last executing test programs:

6.329322632s ago: executing program 0 (id=1809):
connect$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x4e22, 0x8, @empty, 0x9}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
fsopen(0x0, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00')
write$binfmt_format(r4, &(0x7f0000000300)='1\x00', 0x2)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=@base={0x9, 0x16, 0x100, 0x7f}, 0x50)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r5 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x40, 0x1, 0x17d}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$UHID_CREATE2(r9, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x8, 0x0, 0x1, 0x12, 0x1})
io_uring_enter(r5, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)

3.387222274s ago: executing program 0 (id=1813):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
r1 = fcntl$dupfd(r0, 0x0, r0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}})

3.112031549s ago: executing program 0 (id=1816):
r0 = socket(0x10, 0x3, 0x0)
recvmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000020)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001"], 0x20}}, 0x0)

3.039123023s ago: executing program 0 (id=1817):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f00000000c0)=""/30, 0x1e)
close_range(r0, 0xffffffffffffffff, 0x0)

2.492056751s ago: executing program 0 (id=1827):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)

2.409444405s ago: executing program 0 (id=1829):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x1000010, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6a71666d743d76667376302c70726a6a71756f74613d66326673002c6d6f64653d61616170746976652c680400000000000000636f766572792c6673796e635f6d6f64653d706f7369782cf97365725f78617474722c64697361626c655f726f6c6c5f663272776172642c000000"], 0x1, 0x105ea, &(0x7f0000010600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xe81, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0xffffffffffffff7f, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x8, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000"], 0x0}, 0x94)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000300)}, {&(0x7f0000000480)="83b3fa54013a652ceed432bdcda4eee3bd31cad7cb4fb5b004a26332f2ee00be70a0d0df8ef8bd9153bca0abdbb5564e11d6d6f22a4982cceed36db3ebd28f98816f83f5729995689bc1174392cd00165487276e37954f7f9da003811837", 0x5e}, {&(0x7f0000000540)="e53aecd838bfb3914ff6844118bf5526bb0d6817dbb6942e4b1c86555942e0ecbf1f9e3c880eb1030f87c8b28eb87f8110d7c9bc94ef72c31cce34e4fb8d34d3ed4b86c8ff7f7800e037a12e651c0ba91419f2b10a4a549e", 0x58}, {&(0x7f00000005c0)="4c5a55c6ef47ee30edd29e3866a094fdcc53c91d9839c16d00045ed282b6fa3e41810171f45a7b1b871159d66b4a68c21523f6acc137e02c0a467a9676529137b818dae0a3b3ccb4a7a40fce606382c3ce142aeed1fc4323dea939d09891602c5b7ba0b5068992d1d36de921a56ebf389653fdd72183e7cf8c", 0x79}, {&(0x7f0000000680)}], 0x5)
write$UHID_INPUT(r0, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x651, 0x1000})

1.248543175s ago: executing program 3 (id=1836):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x40080)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x0)

1.148166511s ago: executing program 2 (id=1837):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_opts(r0, 0x84, 0x11, 0xfffffffffffffffe, &(0x7f0000000280))

1.14784388s ago: executing program 3 (id=1838):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x3f, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

1.136425141s ago: executing program 2 (id=1839):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYRES32=r1], 0x68}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20040094)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.123445652s ago: executing program 3 (id=1840):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x14)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x80000000005df, 0xfbdb})

1.022124487s ago: executing program 2 (id=1841):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001"], 0x20}}, 0x0)

1.021834627s ago: executing program 3 (id=1843):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004009959e40c16c39e100", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008"], 0x58}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1)
r4 = dup3(r2, r1, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020)

967.29115ms ago: executing program 2 (id=1846):
unshare(0x20000400)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)

917.197393ms ago: executing program 2 (id=1849):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20040094)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

880.075485ms ago: executing program 3 (id=1852):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)

816.830028ms ago: executing program 2 (id=1854):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0xb, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24004085}, 0x4)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept4$nfc_llcp(r3, 0x0, 0x0, 0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r6, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r8 = accept4(r6, 0x0, 0x0, 0x0)
sendto(r8, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r7, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)

735.880542ms ago: executing program 3 (id=1856):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x71096000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)

623.901358ms ago: executing program 4 (id=1861):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0)

560.525421ms ago: executing program 4 (id=1863):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004009959e40c16c39e100", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008"], 0x58}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1)
r4 = dup3(r2, r1, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020)

500.706404ms ago: executing program 1 (id=1865):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x449}], 0x2, 0x0, 0x0, 0x0)
shutdown(r0, 0x0)

421.507698ms ago: executing program 4 (id=1866):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07", @ANYRES32, @ANYBLOB="01030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x200004d0)

356.078051ms ago: executing program 1 (id=1867):
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4f3a, 0x4)

339.061912ms ago: executing program 1 (id=1868):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000008200)={<r0=>0xffffffffffffffff})
fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(0x0, r1)
add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)

334.434823ms ago: executing program 4 (id=1869):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000080)="05031400d3fc220000004788031c09", 0xf, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

219.947819ms ago: executing program 1 (id=1870):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008004)

188.37682ms ago: executing program 1 (id=1871):
signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000)
socket$inet6(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40000000000000061115c00000000001600000000000000950074000000000059552ac209e29f456e80207ac53a6a01d6931dc2d04f52654d4da6dab982d865703217850208f70d7e7592241198618784af3f24185e95d7edc1d6c1e075c088d6a828610ca463ccb90a50a4b38d9bb9656528a6d92c7ceed1d0f375afcd65408ccac06a9f131ab1d0642bdeea21d307e97734e40bbcb962cee8b49ea2c376e68d6302f4d3f6"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0], 0x20)

88.535205ms ago: executing program 4 (id=1872):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001"], 0x20}}, 0x0)

11.82332ms ago: executing program 1 (id=1873):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffff8, 0x8001, 0x5, 0x3, 0x8, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

0s ago: executing program 4 (id=1874):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x20, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)

kernel console output (not intermixed with test programs):

