzs3ctvHVcdB/DvXD9ip23ipkkbUKVajQSIiMSOlYLZEBBCRqoQKgvWVuI0Vm7S4rjIrRB1eIpdF/0DuskGsUJixSZSy6Ib2HWHvKyExKYbzGrQ3Dv3kevXbR6+Sfl8ornnzDlzzvzmNzP3FVk3wP+tpbMZv5siS2df3ajWt+4sNLfuLNzo1JMcSbKZjCdpJCn+U5blh8mlpOhOUwyUO7y/uvjaJ59tfdpeG6+X1vaN/cYNqLfbHGje7LTNJhmrywdwz3yXH3i+ohv5pSRn6hJGbiJJWU6k7PrZx093e6rO4+1yerfRU4cXKPDIFO3XzerFuNHfPpMcrW/06n1A55W3MZIgh3BkyO0G30EAAADAk2aYz8DHt7OdjeLYIYQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwibvd//L+ql0anPpuj8/v9k3Za6/nh56fNtfvdRxQEAAAAAAAAAh+il7WxnI8c662XR+j//l1srJ1uPT+Wt3MpK1nIuG1nOetazlvkkM30TTW4sr6+vzQ8x8sKuIy8cEOiRupx+OMcNAAAAAAAAAF8wv8pS7///AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgcVAkY+0ixe2+5pk0xpNMJZmsGjaTf3TqT7K7ow4AAAAADsHx7WxnI8c662WRk0meb30HMJW3cjPrWc16mlnJldb3Au1P/Y2tOwvNrTsLN6pl57zf/fc9q1MHhNGaMe3vHnbf8+nWFtO5mtVWy7lczhtp5koarZGV03U8nVkH4rpdxVR8pzZkgq7UZXXk79XlDu8OOdn+Br9Mmd7/C5aZVkYmuhmZq2OrsvFs58zsfoYGzs5BBvc0n0Y3sJMDe+oL+OM/3GfOj9ZldTy/2yvnIzGYiQt9V9/z++c8+epf/vTTubr++BzScMbqsmw9Tu/MxEKjl4kXhsnEtebN69eu3jr7pGVih7lWJk5115fyg/wkZzObH2ctq/l5lrOelczm+63acn3yi77be49MXWoXE7vtdqmXuE7eJ+srdKxu/Twxvdwaeyyr+VHeyJWs5JXWvwuZzzdzMRez2Hetn9r/DLfu+sY9d33vFaB8Ztc0nvlaXame9n5fl7vas+NRqfL6bF9e+59zZ1p9/S29LJ04OEtVWu55bvzr/qGMf7muVPv4dd+5H73BTMz3ZeK5/TLRuZBvNW9eX7u2/OZwuzvxXt/w3z5WT6nV9XKiOlnpnKDe1VH1PdfpG8hX1Xey29fY0Xeq29e+Uzf3vFMn6/dwO2e60Op7Yde+hVbf6b6+3d5vHfxuDoARO/r1o5PT/5r++/QH07+Zvjb96tT3jnzryIuTmfho4tvjc2NfabxY/Dkf5Je9z/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD9u/X2O9eXm82VtYFKWZbv7tHVLI8ne3TdX6WxZxhVZfyAUHdUMvvPp6oBnZYy3a7Oz5k9xOAPqnzp6WT4UfUv8KTdMv5w8zzCyn/Lsqxbij22+ePfdibqmaFSNzn8tXFAZaozYVKWZflYpK6ujB/yTkf0hAQcmvPrN948f+vtd76xemP59ZXXV24uXry4OLd48ZWF81dXmytz7cdRRwk8Cr0X/VFHAgAAAAAAAAAAAAxrqL8H+CjJA/w5waiPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiyLZ3N+N0UmZ87N1etb91ZaFZLp97bcjxJI0nxi6T4MLmU9pKZvumKvfbz/uria598tvVpb65qyQ8vHzBuOJv1ktkkY+3y9sOa73Jd7qvY7xCK7hFWCTvTSRyM2v8CAAD//9NF+gI=")
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000001880)={[{@discard}, {@namecase}, {@utf8}, {@gid={'gid', 0x3d, 0xee01}}, {@errors_remount}, {@keep_last_dots}, {@keep_last_dots}, {@discard}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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")
chmod(&(0x7f0000000080)='./file0\x00', 0x1db)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x8)
setxattr$incfs_size(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1)
pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000001880), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x1, 0x4ac, &(0x7f0000000500)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = getpid()
r2 = open(&(0x7f0000000280)='./file1\x00', 0x54927e, 0x10)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0xc000)
fallocate(r2, 0x0, 0x0, 0x8800000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x2000, 0x20)
r4 = syz_pidfd_open(r1, 0x0)
setns(r4, 0x24020000)
close_range(r0, 0xffffffffffffffff, 0x0)

2m51.877123016s ago: executing program 3 (id=942):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x2e8, 0x100000c, 0x208, 0x0, 0x2d8, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x40, 0x2, 0x7, 0x8, 0x9, 0x3, 0x8, 0x8]}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xff, 'syz_tun\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0x6, [0x1c, 0x2c, 0xb, 0x3c, 0x2e, 0x20, 0x24, 0x29, 0x36, 0xd, 0x1a, 0x2, 0x1f, 0xd, 0x80f, 0x21], 0x0, 0x4, 0x4}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff, 0xc72aaf435dc5921a, 0xffffffff], 0x4e23, 0x4e23, 0x4e23, 0x4e20, 0x3, 0x3, 0x2, 0x3, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348)

2m51.550264582s ago: executing program 3 (id=947):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2001, r1}, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x5)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x5e0e, 0x1}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

2m51.455200413s ago: executing program 33 (id=947):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2001, r1}, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x5)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x5e0e, 0x1}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

2m9.300035159s ago: executing program 0 (id=1313):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m9.242419762s ago: executing program 0 (id=1315):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x4a3, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x3fffdf2, 0x45833af92e4b39ff, 0x0)

2m9.184104953s ago: executing program 0 (id=1316):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0xfffffffffffffcc7, &(0x7f0000000080)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0xe9, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1})

2m9.113986514s ago: executing program 0 (id=1317):
mkdir(&(0x7f0000000400)='./file0\x00', 0x114)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14)
mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20)

2m9.061900103s ago: executing program 0 (id=1318):
socket$tipc(0x1e, 0x5, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0))
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)

2m8.050588572s ago: executing program 0 (id=1333):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='7', 0x1)
socket$packet(0x11, 0x3, 0x300)

2m8.022613757s ago: executing program 34 (id=1333):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='7', 0x1)
socket$packet(0x11, 0x3, 0x300)

2m5.995964113s ago: executing program 5 (id=1339):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='w', 0x1)

2m5.954557702s ago: executing program 5 (id=1356):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0)
prlimit64(0x0, 0x2, &(0x7f0000000040)={0x8000000008, 0x7}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)
r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
sendfile(r0, r0, 0x0, 0x40000000800)
sendfile(r1, r0, 0x0, 0x7ffff000)

2m5.894341553s ago: executing program 5 (id=1358):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

2m5.844935474s ago: executing program 5 (id=1359):
mkdir(&(0x7f0000000400)='./file0\x00', 0x114)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14)
mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20)

2m5.769385363s ago: executing program 5 (id=1361):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x5609, 0x0)

2m5.629137319s ago: executing program 1 (id=1364):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0)
prlimit64(0x0, 0x2, &(0x7f0000000040)={0x8000000008, 0x7}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)
r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
sendfile(r0, r0, 0x0, 0x40000000800)
sendfile(r1, r0, 0x0, 0x7ffff000)

2m5.585557848s ago: executing program 1 (id=1365):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x4009000)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')

2m5.532097815s ago: executing program 1 (id=1366):
socket$inet6(0xa, 0x3, 0xff)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x40, 0x6, 0x40, @private1, @mcast2, {[], {{0x4e22, 0x4e22, 0x1000, 0x41424344, 0x0, 0x0, 0x10, 0x2, 0x3, 0x0, 0x0, {[@sack={0x5, 0x22, [0xb, 0xce31, 0x3, 0x9, 0x1005, 0x9, 0x4, 0x5]}, @exp_fastopen={0xfe, 0x5, 0xf989, 'm'}, @sack={0x5, 0x2}]}}}}}}}}, 0x0)

2m5.505178784s ago: executing program 1 (id=1367):
mkdir(&(0x7f0000000400)='./file0\x00', 0x114)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14)
mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20)

2m5.466600168s ago: executing program 1 (id=1368):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000580)="27031c00160014000000002f1eafacf706e105000000894f00030001ee0b80558ddbba9b37242d29a50ed004484890af07c36505", 0x34}, {&(0x7f0000000180)="0f11f8f4caab9546afd30face8d9da8f0b8cb67a9875", 0x16}], 0x2}, 0x4004)

2m5.038484041s ago: executing program 1 (id=1370):
setns(0xc9, 0x0)
r0 = socket(0x1f, 0x3, 0x1)
bind(r0, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6)
setns(0xc9, 0x0)
r1 = socket(0x1f, 0x5, 0x8)
connect(r1, &(0x7f0000000900)=@generic={0x1f, "0102030405060100"}, 0xa)

2m4.966029134s ago: executing program 35 (id=1370):
setns(0xc9, 0x0)
r0 = socket(0x1f, 0x3, 0x1)
bind(r0, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6)
setns(0xc9, 0x0)
r1 = socket(0x1f, 0x5, 0x8)
connect(r1, &(0x7f0000000900)=@generic={0x1f, "0102030405060100"}, 0xa)

2m4.269056084s ago: executing program 5 (id=1377):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x68, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="1c3513000000", &(0x7f0000002240)=""/4103, 0x10000, 0x30520cf7f25f0c64, 0x0, 0x0})

2m4.136704443s ago: executing program 36 (id=1377):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x68, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="1c3513000000", &(0x7f0000002240)=""/4103, 0x10000, 0x30520cf7f25f0c64, 0x0, 0x0})

2.863354633s ago: executing program 6 (id=2866):
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x1, &(0x7f0000000580)})
io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

2.789060029s ago: executing program 6 (id=2867):
r0 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, r1, 0x0, r2}, 0x10)

2.705763199s ago: executing program 6 (id=2868):
r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0)
ioctl$SNDCTL_SEQ_RESET(r0, 0x5100)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0xeca1, 0x1, 0x1, 0x309}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1da9, 0x4, 0x0, 0x192}, <r3=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdbdc, 0x800, 0x0, 0x363}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x330, 0x0, 0x1, 0x348}, <r4=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xed06, 0xb800, 0x3, 0x1e3}}], 0x4, &(0x7f0000001880)={0x2e, 0x6c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, '\x00', {0x1, 0xcaa, 0x0, &(0x7f0000000880)=@buf_512="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"}}, &(0x7f0000001900))
mmap$IORING_OFF_SQES(0x0, 0x2, 0x3000004, 0x9050, r4, 0x10000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffffffff, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0xc})
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000180)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$key(0xf, 0x3, 0x2)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8)

2.55301574s ago: executing program 6 (id=2869):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0)

2.52589011s ago: executing program 6 (id=2870):
landlock_restrict_self(0xffffffffffffffff, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x6)
landlock_restrict_self(0xffffffffffffffff, 0x8)
landlock_restrict_self(0xffffffffffffffff, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x6)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x210a, r1}, 0x0)
landlock_restrict_self(r2, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x8000, 0xfc)

2.434599433s ago: executing program 6 (id=2872):
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10)
listen(r0, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') (async)
syz_emit_vhci(0x0, 0x0)
r1 = accept(r0, 0x0, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c0010001000100000000000000010000000000000000000000000000000100"/59, 0x3b, 0x0, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r1)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0)
dup(0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)

447.863029ms ago: executing program 4 (id=2886):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)

415.295786ms ago: executing program 7 (id=2887):
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
close(0x3)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}})

405.65688ms ago: executing program 4 (id=2888):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)

365.118821ms ago: executing program 4 (id=2889):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f0000000280)={[{@resgid}, {@journal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7b1}}]}, 0x1, 0x571, &(0x7f0000000780)="$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")
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2a, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r3, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

322.066737ms ago: executing program 7 (id=2890):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080))
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080))

321.289253ms ago: executing program 7 (id=2891):
r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x402c1})
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00')
close_range(r0, 0xffffffffffffffff, 0x0)

186.359086ms ago: executing program 4 (id=2892):
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @local}, 0xc)

120.260647ms ago: executing program 7 (id=2893):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000040))

104.291089ms ago: executing program 4 (id=2894):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000240)=0xffffdfff, 0x4)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
write(r0, &(0x7f0000000000)="01", 0x1)

66.323844ms ago: executing program 7 (id=2895):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)

50.105616ms ago: executing program 4 (id=2896):
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001600)={0x38, r1, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x14}, {0x4}, {0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2080098}, 0x54)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4400, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r2, 0x0)
connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x18}, 0xa)

0s ago: executing program 7 (id=2897):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close(0x3)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r1, 0x2219, 0x815, 0x16, 0x0, 0x0)

kernel console output (not intermixed with test programs):