6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   33.364957][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   33.366805][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   33.368368][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   33.369992][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   33.371546][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   33.374990][ T4320] 8021q: adding VLAN 0 to HW filter on device team0
[   33.381118][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   33.382678][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   33.384448][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   33.385940][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   33.388211][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   33.389791][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   33.402925][ T4327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   33.404479][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   33.408746][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   33.410385][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   33.411911][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   33.413447][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   33.415039][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   33.417061][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   33.418602][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   33.420096][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   33.421564][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   33.423331][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.424827][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.425967][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.433382][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   33.434919][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   33.436523][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   33.449101][ T4328] device veth0_vlan entered promiscuous mode
[   33.452271][ T4328] device veth1_vlan entered promiscuous mode
[   33.459055][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   33.460762][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   33.462229][  T583] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.463322][  T583] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.464752][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   33.468346][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   33.470180][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   33.471718][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   33.473200][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   33.489681][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   33.491249][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   33.492949][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   33.494461][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.497621][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   33.501104][ T4328] device veth0_macvtap entered promiscuous mode
[   33.502715][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   33.504300][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   33.506489][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   33.511519][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   33.520271][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.523645][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   33.525945][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   33.528797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   33.530108][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   33.535803][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   33.539204][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   33.542766][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   33.545024][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   33.548306][ T4328] device veth1_macvtap entered promiscuous mode
[   33.549703][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   33.551274][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   33.552705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   33.561960][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   33.563543][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   33.574518][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   33.576570][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   33.578598][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   33.579955][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   33.590207][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.591683][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.593216][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.595732][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   33.597262][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   33.604415][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   33.605687][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   33.608782][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.610030][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.611567][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.620457][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.623303][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.631227][ T4321] device veth0_vlan entered promiscuous mode
[   33.633403][ T4328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.634818][ T4328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.637272][ T4328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.638623][ T4328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.647736][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   33.649298][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   33.653341][ T4321] device veth1_vlan entered promiscuous mode
[   33.674451][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   33.676080][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   33.680765][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   33.682432][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   33.688393][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   33.689909][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   33.691355][ T4322] device veth0_vlan entered promiscuous mode
[   33.705798][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   33.707620][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   33.715926][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.720293][ T4321] device veth0_macvtap entered promiscuous mode
[   33.722945][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   33.724642][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.726636][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   33.735733][ T4322] device veth1_vlan entered promiscuous mode
[   33.739454][ T4321] device veth1_macvtap entered promiscuous mode
[   33.749078][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   33.750735][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   33.752293][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   33.753723][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   33.763932][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   33.765497][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   33.770330][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   33.772029][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   33.773716][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   33.775251][ T4320] device veth0_vlan entered promiscuous mode
[   33.781413][  T583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.782844][  T583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.784587][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   33.792742][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   33.794232][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   33.807721][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.809568][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.812146][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.815021][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.817603][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.819122][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   33.820634][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.824980][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.825421][ T4322] device veth0_macvtap entered promiscuous mode
[   33.826339][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.829329][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   33.830797][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   33.832201][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   33.833704][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   33.835567][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   33.840167][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   33.842651][ T4322] device veth1_macvtap entered promiscuous mode
[   33.845265][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.847904][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.849996][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.851689][ T4320] device veth1_vlan entered promiscuous mode
[   33.854817][ T4327] device veth0_vlan entered promiscuous mode
[   33.860061][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   33.861846][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   33.863272][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   33.864761][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.866693][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.871603][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.873046][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.874496][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.875902][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.884693][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.886793][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.888467][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.890052][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.892469][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.894102][ T4327] device veth1_vlan entered promiscuous mode
[   33.895775][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   33.897611][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.899256][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.918240][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   33.919755][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.934464][ T4320] device veth0_macvtap entered promiscuous mode
[   33.948893][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.950679][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.952409][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.954184][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.959079][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.965778][ T4327] device veth0_macvtap entered promiscuous mode
[   33.969945][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   33.971498][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   33.973032][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.974615][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.978676][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   33.980315][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.982550][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   33.986737][ T4320] device veth1_macvtap entered promiscuous mode
[   33.993752][ T4327] device veth1_macvtap entered promiscuous mode
[   34.000432][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.002053][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.004010][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.005777][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.011153][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.013025][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.015496][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.020692][ T4322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.022173][ T4322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.023615][ T4322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.025195][ T4322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.031742][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.033363][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.034807][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.036974][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.041612][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.043425][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.045129][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.056468][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.058076][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.059560][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.061750][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.064205][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.065904][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.070993][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.072717][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.074246][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.076008][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.078845][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.080672][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.080755][ T4403] loop2: detected capacity change from 0 to 32768