[  142.508261][ T5708] usb 5-1: Manufacturer: syz
[  142.508271][ T5708] usb 5-1: SerialNumber: syz
[  142.554392][ T5708] usb 5-1: config 0 descriptor??
[  142.556579][ T9014] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  142.556755][ T9014] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  142.626537][ T9037] WARNING! power/level is deprecated; use power/control instead
[  142.771891][ T9014] bridge_slave_0: left allmulticast mode
[  142.771908][ T9014] bridge_slave_0: left promiscuous mode
[  142.772071][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.782481][ T9014] bridge_slave_1: left allmulticast mode
[  142.782496][ T9014] bridge_slave_1: left promiscuous mode
[  142.782628][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.796186][ T9014] bond0: (slave bond_slave_0): Releasing backup interface
[  142.801501][ T9014] bond0: (slave bond_slave_1): Releasing backup interface
[  142.841415][ T9014] team0: Port device team_slave_0 removed
[  142.858604][ T9014] team0: Port device team_slave_1 removed
[  142.860138][ T9014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.860158][ T9014] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.863745][ T9014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.863763][ T9014] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.871996][ T9014] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  143.081188][ T5708] asix 5-1:0.34: probe with driver asix failed with error -71
[  143.085589][ T5708] usb 5-1: USB disconnect, device number 3
[  143.552995][ T5708] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  143.700895][ T9065] loop0: detected capacity change from 0 to 32768
[  143.705688][ T5708] usb 2-1: Using ep0 maxpacket: 16
[  143.707514][ T5708] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  143.718169][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.718186][ T5708] usb 2-1: Product: syz
[  143.718192][ T5708] usb 2-1: Manufacturer: syz
[  143.718197][ T5708] usb 2-1: SerialNumber: syz
[  143.770559][ T9071] loop4: detected capacity change from 0 to 512
[  143.786869][ T9071] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem
[  143.786885][ T9071] loop4: lost filesystem error report for type 5 error -117
[  143.792797][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  143.792836][    C0] EXT4-fs (loop4): initial error at time 1791041692: ext4_process_orphan:346
[  143.792853][    C0] EXT4-fs (loop4): last error at time 1791041692: ext4_process_orphan:346
[  143.809272][ T9071] EXT4-fs (loop4): 2 truncates cleaned up
[  143.811038][ T9071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.864282][ T8182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.940021][ T5708] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  143.949417][ T5708] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  143.949674][ T5708] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  143.949712][ T5708] usb 2-1: media controller created
[  143.974235][ T5708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  144.011460][ T5708] zl10353_read_register: readreg error (reg=127, ret==-71)
[  144.079579][ T5708] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  144.084306][ T5708] usb 2-1: USB disconnect, device number 7
[  144.302909][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  144.452917][    T9] usb 1-1: Using ep0 maxpacket: 32
[  144.453886][ T5623] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  144.454578][    T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  144.455740][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.455760][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.455774][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  144.455802][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.461311][    T9] usb 1-1: config 0 descriptor??
[  144.604772][ T5623] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  144.607581][ T5623] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  144.607602][ T5623] usb 5-1: config 0 has no interface number 0
[  144.617696][ T5623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.617717][ T5623] usb 5-1: Product: syz
[  144.617727][ T5623] usb 5-1: Manufacturer: syz
[  144.617736][ T5623] usb 5-1: SerialNumber: syz
[  144.636301][ T5623] usb 5-1: config 0 descriptor??
[  144.697324][ T9089] binder: 9086:9089 ioctl 4018620d 0 returned -22
[  144.918539][ T5623] asix 5-1:0.251: probe with driver asix failed with error -71
[  144.928012][ T5623] usb 5-1: USB disconnect, device number 4
[  144.961374][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  144.961989][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  144.962053][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  144.967829][    T9] usb 1-1: USB disconnect, device number 5
[  145.598238][ T9106] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  145.678830][ T9112] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  145.701707][ T9114] loop1: detected capacity change from 0 to 2048
[  145.732959][ T9114] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.749678][   T35] audit: type=1800 audit(1791041694.008:7): pid=9114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1265" name="bus" dev="loop1" ino=1367 res=0 errno=0
[  145.812218][   T35] audit: type=1804 audit(1791041694.068:8): pid=9114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1265" name="/newroot/512/file0/bus" dev="loop1" ino=1367 res=1 errno=0
[  145.816527][   T35] audit: type=1804 audit(1791041694.078:9): pid=9114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1265" name="/newroot/512/file0/bus" dev="loop1" ino=1367 res=1 errno=0
[  147.502881][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  147.653272][    T9] usb 2-1: Using ep0 maxpacket: 16
[  147.657405][    T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  147.658869][    T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  147.658888][    T9] usb 2-1: config 0 has no interface number 0
[  147.658916][    T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  147.658932][    T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  147.661155][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.661174][    T9] usb 2-1: Product: syz
[  147.661183][    T9] usb 2-1: Manufacturer: syz
[  147.661192][    T9] usb 2-1: SerialNumber: syz
[  147.692077][    T9] usb 2-1: config 0 descriptor??
[  147.692579][ T9204] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  147.692624][ T9204] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  147.909652][ T9204] tipc: Resetting bearer <eth:team0>
[  147.921970][ T9204] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  148.285811][    T9] asix 2-1:0.34: probe with driver asix failed with error -71
[  148.299634][    T9] usb 2-1: USB disconnect, device number 8
[  148.734242][ T9242] loop4: detected capacity change from 0 to 512
[  148.746117][ T9242] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1325: iget: bad i_size value: 38620345925642
[  148.746146][ T9242] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  148.746839][ T9242] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1325: couldn't read orphan inode 15 (err -117)
[  148.746861][ T9242] loop4: lost filesystem error report for type 5 error -117
[  148.750690][ T9242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.818531][ T9242] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1325: bg 0: block 5: invalid block bitmap
[  148.859688][ T9242] overlayfs: failed to verify upper root origin
[  148.869538][ T9247] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1326'.
[  148.918713][ T8182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.037296][ T9256] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1330'.
[  149.372563][ T9267] loop1: detected capacity change from 0 to 512
[  149.391590][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  149.394976][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  149.401365][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  149.402503][ T9267] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.1334: iget: bad i_size value: 38620345925642
[  149.402520][ T9267] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  149.404936][ T9267] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1334: couldn't read orphan inode 15 (err -117)
[  149.404952][ T9267] loop1: lost filesystem error report for type 5 error -117
[  149.405987][ T9267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.409232][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  149.418853][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  149.487339][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.507979][ T9275] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1337'.
[  149.638846][ T9292] loop1: detected capacity change from 0 to 1024
[  149.754531][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'.
[  149.782953][ T5623] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  149.898011][ T9268] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.898100][ T9268] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.898259][ T9268] bridge_slave_0: entered allmulticast mode
[  149.898993][ T9268] bridge_slave_0: entered promiscuous mode
[  149.910867][ T9268] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.910933][ T9268] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.910997][ T9268] bridge_slave_1: entered allmulticast mode
[  149.911781][ T9268] bridge_slave_1: entered promiscuous mode
[  149.932922][ T5623] usb 5-1: Using ep0 maxpacket: 16
[  149.935074][ T5623] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  149.936934][ T5623] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  149.936954][ T5623] usb 5-1: config 0 has no interface number 0
[  149.936981][ T5623] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  149.936997][ T5623] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  149.938774][ T9268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.940244][ T9268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.942446][ T5623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.942465][ T5623] usb 5-1: Product: syz
[  149.942526][ T5623] usb 5-1: Manufacturer: syz
[  149.942543][ T5623] usb 5-1: SerialNumber: syz
[  149.949114][ T5623] usb 5-1: config 0 descriptor??
[  149.950012][ T9281] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  149.950224][ T9281] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  150.020044][ T9268] team0: Port device team_slave_0 added
[  150.024658][ T9268] team0: Port device team_slave_1 added
[  150.055224][ T9268] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.055234][ T9268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  150.055243][ T9268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.056293][ T9268] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.056301][ T9268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  150.056310][ T9268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.091308][ T9309] loop1: detected capacity change from 0 to 512
[  150.106065][ T9309] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.1347: iget: bad i_size value: 38620345925642
[  150.106084][ T9309] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  150.106505][ T9309] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1347: couldn't read orphan inode 15 (err -117)
[  150.106585][ T9309] loop1: lost filesystem error report for type 5 error -117
[  150.107916][ T9309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.138050][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.168668][ T9268] hsr_slave_0: entered promiscuous mode
[  150.169197][ T9268] hsr_slave_1: entered promiscuous mode
[  150.169503][ T9268] debugfs: 'hsr0' already exists in 'hsr'
[  150.169514][ T9268] Cannot create hsr debugfs directory
[  150.189405][ T9281] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  150.345229][ T9268] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  150.351306][ T9268] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  150.352165][ T9268] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  150.359726][ T9268] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  150.365666][ T9268] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  150.369919][ T9268] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  150.370855][ T9268] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  150.381002][ T9268] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  150.448092][ T9268] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.458945][ T9268] 8021q: adding VLAN 0 to HW filter on device team0
[  150.468354][ T5623] asix 5-1:0.34: probe with driver asix failed with error -71
[  150.470972][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.471015][ T7053] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.483800][ T5623] usb 5-1: USB disconnect, device number 5
[  150.492251][ T7057] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.492297][ T7057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.795773][ T9268] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.935062][ T9268] veth0_vlan: entered promiscuous mode
[  150.938873][ T9268] veth1_vlan: entered promiscuous mode
[  150.960264][ T9268] veth0_macvtap: entered promiscuous mode
[  150.966459][ T9268] veth1_macvtap: entered promiscuous mode
[  150.978523][ T9268] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.005118][ T9268] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.026798][ T6051] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.026826][ T6051] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.026840][ T6051] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.026853][ T6051] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.070745][ T9342] loop4: detected capacity change from 0 to 512
[  151.085541][ T9342] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  151.108499][ T9342] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.1351: bad orphan inode 131083
[  151.108520][ T9342] loop4: lost filesystem error report for type 5 error -117
[  151.109492][ T9342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.146348][ T8182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.189515][ T9345] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  151.225707][ T7020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.225755][ T7020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.255916][ T7020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.255935][ T7020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.354403][ T9355] nvme_fcloop: unknown parameter or missing value 'w'
[  151.522991][ T4994] Bluetooth: hci0: command tx timeout
[  151.890238][ T9353] loop4: detected capacity change from 0 to 131072
[  151.949883][ T9353] F2FS-fs (loop4): invalid crc value
[  152.001786][ T7445] tipc: Resetting bearer <eth:syz_tun>
[  152.014996][ T7445] tipc: Disabling bearer <eth:syz_tun>
[  152.089142][ T9353] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  152.102237][ T9353] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  152.457218][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  152.467631][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  152.468407][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  152.469377][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  152.469918][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  152.571218][ T9391] Bluetooth: MGMT ver 1.23
[  152.842419][ T9383] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.842504][ T9383] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.842563][ T9383] bridge_slave_0: entered allmulticast mode
[  152.844140][ T9383] bridge_slave_0: entered promiscuous mode
[  152.846601][ T9383] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.846916][ T9383] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.847269][ T9383] bridge_slave_1: entered allmulticast mode
[  152.848278][ T9383] bridge_slave_1: entered promiscuous mode
[  152.868695][ T9383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.870694][ T9383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.887996][ T9383] team0: Port device team_slave_0 added
[  152.889318][ T9383] team0: Port device team_slave_1 added
[  152.905859][ T9383] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.905874][ T9383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.905889][ T9383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.906918][ T9383] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.906925][ T9383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.906935][ T9383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.966687][ T9383] hsr_slave_0: entered promiscuous mode
[  152.967145][ T9383] hsr_slave_1: entered promiscuous mode
[  152.967517][ T9383] debugfs: 'hsr0' already exists in 'hsr'
[  152.967529][ T9383] Cannot create hsr debugfs directory
[  153.149066][ T6051] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.307154][ T9383] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  153.312252][ T9412] loop4: detected capacity change from 0 to 65536
[  153.318543][ T9383] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  153.319173][ T9383] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  153.339459][ T4994] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  153.343825][ T9383] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  153.344976][ T9383] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  153.345488][ T4994] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  153.352351][ T4994] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  153.357314][ T4994] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  153.357764][ T4994] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  153.372487][ T9383] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  153.376944][ T9383] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  153.382129][ T9383] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  153.400544][ T9412] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  153.425139][ T9412] XFS (loop4): Ending clean mount
[  153.438652][ T9412] XFS (loop4): Quotacheck needed: Please wait.
[  153.468017][ T9383] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.481156][ T9383] 8021q: adding VLAN 0 to HW filter on device team0
[  153.484844][ T7057] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.484886][ T7057] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.488560][ T7057] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.488601][ T7057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.508039][ T9383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  153.508054][ T9383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.515822][ T9412] XFS (loop4): Quotacheck: Done.
[  153.556182][ T8182] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  153.953620][ T9383] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.954443][ T9414] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.954530][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.954737][ T9414] bridge_slave_0: entered allmulticast mode
[  153.955794][ T9414] bridge_slave_0: entered promiscuous mode
[  153.958190][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.958452][ T9414] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.958630][ T9414] bridge_slave_1: entered allmulticast mode
[  153.959406][ T9414] bridge_slave_1: entered promiscuous mode
[  154.015838][ T9414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.017674][ T9414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.061193][ T9414] team0: Port device team_slave_0 added
[  154.068489][ T9414] team0: Port device team_slave_1 added
[  154.097748][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.097757][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  154.097768][ T9414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.100891][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.100900][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  154.100909][ T9414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.156241][ T9414] hsr_slave_0: entered promiscuous mode
[  154.156740][ T9414] hsr_slave_1: entered promiscuous mode
[  154.157044][ T9414] debugfs: 'hsr0' already exists in 'hsr'
[  154.157053][ T9414] Cannot create hsr debugfs directory
[  154.200461][ T9471] loop4: detected capacity change from 0 to 512
[  154.213800][ T9471] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  154.232855][ T9471] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.1382: bad orphan inode 131083
[  154.232872][ T9471] loop4: lost filesystem error report for type 5 error -117
[  154.237713][ T9471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.282551][ T8182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.344525][ T9477] trusted_key: encrypted_key: insufficient parameters specified
[  154.365266][ T9383] veth0_vlan: entered promiscuous mode
[  154.374889][ T9383] veth1_vlan: entered promiscuous mode
[  154.380391][ T9479] loop4: detected capacity change from 0 to 512
[  154.394560][ T9479] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1385: iget: bad i_size value: 38620345925642
[  154.394585][ T9479] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  154.394868][ T9479] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1385: couldn't read orphan inode 15 (err -117)
[  154.394881][ T9479] loop4: lost filesystem error report for type 5 error -117
[  154.395967][ T9479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.434493][ T9383] veth0_macvtap: entered promiscuous mode
[  154.445713][ T9383] veth1_macvtap: entered promiscuous mode
[  154.448364][ T8182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.468627][ T9383] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.509953][ T9383] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.573672][ T5597] Bluetooth: hci0: command tx timeout
[  154.629291][ T9414] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  154.634373][ T9414] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  154.641247][ T9414] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  154.659169][ T9414] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  154.663796][ T9414] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  154.681237][ T9414] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  154.682029][ T9414] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  154.685904][ T9414] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  154.692943][ T6214] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.693083][ T6214] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.693098][ T6214] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.746479][ T6052] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.793268][ T6051] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.806097][ T7047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.806113][ T7047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.855012][ T6051] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.873746][    T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  154.877474][ T7047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.877493][ T7047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.902021][ T6051] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.026714][    T9] usb 5-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00
[  155.046056][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  155.046079][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.046104][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.067472][    T9] usb 5-1: config 0 descriptor??
[  155.142880][ T9414] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.145635][ T6051] bridge_slave_1: left allmulticast mode
[  155.145652][ T6051] bridge_slave_1: left promiscuous mode
[  155.145866][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.152615][ T6051] bridge_slave_0: left allmulticast mode
[  155.154977][ T6051] bridge_slave_0: left promiscuous mode
[  155.155153][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.296527][ T6051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.298218][ T6051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.299182][ T6051] bond0 (unregistering): Released all slaves
[  155.359770][ T9414] 8021q: adding VLAN 0 to HW filter on device team0
[  155.363347][ T5597] Bluetooth: hci2: command tx timeout
[  155.396863][ T7046] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.396908][ T7046] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.398143][ T7046] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.398185][ T7046] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.504238][    T9] wacom 0003:056A:5012.0001: unknown main item tag 0x0
[  155.504269][    T9] wacom 0003:056A:5012.0001: unknown main item tag 0x0
[  155.504279][    T9] wacom 0003:056A:5012.0001: unknown main item tag 0x0
[  155.504289][    T9] wacom 0003:056A:5012.0001: unknown main item tag 0x0
[  155.504299][    T9] wacom 0003:056A:5012.0001: unknown main item tag 0x0
[  155.504309][    T9] wacom 0003:056A:5012.0001: unknown main item tag 0x0
[  155.504318][    T9] wacom 0003:056A:5012.0001: unknown main item tag 0x0
[  155.504328][    T9] wacom 0003:056A:5012.0001: unknown main item tag 0x0
[  155.504337][    T9] wacom 0003:056A:5012.0001: unknown main item tag 0x0
[  155.504347][    T9] wacom 0003:056A:5012.0001: unknown main item tag 0x0
[  155.506055][    T9] wacom 0003:056A:5012.0001: reserved main item tag 0xd
[  155.673413][ T5340] 8021q: adding VLAN 0 to HW filter on device eth9
[  155.704110][ T5653] usb 5-1: USB disconnect, device number 6
[  155.789658][ T6051] hsr_slave_0: left promiscuous mode
[  155.790165][ T6051] hsr_slave_1: left promiscuous mode
[  155.790526][ T6051] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.790535][ T6051] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.791116][ T6051] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.791125][ T6051] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.797496][ T6051] veth1_macvtap: left promiscuous mode
[  155.797529][ T6051] veth0_macvtap: left promiscuous mode
[  155.797569][ T6051] veth1_vlan: left promiscuous mode
[  155.797605][ T6051] veth0_vlan: left promiscuous mode
[  156.009793][ T9496] loop6: detected capacity change from 0 to 131072
[  156.034616][ T9496] F2FS-fs (loop6): invalid crc value
[  156.101308][ T9496] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  156.117104][ T9496] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  156.142049][ T6051] team0 (unregistering): Port device team_slave_1 removed
[  156.155435][ T6051] team0 (unregistering): Port device team_slave_0 removed
[  156.350081][ T5340] 8021q: adding VLAN 0 to HW filter on device eth10
[  156.611030][ T9414] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.642972][ T5597] Bluetooth: hci0: command tx timeout
[  156.691771][ T5340] 8021q: adding VLAN 0 to HW filter on device eth11
[  156.875174][ T9414] veth0_vlan: entered promiscuous mode
[  156.880082][ T9414] veth1_vlan: entered promiscuous mode
[  156.918701][ T9414] veth0_macvtap: entered promiscuous mode
[  156.930504][ T9414] veth1_macvtap: entered promiscuous mode
[  156.953621][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.961450][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.016449][ T6051] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.016474][ T6051] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.016487][ T6051] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.016501][ T6051] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.141341][ T5340] 8021q: adding VLAN 0 to HW filter on device eth12
[  157.152211][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.152226][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.182204][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.182216][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.442985][ T5597] Bluetooth: hci2: command tx timeout
[  157.471590][ T9567] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  157.818701][ T9592] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  157.889860][ T9596] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  158.038784][ T9610] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  158.128346][ T9615] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  158.245029][ T4994] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10
[  158.250357][ T7047] Bluetooth: hci3: Frame reassembly failed (-84)
[  158.382496][ T9632] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  158.600828][ T9639] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  158.704034][ T9645] loop7: detected capacity change from 0 to 164
[  158.720869][ T9645] isofs_fill_super: root inode is not a directory. Corrupted media?
[  158.723701][ T5603] Bluetooth: hci0: command tx timeout
[  158.907827][ T9659] loop4: detected capacity change from 0 to 164
[  158.940239][ T9659] isofs_fill_super: root inode is not a directory. Corrupted media?
[  159.193413][ T2605] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  159.342855][ T2605] usb 8-1: Using ep0 maxpacket: 16
[  159.343541][ T2605] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  159.345031][ T2605] usb 8-1: config 0 has an invalid interface number: 34 but max is 0
[  159.345044][ T2605] usb 8-1: config 0 has no interface number 0
[  159.345060][ T2605] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  159.345070][ T2605] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  159.346790][ T2605] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.346800][ T2605] usb 8-1: Product: syz
[  159.346806][ T2605] usb 8-1: Manufacturer: syz
[  159.346811][ T2605] usb 8-1: SerialNumber: syz
[  159.348523][ T2605] usb 8-1: config 0 descriptor??
[  159.349079][ T9663] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  159.349125][ T9663] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  159.524804][ T5603] Bluetooth: hci2: command tx timeout
[  159.562602][ T9663] bridge_slave_0: left allmulticast mode
[  159.562645][ T9663] bridge_slave_0: left promiscuous mode
[  159.563411][ T9663] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.571917][ T9663] bridge_slave_1: left allmulticast mode
[  159.571938][ T9663] bridge_slave_1: left promiscuous mode
[  159.572112][ T9663] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.589167][ T9663] bond0: (slave bond_slave_0): Releasing backup interface
[  159.598912][ T9663] bond0: (slave bond_slave_1): Releasing backup interface
[  159.611550][ T9663] team0: Port device team_slave_0 removed
[  159.619214][ T9663] team0: Port device team_slave_1 removed
[  159.619784][ T9663] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.619794][ T9663] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.627230][ T9663] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.627243][ T9663] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.637284][ T9663] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  159.832900][ T2605] asix 8-1:0.34: probe with driver asix failed with error -71
[  159.843262][ T2605] usb 8-1: USB disconnect, device number 2
[  160.102900][ T5708] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  160.274803][ T5708] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  160.276100][ T5708] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.276118][ T5708] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.277182][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  160.277197][ T5708] usb 5-1: SerialNumber: syz
[  160.324123][ T5603] Bluetooth: hci3: command 0x1003 tx timeout
[  160.325596][ T5603] Bluetooth: hci1: command tx timeout
[  160.325783][ T5597] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  160.403885][ T9677] loop6: detected capacity change from 0 to 164
[  160.431573][ T9677] isofs_fill_super: root inode is not a directory. Corrupted media?
[  160.518299][ T5708] usb 5-1: 0:2 : does not exist
[  160.552244][ T5708] usb 5-1: USB disconnect, device number 7
[  160.580678][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  160.654922][ T9695] loop6: detected capacity change from 0 to 164
[  160.660016][ T9695] isofs_fill_super: root inode is not a directory. Corrupted media?
[  160.772865][ T9702] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1455'.
[  160.772886][ T9702] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1455'.
[  160.776031][ T9702] geneve2: entered promiscuous mode
[  160.804657][ T5597] Bluetooth: hci0: command tx timeout
[  160.969861][ T9712] loop6: detected capacity change from 0 to 164
[  160.985728][ T9712] isofs_fill_super: root inode is not a directory. Corrupted media?
[  161.292962][   T33] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  161.453493][   T33] usb 7-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00
[  161.454376][   T33] usb 7-1: config 32 has an invalid interface number: 255 but max is 0
[  161.454387][   T33] usb 7-1: config 32 has no interface number 0
[  161.454398][   T33] usb 7-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30
[  161.454411][   T33] usb 7-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  161.454421][   T33] usb 7-1: config 32 interface 255 has no altsetting 0
[  161.454434][   T33] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.485763][   T33] usb-storage 7-1:32.255: USB Mass Storage device detected
[  161.512187][   T33] usb-storage 7-1:32.255: Quirks match for vid 057b pid 0000: 1
[  161.602892][ T5597] Bluetooth: hci2: command tx timeout
[  161.677920][ T5667] usb 7-1: USB disconnect, device number 2
[  162.898596][ T9813] netlink: 'syz.4.1504': attribute type 2 has an invalid length.