[   34.082249][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.085180][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.091087][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.097431][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.099042][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.113446][ T4320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.114857][ T4320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.126653][ T4320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.128106][ T4320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.137739][  T583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.139007][  T583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.140177][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   34.157855][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.159569][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.161226][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.163639][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.165127][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.170153][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.171855][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.173566][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.175858][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.183212][ T4403] device syzkaller0 entered promiscuous mode
[   34.184812][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.186674][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.198835][  T583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.200209][  T583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.207455][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   34.211111][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.211991][ T4327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.212370][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.215013][ T4327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.217530][ T4327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.218866][ T4327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.223944][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   34.420777][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.430756][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.432890][  T583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   34.454331][  T583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.455841][  T583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.458616][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   34.484728][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.486121][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.488949][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   34.498280][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.499687][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.501347][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   34.518429][ T4407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   34.521816][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.523207][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.537391][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.538784][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.540479][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   34.607133][ T4412] syz.0.2 uses obsolete (PF_INET,SOCK_PACKET)
[   34.660000][ T4405] loop1: detected capacity change from 0 to 32768
[   34.681757][ T4405] =======================================================
[   34.681757][ T4405] WARNING: The mand mount option has been deprecated and
[   34.681757][ T4405]          and is ignored by this kernel. Remove the mand
[   34.681757][ T4405]          option from the mount to silence this warning.
[   34.681757][ T4405] =======================================================
[   34.685874][ T4414] block device autoloading is deprecated and will be removed.
[   34.725436][ T4405] JBD2: Ignoring recovery information on journal
[   35.070303][ T4331] Bluetooth: hci0: command 0x041b tx timeout
[   35.071728][ T4329] Bluetooth: hci3: command 0x041b tx timeout
[   35.073014][ T4326] Bluetooth: hci2: command 0x041b tx timeout
[   35.073034][ T4323] Bluetooth: hci1: command 0x041b tx timeout
[   35.074144][ T4326] Bluetooth: hci4: command 0x041b tx timeout
[   35.122175][ T4405] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   35.156019][ T4405] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[   35.159820][ T4405] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   35.161790][ T4405] OCFS2: File system is now read-only.
[   35.162822][ T4405] (syz.1.1,4405,1):ocfs2_search_chain:1761 ERROR: status = -30
[   35.164505][ T4405] (syz.1.1,4405,1):ocfs2_search_chain:1871 ERROR: status = -30
[   35.165870][ T4405] (syz.1.1,4405,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[   35.169681][ T4405] (syz.1.1,4405,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[   35.171171][ T4405] (syz.1.1,4405,1):ocfs2_claim_metadata:2018 ERROR: status = -30
[   35.173266][ T4405] (syz.1.1,4405,1):ocfs2_claim_metadata:2031 ERROR: status = -30
[   35.174770][ T4405] (syz.1.1,4405,1):ocfs2_create_xattr_block:2891 ERROR: status = -30
[   35.177058][ T4405] (syz.1.1,4405,1):ocfs2_xattr_block_set:2972 ERROR: status = -30
[   35.219391][ T4321] ocfs2: Unmounting device (7,1) on (node local)
[   35.380632][ T4426] loop1: detected capacity change from 0 to 32768
[   35.404364][ T4426] JBD2: Ignoring recovery information on journal
[   35.428703][ T4426] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   35.534930][ T4321] ocfs2: Unmounting device (7,1) on (node local)
[   35.707789][ T4430] loop3: detected capacity change from 0 to 32768
[   35.738549][ T4430] JBD2: Ignoring recovery information on journal
[   35.748173][ T4432] loop0: detected capacity change from 0 to 32768
[   35.755287][ T4432] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[   35.769578][ T4432] JBD2: Ignoring recovery information on journal
[   35.785582][ T4423] loop4: detected capacity change from 0 to 40427
[   35.787778][ T4432] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   35.795385][ T4423] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   35.797291][ T4423] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   35.810602][ T4423] F2FS-fs (loop4): invalid crc value
[   35.811682][ T4430] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   35.821378][ T4320] ocfs2: Unmounting device (7,0) on (node local)
[   35.848844][ T4423] F2FS-fs (loop4): Found nat_bits in checkpoint
[   35.907265][ T4423] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   35.908603][ T4423] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   35.910331][ T4322] ocfs2: Unmounting device (7,3) on (node local)
[   36.046264][ T4450] loop1: detected capacity change from 0 to 32768
[   36.332444][ T4450] JBD2: Ignoring recovery information on journal
[   36.434380][ T4450] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   36.505288][ T4321] ocfs2: Unmounting device (7,1) on (node local)
[   36.539917][ T4464] netlink: 'syz.2.17': attribute type 10 has an invalid length.
[   36.549800][ T4464] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   36.830223][ T4472] loop0: detected capacity change from 0 to 512
[   36.849668][ T4468] loop1: detected capacity change from 0 to 32768
[   36.857715][ T4472] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a817e01c, mo2=0102]
[   36.859255][ T4472] System zones: 1-12
[   36.877231][ T4468] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   36.878651][ T4468] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   36.887079][ T4472] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33261: comm syz.0.20: invalid block
[   36.892024][ T4472] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.20: invalid indirect mapped block 8 (level 2)
[   36.895418][ T4472] EXT4-fs (loop0): 1 truncate cleaned up
[   36.904665][ T4472] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   36.949686][ T4468] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[   36.954773][ T4373] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   36.956097][ T4373] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   36.989617][ T4373] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 30ms
[   36.991331][ T4373] gfs2: fsid=syz:syz.0: jid=0: Done
[   36.992426][ T4468] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   37.116595][ T4329] Bluetooth: hci1: command 0x040f tx timeout
[   37.117665][ T4329] Bluetooth: hci2: command 0x040f tx timeout
[   37.118705][ T4329] Bluetooth: hci4: command 0x040f tx timeout
[   37.119669][ T4329] Bluetooth: hci0: command 0x040f tx timeout
[   37.120660][ T4329] Bluetooth: hci3: command 0x040f tx timeout
[   37.207329][ T4374] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   37.385323][ T4483] loop1: detected capacity change from 0 to 512
[   37.392301][ T4483] EXT4-fs (loop1): Test dummy encryption mode enabled
[   37.395292][ T4483] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[   37.397028][ T4483] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[   37.398575][ T4483] EXT4-fs (loop1): group descriptors corrupted!
[   37.406329][ T4374] usb 1-1: Using ep0 maxpacket: 16
[   37.410186][ T4374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.412112][ T4374] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   37.414486][ T4374] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   37.425832][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.451486][ T4374] usb 1-1: config 0 descriptor??
[   37.870398][ T4467] F2FS-fs (loop2): invalid crc value
[   37.895062][ T4467] F2FS-fs (loop2): Found nat_bits in checkpoint
[   37.908107][ T4467] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[   37.910464][ T4467] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   38.238353][ T4374] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   38.239661][ T4374] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   38.240868][ T4374] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   38.242089][ T4374] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   38.243240][ T4374] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   38.244905][ T4374] HID 045e:07da: Invalid code 65791 type 1
[   38.245958][ T4374] HID 045e:07da: Invalid code 768 type 1
[   38.247621][ T4374] HID 045e:07da: Invalid code 769 type 1
[   38.248560][ T4374] HID 045e:07da: Invalid code 770 type 1
[   38.249538][ T4374] HID 045e:07da: Invalid code 771 type 1
[   38.250457][ T4374] HID 045e:07da: Invalid code 772 type 1
[   38.251372][ T4374] HID 045e:07da: Invalid code 773 type 1
[   38.252252][ T4374] HID 045e:07da: Invalid code 774 type 1
[   38.253116][ T4374] HID 045e:07da: Invalid code 775 type 1
[   38.253935][ T4374] HID 045e:07da: Invalid code 776 type 1
[   38.264190][ T4374] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input2
[   38.291972][ T4472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.293767][ T4472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.348219][ T4374] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   38.387629][ T4374] usb 1-1: USB disconnect, device number 2
[   38.606186][ T4498] fido_id[4498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   38.659920][ T4496] JBD2: Ignoring recovery information on journal
[   38.681003][ T4496] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   38.691158][ T4504] EXT4-fs: Ignoring removed orlov option
[   38.714090][ T4504] EXT4-fs (loop2): Test dummy encryption mode enabled
[   38.715363][ T4504] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   38.728688][ T4504] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   38.739412][ T4504] EXT4-fs (loop2): 1 truncate cleaned up
[   38.740393][ T4504] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   38.819899][ T4504] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[   38.853987][ T4328] EXT4-fs (loop2): unmounting filesystem.
[   38.859405][ T4322] ocfs2: Unmounting device (7,3) on (node local)
[   38.949815][ T4320] EXT4-fs (loop0): unmounting filesystem.
[   39.173730][ T1612] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   39.177526][ T4515] team0: Port device ip6gretap1 added
[   39.179929][ T4519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29'.
[   39.184794][ T1612] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   39.196669][ T4326] Bluetooth: hci3: command 0x0419 tx timeout
[   39.197774][ T4326] Bluetooth: hci0: command 0x0419 tx timeout
[   39.198755][ T4326] Bluetooth: hci4: command 0x0419 tx timeout
[   39.199744][ T4326] Bluetooth: hci2: command 0x0419 tx timeout
[   39.200683][ T4326] Bluetooth: hci1: command 0x0419 tx timeout
[   40.312631][ T4538] set_capacity_and_notify: 3 callbacks suppressed
[   40.312640][ T4538] loop2: detected capacity change from 0 to 1024
[   40.319228][ T4536] loop3: detected capacity change from 0 to 512
[   40.320939][ T4536] EXT4-fs (loop3): Test dummy encryption mode enabled
[   40.322202][ T4536] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[   40.323939][ T4536] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[   40.325442][ T4536] EXT4-fs (loop3): group descriptors corrupted!
[   40.612547][ T4536] loop3: detected capacity change from 0 to 256
[   40.621822][ T4536] exFAT-fs (loop3): bogus fat length
[   40.622881][ T4536] exFAT-fs (loop3): failed to read boot sector
[   40.624136][ T4536] exFAT-fs (loop3): failed to recognize exfat type
[   41.110656][ T4548] loop1: detected capacity change from 0 to 512
[   41.112343][ T4548] EXT4-fs: Ignoring removed orlov option
[   41.116015][ T4548] EXT4-fs (loop1): Test dummy encryption mode enabled
[   41.118096][ T4548] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   41.134546][ T4548] EXT4-fs (loop1): 1 truncate cleaned up
[   41.135538][ T4548] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   41.198790][ T4555] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[   41.270778][ T4556] loop2: detected capacity change from 0 to 512
[   41.292601][ T4556] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a817e01c, mo2=0102]
[   41.300412][ T4556] System zones: 1-12
[   41.308830][ T4556] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.40: invalid block
[   41.324677][ T4556] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.40: invalid indirect mapped block 8 (level 2)
[   41.334925][ T4556] EXT4-fs (loop2): 1 truncate cleaned up
[   41.342172][ T4556] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   41.383644][ T4556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.390322][ T4556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.400477][ T4556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.411740][ T4556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.662011][ T4564] loop3: detected capacity change from 0 to 40427
[   41.669122][ T4321] EXT4-fs (loop1): unmounting filesystem.
[   41.721497][ T4564] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   41.722753][ T4564] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   41.725329][ T4564] F2FS-fs (loop3): invalid crc value
[   41.790929][ T4564] F2FS-fs (loop3): Found nat_bits in checkpoint
[   41.812811][ T4564] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   41.813923][ T4564] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   42.039127][ T4328] EXT4-fs (loop2): unmounting filesystem.
[   42.350538][    T9] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   42.353596][    T9] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   42.798643][ T4585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.45'.
[   43.716722][ T4599] loop3: detected capacity change from 0 to 512
[   43.718888][ T4599] EXT4-fs (loop3): Test dummy encryption mode enabled
[   43.720118][ T4599] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[   43.721821][ T4599] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[   43.723307][ T4599] EXT4-fs (loop3): group descriptors corrupted!
[   44.961330][ T4599] loop3: detected capacity change from 0 to 256
[   44.968653][ T4595] loop4: detected capacity change from 0 to 32768
[   44.973548][ T4599] exFAT-fs (loop3): bogus fat length
[   44.974499][ T4599] exFAT-fs (loop3): failed to read boot sector
[   44.975478][ T4599] exFAT-fs (loop3): failed to recognize exfat type
[   45.054304][ T4595] JBD2: Ignoring recovery information on journal
[   45.066104][ T4611] loop2: detected capacity change from 0 to 512
[   45.084590][ T4611] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a817e01c, mo2=0102]
[   45.085897][ T4611] System zones: 1-12
[   45.402042][ T4595] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   45.408543][ T4595] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[   45.425380][ T4595] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   45.439524][ T4611] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.54: invalid block
[   45.441504][ T4611] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.54: invalid indirect mapped block 8 (level 2)
[   45.444011][ T4595] OCFS2: File system is now read-only.
[   45.444870][ T4595] (syz.4.50,4595,1):ocfs2_search_chain:1761 ERROR: status = -30
[   45.456345][ T4611] EXT4-fs (loop2): 1 truncate cleaned up
[   45.457346][ T4611] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   45.458906][ T4595] (syz.4.50,4595,0):ocfs2_search_chain:1871 ERROR: status = -30
[   45.460175][ T4595] (syz.4.50,4595,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[   45.472176][ T4595] (syz.4.50,4595,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[   45.473637][ T4595] (syz.4.50,4595,0):ocfs2_claim_metadata:2018 ERROR: status = -30
[   45.476920][ T4611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.478429][ T4611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.482255][ T4595] (syz.4.50,4595,0):ocfs2_claim_metadata:2031 ERROR: status = -30
[   45.483522][ T4595] (syz.4.50,4595,0):ocfs2_create_xattr_block:2891 ERROR: status = -30
[   45.484810][ T4595] (syz.4.50,4595,0):ocfs2_xattr_block_set:2972 ERROR: status = -30
[   45.510438][ T4611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.511935][ T4611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.571380][ T4327] ocfs2: Unmounting device (7,4) on (node local)
[   46.272215][ T4328] EXT4-fs (loop2): unmounting filesystem.
[   46.723694][ T4655] block device autoloading is deprecated and will be removed.
[   46.822128][ T4632] loop4: detected capacity change from 0 to 131072
[   46.825029][ T4632] F2FS-fs (loop4): invalid crc value
[   46.850189][ T4632] F2FS-fs (loop4): Found nat_bits in checkpoint
[   46.865329][ T4632] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[   46.867678][ T4632] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   49.208886][ T4674] loop3: detected capacity change from 0 to 32768
[   49.230118][ T4691] block device autoloading is deprecated and will be removed.
[   49.233707][ T4674] JBD2: Ignoring recovery information on journal
[   49.258238][ T4678] loop2: detected capacity change from 0 to 32768
[   49.288620][ T4678] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[   49.291693][ T4678] JBD2: Ignoring recovery information on journal
[   49.314566][ T4674] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   49.348971][ T4678] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   49.399679][ T4322] ocfs2: Unmounting device (7,3) on (node local)
[   49.432280][ T4328] ocfs2: Unmounting device (7,2) on (node local)
[   50.626969][ T4694] loop4: detected capacity change from 0 to 32768
[   50.657804][ T4694] JBD2: Ignoring recovery information on journal
[   50.725732][ T4694] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   50.784052][ T4719] loop2: detected capacity change from 0 to 512
[   50.785381][ T4719] EXT4-fs: Ignoring removed orlov option
[   50.811722][ T4719] EXT4-fs (loop2): Test dummy encryption mode enabled
[   50.812823][ T4719] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   50.829051][ T4327] ocfs2: Unmounting device (7,4) on (node local)
[   50.860558][ T4719] EXT4-fs (loop2): 1 truncate cleaned up
[   50.861451][ T4719] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   51.091822][ T4730] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[   51.232394][ T4736] loop4: detected capacity change from 0 to 32768
[   51.244740][ T4736] JBD2: Ignoring recovery information on journal
[   51.305021][ T4736] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   51.340919][ T4327] ocfs2: Unmounting device (7,4) on (node local)
[   51.412611][ T4742] block device autoloading is deprecated and will be removed.
[   51.568832][ T4700] loop3: detected capacity change from 0 to 131072
[   51.573432][ T4700] F2FS-fs (loop3): invalid crc value
[   51.606859][ T4700] F2FS-fs (loop3): Found nat_bits in checkpoint
[   51.632424][ T4700] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[   51.743543][ T4700] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   51.781945][ T4328] EXT4-fs (loop2): unmounting filesystem.
[   52.534588][ T4770] loop3: detected capacity change from 0 to 40427
[   53.606144][    C1] sched: RT throttling activated
[   53.897833][ T4770] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   53.899199][ T4770] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   53.901308][ T4770] F2FS-fs (loop3): invalid crc value
[   53.937660][ T4777] loop4: detected capacity change from 0 to 1024
[   53.949587][ T4770] F2FS-fs (loop3): Found nat_bits in checkpoint
[   53.982424][ T4770] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   53.983676][ T4770] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   54.001791][ T4758] loop2: detected capacity change from 0 to 32768
[   54.027930][ T4758] JBD2: Ignoring recovery information on journal
[   54.113803][ T4758] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   54.159511][   T11] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   54.161541][   T11] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   54.189953][ T4328] ocfs2: Unmounting device (7,2) on (node local)
[   54.366600][ T4786] loop4: detected capacity change from 0 to 32768
[   54.388037][ T4786] JBD2: Ignoring recovery information on journal
[   54.415061][ T4786] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   54.465383][ T4327] ocfs2: Unmounting device (7,4) on (node local)
[   54.833575][ T4793] loop2: detected capacity change from 0 to 131072
[   54.842670][ T4793] F2FS-fs (loop2): invalid crc value
[   54.855025][ T4793] F2FS-fs (loop2): Found nat_bits in checkpoint
[   54.869456][ T4793] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[   54.876761][ T4793] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   55.347930][ T4821] loop3: detected capacity change from 0 to 32768
[   55.369672][ T4821] JBD2: Ignoring recovery information on journal
[   55.404123][ T4821] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   55.502961][ T4322] ocfs2: Unmounting device (7,3) on (node local)
[   55.745546][ T4836] loop4: detected capacity change from 0 to 32768
[   55.781715][ T4836] JBD2: Ignoring recovery information on journal
[   55.852439][ T4836] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   55.914064][ T4327] ocfs2: Unmounting device (7,4) on (node local)
[   56.665792][ T4863] loop3: detected capacity change from 0 to 1024
[   56.864460][ T4868] loop2: detected capacity change from 0 to 32768
[   56.882796][ T4868] JBD2: Ignoring recovery information on journal
[   56.909113][ T4868] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   56.934470][ T4868] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[   56.937334][ T4868] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   56.939195][ T4868] OCFS2: File system is now read-only.
[   56.940190][ T4868] (syz.2.128,4868,1):ocfs2_search_chain:1761 ERROR: status = -30
[   56.942010][ T4868] (syz.2.128,4868,1):ocfs2_search_chain:1871 ERROR: status = -30
[   56.943539][ T4868] (syz.2.128,4868,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[   56.945094][ T4868] (syz.2.128,4868,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[   56.949659][ T4868] (syz.2.128,4868,1):ocfs2_claim_metadata:2018 ERROR: status = -30
[   56.951125][ T4868] (syz.2.128,4868,1):ocfs2_claim_metadata:2031 ERROR: status = -30
[   56.952563][ T4868] (syz.2.128,4868,1):ocfs2_create_refcount_tree:595 ERROR: status = -30
[   56.954278][ T4868] (syz.2.128,4868,1):ocfs2_reflink_remap_blocks:4657 ERROR: status = -30
[   56.957047][ T4868] (syz.2.128,4868,1):ocfs2_remap_file_range:2710 ERROR: status = -30
[   56.982256][ T4328] ocfs2: Unmounting device (7,2) on (node local)
[   57.195213][ T4876] loop2: detected capacity change from 0 to 32768
[   57.215615][ T4876] JBD2: Ignoring recovery information on journal
[   57.253982][ T4876] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   57.294133][ T4328] ocfs2: Unmounting device (7,2) on (node local)
[   57.868361][ T4880] loop4: detected capacity change from 0 to 131072
[   57.885159][ T4880] F2FS-fs (loop4): invalid crc value
[   57.904495][ T4880] F2FS-fs (loop4): Found nat_bits in checkpoint
[   57.913160][ T4880] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[   57.919917][ T4880] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   58.569934][ T4910] loop2: detected capacity change from 0 to 32768
[   58.599886][ T4910] JBD2: Ignoring recovery information on journal
[   58.648909][ T4910] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   58.670166][ T4910] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[   58.676072][ T4910] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   58.683926][ T4910] OCFS2: File system is now read-only.
[   58.687113][ T4910] (syz.2.140,4910,0):ocfs2_search_chain:1761 ERROR: status = -30
[   58.690631][ T4910] (syz.2.140,4910,0):ocfs2_search_chain:1871 ERROR: status = -30
[   58.693027][ T4910] (syz.2.140,4910,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[   58.699517][ T4910] (syz.2.140,4910,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[   58.701050][ T4910] (syz.2.140,4910,0):ocfs2_claim_metadata:2018 ERROR: status = -30
[   58.705747][ T4910] (syz.2.140,4910,0):ocfs2_claim_metadata:2031 ERROR: status = -30
[   58.709638][ T4910] (syz.2.140,4910,0):ocfs2_create_refcount_tree:595 ERROR: status = -30
[   58.711302][ T4910] (syz.2.140,4910,0):ocfs2_reflink_remap_blocks:4657 ERROR: status = -30
[   58.726589][ T4910] (syz.2.140,4910,0):ocfs2_remap_file_range:2710 ERROR: status = -30
[   58.791592][ T4328] ocfs2: Unmounting device (7,2) on (node local)
[   59.857777][ T4945] loop4: detected capacity change from 0 to 32768
[   59.930065][ T4945] JBD2: Ignoring recovery information on journal
[   60.013378][ T4945] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   60.024076][ T4945] (syz.4.151,4945,0):ocfs2_verify_group_and_input:420 ERROR: add a group which is in the current volume.
[   60.025909][ T4945] (syz.4.151,4945,0):ocfs2_group_add:503 ERROR: status = -22