[  163.833666][ T5705] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  163.984834][ T5705] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  163.989150][ T5705] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.989163][ T5705] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  163.993618][ T5705] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  163.993640][ T5705] usb 8-1: SerialNumber: syz
[  164.201785][ T5705] usb 8-1: 0:2 : does not exist
[  164.201823][ T5705] usb 8-1: unit 5 not found!
[  164.295246][ T5705] usb 8-1: USB disconnect, device number 3
[  164.883439][ T9912] loop7: detected capacity change from 0 to 4096
[  164.915183][ T9912] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[  165.772920][ T2605] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  165.927238][ T2605] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  165.930323][ T2605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.930342][ T2605] usb 7-1: Product: syz
[  165.930351][ T2605] usb 7-1: Manufacturer: syz
[  165.930360][ T2605] usb 7-1: SerialNumber: syz
[  165.933251][ T2605] usb 7-1: config 0 descriptor??
[  166.132788][ T5705] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  166.140000][ T2605] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  166.263125][ T9981] FAULT_INJECTION: forcing a failure.
[  166.263125][ T9981] name failslab, interval 1, probability 0, space 0, times 0
[  166.263142][ T9981] CPU: 1 UID: 0 PID: 9981 Comm: syz.7.1585 Not tainted syzkaller #0 PREEMPT(full) 
[  166.263151][ T9981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.263155][ T9981] Call Trace:
[  166.263159][ T9981]  <TASK>
[  166.263162][ T9981]  dump_stack_lvl+0xe8/0x150
[  166.263177][ T9981]  should_fail_ex+0x410/0x560
[  166.263190][ T9981]  should_failslab+0xa8/0x100
[  166.263202][ T9981]  __kmalloc_cache_noprof+0xa3/0x600
[  166.263212][ T9981]  ? tipc_group_create_member+0x61/0x540
[  166.263223][ T9981]  ? tipc_group_create_member+0x61/0x540
[  166.263235][ T9981]  tipc_group_create_member+0x61/0x540
[  166.263247][ T9981]  ? tipc_nametbl_build_group+0x1dd/0x500
[  166.263256][ T9981]  tipc_nametbl_build_group+0x32f/0x500
[  166.263263][ T9981]  ? tipc_nametbl_build_group+0x2e/0x500
[  166.263273][ T9981]  tipc_sk_join+0x3a8/0x6a0
[  166.263285][ T9981]  ? __pfx_tipc_sk_join+0x10/0x10
[  166.263294][ T9981]  ? tipc_setsockopt+0x731/0x9a0
[  166.263303][ T9981]  ? __local_bh_enable_ip+0xd6/0x140
[  166.263316][ T9981]  tipc_setsockopt+0x73e/0x9a0
[  166.263326][ T9981]  ? __pfx_tipc_setsockopt+0x10/0x10
[  166.263335][ T9981]  ? aa_sock_opt_perm+0x142/0x1e0
[  166.263347][ T9981]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  166.263357][ T9981]  ? __pfx_tipc_setsockopt+0x10/0x10
[  166.263366][ T9981]  do_sock_setsockopt+0x17c/0x1b0
[  166.263378][ T9981]  __x64_sys_setsockopt+0x13d/0x1b0
[  166.263390][ T9981]  do_syscall_64+0x166/0x520
[  166.263400][ T9981]  ? trace_irq_disable+0x3b/0x140
[  166.263407][ T9981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.263416][ T9981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.263423][ T9981] RIP: 0033:0x7fc12df9e159
[  166.263431][ T9981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.263437][ T9981] RSP: 002b:00007fc12edbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  166.263447][ T9981] RAX: ffffffffffffffda RBX: 00007fc12e225fa0 RCX: 00007fc12df9e159
[  166.263452][ T9981] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005
[  166.263457][ T9981] RBP: 00007fc12e03506b R08: 0000000000000127 R09: 0000000000000000
[  166.263462][ T9981] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  166.263467][ T9981] R13: 00007fc12e226038 R14: 00007fc12e225fa0 R15: 00007ffc63371cd8
[  166.263478][ T9981]  </TASK>
[  166.289409][ T5705] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  166.290592][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  166.290606][ T5705] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  166.293719][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  166.293731][ T5705] usb 5-1: SerialNumber: syz
[  166.329470][ T9983] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  166.329571][ T9983] overlayfs: failed to set xattr on upper
[  166.329575][ T9983] overlayfs: ...falling back to redirect_dir=nofollow.
[  166.329578][ T9983] overlayfs: ...falling back to index=off.
[  166.329581][ T9983] overlayfs: ...falling back to uuid=null.
[  166.516698][ T5705] usb 5-1: 0:2 : does not exist
[  166.516733][ T5705] usb 5-1: unit 5 not found!
[  166.517411][ T9993] FAULT_INJECTION: forcing a failure.
[  166.517411][ T9993] name failslab, interval 1, probability 0, space 0, times 0
[  166.517427][ T9993] CPU: 1 UID: 0 PID: 9993 Comm: syz.7.1591 Not tainted syzkaller #0 PREEMPT(full) 
[  166.517436][ T9993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.517441][ T9993] Call Trace:
[  166.517444][ T9993]  <TASK>
[  166.517448][ T9993]  dump_stack_lvl+0xe8/0x150
[  166.517463][ T9993]  should_fail_ex+0x410/0x560
[  166.517475][ T9993]  should_failslab+0xa8/0x100
[  166.517487][ T9993]  __kmalloc_cache_noprof+0xa3/0x600
[  166.517496][ T9993]  ? tipc_net+0x45/0x270
[  166.517512][ T9993]  ? tipc_sub_subscribe+0x114/0x690
[  166.517611][ T9993]  ? tipc_sub_subscribe+0x114/0x690
[  166.517647][ T9993]  tipc_sub_subscribe+0x114/0x690
[  166.517663][ T9993]  tipc_conn_rcv_sub+0x14f/0x370
[  166.517676][ T9993]  tipc_topsrv_kern_subscr+0x188/0x250
[  166.517687][ T9993]  ? tipc_own_addr+0x45/0x2a0
[  166.517698][ T9993]  ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10
[  166.517710][ T9993]  ? tipc_own_addr+0x45/0x2a0
[  166.517721][ T9993]  ? __asan_memset+0x22/0x50
[  166.517731][ T9993]  tipc_group_create+0x35b/0x4f0
[  166.517744][ T9993]  tipc_sk_join+0x25d/0x6a0
[  166.517756][ T9993]  ? __pfx_tipc_sk_join+0x10/0x10
[  166.517765][ T9993]  ? tipc_setsockopt+0x731/0x9a0
[  166.517776][ T9993]  ? __local_bh_enable_ip+0xd6/0x140
[  166.517787][ T9993]  tipc_setsockopt+0x73e/0x9a0
[  166.517798][ T9993]  ? __pfx_tipc_setsockopt+0x10/0x10
[  166.517806][ T9993]  ? aa_sock_opt_perm+0x142/0x1e0
[  166.517818][ T9993]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  166.517830][ T9993]  ? __pfx_tipc_setsockopt+0x10/0x10
[  166.517840][ T9993]  do_sock_setsockopt+0x17c/0x1b0
[  166.517852][ T9993]  __x64_sys_setsockopt+0x13d/0x1b0
[  166.517863][ T9993]  do_syscall_64+0x166/0x520
[  166.517873][ T9993]  ? trace_irq_disable+0x3b/0x140
[  166.517881][ T9993]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.517891][ T9993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.517900][ T9993] RIP: 0033:0x7fc12df9e159
[  166.517908][ T9993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.517915][ T9993] RSP: 002b:00007fc12edbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  166.517924][ T9993] RAX: ffffffffffffffda RBX: 00007fc12e225fa0 RCX: 00007fc12df9e159
[  166.517930][ T9993] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005
[  166.517935][ T9993] RBP: 00007fc12e03506b R08: 0000000000000127 R09: 0000000000000000
[  166.517939][ T9993] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  166.517944][ T9993] R13: 00007fc12e226038 R14: 00007fc12e225fa0 R15: 00007ffc63371cd8
[  166.517956][ T9993]  </TASK>
[  166.517960][ T9993] tipc: Subscription rejected, no memory
[  166.560278][ T5705] usb 5-1: USB disconnect, device number 8
[  166.610812][ T8786] udevd[8786]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  166.721475][T10001] loop7: detected capacity change from 0 to 256
[  166.721987][T10001] exfat: Deprecated parameter 'utf8'
[  166.738295][T10001] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  166.802009][ T2605] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  166.808776][ T2605] usb 7-1: USB disconnect, device number 3
[  166.867814][T10007] capability: warning: `syz.7.1598' uses 32-bit capabilities (legacy support in use)
[  167.423609][   T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  167.573341][   T10] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  167.574421][   T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.574432][   T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  167.575323][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  167.575333][   T10] usb 8-1: SerialNumber: syz
[  167.742897][ T5653] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  167.812652][   T10] usb 8-1: 0:2 : does not exist
[  167.815320][   T10] usb 8-1: unit 5: unexpected type 0x03
[  167.837230][   T10] usb 8-1: USB disconnect, device number 4
[  167.869799][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  167.904345][ T5653] usb 7-1: Using ep0 maxpacket: 32
[  167.904881][ T5653] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  167.909263][ T5653] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.909276][ T5653] usb 7-1: Product: syz
[  167.909282][ T5653] usb 7-1: Manufacturer: syz
[  167.909287][ T5653] usb 7-1: SerialNumber: syz
[  167.919349][ T5653] usb 7-1: config 0 descriptor??
[  168.332160][ T5653] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=0] err=-32
[  168.332175][ T5653] peak_usb 7-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32)
[  168.599069][ T5653] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -32
[  168.602568][ T5653] usb 7-1: USB disconnect, device number 4
[  168.631852][T10131] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12
[  168.731917][T10135] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1650'.
[  169.104256][ T5708] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  169.253121][ T5708] usb 8-1: device descriptor read/64, error -71
[  169.480448][T10177] loop4: detected capacity change from 0 to 1024
[  169.494441][ T5708] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  169.632889][ T5708] usb 8-1: device descriptor read/64, error -71
[  169.667913][T10185] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  169.744894][ T5708] usb usb8-port1: attempt power cycle
[  169.825918][T10199] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  169.988711][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'.
[  170.064803][T10215] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  170.093760][ T5708] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  170.124607][ T5708] usb 8-1: device descriptor read/8, error -71
[  170.329579][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'.
[  170.372828][ T5708] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  170.396977][ T5708] usb 8-1: device descriptor read/8, error -71
[  170.425035][T10235] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  170.504463][ T5708] usb usb8-port1: unable to enumerate USB device
[  170.666554][T10254] loop4: detected capacity change from 0 to 164
[  170.668899][T10254] isofs_fill_super: root inode is not a directory. Corrupted media?
[  170.834861][ T5667] e1000 0000:00:03.0 eth0: Reset adapter
[  170.882848][ T5708] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  171.068105][ T5708] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  171.070075][ T5708] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.070088][ T5708] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  171.071384][ T5708] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  171.071405][ T5708] usb 7-1: SerialNumber: syz
[  171.325298][ T5708] usb 7-1: 0:2 : does not exist
[  171.325337][ T5708] usb 7-1: unit 5: unexpected type 0x03
[  171.386555][ T5708] usb 7-1: USB disconnect, device number 5
[  171.434218][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.125953][ T5667] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  176.244084][ T5667] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  182.652948][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1707'.
[  183.053053][ T5653] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  183.066858][T10330] loop7: detected capacity change from 0 to 32768
[  183.132624][T10330] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  183.203404][ T5653] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  183.204291][ T5653] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.204301][ T5653] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  183.205212][ T5653] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  183.205222][ T5653] usb 7-1: SerialNumber: syz
[  183.228292][ T5708] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  183.233822][ T9414] ocfs2: Unmounting device (7,7) on (node local)
[  183.374396][ T5708] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  183.375759][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.375775][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.375785][ T5708] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  183.375803][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.377823][ T5708] usb 5-1: config 0 descriptor??
[  183.415553][ T5653] usb 7-1: 0:2 : does not exist
[  183.484543][ T5653] usb 7-1: USB disconnect, device number 6
[  183.512548][T10321] udevd[10321]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  184.097161][T10350] loop7: detected capacity change from 0 to 32768
[  184.235020][T10350] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  184.527386][   T35] audit: type=1800 audit(1791041732.788:10): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1726" name="memory.events" dev="loop7" ino=17058 res=0 errno=0
[  184.601247][ T9414] ocfs2: Unmounting device (7,7) on (node local)
[  185.339854][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1737'.
[  185.339908][T10378] bond0: option arp_validate: invalid value (22)
[  185.444597][   T35] audit: type=1326 audit(1791041733.708:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.6.1738" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f463719e159 code=0x0
[  185.610025][ T5708] usbhid 5-1:0.0: can't add hid device: -71
[  185.610081][ T5708] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  185.611659][ T5708] usb 5-1: USB disconnect, device number 9
[  187.237341][   T35] audit: type=1326 audit(1791041735.498:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.4.1754" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f500039e159 code=0x0
[  187.254612][   T35] audit: type=1326 audit(1791041735.508:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10411 comm="syz.7.1751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7fc00000
[  188.314954][   T35] audit: type=1326 audit(1791041736.578:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.4.1779" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f500039e159 code=0x0
[  188.572841][ T5653] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  188.724318][ T5653] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  188.725340][ T5653] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.725351][ T5653] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  188.726220][ T5653] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  188.726230][ T5653] usb 8-1: SerialNumber: syz
[  188.936305][ T5653] usb 8-1: 0:2 : does not exist
[  188.963363][ T5653] usb 8-1: USB disconnect, device number 9
[  188.981281][T10321] udevd[10321]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  189.322350][   T35] audit: type=1326 audit(1791041737.578:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.4.1789" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f500039e159 code=0x0
[  189.953026][ T2605] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  190.114933][ T2605] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  190.115947][ T2605] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.115965][ T2605] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  190.117043][ T2605] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  190.117054][ T2605] usb 8-1: SerialNumber: syz
[  190.258869][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'.
[  190.347207][ T2605] usb 8-1: 0:2 : does not exist
[  190.386659][ T2605] usb 8-1: USB disconnect, device number 10
[  190.408020][T10576] udevd[10576]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  191.201403][   T35] audit: type=1326 audit(1791041739.458:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.6.1818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463719e159 code=0x7fc00000
[  193.873253][T10609] IPv4: Oversized IP packet from 127.202.26.0
[  194.152860][ T5653] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  194.304668][ T5653] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  194.306683][ T5653] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  194.306698][ T5653] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  194.307601][ T5653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  194.307613][ T5653] usb 5-1: SerialNumber: syz
[  194.488130][T10647] IPv4: Oversized IP packet from 127.202.26.0
[  194.528580][ T5653] usb 5-1: 0:2 : does not exist
[  194.577295][ T5653] usb 5-1: USB disconnect, device number 10
[  194.617276][T10651] udevd[10651]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  194.647619][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  194.647653][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  194.789624][   T35] audit: type=1326 audit(1791041743.048:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.6.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463719e159 code=0x7fc00000
[  195.062955][   T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  195.212876][   T10] usb 8-1: Using ep0 maxpacket: 32
[  195.213663][   T10] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  195.214744][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.214757][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.214773][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.220710][   T10] usb 8-1: config 0 descriptor??
[  195.222684][   T10] hub 8-1:0.0: USB hub found
[  195.427588][   T10] hub 8-1:0.0: config failed, can't read hub descriptor (err -22)
[  195.437479][   T10] usbhid 8-1:0.0: can't add hid device: -71
[  195.437540][   T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  195.455811][   T10] usb 8-1: USB disconnect, device number 11
[  195.949554][   T35] audit: type=1326 audit(1791041744.208:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10679 comm="syz.4.1861" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500039e159 code=0x7fc00000
[  196.239264][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1874'.
[  196.591126][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1881'.
[  198.147720][   T35] audit: type=1326 audit(1791041746.408:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10804 comm="syz.4.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500039e159 code=0x7fc00000
[  199.503802][   T35] audit: type=1326 audit(1791041747.768:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.4.1939" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500039e159 code=0x7fc00000
[  200.578864][T10909] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1960'.
[  200.697921][   T35] audit: type=1326 audit(1791041748.958:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.4.1963" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f500039e159 code=0x0
[  201.567335][   T35] audit: type=1804 audit(1791041749.828:22): pid=10925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1964" name="/newroot/209/file0" dev="tmpfs" ino=1126 res=1 errno=0
[  201.634391][   T35] audit: type=1804 audit(1791041749.898:23): pid=10933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1968" name="/newroot/330/file0" dev="tmpfs" ino=1769 res=1 errno=0
[  201.740850][   T35] audit: type=1326 audit(1791041749.998:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10940 comm="syz.7.1971" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x0
[  202.624597][T10972] kAFS: unable to lookup cell '@G|'
[  202.762234][T10981] loop7: detected capacity change from 0 to 512
[  202.776631][T10981] FAT-fs (loop7): Directory bread(block 2080) failed
[  202.776650][T10981] FAT-fs (loop7): Directory bread(block 2081) failed
[  202.776659][T10981] FAT-fs (loop7): Directory bread(block 2082) failed
[  202.776667][T10981] FAT-fs (loop7): Directory bread(block 2083) failed
[  202.776675][T10981] FAT-fs (loop7): Directory bread(block 2084) failed
[  202.776683][T10981] FAT-fs (loop7): Directory bread(block 2085) failed
[  202.776691][T10981] FAT-fs (loop7): Directory bread(block 2086) failed
[  202.776700][T10981] FAT-fs (loop7): Directory bread(block 2087) failed
[  202.875595][   T35] audit: type=1804 audit(1791041751.138:25): pid=10984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1987" name="/newroot/219/file0" dev="tmpfs" ino=1180 res=1 errno=0
[  203.511186][T11015] syzkaller0: entered promiscuous mode
[  203.511199][T11015] syzkaller0: entered allmulticast mode
[  203.773338][   T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  203.923241][   T10] usb 7-1: Using ep0 maxpacket: 16
[  203.925037][   T10] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  203.926314][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8
[  203.928798][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.928815][   T10] usb 7-1: Product: syz
[  203.928825][   T10] usb 7-1: Manufacturer: syz
[  203.928834][   T10] usb 7-1: SerialNumber: syz
[  203.931373][   T10] usb 7-1: config 0 descriptor??
[  203.935431][   T10] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[  203.946122][   T10] usb 7-1: Detected FT232R
[  204.141297][   T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  204.141741][   T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  204.142165][   T10] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71
[  204.154703][   T10] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  204.159856][   T10] usb 7-1: USB disconnect, device number 7
[  204.168749][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  204.169277][   T10] ftdi_sio 7-1:0.0: device disconnected
[  204.522979][ T5653] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  204.684183][ T5653] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  204.687959][ T5653] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.687979][ T5653] usb 8-1: Product: syz
[  204.687989][ T5653] usb 8-1: Manufacturer: syz
[  204.687998][ T5653] usb 8-1: SerialNumber: syz
[  204.707792][ T5653] usb 8-1: config 0 descriptor??
[  204.716905][ T5653] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 012
[  205.118636][ T5653]  (null): failure reading functionality
[  205.127462][ T5653] i2c i2c-2: connected i2c-tiny-usb device
[  205.358868][   T10] usb 8-1: USB disconnect, device number 12
[  205.790670][T11053] syzkaller0: entered promiscuous mode
[  205.790682][T11053] syzkaller0: entered allmulticast mode
[  205.975050][T11055] loop6: detected capacity change from 0 to 4096
[  205.996114][T11055] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  206.034538][   T35] audit: type=1800 audit(1791041754.288:26): pid=11055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2019" name="dev" dev="loop6" ino=33 res=0 errno=0
[  206.420997][T11078] loop6: detected capacity change from 0 to 4096
[  206.440984][T11078] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  206.453249][ T2605] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  206.453966][   T35] audit: type=1800 audit(1791041754.718:27): pid=11078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2029" name="dev" dev="loop6" ino=33 res=0 errno=0
[  206.608969][ T2605] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  206.616490][ T2605] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.616510][ T2605] usb 8-1: Product: syz
[  206.616520][ T2605] usb 8-1: Manufacturer: syz
[  206.616529][ T2605] usb 8-1: SerialNumber: syz
[  206.618769][ T2605] usb 8-1: config 0 descriptor??
[  206.621490][ T2605] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 013
[  206.875447][T11092] loop4: detected capacity change from 0 to 4096
[  206.895634][T11092] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  206.921033][   T35] audit: type=1800 audit(1791041755.178:28): pid=11092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2036" name="dev" dev="loop4" ino=33 res=0 errno=0
[  207.031283][ T2605]  (null): failure reading functionality
[  207.048228][ T2605] i2c i2c-2: connected i2c-tiny-usb device
[  207.088921][T11106] loop4: detected capacity change from 0 to 4096
[  207.106348][T11106] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  207.111505][T11106] ntfs3(loop4): Failed to load root (-22).
[  207.246891][   T33] usb 8-1: USB disconnect, device number 13
[  207.265411][ T5597] Bluetooth: hci1: connection err: -111
[  208.066614][ T5597] Bluetooth: hci1: link tx timeout
[  208.066625][ T5597] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  208.790382][T11175] loop4: detected capacity change from 0 to 4096
[  208.816142][T11175] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  208.819326][T11175] ntfs3(loop4): Failed to load root (-22).
[  209.205444][   T35] audit: type=1804 audit(1791041757.468:29): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2086" name="/newroot/372/file0" dev="tmpfs" ino=1998 res=1 errno=0
[  209.394444][   T35] audit: type=1804 audit(1791041757.658:30): pid=11209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2093" name="/newroot/377/file0" dev="tmpfs" ino=2024 res=1 errno=0
[  209.464260][ T5597] Bluetooth: hci1: link tx timeout
[  209.464273][ T5597] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  209.693027][ T5653] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  209.863824][ T5653] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  209.867687][ T5653] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.867708][ T5653] usb 8-1: Product: syz
[  209.867718][ T5653] usb 8-1: Manufacturer: syz
[  209.867728][ T5653] usb 8-1: SerialNumber: syz
[  209.870887][ T5653] usb 8-1: config 0 descriptor??
[  210.103172][ T5597] Bluetooth: hci1: command 0x0406 tx timeout
[  210.299286][   T35] audit: type=1804 audit(1791041758.558:31): pid=11235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2105" name="/newroot/384/file0" dev="tmpfs" ino=2061 res=1 errno=0
[  211.168503][T11252] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  211.346699][   T35] audit: type=1804 audit(1791041759.608:32): pid=11258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2115" name="/newroot/204/file0" dev="tmpfs" ino=1081 res=1 errno=0
[  211.433595][ T5653] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  211.448003][T11210] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  211.460393][   T33] usb 8-1: USB disconnect, device number 14
[  211.584159][ T2605] team_slave_0: entered promiscuous mode
[  211.584179][ T2605] team_slave_1: entered promiscuous mode
[  211.584549][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2120'.
[  211.584751][ T2605] team_slave_0: left promiscuous mode
[  211.584761][ T2605] team_slave_1: left promiscuous mode
[  211.603340][ T5653] usb 5-1: Using ep0 maxpacket: 32
[  211.605857][ T5653] usb 5-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40
[  211.612571][ T5653] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  211.617645][ T5653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.617658][ T5653] usb 5-1: Product: syz
[  211.617664][ T5653] usb 5-1: Manufacturer: syz
[  211.617669][ T5653] usb 5-1: SerialNumber: syz
[  211.631393][ T5653] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  211.878134][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2112'.
[  211.880208][ T5653] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  211.920141][ T5653] usb 5-1: USB disconnect, device number 11
[  211.956624][T11019] udevd[11019]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.117400][   T35] audit: type=1804 audit(1791041760.378:33): pid=11276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2122" name="/newroot/210/file0" dev="tmpfs" ino=1112 res=1 errno=0
[  212.322996][ T5597] Bluetooth: hci1: command 0x0406 tx timeout
[  212.560933][T11288] input: syz0 as /devices/virtual/input/input6
[  212.748233][T11303] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  212.886239][   T35] audit: type=1804 audit(1791041761.148:34): pid=11305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2135" name="/newroot/263/file0" dev="tmpfs" ino=1415 res=1 errno=0
[  212.984830][ T5653] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  213.133685][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2140'.
[  213.153064][ T6051] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  213.153099][ T6051] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  213.153120][ T6051] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  213.153141][ T6051] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  213.172403][ T5653] usb 7-1: Using ep0 maxpacket: 32
[  213.183993][ T5653] usb 7-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40
[  213.185675][ T5653] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  213.188099][ T5653] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.188116][ T5653] usb 7-1: Product: syz
[  213.188127][ T5653] usb 7-1: Manufacturer: syz
[  213.188135][ T5653] usb 7-1: SerialNumber: syz
[  213.210745][ T5653] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  213.461899][ T5653] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  213.522289][ T5653] usb 7-1: USB disconnect, device number 8
[  213.554139][T11019] udevd[11019]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  213.792044][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2149'.
[  215.215894][T11390] affs: No valid root block on device nullb0
[  215.224812][T11390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.744663][T11404] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  215.817427][T11407] affs: No valid root block on device nullb0
[  215.822184][T11407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.826819][T11477] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2208'.
[  219.906260][T11483] loop4: detected capacity change from 0 to 4096
[  219.931657][T11483] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  219.936985][T11483] ntfs3(loop4): Failed to load root (-22).
[  220.771821][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'.
[  221.389508][T11523] netlink: 'syz.7.2227': attribute type 1 has an invalid length.
[  221.661514][T11523] 8021q: adding VLAN 0 to HW filter on device bond1
[  221.750534][T11526] macvlan2: entered promiscuous mode
[  221.750554][T11526] macvlan2: entered allmulticast mode
[  221.751764][T11526] bond1: entered promiscuous mode
[  221.760637][T11526] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  221.768315][T11526] bond1: left promiscuous mode
[  222.705691][T11547] misc userio: The device must be registered before sending interrupts
[  223.092875][ T5653] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  223.243676][ T5653] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  223.248024][ T5653] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.248044][ T5653] usb 8-1: Product: syz
[  223.248054][ T5653] usb 8-1: Manufacturer: syz
[  223.248063][ T5653] usb 8-1: SerialNumber: syz
[  223.257565][ T5653] usb 8-1: config 0 descriptor??
[  223.571747][ T5653] usb 8-1: USB disconnect, device number 15
[  223.709380][T11567] udevd[11567]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  225.803200][T11613] netlink: 'syz.6.2253': attribute type 39 has an invalid length.
[  225.993084][ T2605] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  226.143744][ T2605] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  226.147279][ T2605] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.147299][ T2605] usb 8-1: Product: syz
[  226.147309][ T2605] usb 8-1: Manufacturer: syz
[  226.147318][ T2605] usb 8-1: SerialNumber: syz
[  226.149606][ T2605] usb 8-1: config 0 descriptor??
[  226.337373][T11619] netlink: 'syz.6.2255': attribute type 25 has an invalid length.
[  226.337391][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2255'.
[  226.337409][T11619] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  226.357207][   T33] usb 8-1: USB disconnect, device number 16
[  227.612906][ T2605] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  227.765186][ T2605] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  227.770301][ T2605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.770323][ T2605] usb 7-1: Product: syz
[  227.770332][ T2605] usb 7-1: Manufacturer: syz
[  227.770341][ T2605] usb 7-1: SerialNumber: syz
[  227.781546][ T2605] usb 7-1: config 0 descriptor??
[  227.853085][   T33] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  227.999687][ T5708] usb 7-1: USB disconnect, device number 9
[  228.019309][   T33] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  228.020484][   T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.020498][   T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.020514][   T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.030295][   T33] usb 5-1: config 0 descriptor??
[  228.109832][ T2605] libceph: connect (1)[c::]:6789 error -101
[  228.110125][ T2605] libceph: mon0 (1)[c::]:6789 connect error
[  228.123712][ T2605] libceph: connect (1)[c::]:6789 error -101
[  228.123862][ T2605] libceph: mon0 (1)[c::]:6789 connect error
[  228.388729][ T2605] libceph: connect (1)[c::]:6789 error -101
[  228.388927][ T2605] libceph: mon0 (1)[c::]:6789 connect error
[  228.436828][   T33] hid_parser_main: 462 callbacks suppressed