[   60.040687][ T4952] loop3: detected capacity change from 0 to 32768
[   60.047685][ T4952] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   60.049123][ T4952] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   60.062747][ T4949] loop2: detected capacity change from 0 to 32768
[   60.080166][ T4952] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[   60.082958][ T4949] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[   60.085344][ T4642] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   60.089145][ T4642] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   60.090827][ T4949] JBD2: Ignoring recovery information on journal
[   60.097874][ T4327] ocfs2: Unmounting device (7,4) on (node local)
[   60.113169][ T4642] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 24ms
[   60.114570][ T4642] gfs2: fsid=syz:syz.0: jid=0: Done
[   60.122857][ T4952] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   60.135184][ T4949] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   60.190148][ T4328] ocfs2: Unmounting device (7,2) on (node local)
[   60.274393][ T4964] loop4: detected capacity change from 0 to 512
[   60.276339][ T4964] EXT4-fs (loop4): Test dummy encryption mode enabled
[   60.277636][ T4964] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[   60.279453][ T4964] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[   60.280969][ T4964] EXT4-fs (loop4): group descriptors corrupted!
[   60.312372][ T4964] loop4: detected capacity change from 0 to 256
[   60.324465][ T4964] exFAT-fs (loop4): bogus fat length
[   60.325429][ T4964] exFAT-fs (loop4): failed to read boot sector
[   60.326485][ T4964] exFAT-fs (loop4): failed to recognize exfat type
[   60.820456][ T4955] device syzkaller0 entered promiscuous mode
[   60.886804][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'.
[   60.974393][ T4975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.981442][ T4975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.983941][ T4975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.985862][ T4975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.188475][ T4981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.163'.
[   63.178570][ T5023] loop3: detected capacity change from 0 to 512
[   63.212122][ T5023] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a817e01c, mo2=0102]
[   63.213806][ T5023] System zones: 1-12
[   63.222836][ T5023] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.177: invalid indirect mapped block 8 (level 2)
[   63.226984][ T5023] EXT4-fs (loop3): 1 truncate cleaned up
[   63.227957][ T5023] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   63.246048][ T5023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.253555][ T5023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.269646][ T5023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.285085][ T5023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.398413][ T5030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.178'.
[   63.959659][ T4322] EXT4-fs (loop3): unmounting filesystem.
[   64.478920][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[   64.480715][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[   64.552857][ T5043] loop3: detected capacity change from 0 to 131072
[   64.564832][ T5043] F2FS-fs (loop3): invalid crc value
[   64.594603][ T5043] F2FS-fs (loop3): Found nat_bits in checkpoint
[   64.607215][ T5043] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[   64.619205][ T5043] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   65.525704][ T5073] loop3: detected capacity change from 0 to 512
[   65.538786][ T5073] EXT4-fs (loop3): Test dummy encryption mode enabled
[   65.543456][ T5073] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[   65.551822][ T5073] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[   65.555508][ T5073] EXT4-fs (loop3): group descriptors corrupted!
[   65.581881][ T5077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.191'.
[   65.609241][ T4459] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   65.614058][ T5073] loop3: detected capacity change from 0 to 256
[   65.616082][ T5073] exFAT-fs (loop3): bogus fat length
[   65.619228][ T5073] exFAT-fs (loop3): failed to read boot sector
[   65.620271][ T5073] exFAT-fs (loop3): failed to recognize exfat type
[   65.644972][ T4459] udevd[4459]: incorrect exfat checksum on /dev/loop3
[   65.831500][   T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   66.016228][   T14] usb 1-1: Using ep0 maxpacket: 16
[   66.022660][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.024578][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   66.026947][   T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   66.029490][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.039512][   T14] usb 1-1: config 0 descriptor??
[   66.445478][   T14] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   66.448385][   T14] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   66.450639][   T14] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   66.453930][   T14] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   66.457146][   T14] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   66.459734][   T14] hid_map_usage: 7815 callbacks suppressed
[   66.459740][   T14] HID 045e:07da: Invalid code 65791 type 1
[   66.465079][   T14] HID 045e:07da: Invalid code 768 type 1
[   66.465953][   T14] HID 045e:07da: Invalid code 769 type 1
[   66.470376][   T14] HID 045e:07da: Invalid code 770 type 1
[   66.472377][   T14] HID 045e:07da: Invalid code 771 type 1
[   66.473363][   T14] HID 045e:07da: Invalid code 772 type 1
[   66.476753][   T14] HID 045e:07da: Invalid code 773 type 1
[   66.479802][   T14] HID 045e:07da: Invalid code 774 type 1
[   66.480864][   T14] HID 045e:07da: Invalid code 775 type 1
[   66.481765][   T14] HID 045e:07da: Invalid code 776 type 1
[   66.594890][   T14] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input3
[   66.611935][ T5099] netlink: 'syz.4.198': attribute type 10 has an invalid length.
[   66.615112][ T5099] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   66.645023][ T5076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.651514][ T5076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.669086][   T14] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   66.673670][   T14] usb 1-1: USB disconnect, device number 3
[   66.730157][ T5102] fido_id[5102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[   67.414454][ T5119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.204'.
[   68.190748][ T5134] netlink: 'syz.0.210': attribute type 10 has an invalid length.
[   68.202880][ T5134] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   68.585805][ T5146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.588357][ T5146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.592356][ T5146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.595396][ T5146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.205546][ T5161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.219'.
[   69.392491][ T5166] netlink: 'syz.3.221': attribute type 10 has an invalid length.
[   69.395558][ T5166] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   69.597965][ T3833] cfg80211: failed to load regulatory.db
[   70.506239][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   70.686198][   T24] usb 1-1: Using ep0 maxpacket: 16
[   70.689004][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.691099][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   70.693264][   T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   70.696992][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.706066][   T24] usb 1-1: config 0 descriptor??
[   70.914179][ T5199] netlink: 'syz.2.231': attribute type 1 has an invalid length.
[   70.926832][ T5199] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   70.929668][ T5199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.231'.
[   71.222683][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   71.223918][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   71.225152][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   71.226409][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   71.227673][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   71.245096][   T24] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input4
[   71.291173][ T5205] netlink: 'syz.2.232': attribute type 10 has an invalid length.
[   71.317685][   T24] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   71.435133][ T5190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.436965][ T5190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.444134][   T24] usb 1-1: USB disconnect, device number 4
[   72.950275][ T5242] netlink: 'syz.3.243': attribute type 1 has an invalid length.
[   72.967700][ T5244] netlink: 'syz.1.244': attribute type 10 has an invalid length.
[   72.972106][ T5244] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   72.984241][ T5242] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   72.990383][ T5242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.243'.
[   73.391870][ T5263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.401596][ T5263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.417236][ T5263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.432565][ T5263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.096286][ T5285] netlink: 'syz.2.256': attribute type 1 has an invalid length.
[   75.112649][ T5285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.256'.
[   75.192386][ T5291] netlink: 'syz.0.259': attribute type 10 has an invalid length.
[   75.785970][ T4367] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   75.966271][ T4367] usb 1-1: Using ep0 maxpacket: 16
[   75.974449][ T4367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.981558][ T4367] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   75.983943][ T4367] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   75.992501][ T4367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.144627][ T4367] usb 1-1: config 0 descriptor??
[   76.701966][ T4367] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   76.703393][ T4367] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   76.704651][ T4367] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   76.705880][ T4367] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   76.707961][ T4367] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   76.711850][ T4367] hid_map_usage: 15640 callbacks suppressed
[   76.711857][ T4367] HID 045e:07da: Invalid code 65791 type 1
[   76.718193][ T4367] HID 045e:07da: Invalid code 768 type 1
[   76.719191][ T4367] HID 045e:07da: Invalid code 769 type 1
[   76.720809][ T4367] HID 045e:07da: Invalid code 770 type 1
[   76.728862][ T4367] HID 045e:07da: Invalid code 771 type 1
[   76.729942][ T4367] HID 045e:07da: Invalid code 772 type 1
[   76.730849][ T4367] HID 045e:07da: Invalid code 773 type 1
[   76.731798][ T4367] HID 045e:07da: Invalid code 774 type 1
[   76.732806][ T4367] HID 045e:07da: Invalid code 775 type 1
[   76.733805][ T4367] HID 045e:07da: Invalid code 776 type 1
[   76.743970][ T4367] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input5
[   76.995050][ T4367] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   77.082714][ T5303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.085395][ T5303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.147163][ T4367] usb 1-1: USB disconnect, device number 5
[   77.163030][ T5327] netlink: 'syz.1.268': attribute type 1 has an invalid length.
[   77.244822][ T5327] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   77.256029][ T5327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'.
[   77.419698][ T5323] fido_id[5323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[   77.772753][ T5341] netlink: 'syz.3.272': attribute type 10 has an invalid length.
[   79.587643][ T5376] netlink: 'syz.1.283': attribute type 1 has an invalid length.
[   79.604152][ T5376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.283'.
[   79.640244][ T5380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.641882][ T5380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.644063][ T5380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.645711][ T5380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.701289][ T5383] netlink: 'syz.3.286': attribute type 10 has an invalid length.
[   81.408468][ T5418] netlink: 'syz.4.297': attribute type 1 has an invalid length.
[   81.519732][ T5418] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   81.527091][ T5418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.297'.
[   81.530879][ T5424] netlink: 'syz.0.299': attribute type 10 has an invalid length.
[   82.166237][   T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   82.358533][   T14] usb 1-1: Using ep0 maxpacket: 16
[   82.363097][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.365190][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   82.367734][   T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   82.370408][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.378185][   T14] usb 1-1: config 0 descriptor??
[   83.138103][   T14] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   83.139353][   T14] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   83.140457][   T14] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   83.141605][   T14] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   83.142833][   T14] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   83.144231][   T14] hid_map_usage: 7815 callbacks suppressed
[   83.144241][   T14] HID 045e:07da: Invalid code 65791 type 1
[   83.158933][   T14] HID 045e:07da: Invalid code 768 type 1
[   83.159883][   T14] HID 045e:07da: Invalid code 769 type 1
[   83.160804][   T14] HID 045e:07da: Invalid code 770 type 1
[   83.161728][   T14] HID 045e:07da: Invalid code 771 type 1
[   83.162666][   T14] HID 045e:07da: Invalid code 772 type 1
[   83.163597][   T14] HID 045e:07da: Invalid code 773 type 1
[   83.164522][   T14] HID 045e:07da: Invalid code 774 type 1
[   83.165493][   T14] HID 045e:07da: Invalid code 775 type 1
[   83.175306][   T14] HID 045e:07da: Invalid code 776 type 1
[   83.185467][   T14] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input6
[   83.261725][   T14] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   83.443124][ T5433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.450039][ T5433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.459122][ T4367] usb 1-1: USB disconnect, device number 6
[   83.535328][ T5465] netlink: 'syz.3.312': attribute type 1 has an invalid length.
[   83.553294][ T5465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.312'.
[   83.645558][ T5472] netlink: 'syz.3.314': attribute type 10 has an invalid length.
[   84.998984][ T5504] netlink: 'syz.2.326': attribute type 1 has an invalid length.
[   85.026327][ T5504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'.
[   85.058310][ T5508] netlink: 'syz.2.327': attribute type 10 has an invalid length.
[   85.399272][ T5512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.401999][ T5512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.405585][ T5512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.410008][ T5512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.077099][ T5545] netlink: 'syz.2.338': attribute type 1 has an invalid length.
[   87.086648][ T5545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.338'.
[   87.861718][ T5562] netlink: 'syz.1.344': attribute type 10 has an invalid length.
[   87.953973][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.961344][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.967528][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.972212][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.484653][ T5598] netlink: 'syz.2.356': attribute type 1 has an invalid length.
[   89.649604][ T5608] netlink: 'syz.2.359': attribute type 10 has an invalid length.
[   90.128337][ T5613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.131060][ T5613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.135107][ T5613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.137726][ T5613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.846079][ T5638] netlink: 'syz.1.370': attribute type 1 has an invalid length.
[   90.905591][ T5641] netlink: 'syz.1.371': attribute type 10 has an invalid length.
[   91.869900][ T5666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.873082][ T5666] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.877201][ T5666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.879547][ T5666] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.233115][ T5671] netlink: 'syz.2.381': attribute type 1 has an invalid length.
[   94.383821][ T5688] netlink: 'syz.4.388': attribute type 10 has an invalid length.
[   95.091818][ T5702] netlink: 'syz.2.392': attribute type 1 has an invalid length.
[   95.103890][ T5702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'.
[   95.111848][ T5702] 8021q: adding VLAN 0 to HW filter on device bond7
[   98.568126][ T5740] netlink: 'syz.2.404': attribute type 1 has an invalid length.
[   98.580494][ T5743] netlink: 'syz.4.403': attribute type 10 has an invalid length.
[   98.597452][ T5740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.404'.
[   98.605904][ T5740] 8021q: adding VLAN 0 to HW filter on device bond8
[   99.517692][ T5768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'.
[   99.529736][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.531376][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.719876][ T5783] netlink: 'syz.4.418': attribute type 10 has an invalid length.
[  100.402055][ T5788] netlink: 'syz.0.420': attribute type 1 has an invalid length.
[  100.420217][ T5788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.420'.
[  100.422988][ T5788] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.565017][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'.
[  102.733558][ T5831] netlink: 'syz.2.436': attribute type 1 has an invalid length.
[  102.745102][ T5831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.436'.
[  102.748054][ T5831] 8021q: adding VLAN 0 to HW filter on device bond9
[  105.937942][ T5876] netlink: 'syz.0.449': attribute type 1 has an invalid length.
[  105.973383][ T5876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.449'.
[  105.978730][ T5876] 8021q: adding VLAN 0 to HW filter on device bond2
[  107.682474][ T5891] loop0: detected capacity change from 0 to 40427
[  108.101658][ T5891] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  108.103038][ T5891] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  108.110278][ T5891] F2FS-fs (loop0): invalid crc value
[  108.366421][ T5891] F2FS-fs (loop0): Found nat_bits in checkpoint
[  108.389521][ T5891] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  108.390656][ T5891] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  109.315082][  T583] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  109.329608][ T5922] netlink: 'syz.1.463': attribute type 1 has an invalid length.
[  109.351412][  T583] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  109.355582][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.463'.
[  109.359160][ T5922] 8021q: adding VLAN 0 to HW filter on device bond4
[  109.818985][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'.
[  109.821461][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.822774][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.390189][ T5942] Zero length message leads to an empty skb
[  110.731482][ T5951] loop1: detected capacity change from 0 to 40427
[  110.817559][ T5951] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  110.819019][ T5951] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  110.823236][ T5951] F2FS-fs (loop1): invalid crc value
[  111.121602][ T5951] F2FS-fs (loop1): Found nat_bits in checkpoint
[  111.199141][ T5951] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  111.200513][ T5951] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  112.200108][ T1612] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  112.202372][ T1612] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  112.643053][ T5978] netlink: 'syz.1.476': attribute type 1 has an invalid length.
[  112.653202][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.476'.
[  112.656082][ T5978] 8021q: adding VLAN 0 to HW filter on device bond5
[  112.679511][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'.
[  112.682751][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.684049][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.141939][ T5992] loop1: detected capacity change from 0 to 512
[  113.148157][ T5992] EXT4-fs: Ignoring removed orlov option
[  113.158248][ T5992] EXT4-fs (loop1): Test dummy encryption mode enabled
[  113.160699][ T5992] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  113.221016][ T5992] EXT4-fs (loop1): 1 truncate cleaned up
[  113.223375][ T5992] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  113.742329][ T6001] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  114.386737][ T4321] EXT4-fs (loop1): unmounting filesystem.
[  114.895299][ T6024] netlink: 'syz.0.492': attribute type 1 has an invalid length.
[  115.313458][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.492'.
[  115.323630][ T6024] 8021q: adding VLAN 0 to HW filter on device bond3
[  117.060552][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'.
[  117.240951][ T6068] netlink: 'syz.4.506': attribute type 1 has an invalid length.
[  117.250639][ T6068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.506'.
[  117.254378][ T6068] 8021q: adding VLAN 0 to HW filter on device bond2
[  120.020667][ T6114] loop0: detected capacity change from 0 to 512
[  120.024602][ T6114] EXT4-fs (loop0): Test dummy encryption mode enabled
[  120.026042][ T6114] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  120.027974][ T6114] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[  120.029639][ T6114] EXT4-fs (loop0): group descriptors corrupted!
[  120.414441][ T6117] netlink: 'syz.2.520': attribute type 1 has an invalid length.
[  120.444766][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.520'.
[  120.450704][ T6117] 8021q: adding VLAN 0 to HW filter on device bond10
[  120.563657][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'.
[  120.572688][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.574025][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.282137][ T6151] netlink: 'syz.4.532': attribute type 1 has an invalid length.
[  123.338086][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.4.532'.
[  123.340903][ T6151] 8021q: adding VLAN 0 to HW filter on device bond3
[  124.212431][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'.
[  125.608153][ T6191] netlink: 'syz.3.544': attribute type 1 has an invalid length.
[  125.640430][ T6191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.544'.
[  125.646737][ T6191] 8021q: adding VLAN 0 to HW filter on device bond3
[  125.829925][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'.
[  125.934400][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  125.938108][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  133.129115][ T6337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.130596][ T6337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.902168][ T6382] netlink: 'syz.1.606': attribute type 4 has an invalid length.
[  135.925606][ T6382] netlink: 'syz.1.606': attribute type 17 has an invalid length.
[  135.942193][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  138.102175][ T6409] capability: warning: `syz.0.616' uses deprecated v2 capabilities in a way that may be insecure
[  143.136907][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.138443][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.249153][ T4329] Bluetooth: Wrong link type (-22)
[  143.436866][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 100.1.1.0
[  146.984112][ T6593] fuse: Bad value for 'fd'
[  149.525738][ T6623] fuse: Bad value for 'fd'
[  152.625137][ T6716] Bluetooth: MGMT ver 1.22
[  153.400268][ T6721] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  153.401824][ T6721] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  153.405587][ T6721] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  153.409629][ T6721] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  153.411562][ T6721] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  153.413357][ T6721] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  153.414964][ T6721] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  153.416115][ T6721] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  153.418546][ T6721] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  153.420075][ T6721] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  153.421205][ T6721] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  153.423256][ T6721] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  153.836427][ T4329] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  154.806203][ T4326] Bluetooth: hci1: command 0x0c1a tx timeout
[  155.438741][ T4329] Bluetooth: hci4: command 0x0c1a tx timeout
[  155.438768][ T4326] Bluetooth: hci3: command 0x0c1a tx timeout
[  155.439818][ T4329] Bluetooth: hci2: command 0x0c1a tx timeout
[  155.822985][ T6808] bridge0: port 3(syz_tun) entered blocking state
[  155.828631][ T6808] bridge0: port 3(syz_tun) entered disabled state
[  155.838423][ T6808] device syz_tun entered promiscuous mode
[  156.293926][ T6816] bridge0: port 3(syz_tun) entered blocking state
[  156.300575][ T6816] bridge0: port 3(syz_tun) entered disabled state
[  156.304188][ T6816] device syz_tun entered promiscuous mode
[  156.549838][ T6836] fuse: Bad value for 'fd'
[  156.876604][ T4326] Bluetooth: hci1: command 0x0406 tx timeout
[  157.339942][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.342480][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.378753][ T6873] block device autoloading is deprecated and will be removed.
[  157.516242][ T4326] Bluetooth: hci3: command 0x0406 tx timeout
[  157.517195][ T4331] Bluetooth: hci4: command 0x0406 tx timeout
[  157.528123][ T4329] Bluetooth: hci2: command 0x0406 tx timeout
[  157.665103][ T6888] netlink: 68 bytes leftover after parsing attributes in process `syz.0.813'.
[  157.949861][ T6903] geneve1 speed is unknown, defaulting to 1000
[  157.957548][ T6903] geneve1 speed is unknown, defaulting to 1000
[  157.959019][ T6903] geneve1 speed is unknown, defaulting to 1000
[  157.997732][ T6903] infiniband syz1: set active
[  157.999290][  T110] geneve1 speed is unknown, defaulting to 1000
[  158.007108][ T6903] infiniband syz1: added geneve1
[  158.078322][ T6903] RDS/IB: syz1: added
[  158.091647][ T6903] smc: adding ib device syz1 with port count 1
[  158.092901][ T6903] smc:    ib device syz1 port 1 has pnetid 
[  158.094871][ T4373] geneve1 speed is unknown, defaulting to 1000