[  228.436842][   T33] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  228.436855][   T33] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  228.436865][   T33] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  228.436874][   T33] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  228.436883][   T33] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  228.436892][   T33] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  228.436901][   T33] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  228.459249][   T33] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  228.546143][ T2605] libceph: connect (1)[c::]:6789 error -101
[  228.546227][ T2605] libceph: mon0 (1)[c::]:6789 connect error
[  228.637926][   T33] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00
[  228.655869][T11670] ceph: No mds server is up or the cluster is laggy
[  228.838615][   T33] cp2112 0003:10C4:EA90.0002: error requesting SMBus config
[  228.858275][T11680] bond1 (unregistering): Released all slaves
[  228.862325][   T33] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -32
[  228.877030][   T33] usb 5-1: USB disconnect, device number 12
[  228.894161][ T2605] libceph: connect (1)[c::]:6789 error -101
[  228.894274][ T2605] libceph: mon0 (1)[c::]:6789 connect error
[  228.909090][T11666] ceph: No mds server is up or the cluster is laggy
[  229.274097][ T5623] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  229.443764][ T5623] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  229.447590][ T5623] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.447604][ T5623] usb 7-1: Product: syz
[  229.447611][ T5623] usb 7-1: Manufacturer: syz
[  229.447618][ T5623] usb 7-1: SerialNumber: syz
[  229.450790][ T5623] usb 7-1: config 0 descriptor??
[  229.675030][   T33] usb 7-1: USB disconnect, device number 10
[  230.425638][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2310'.
[  230.528651][T11772] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2317'.
[  230.690339][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2321'.
[  232.832832][ T5623] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  232.993753][ T5623] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  232.996510][ T5623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.996522][ T5623] usb 5-1: Product: syz
[  232.996528][ T5623] usb 5-1: Manufacturer: syz
[  232.996533][ T5623] usb 5-1: SerialNumber: syz
[  232.997874][ T5623] usb 5-1: config 0 descriptor??
[  233.216004][ T5623] usb 5-1: USB disconnect, device number 13
[  234.162929][   T33] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  234.324204][   T33] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  234.328053][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.328074][   T33] usb 5-1: Product: syz
[  234.328083][   T33] usb 5-1: Manufacturer: syz
[  234.328092][   T33] usb 5-1: SerialNumber: syz
[  234.332511][   T33] usb 5-1: config 0 descriptor??
[  234.554988][   T33] usb 5-1: USB disconnect, device number 14
[  234.872887][ T5708] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  235.033491][ T5708] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  235.034597][ T5708] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.034619][ T5708] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.034646][ T5708] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.037921][ T5708] usb 8-1: config 0 descriptor??
[  235.447833][ T5708] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  235.447851][ T5708] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  235.447860][ T5708] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  235.447868][ T5708] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  235.447877][ T5708] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  235.447885][ T5708] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  235.448020][ T5708] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  235.462217][ T5708] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0
[  235.661578][ T5708] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00
[  235.863095][ T5708] cp2112 0003:10C4:EA90.0003: error requesting SMBus config
[  235.865980][ T5708] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -32
[  235.881833][ T5708] usb 8-1: USB disconnect, device number 17
[  236.872841][ T5708] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  237.026045][ T5708] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  237.027263][ T5708] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.027284][ T5708] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.027309][ T5708] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.030378][ T5708] usb 8-1: config 0 descriptor??
[  237.438499][ T5708] usbhid 8-1:0.0: can't add hid device: -71
[  237.438585][ T5708] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  237.440254][ T5708] usb 8-1: USB disconnect, device number 18
[  237.937322][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2432'.
[  237.946149][T12034] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.946885][T12034] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.202581][   T35] audit: type=1326 audit(1791041786.458:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.7.2439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  238.202687][   T35] audit: type=1326 audit(1791041786.458:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.7.2439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  238.211275][   T35] audit: type=1326 audit(1791041786.468:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.7.2439" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  238.211310][   T35] audit: type=1326 audit(1791041786.468:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.7.2439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  238.211331][   T35] audit: type=1326 audit(1791041786.468:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.7.2439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  238.227315][   T35] audit: type=1326 audit(1791041786.488:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.7.2439" exe="/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  238.227349][   T35] audit: type=1326 audit(1791041786.488:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.7.2439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  238.227464][   T35] audit: type=1326 audit(1791041786.488:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.7.2439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  238.258946][   T35] audit: type=1326 audit(1791041786.518:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.7.2439" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  238.259582][   T35] audit: type=1326 audit(1791041786.518:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.7.2439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  238.522877][ T5623] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  238.682825][ T5623] usb 8-1: Using ep0 maxpacket: 32
[  238.683659][ T5623] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  238.685365][ T5623] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[  238.685381][ T5623] usb 8-1: config 0 has no interface number 0
[  238.685409][ T5623] usb 8-1: config 0 interface 12 has no altsetting 0
[  238.688770][ T5623] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.688786][ T5623] usb 8-1: Product: syz
[  238.688796][ T5623] usb 8-1: Manufacturer: syz
[  238.688804][ T5623] usb 8-1: SerialNumber: syz
[  238.690239][ T5623] usb 8-1: config 0 descriptor??
[  239.309580][ T5623] f81534 8-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71
[  239.309649][ T5623] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71
[  239.309663][ T5623] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  239.309715][ T5623] f81534 8-1:0.12: probe with driver f81534 failed with error -71
[  239.318958][ T5623] usb 8-1: USB disconnect, device number 19
[  240.573867][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.573924][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.573954][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.573973][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.590972][T12121] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2469'.
[  242.352820][ T5623] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  242.503800][ T5623] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  242.508307][ T5623] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.508328][ T5623] usb 8-1: Product: syz
[  242.508337][ T5623] usb 8-1: Manufacturer: syz
[  242.508345][ T5623] usb 8-1: SerialNumber: syz
[  242.511386][ T5623] usb 8-1: config 0 descriptor??
[  242.517663][ T5623] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 020
[  243.121239][ T5623] i2c i2c-2: failure reading functionality
[  243.129416][ T5623] i2c i2c-2: connected i2c-tiny-usb device
[  243.138084][ T5623] usb 8-1: USB disconnect, device number 20
[  243.145714][T12174] netlink: 'syz.6.2492': attribute type 1 has an invalid length.
[  243.187118][T12174] 8021q: adding VLAN 0 to HW filter on device bond1
[  243.501809][T12181] netlink: 'syz.4.2495': attribute type 1 has an invalid length.
[  244.053254][ T5623] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  244.203752][ T5623] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  244.207329][ T5623] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.207350][ T5623] usb 8-1: Product: syz
[  244.207359][ T5623] usb 8-1: Manufacturer: syz
[  244.207368][ T5623] usb 8-1: SerialNumber: syz
[  244.209725][ T5623] usb 8-1: config 0 descriptor??
[  244.219217][ T5623] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 021
[  244.444181][T12204] loop4: detected capacity change from 0 to 2048
[  244.448838][T12204] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  244.785356][T12222] loop4: detected capacity change from 0 to 2048
[  244.787246][T12222] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  244.827487][ T5623] i2c i2c-2: failure reading functionality
[  244.829009][ T5623] i2c i2c-2: connected i2c-tiny-usb device
[  244.845641][ T5623] usb 8-1: USB disconnect, device number 21
[  246.518490][   T35] kauditd_printk_skb: 81 callbacks suppressed
[  246.518500][   T35] audit: type=1326 audit(1791041794.778:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.7.2530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  246.518545][   T35] audit: type=1326 audit(1791041794.778:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.7.2530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  246.518627][   T35] audit: type=1326 audit(1791041794.778:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.7.2530" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  246.518701][   T35] audit: type=1326 audit(1791041794.778:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.7.2530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  246.518801][   T35] audit: type=1326 audit(1791041794.778:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.7.2530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  246.518922][   T35] audit: type=1326 audit(1791041794.778:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.7.2530" exe="/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  246.519083][   T35] audit: type=1326 audit(1791041794.778:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.7.2530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  246.519099][   T35] audit: type=1326 audit(1791041794.778:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.7.2530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  246.519246][   T35] audit: type=1326 audit(1791041794.778:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.7.2530" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  246.519988][   T35] audit: type=1326 audit(1791041794.778:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.7.2530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  246.600458][T12262] jffs2: notice: (12262) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  246.650842][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2532'.
[  246.805265][ T5708] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  246.952897][ T5708] usb 8-1: Using ep0 maxpacket: 32
[  246.954141][ T5708] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  246.955546][ T5708] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[  246.955562][ T5708] usb 8-1: config 0 has no interface number 0
[  246.955593][ T5708] usb 8-1: config 0 interface 12 has no altsetting 0
[  246.958965][ T5708] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.958979][ T5708] usb 8-1: Product: syz
[  246.958987][ T5708] usb 8-1: Manufacturer: syz
[  246.958992][ T5708] usb 8-1: SerialNumber: syz
[  246.961071][ T5708] usb 8-1: config 0 descriptor??
[  247.052957][ T5623] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  247.053460][   T33] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  247.214384][ T5623] usb 7-1: Using ep0 maxpacket: 32
[  247.215471][ T5623] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  247.215575][   T33] usb 5-1: unable to get BOS descriptor or descriptor too short
[  247.215645][   T33] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  247.217437][ T5623] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.217448][ T5623] usb 7-1: config 0 has no interfaces?
[  247.217461][ T5623] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.219412][ T5623] usb 7-1: config 0 descriptor??
[  247.220474][   T33] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 230, changing to 11
[  247.220574][   T33] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  247.220590][   T33] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  247.228069][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.228083][   T33] usb 5-1: Product: syz
[  247.228089][   T33] usb 5-1: Manufacturer: syz
[  247.228094][   T33] usb 5-1: SerialNumber: syz
[  247.380136][ T5708] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  247.380161][ T5708] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71
[  247.380168][ T5708] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  247.380200][ T5708] f81534 8-1:0.12: probe with driver f81534 failed with error -71
[  247.391780][ T5708] usb 8-1: USB disconnect, device number 22
[  247.779529][T12275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.779849][T12275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.925016][T12277] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  247.995209][T12281] jffs2: notice: (12281) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  249.252811][   T10] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  249.407570][   T10] usb 8-1: unable to get BOS descriptor or descriptor too short
[  249.407611][   T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  249.408647][   T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 230, changing to 11
[  249.408678][   T10] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  249.408693][   T10] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  249.411024][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.411041][   T10] usb 8-1: Product: syz
[  249.411051][   T10] usb 8-1: Manufacturer: syz
[  249.411060][   T10] usb 8-1: SerialNumber: syz
[  249.647597][   T10] cdc_ncm 8-1:1.0: bind() failure
[  249.650049][   T10] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  249.650069][   T10] cdc_ncm 8-1:1.1: bind() failure
[  249.657905][   T10] usb 8-1: USB disconnect, device number 23
[  249.703706][   T33] cdc_ncm 5-1:1.0: bind() failure
[  249.708702][   T33] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  249.708724][   T33] cdc_ncm 5-1:1.1: bind() failure
[  249.716806][   T33] usb 5-1: USB disconnect, device number 15
[  249.815498][ T5653] usb 7-1: USB disconnect, device number 11
[  249.885773][T12297] syz_tun: entered promiscuous mode
[  250.233214][   T33] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  250.382817][   T33] usb 5-1: Using ep0 maxpacket: 32
[  250.384438][   T33] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  250.385776][   T33] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  250.385787][   T33] usb 5-1: config 0 has no interface number 0
[  250.385804][   T33] usb 5-1: config 0 interface 12 has no altsetting 0
[  250.391227][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.391241][   T33] usb 5-1: Product: syz
[  250.391246][   T33] usb 5-1: Manufacturer: syz
[  250.391252][   T33] usb 5-1: SerialNumber: syz
[  250.394431][   T33] usb 5-1: config 0 descriptor??
[  250.531519][T12310] bridge0: port 3(dummy0) entered blocking state
[  250.531637][T12310] bridge0: port 3(dummy0) entered disabled state
[  250.531755][T12310] dummy0: entered allmulticast mode
[  250.535992][T12310] dummy0: entered promiscuous mode
[  250.585203][T12315] netlink: 165 bytes leftover after parsing attributes in process `syz.7.2552'.