[  158.097794][ T6903] geneve1 speed is unknown, defaulting to 1000
[  158.165736][ T6903] geneve1 speed is unknown, defaulting to 1000
[  158.178899][ T6916] netlink: 68 bytes leftover after parsing attributes in process `syz.4.824'.
[  158.240079][ T6903] geneve1 speed is unknown, defaulting to 1000
[  158.285240][ T6903] geneve1 speed is unknown, defaulting to 1000
[  158.313845][ T6903] geneve1 speed is unknown, defaulting to 1000
[  159.088043][ T6964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.792954][ T6974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  159.794384][ T6974] IPv6: NLM_F_CREATE should be set when creating new route
[  160.278139][ T6883] udevd[6883]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  161.365744][ T7025] fuse: Bad value for 'fd'
[  161.470286][ T4331] Bluetooth: hci3: unexpected event for opcode 0x1003
[  161.589116][ T7045] batman_adv: batadv0: Adding interface: dummy0
[  161.590259][ T7045] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.602241][ T7045] batman_adv: batadv0: Interface activated: dummy0
[  161.629030][ T7045] batadv0: mtu less than device minimum
[  161.631684][ T7045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.634836][ T7045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.638158][ T7045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.641118][ T7045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.644206][ T7045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.647331][ T7045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.650452][ T7045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.653478][ T7045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.656627][ T7045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.784463][ T7056] netlink: 52 bytes leftover after parsing attributes in process `syz.3.887'.
[  162.109103][ T7070] fuse: Bad value for 'fd'
[  162.184946][ T4331] Bluetooth: hci2: unexpected event for opcode 0x1003
[  162.231518][ T7032] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  162.232734][ T7032] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  162.233797][ T7032] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  162.234847][ T7032] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  162.397331][ T7088] block device autoloading is deprecated and will be removed.
[  163.004155][ T7103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.009461][ T7103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.381311][ T4331] Bluetooth: hci1: unexpected event for opcode 0x1003
[  163.401767][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.912'.
[  164.246415][ T4331] Bluetooth: hci4: command 0x0c1a tx timeout
[  164.246433][ T4329] Bluetooth: hci3: command 0x0c1a tx timeout
[  164.247487][ T4331] Bluetooth: hci2: command 0x0c1a tx timeout
[  164.839095][ T7174] kAFS: unable to lookup cell 't,ýÕÚÜoúú±(/'
[  165.092259][ T7189] geneve1 speed is unknown, defaulting to 1000
[  166.438047][ T7228] fuse: Bad value for 'fd'
[  166.454382][ T7230] mac80211_hwsim hwsim11 O3ãc¤±: renamed from wlan1
[  166.487826][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.963'.
[  166.528605][ T4331] Bluetooth: hci4: unexpected event for opcode 0x1003
[  166.573964][ T7239] netlink: 'syz.1.966': attribute type 1 has an invalid length.
[  166.594394][ T7239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.966'.
[  166.645786][ T7242] net_ratelimit: 530 callbacks suppressed
[  166.645800][ T7242] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0
[  166.660258][ T7242] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0
[  166.662818][ T7242] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0
[  166.675682][ T7242] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0
[  166.681424][ T7242] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0
[  166.683936][ T7242] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0
[  166.690226][ T7242] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0
[  166.692616][ T7242] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0
[  166.695014][ T7242] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0
[  166.697977][ T7242] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:8c:b8:9e:14:f0
[  166.719388][ T7254] fuse: Bad value for 'group_id'
[  166.835590][ T7259] fuse: Bad value for 'fd'
[  167.447028][ T4331] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  167.448513][ T4331] Bluetooth: hci1: Injecting HCI hardware error event
[  167.450195][ T4326] Bluetooth: hci1: hardware error 0x00
[  167.478015][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'.
[  167.524576][ T7273] netlink: 'syz.2.981': attribute type 1 has an invalid length.
[  167.551929][ T7273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.981'.
[  167.573263][ T7281] fuse: Bad value for 'fd'
[  167.837864][ T7298] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  167.860618][ T7298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.862668][ T7298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.949146][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.996'.
[  169.224174][ T7327] fuse: Bad value for 'fd'
[  169.598879][ T4326] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  170.409355][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1011'.
[  170.576240][ T4326] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  170.577713][ T4326] Bluetooth: hci4: Injecting HCI hardware error event
[  170.579520][ T4331] Bluetooth: hci4: hardware error 0x00
[  170.737202][ T7364] device syzkaller0 entered promiscuous mode
[  170.738829][ T7367] fuse: Bad value for 'fd'
[  170.775649][ T7371] geneve1 speed is unknown, defaulting to 1000
[  171.049035][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1026'.
[  172.345549][ T7398] fuse: Bad value for 'fd'
[  172.658631][ T7413] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1035'.
[  172.716399][ T4331] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  173.618276][ T7424] fuse: Bad value for 'fd'
[  173.729761][ T7432] geneve1 speed is unknown, defaulting to 1000
[  174.222145][ T7442] udevd[7442]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  174.533207][ T7454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1053'.
[  174.637871][ T7460] Bluetooth: MGMT ver 1.22
[  174.793209][ T7460] input: syz1 as /devices/virtual/input/input7
[  175.617295][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.636071][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.404620][ T7507] geneve1 speed is unknown, defaulting to 1000
[  178.025389][ T7546] fuse: Bad value for 'group_id'
[  178.138530][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'.
[  178.303997][ T7566] geneve1 speed is unknown, defaulting to 1000
[  178.792906][ T7584] fuse: Bad value for 'group_id'
[  179.376082][ T7605] fuse: Bad value for 'fd'
[  180.330656][ T7609] netlink: 'syz.1.1112': attribute type 10 has an invalid length.
[  180.369678][ T7609] team0: Port device dummy0 added
[  180.580930][ T7598] device syzkaller0 entered promiscuous mode
[  180.763420][ T7632] fuse: Unknown parameter 'group_i00000000000000000000'
[  180.774265][ T7625] geneve1 speed is unknown, defaulting to 1000
[  180.833042][ T7638] netlink: 'syz.4.1126': attribute type 10 has an invalid length.
[  180.852331][ T7638] team0: Port device dummy0 added
[  180.909817][ T7647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1131'.
[  181.010027][ T7657] fuse: Unknown parameter 'group_i00000000000000000000'
[  181.718116][ T7676] geneve1 speed is unknown, defaulting to 1000
[  182.011618][ T7686] fuse: Unknown parameter 'group_id00000000000000000000'
[  182.058360][ T7689] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1148'.
[  182.210354][ T7702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1156'.
[  182.246046][ T7706] geneve1 speed is unknown, defaulting to 1000
[  182.657414][ T7718] fuse: Unknown parameter 'group_id00000000000000000000'
[  182.799719][ T7704] device syzkaller0 entered promiscuous mode
[  183.885436][ T4331] Bluetooth: hci2: unexpected event for opcode 0x1003
[  183.982812][ T7740] geneve1 speed is unknown, defaulting to 1000
[  184.007991][ T7744] fuse: Unknown parameter 'group_id00000000000000000000'
[  184.114485][ T7748] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1174'.
[  184.597969][ T7772] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1179'.
[  185.589359][ T7766] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  185.590596][ T7766] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  185.609856][ T7777] device syzkaller0 entered promiscuous mode
[  186.930828][ T7795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1189'.
[  187.207037][ T7828] fuse: Bad value for 'fd'
[  187.358885][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  187.360021][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  187.596270][ T4331] Bluetooth: hci3: command 0x0c1a tx timeout
[  188.103019][ T7806] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  188.110062][ T7806] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  188.404447][ T7857] capability: warning: `syz.0.1210' uses 32-bit capabilities (legacy support in use)
[  188.708696][ T7878] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  189.276260][ T4326] Bluetooth: hci2: command 0x0c1a tx timeout
[  189.698166][ T7889] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1218'.
[  189.841766][ T7903] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1223'.
[  190.156333][ T4326] Bluetooth: hci3: command 0x0c1a tx timeout
[  190.713279][ T7884] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  190.726350][ T7884] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  191.313229][ T7921] bridge0: port 3(erspan0) entered blocking state
[  191.319531][ T7921] bridge0: port 3(erspan0) entered disabled state
[  191.324140][ T7921] device erspan0 entered promiscuous mode
[  191.329726][ T7921] device erspan0 left promiscuous mode
[  191.331414][ T7921] bridge0: port 3(erspan0) entered disabled state
[  191.846323][ T4326] Bluetooth: hci2: command 0x0c1a tx timeout
[  192.345742][ T7948] netlink: 'syz.3.1236': attribute type 39 has an invalid length.
[  192.386670][ T4331] Bluetooth: hci3: unexpected event for opcode 0x1003
[  192.453543][ T7953] binder: 7947:7953 ioctl c0285840 20000000 returned -22
[  194.124409][ T7950] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  194.125536][ T7950] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  194.320778][ T7973] 9pnet_virtio: no channels available for device syz
[  194.606354][    C0] net_ratelimit: 40784 callbacks suppressed
[  194.606367][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 100.1.1.0
[  194.676650][ T7971] netlink: 'syz.0.1243': attribute type 4 has an invalid length.
[  194.716185][ T4331] Bluetooth: hci2: command 0x0c1a tx timeout
[  195.007873][ T7973] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  195.008988][ T7973] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  195.036339][ T7978] bridge0: port 3(syz_tun) entered blocking state
[  195.037412][ T7978] bridge0: port 3(syz_tun) entered disabled state
[  195.039052][ T7978] device syz_tun entered promiscuous mode
[  195.045337][ T7977] netlink: 'syz.0.1243': attribute type 17 has an invalid length.
[  195.056021][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  195.165333][ T7986] fuse: Bad value for 'fd'
[  195.292025][ T7991] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1251'.
[  195.325189][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1255'.
[  195.405098][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1255'.
[  195.631850][ T8016] fuse: Bad value for 'fd'
[  195.655782][ T8018] netlink: 'syz.0.1263': attribute type 4 has an invalid length.
[  195.664477][ T8018] netlink: 'syz.0.1263': attribute type 17 has an invalid length.
[  195.751026][ T8024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1266'.
[  195.753630][ T8024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1266'.
[  195.830946][ T8036] device bond0 entered promiscuous mode
[  195.832090][ T8036] device bond_slave_0 entered promiscuous mode
[  195.833350][ T8036] device bond_slave_1 entered promiscuous mode
[  195.834645][ T8036] device wlan1 entered promiscuous mode
[  195.837288][ T8036] device batadv0 entered promiscuous mode
[  195.841442][ T8036] 8021q: adding VLAN 0 to HW filter on device hsr1
[  195.843475][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  195.857929][ T8036] netlink: 'syz.0.1272': attribute type 10 has an invalid length.
[  195.859677][ T8036] device syz_tun entered promiscuous mode
[  195.874619][ T8036] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  195.905814][ T8043] netlink: 'syz.0.1275': attribute type 4 has an invalid length.
[  195.911650][ T8043] netlink: 'syz.0.1275': attribute type 17 has an invalid length.
[  195.933094][ T8044] fuse: Bad value for 'fd'
[  195.983504][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1278'.
[  195.988037][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1278'.
[  196.339086][ T8005] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  196.341094][ T8005] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  196.375441][ T8066] IPv6: NLM_F_CREATE should be specified when creating new route
[  196.412863][ T8071] netlink: 'syz.3.1287': attribute type 4 has an invalid length.
[  196.490687][ T8074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1289'.
[  196.494836][ T8071] netlink: 'syz.3.1287': attribute type 17 has an invalid length.