[  250.818202][   T33] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  250.818239][   T33] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  250.818247][   T33] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  250.818281][   T33] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  250.827448][   T33] usb 5-1: USB disconnect, device number 16
[  250.843734][T12325] loop7: detected capacity change from 0 to 32768
[  250.844676][T12325] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2558 (12325)
[  250.858249][T12325] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  250.858266][T12325] BTRFS info (device loop7): using sha256 checksum algorithm
[  250.924594][T12325] BTRFS info (device loop7): enabling ssd optimizations
[  250.924610][T12325] BTRFS info (device loop7): turning on async discard
[  250.924617][T12325] BTRFS info (device loop7): enabling free space tree
[  250.951834][ T9414] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  251.078089][ T5705] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  251.159354][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2562'.
[  251.243303][ T5705] usb 7-1: Using ep0 maxpacket: 32
[  251.243869][ T5705] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  251.244921][ T5705] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  251.244932][ T5705] usb 7-1: config 0 has no interfaces?
[  251.244945][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.246389][ T5705] usb 7-1: config 0 descriptor??
[  251.532112][T12386] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2579'.
[  251.690405][T12393] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2582'.
[  251.807501][T12401] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2586'.
[  251.810197][T12402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.810646][T12402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.166322][T12414] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2560'.
[  252.187492][T12414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  252.204474][T12414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.208263][T12414] bond0 (unregistering): Released all slaves
[  252.988205][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2592'.
[  253.015538][T12421] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2593'.
[  253.432853][   T33] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  253.593498][   T33] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  253.597084][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.597104][   T33] usb 5-1: Product: syz
[  253.597113][   T33] usb 5-1: Manufacturer: syz
[  253.597122][   T33] usb 5-1: SerialNumber: syz
[  253.599556][   T33] usb 5-1: config 0 descriptor??
[  253.618730][   T33] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 017
[  253.812050][ T5705] usb 7-1: USB disconnect, device number 12
[  253.862496][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2598'.
[  253.896840][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2599'.
[  253.899283][T12436] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2600'.
[  254.009854][   T33]  (null): failure reading functionality
[  254.022502][   T33] i2c i2c-2: connected i2c-tiny-usb device
[  254.121031][T12446] ip6gretap0: entered promiscuous mode
[  254.213514][ T5653] usb 5-1: USB disconnect, device number 17
[  254.332909][   T10] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  254.484978][   T10] usb 8-1: unable to get BOS descriptor or descriptor too short
[  254.485005][   T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  254.485987][   T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 230, changing to 11
[  254.486011][   T10] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  254.486020][   T10] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  254.488028][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.488039][   T10] usb 8-1: Product: syz
[  254.488045][   T10] usb 8-1: Manufacturer: syz
[  254.488051][   T10] usb 8-1: SerialNumber: syz
[  254.700440][   T10] cdc_ncm 8-1:1.0: bind() failure
[  254.705689][   T10] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  254.705724][   T10] cdc_ncm 8-1:1.1: bind() failure
[  254.717255][   T10] usb 8-1: USB disconnect, device number 24
[  254.737005][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2607'.
[  254.769469][T12454] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2608'.
[  254.859332][   T35] kauditd_printk_skb: 156 callbacks suppressed
[  254.859349][   T35] audit: type=1800 audit(1791041803.118:292): pid=12462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2612" name="syzkaller1" dev="sda1" ino=1945 res=0 errno=0
[  255.263494][T12482] loop6: detected capacity change from 0 to 1024
[  255.266760][T12482] ext4: Unknown parameter 'smackfsfloor'
[  255.743591][T12496] jffs2: notice: (12496) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  255.838574][T12501] veth0_to_bond: default FDB implementation only supports local addresses
[  256.086634][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  256.086676][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  256.135721][T12524] loop4: detected capacity change from 0 to 256
[  256.136561][T12524] exfat: Deprecated parameter 'utf8'
[  256.202245][T12525] NILFS (nullb0): couldn't find nilfs on the device
[  256.324949][T12524] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  256.907717][T12538] __nla_validate_parse: 4 callbacks suppressed
[  256.907734][T12538] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2647'.
[  257.101396][T12540] loop6: detected capacity change from 0 to 32768
[  257.120869][T12540] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2648 (12540)
[  257.151397][T12540] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  257.151416][T12540] BTRFS info (device loop6): using sha256 checksum algorithm
[  257.191218][T12540] BTRFS info (device loop6): enabling ssd optimizations
[  257.191237][T12540] BTRFS info (device loop6): turning on async discard
[  257.191243][T12540] BTRFS info (device loop6): enabling free space tree
[  257.230148][ T9383] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  257.325101][T12558] jffs2: notice: (12558) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  257.508460][   T35] audit: type=1326 audit(1791041805.768:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.6.2652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463719e159 code=0x7ffc0000
[  257.508488][   T35] audit: type=1326 audit(1791041805.768:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.6.2652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463719e159 code=0x7ffc0000
[  257.509264][   T35] audit: type=1326 audit(1791041805.768:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.6.2652" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f463719e159 code=0x7ffc0000
[  257.509285][   T35] audit: type=1326 audit(1791041805.768:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.6.2652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463719e159 code=0x7ffc0000
[  257.509392][   T35] audit: type=1326 audit(1791041805.768:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.6.2652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463719e159 code=0x7ffc0000
[  257.510835][   T35] audit: type=1326 audit(1791041805.768:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.6.2652" exe="/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f463719e159 code=0x7ffc0000
[  257.510855][   T35] audit: type=1326 audit(1791041805.768:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.6.2652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463719e159 code=0x7ffc0000
[  257.510869][   T35] audit: type=1326 audit(1791041805.768:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.6.2652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463719e159 code=0x7ffc0000
[  257.522908][   T35] audit: type=1326 audit(1791041805.768:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.6.2652" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f463719e159 code=0x7ffc0000
[  257.833762][   T33] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  257.993254][   T33] usb 7-1: Using ep0 maxpacket: 32
[  257.996142][   T33] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  257.998235][   T33] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  257.998254][   T33] usb 7-1: config 0 has no interface number 0
[  257.998282][   T33] usb 7-1: config 0 interface 12 has no altsetting 0
[  258.001707][   T33] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.001727][   T33] usb 7-1: Product: syz
[  258.001736][   T33] usb 7-1: Manufacturer: syz
[  258.001746][   T33] usb 7-1: SerialNumber: syz
[  258.005474][   T33] usb 7-1: config 0 descriptor??
[  258.119095][T12572] syzkaller1: entered promiscuous mode
[  258.119110][T12572] syzkaller1: entered allmulticast mode
[  258.383837][T12583] loop4: detected capacity change from 0 to 1024
[  258.387055][T12583] EXT4-fs: Ignoring removed oldalloc option
[  258.387067][T12583] EXT4-fs: Ignoring removed orlov option
[  258.410077][T12583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  258.410156][T12583] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.449493][ T8182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  258.631580][   T33] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71
[  258.631626][   T33] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  258.631637][   T33] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  258.631695][   T33] f81534 7-1:0.12: probe with driver f81534 failed with error -71
[  258.638945][   T33] usb 7-1: USB disconnect, device number 13
[  260.067163][T12618] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  260.207922][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2676'.
[  261.359120][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2684'.
[  261.486713][T12652] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.506918][T12652] 8021q: adding VLAN 0 to HW filter on device team0
[  261.548499][T12652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.565407][T12654] loop7: detected capacity change from 0 to 128
[  261.586482][T12654] EXT4-fs (loop7): Test dummy encryption mode enabled
[  261.637102][T12652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  261.637124][T12652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  261.641081][T12654] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  261.643695][T12652] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  261.645445][T12652] veth1_vlan: left promiscuous mode
[  261.646180][T12654] ext4 filesystem being mounted at /468/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  261.647743][T12652] veth0_vlan: left promiscuous mode
[  261.648915][T12652] veth0_vlan: entered promiscuous mode
[  261.650162][T12652] veth1_vlan: entered promiscuous mode
[  261.653524][T12652] veth1_macvtap: left promiscuous mode
[  261.654223][T12652] veth0_macvtap: left promiscuous mode
[  261.654705][T12652] veth0_macvtap: entered promiscuous mode
[  261.655297][T12652] veth1_macvtap: entered promiscuous mode
[  261.681939][T12654] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[  261.706069][T12652] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  261.708124][T12652] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  261.709219][T12652] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  261.716931][T12652] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  261.853861][ T6214] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.853900][ T6214] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.853922][ T6214] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.853944][ T6214] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.864845][ T9414] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  261.950819][T12658] loop6: detected capacity change from 0 to 32768
[  261.956840][T12658] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2688 (12658)
[  261.973071][T12658] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  261.973091][T12658] BTRFS info (device loop6): using sha256 checksum algorithm
[  262.010088][T12658] BTRFS info (device loop6): enabling ssd optimizations
[  262.010103][T12658] BTRFS info (device loop6): turning on async discard
[  262.010110][T12658] BTRFS info (device loop6): enabling free space tree
[  262.053443][ T9383] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  262.205953][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2693'.
[  262.342388][T12691] fuse: Bad value for 'fd'
[  263.625922][T12699] loop6: detected capacity change from 0 to 32768
[  263.632679][T12699] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2699 (12699)
[  263.649413][T12699] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  263.649429][T12699] BTRFS info (device loop6): using sha256 checksum algorithm
[  263.708483][T12699] BTRFS info (device loop6): enabling ssd optimizations
[  263.708500][T12699] BTRFS info (device loop6): turning on async discard
[  263.708507][T12699] BTRFS info (device loop6): enabling free space tree
[  263.745495][ T9383] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  265.030668][ T7027] IPVS: starting estimator thread 0...
[  265.091841][T12746] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2710'.
[  265.091868][T12746] netlink: 'syz.7.2710': attribute type 7 has an invalid length.
[  265.091874][T12746] netlink: 'syz.7.2710': attribute type 8 has an invalid length.
[  265.091878][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2710'.
[  265.132870][T12742] IPVS: using max 84 ests per chain, 201600 per kthread
[  265.188914][   T35] kauditd_printk_skb: 76 callbacks suppressed
[  265.188930][   T35] audit: type=1326 audit(1791041813.448:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.7.2713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  265.188960][   T35] audit: type=1326 audit(1791041813.448:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.7.2713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  265.189417][   T35] audit: type=1326 audit(1791041813.448:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.7.2713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  265.189574][   T35] audit: type=1326 audit(1791041813.448:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.7.2713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  265.189712][   T35] audit: type=1326 audit(1791041813.448:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.7.2713" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  265.190087][   T35] audit: type=1326 audit(1791041813.448:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.7.2713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  265.190235][   T35] audit: type=1326 audit(1791041813.448:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.7.2713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  265.190995][   T35] audit: type=1326 audit(1791041813.448:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.7.2713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  265.191025][   T35] audit: type=1326 audit(1791041813.448:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.7.2713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  265.191053][   T35] audit: type=1326 audit(1791041813.448:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.7.2713" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  265.432483][T12761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2718'.
[  265.432514][T12761] netlink: 'syz.4.2718': attribute type 7 has an invalid length.
[  265.432522][T12761] netlink: 'syz.4.2718': attribute type 8 has an invalid length.
[  265.432530][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2718'.
[  265.617047][T12777] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  265.617128][    C1] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  266.417736][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2732'.
[  266.870576][T12804] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  267.162829][ T5705] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  267.312816][ T5705] usb 5-1: Using ep0 maxpacket: 32
[  267.314712][ T5705] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  267.316169][ T5705] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  267.316186][ T5705] usb 5-1: config 0 has no interface number 0
[  267.316214][ T5705] usb 5-1: config 0 interface 12 has no altsetting 0
[  267.319091][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.319109][ T5705] usb 5-1: Product: syz
[  267.319118][ T5705] usb 5-1: Manufacturer: syz
[  267.319129][ T5705] usb 5-1: SerialNumber: syz
[  267.349853][ T5705] usb 5-1: config 0 descriptor??
[  267.969862][ T5705] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71
[  267.969890][ T5705] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  267.969898][ T5705] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  267.969931][ T5705] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  267.983055][ T5705] usb 5-1: USB disconnect, device number 18
[  268.953622][T12851] CacheFiles: Failed to register: -95
[  269.154443][T12865] CacheFiles: No cache directory specified
[  269.281468][T12877] ip_tables: iptables: counters copy to user failed while replacing table
[  269.329635][T12883] CacheFiles: No cache directory specified
[  269.694651][T12907] ip_tables: iptables: counters copy to user failed while replacing table
[  269.849734][T12915] ip_tables: iptables: counters copy to user failed while replacing table
[  270.374652][T12931] tipc: Started in network mode
[  270.380913][T12931] tipc: Node identity 1001001, cluster identity 4711
[  270.381054][T12931] tipc: Node number set to 16781313
[  270.427557][T12931] tipc: New replicast peer: 127.0.0.1
[  270.431860][T12931] tipc: Enabled bearer <udp:syz0>, priority 10
[  271.152572][T12978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.152845][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.173262][ T5653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.213098][ T5653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.236812][T12984] capability: warning: `syz.7.2818' uses deprecated v2 capabilities in a way that may be insecure
[  271.283491][ T5653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.374026][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.451069][ T2605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.464908][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.480029][T12996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.480259][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.722927][ T5705] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  271.757906][T13001] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2825'.
[  271.879741][ T5705] usb 8-1: unable to get BOS descriptor or descriptor too short
[  271.879767][ T5705] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  271.881566][ T5705] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 230, changing to 11
[  271.881587][ T5705] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  271.881597][ T5705] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  271.885831][ T5705] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.885850][ T5705] usb 8-1: Product: syz
[  271.885860][ T5705] usb 8-1: Manufacturer: syz
[  271.885869][ T5705] usb 8-1: SerialNumber: syz
[  272.117734][ T5705] cdc_ncm 8-1:1.0: bind() failure
[  272.122453][ T5705] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  272.122474][ T5705] cdc_ncm 8-1:1.1: bind() failure
[  272.133400][ T5705] usb 8-1: USB disconnect, device number 25
[  274.297208][   T35] kauditd_printk_skb: 91 callbacks suppressed
[  274.297224][   T35] audit: type=1326 audit(1791041822.558:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13082 comm="syz.7.2862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  274.297257][   T35] audit: type=1326 audit(1791041822.558:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13082 comm="syz.7.2862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  274.297700][   T35] audit: type=1326 audit(1791041822.558:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13082 comm="syz.7.2862" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  274.297952][   T35] audit: type=1326 audit(1791041822.558:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13082 comm="syz.7.2862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  274.298093][   T35] audit: type=1326 audit(1791041822.558:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13082 comm="syz.7.2862" exe="/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  274.298328][   T35] audit: type=1326 audit(1791041822.558:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13082 comm="syz.7.2862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  274.298459][   T35] audit: type=1326 audit(1791041822.558:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13082 comm="syz.7.2862" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  274.299639][   T35] audit: type=1326 audit(1791041822.558:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13082 comm="syz.7.2862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  274.299778][   T35] audit: type=1326 audit(1791041822.558:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13082 comm="syz.7.2862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  274.300750][   T35] audit: type=1326 audit(1791041822.558:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13082 comm="syz.7.2862" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc12df9e159 code=0x7ffc0000
[  274.420387][T13090] loop6: detected capacity change from 0 to 8
[  274.640338][ T5667] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  274.783274][ T5667] usb 8-1: Using ep0 maxpacket: 32
[  274.783822][ T5667] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  274.784711][ T5667] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[  274.784723][ T5667] usb 8-1: config 0 has no interface number 0
[  274.784739][ T5667] usb 8-1: config 0 interface 12 has no altsetting 0
[  274.786519][ T5667] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.786529][ T5667] usb 8-1: Product: syz
[  274.786535][ T5667] usb 8-1: Manufacturer: syz
[  274.786540][ T5667] usb 8-1: SerialNumber: syz
[  274.791656][ T5667] usb 8-1: config 0 descriptor??
[  274.927696][T13106] CIFS: Attempting to mount //127.0.0.1/share
[  275.038250][T13112] loop4: detected capacity change from 0 to 8
[  275.212842][ T5705] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  275.362957][ T5705] usb 7-1: Using ep0 maxpacket: 16
[  275.363944][ T5705] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  275.367586][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.367600][ T5705] usb 7-1: Product: syz
[  275.367606][ T5705] usb 7-1: Manufacturer: syz
[  275.367611][ T5705] usb 7-1: SerialNumber: syz
[  275.372217][ T5705] r8152-cfgselector 7-1: Unknown version 0x0000
[  275.372236][ T5705] r8152-cfgselector 7-1: config 0 descriptor??
[  275.418904][ T5667] f81534 8-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71
[  275.419049][ T5667] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71
[  275.419063][ T5667] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  275.419237][ T5667] f81534 8-1:0.12: probe with driver f81534 failed with error -71
[  275.439987][ T5667] usb 8-1: USB disconnect, device number 26
[  276.171817][T13136] loop4: detected capacity change from 0 to 8
[  276.485198][   T33] net_ratelimit: 16 callbacks suppressed
[  276.485217][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.626745][T13152] loop4: detected capacity change from 0 to 512
[  276.627756][T13152] EXT4-fs: Ignoring removed i_version option
[  276.627769][T13152] EXT4-fs: Ignoring removed nobh option
[  276.628474][T13152] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  276.645533][T13152] EXT4-fs (loop4): 1 truncate cleaned up
[  276.646643][T13152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.758025][ T8182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.017595][T13199] loop4: detected capacity change from 0 to 512
[  277.018280][T13199] EXT4-fs: Invalid want_extra_isize 1969
[  277.167977][T13207] netlink: 'syz.4.2892': attribute type 4 has an invalid length.
[  277.187888][T13207] netlink: 'syz.4.2892': attribute type 4 has an invalid length.
[  277.330580][T13215] 
[  277.331441][T13215] ======================================================
[  277.333672][T13215] WARNING: possible circular locking dependency detected
[  277.335853][T13215] syzkaller #0 Not tainted
[  277.337489][T13215] ------------------------------------------------------
[  277.339937][T13215] syz.4.2896/13215 is trying to acquire lock:
[  277.341963][T13215] ffff8881166200b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0x9c/0x1110
[  277.344972][T13215] 
[  277.344972][T13215] but task is already holding lock:
[  277.347284][T13215] ffffffff903fffe0 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x9c/0x1080
[  277.350247][T13215] 
[  277.350247][T13215] which lock already depends on the new lock.
[  277.350247][T13215] 
[  277.353898][T13215] 
[  277.353898][T13215] the existing dependency chain (in reverse order) is:
[  277.356885][T13215] 
[  277.356885][T13215] -> #2 (rfcomm_mutex){+.+.}-{4:4}:
[  277.359578][T13215]        __mutex_lock+0x19d/0x1550
[  277.361627][T13215]        rfcomm_security_cfm+0x90/0x820
[  277.363796][T13215]        hci_encrypt_cfm+0x37e/0x500
[  277.365643][T13215]        hci_cc_read_enc_key_size+0x1fb/0x540
[  277.368003][T13215]        hci_cmd_complete_evt+0x49d/0xa00
[  277.370277][T13215]        hci_event_packet+0x67a/0xf10
[  277.372449][T13215]        hci_rx_work+0x3ee/0x1020
[  277.374441][T13215]        process_scheduled_works+0xc3d/0x1630
[  277.376807][T13215]        worker_thread+0xa47/0xfb0
[  277.378866][T13215]        kthread+0x38b/0x480
[  277.380743][T13215]        ret_from_fork+0x514/0xb70
[  277.382863][T13215]        ret_from_fork_asm+0x1a/0x30
[  277.384995][T13215] 
[  277.384995][T13215] -> #1 (hci_cb_list_lock){+.+.}-{4:4}:
[  277.388080][T13215]        __mutex_lock+0x19d/0x1550
[  277.389748][T13215]        hci_remote_features_evt+0x53d/0x950
[  277.391850][T13215]        hci_event_packet+0x6cd/0xf10
[  277.393685][T13215]        hci_rx_work+0x3ee/0x1020
[  277.395713][T13215]        process_scheduled_works+0xc3d/0x1630
[  277.398132][T13215]        worker_thread+0xa47/0xfb0
[  277.400168][T13215]        kthread+0x38b/0x480
[  277.402005][T13215]        ret_from_fork+0x514/0xb70
[  277.403824][T13215]        ret_from_fork_asm+0x1a/0x30
[  277.405815][T13215] 
[  277.405815][T13215] -> #0 (&hdev->lock){+.+.}-{4:4}:
[  277.408335][T13215]        __lock_acquire+0x164c/0x2de0
[  277.410039][T13215]        lock_acquire+0x115/0x350
[  277.411614][T13215]        __mutex_lock+0x19d/0x1550
[  277.413553][T13215]        l2cap_chan_connect+0x9c/0x1110
[  277.415329][T13215]        l2cap_sock_connect+0x5e4/0x7e0
[  277.417199][T13215]        kernel_connect+0x141/0x1c0
[  277.419099][T13215]        rfcomm_dlc_open+0x644/0x1080
[  277.421032][T13215]        rfcomm_sock_connect+0x2ed/0x650
[  277.422990][T13215]        __sys_connect+0x316/0x450
[  277.424603][T13215]        __x64_sys_connect+0x7a/0x90
[  277.426657][T13215]        do_syscall_64+0x166/0x520
[  277.428704][T13215]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.431243][T13215] 
[  277.431243][T13215] other info that might help us debug this:
[  277.431243][T13215] 
[  277.434519][T13215] Chain exists of:
[  277.434519][T13215]   &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex
[  277.434519][T13215] 
[  277.438638][T13215]  Possible unsafe locking scenario:
[  277.438638][T13215] 
[  277.441595][T13215]        CPU0                    CPU1
[  277.443744][T13215]        ----                    ----
[  277.445908][T13215]   lock(rfcomm_mutex);
[  277.447278][T13215]                                lock(hci_cb_list_lock);
[  277.449484][T13215]                                lock(rfcomm_mutex);
[  277.451596][T13215]   lock(&hdev->lock);
[  277.452930][T13215] 
[  277.452930][T13215]  *** DEADLOCK ***
[  277.452930][T13215] 
[  277.455848][T13215] locks held by syz.4.2896/13215: 1, last CPU#1:
[  277.458381][T13215]  #0: ffffffff903fffe0 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x9c/0x1080
[  277.461990][T13215] 
[  277.461990][T13215] stack backtrace:
[  277.464327][T13215] CPU: 1 UID: 0 PID: 13215 Comm: syz.4.2896 Not tainted syzkaller #0 PREEMPT(full) 
[  277.467697][T13215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  277.470890][T13215] Call Trace:
[  277.471972][T13215]  <TASK>
[  277.472978][T13215]  dump_stack_lvl+0xe8/0x150
[  277.474467][T13215]  print_circular_bug+0x2e2/0x300
[  277.476125][T13215]  check_noncircular+0x12f/0x150
[  277.477702][T13215]  __lock_acquire+0x164c/0x2de0
[  277.479631][T13215]  ? lockdep_unlock+0x5c/0xd0
[  277.481493][T13215]  ? __lock_acquire+0x1511/0x2de0
[  277.483233][T13215]  lock_acquire+0x115/0x350
[  277.484707][T13215]  ? l2cap_chan_connect+0x9c/0x1110
[  277.486693][T13215]  __mutex_lock+0x19d/0x1550
[  277.488560][T13215]  ? l2cap_chan_connect+0x9c/0x1110
[  277.490645][T13215]  ? l2cap_chan_connect+0x9c/0x1110
[  277.492704][T13215]  ? _raw_read_unlock+0x28/0x50
[  277.494627][T13215]  ? __pfx___mutex_lock+0x10/0x10
[  277.496612][T13215]  ? __pfx_hci_get_route+0x10/0x10
[  277.498664][T13215]  ? reacquire_held_locks+0x117/0x1a0
[  277.500803][T13215]  l2cap_chan_connect+0x9c/0x1110
[  277.502817][T13215]  l2cap_sock_connect+0x5e4/0x7e0
[  277.504777][T13215]  ? __pfx_l2cap_sock_connect+0x10/0x10
[  277.506947][T13215]  ? do_raw_spin_lock+0x12b/0x2f0
[  277.508924][T13215]  ? kernel_connect+0xf1/0x1c0
[  277.510859][T13215]  kernel_connect+0x141/0x1c0
[  277.512922][T13215]  ? __pfx_kernel_connect+0x10/0x10
[  277.515226][T13215]  ? rfcomm_dlc_open+0x608/0x1080
[  277.517255][T13215]  rfcomm_dlc_open+0x644/0x1080
[  277.519212][T13215]  ? reacquire_held_locks+0x117/0x1a0
[  277.521338][T13215]  ? release_sock+0x2f/0x260
[  277.523147][T13215]  ? __pfx_rfcomm_dlc_open+0x10/0x10
[  277.525221][T13215]  ? rfcomm_sock_connect+0x2c6/0x650
[  277.527336][T13215]  ? rfcomm_sock_connect+0x2c6/0x650
[  277.529436][T13215]  ? __local_bh_enable_ip+0xd6/0x140
[  277.531532][T13215]  rfcomm_sock_connect+0x2ed/0x650
[  277.533585][T13215]  __sys_connect+0x316/0x450
[  277.535428][T13215]  ? __pfx___sys_connect+0x10/0x10
[  277.537416][T13215]  ? rcu_is_watching+0x16/0xb0
[  277.539319][T13215]  __x64_sys_connect+0x7a/0x90
[  277.541250][T13215]  do_syscall_64+0x166/0x520
[  277.543132][T13215]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.545347][T13215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.547237][T13215] RIP: 0033:0x7f500039e159
[  277.548630][T13215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.555445][T13215] RSP: 002b:00007f500122b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  277.558299][T13215] RAX: ffffffffffffffda RBX: 00007f5000625fa0 RCX: 00007f500039e159
[  277.561445][T13215] RDX: 000000000000000a RSI: 0000200000000000 RDI: 0000000000000005
[  277.564578][T13215] RBP: 00007f500043506b R08: 0000000000000000 R09: 0000000000000000
[  277.567689][T13215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  277.570543][T13215] R13: 00007f5000626038 R14: 00007f5000625fa0 R15: 00007ffc200f2548
[  277.573559][T13215]  </TASK>
[  277.577158][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.584224][ T4994] Bluetooth: hci2: link tx timeout
[  277.584240][ T4994] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  277.683456][ T5667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.812767][ T2605] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  277.921245][T13106] CIFS: VFS: cifs_mount failed w/return code = -512
[  277.930502][ T5705] r8152-cfgselector 7-1: Unknown version 0x0000
[  277.930678][ T5705] r8152-cfgselector 7-1: No union descriptors
[  277.940178][ T5705] r8152-cfgselector 7-1: USB disconnect, device number 14
[  277.962845][ T2605] usb 8-1: Using ep0 maxpacket: 8
[  277.963388][ T2605] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  277.964238][ T2605] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  277.964254][ T2605] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  277.964262][ T2605] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  277.964271][ T2605] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  277.964279][ T2605] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  277.964293][ T2605] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.169457][ T2605] usb 8-1: GET_CAPABILITIES returned 0
[  278.169485][ T2605] usbtmc 8-1:16.0: can't read capabilities
[  278.375766][ T5705] usb 8-1: USB disconnect, device number 27
[  278.643357][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.602890][ T5597] Bluetooth: hci2: command 0x0406 tx timeout
[  279.683333][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.723236][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.723420][ T5667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.052891][    C1] tipc: RX(1001001): key[1] is activated
[  281.053059][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.685654][ T2605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.685762][ T2605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.763256][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.813218][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.843218][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.726419][ T2605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.883517][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.933142][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.973277][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