[  196.511150][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  196.519983][ T8074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1289'.
[  197.425056][ T8090] fuse: Bad value for 'fd'
[  197.596230][ T4331] Bluetooth: hci2: command 0x0c1a tx timeout
[  197.770622][ T8107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1301'.
[  197.900324][ T8122] fuse: Bad value for 'fd'
[  197.931140][ T8125] netlink: 'syz.3.1309': attribute type 4 has an invalid length.
[  197.940786][ T8125] netlink: 'syz.3.1309': attribute type 17 has an invalid length.
[  198.154784][ T8130] device bridge1 entered promiscuous mode
[  198.257677][ T8092] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  198.264599][ T8092] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  198.330295][ T8134] geneve1 speed is unknown, defaulting to 1000
[  198.853690][ T8157] netlink: 'syz.2.1320': attribute type 4 has an invalid length.
[  198.889745][ T8157] netlink: 'syz.2.1320': attribute type 17 has an invalid length.
[  198.895855][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  198.991909][ T8160] fuse: Unknown parameter 'group_id00000000000000000000'
[  199.899424][ T8162] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  199.900718][ T8162] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  200.087984][ T8189] fuse: Unknown parameter 'group_id00000000000000000000'
[  200.187386][ T8193] geneve1 speed is unknown, defaulting to 1000
[  201.277772][ T4326] Bluetooth: hci2: command 0x0c1a tx timeout
[  201.381055][ T8205] netlink: 'syz.1.1336': attribute type 4 has an invalid length.
[  201.385479][ T8206] __nla_validate_parse: 6 callbacks suppressed
[  201.385494][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'.
[  201.388966][ T8209] netlink: 'syz.1.1336': attribute type 17 has an invalid length.
[  201.393416][ T8210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1337'.
[  201.615574][ T8243] netlink: 'syz.3.1351': attribute type 4 has an invalid length.
[  201.620464][ T8239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1350'.
[  201.622438][ T8239] 8021q: adding VLAN 0 to HW filter on device bond4
[  201.624707][ T8243] netlink: 'syz.3.1351': attribute type 17 has an invalid length.
[  201.696961][ T8212] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  201.708415][ T8212] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  201.732751][ T8253] netlink: 'syz.0.1354': attribute type 39 has an invalid length.
[  201.938512][ T8245] geneve1 speed is unknown, defaulting to 1000
[  201.981933][ T8262] netlink: 'syz.2.1356': attribute type 10 has an invalid length.
[  201.997292][ T8262] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  202.013778][ T8262] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1356'.
[  202.119168][ T8262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.165955][ T8262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.236237][ T8262] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  202.317194][ T8262] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  202.357926][ T8262] bond0 (unregistering): Released all slaves
[  202.435445][ T8265] device syzkaller1 entered promiscuous mode
[  202.438582][ T8265] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 22
[  202.708306][ T8277] binder: 8269:8277 got transaction to invalid handle, 1
[  202.709892][ T8277] binder: 8277:8269 cannot find target node
[  202.710992][ T8277] binder: 8269:8277 transaction call to 0:0 failed 7/29201/-22, size 72-24 line 3045
[  203.516230][ T4331] Bluetooth: hci2: command 0x0c1a tx timeout
[  203.633042][ T8276] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1362'.
[  203.749966][ T8279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1363'.
[  203.751907][ T8279] 8021q: adding VLAN 0 to HW filter on device bond5
[  203.766216][ T4326] Bluetooth: hci3: command 0x0c1a tx timeout
[  203.776913][ T6302] binder: undelivered TRANSACTION_ERROR: 29201
[  204.332231][ T8291] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  204.966367][ T8302] geneve1 speed is unknown, defaulting to 1000
[  205.375233][ T8317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1375'.
[  205.386626][ T8317] 8021q: adding VLAN 0 to HW filter on device bond4
[  206.074103][ T8339] 9pnet_virtio: no channels available for device syz
[  206.839234][ T8345] device syzkaller0 entered promiscuous mode
[  208.371295][ T8359] overlayfs: failed to clone lowerpath
[  208.675297][ T8365] netlink: 'syz.4.1388': attribute type 4 has an invalid length.
[  208.695706][ T8367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1389'.
[  208.700351][ T8367] 8021q: adding VLAN 0 to HW filter on device bond7
[  208.703144][ T8365] netlink: 'syz.4.1388': attribute type 17 has an invalid length.
[  208.714981][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  209.179950][ T8387] fuse: Invalid rootmode
[  209.613492][ T8389] device bond0 entered promiscuous mode
[  209.615832][ T8389] device bond_slave_0 entered promiscuous mode
[  209.618210][ T8393] 9pnet_virtio: no channels available for device syz
[  209.620678][ T8389] device bond_slave_1 entered promiscuous mode
[  209.623491][ T8389] device wlan1 entered promiscuous mode
[  209.647880][ T8389] device batadv0 entered promiscuous mode
[  209.696266][ T8389] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  209.699580][ T8389] Cannot create hsr debugfs directory
[  209.702097][ T8389] 8021q: adding VLAN 0 to HW filter on device hsr1
[  209.704859][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  209.781023][ T8401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1401'.
[  209.783050][ T8401] 8021q: adding VLAN 0 to HW filter on device bond4
[  209.807160][ T8404] fuse: Invalid rootmode
[  209.991634][ T8418] fuse: Invalid rootmode
[  210.320297][ T8431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1414'.
[  210.322212][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.343253][ T8434] fuse: Invalid rootmode
[  210.531958][ T8445] fuse: Bad value for 'rootmode'
[  211.940028][ T4331] Bluetooth: hci3: command 0x0405 tx timeout
[  212.013984][ T8465] netlink: 'syz.1.1425': attribute type 10 has an invalid length.
[  212.035696][ T8465] bridge0: port 3(syz_tun) entered disabled state
[  212.089987][ T8465] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  212.095484][ T8467] fuse: Invalid rootmode
[  212.121858][ T8471] netlink: 'syz.2.1426': attribute type 1 has an invalid length.
[  212.129813][ T8471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1426'.
[  212.131588][ T8471] 8021q: adding VLAN 0 to HW filter on device bond12
[  212.275322][ T8490] geneve1 speed is unknown, defaulting to 1000
[  212.465415][ T8497] fuse: Bad value for 'rootmode'
[  212.482972][ T8498] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  212.539698][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.541039][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.780583][ T8506] netlink: 'syz.0.1443': attribute type 10 has an invalid length.
[  212.856394][ T8508] netlink: 'syz.0.1444': attribute type 1 has an invalid length.
[  212.884731][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'.
[  212.888891][ T8508] 8021q: adding VLAN 0 to HW filter on device bond6
[  213.919913][ T8530] fuse: Bad value for 'rootmode'
[  214.227551][ T8542] netlink: 'syz.0.1456': attribute type 10 has an invalid length.
[  214.372858][ T8546] netlink: 'syz.0.1458': attribute type 1 has an invalid length.
[  214.400742][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1458'.
[  214.465603][ T8546] 8021q: adding VLAN 0 to HW filter on device bond7
[  214.805768][ T8563] fuse: Bad value for 'rootmode'
[  214.903233][ T4326] Bluetooth: hci3: unexpected event for opcode 0x1003
[  215.405253][ T8577] netlink: 'syz.2.1470': attribute type 10 has an invalid length.
[  215.407612][ T8577] device syz_tun entered promiscuous mode
[  215.487653][ T8583] netlink: 'syz.2.1472': attribute type 1 has an invalid length.
[  215.499818][ T8583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1472'.
[  215.501865][ T8583] 8021q: adding VLAN 0 to HW filter on device bond13
[  215.665411][ T8594] fuse: Bad value for 'fd'
[  215.738869][ T8570] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  215.740476][ T8570] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  216.244069][ T8615] netlink: 'syz.2.1485': attribute type 1 has an invalid length.
[  216.269806][ T8615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1485'.
[  216.271725][ T8615] 8021q: adding VLAN 0 to HW filter on device bond14
[  216.682265][ T8631] geneve1 speed is unknown, defaulting to 1000
[  216.730401][ T8638] fuse: Bad value for 'fd'
[  216.760039][ T8639] fuse: Bad value for 'fd'
[  217.297163][ T8624] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  217.298928][ T8624] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  217.336759][ T8643] device syzkaller0 entered promiscuous mode
[  217.514075][ T8652] netlink: 'syz.3.1498': attribute type 1 has an invalid length.
[  217.525073][ T8652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1498'.
[  217.527843][ T8652] 8021q: adding VLAN 0 to HW filter on device bond5
[  217.866315][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'.
[  218.323995][ T8672] fuse: Unknown parameter 'use00000000000000000000'
[  218.337680][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'.
[  219.149788][ T8682] netlink: 'syz.2.1521': attribute type 10 has an invalid length.
[  219.184417][ T8686] netlink: 'syz.4.1512': attribute type 10 has an invalid length.
[  219.195537][ T8686] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  219.207417][ T8686] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1512'.
[  219.228673][ T8686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.233649][ T8686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.239022][ T8686] bond0 (unregistering): (slave O3ãc¤±): Releasing backup interface
[  219.241027][ T8686] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  219.245939][ T8686] bond0 (unregistering): Released all slaves
[  219.248754][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'.
[  219.252244][ T8688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1513'.
[  219.268203][ T8675] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  219.269638][ T8675] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  219.271092][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.272743][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.806360][ T8700] fuse: Unknown parameter 'user_i00000000000000000000'
[  219.938141][ T8714] netlink: 'syz.1.1524': attribute type 10 has an invalid length.
[  219.964905][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1525'.
[  219.974935][ T8716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1525'.
[  220.502619][ T8733] fuse: Bad value for 'fd'
[  220.867169][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1534'.
[  221.072844][ T4326] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  221.216437][ T8727] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  221.217921][ T8727] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  221.238932][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1536'.
[  221.257194][ T8747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1536'.
[  221.321293][ T8749] netlink: 'syz.3.1537': attribute type 10 has an invalid length.
[  221.353432][ T8749] bridge0: port 3(syz_tun) entered disabled state
[  221.410273][ T8749] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  221.429340][ T4326] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  221.469280][ T8755] netlink: 'syz.2.1540': attribute type 4 has an invalid length.
[  221.496942][ T8755] netlink: 'syz.2.1540': attribute type 17 has an invalid length.
[  221.522720][ T8757] netlink: 'syz.3.1541': attribute type 1 has an invalid length.
[  221.883064][ T8772] fuse: Unknown parameter 'user_i00000000000000000000'
[  221.951992][ T8776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1549'.
[  222.057318][ T8783] netlink: 'syz.0.1552': attribute type 10 has an invalid length.
[  222.074686][ T8785] netlink: 'syz.0.1553': attribute type 4 has an invalid length.
[  222.080771][ T8785] netlink: 'syz.0.1553': attribute type 17 has an invalid length.
[  222.990180][ T8788] IPv6: sit1: Disabled Multicast RS
[  222.994872][ T8788] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1554' sets config #1
[  222.998261][ T8788] binder: 8786:8788 tried to acquire reference to desc 0, got 1 instead
[  223.000399][ T8788] binder: 8786:8788 got transaction to invalid handle, 1
[  223.001531][ T8788] binder: 8788:8786 cannot find target node
[  223.002448][ T8788] binder: 8786:8788 transaction async to 0:0 failed 13/29201/-22, size 0--28 line 3045
[  223.008330][ T6302] binder: undelivered TRANSACTION_COMPLETE
[  223.009253][ T6302] binder: undelivered TRANSACTION_COMPLETE
[  223.155402][ T4326] Bluetooth: hci2: command 0x0c1a tx timeout
[  223.189902][ T6302] binder: undelivered TRANSACTION_ERROR: 29201
[  223.190965][ T6302] binder: undelivered transaction 14, process died.
[  223.192014][ T6302] binder: undelivered transaction 12, process died.
[  223.276368][ T4331] Bluetooth: hci3: command 0x0c1a tx timeout
[  223.284962][ T8806] fuse: Unknown parameter 'user_id00000000000000000000'
[  223.350079][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1562'.
[  223.409189][ T8819] netlink: 'syz.2.1565': attribute type 10 has an invalid length.
[  223.503943][ T8831] fuse: Bad value for 'fd'
[  224.104543][ T8841] fuse: Unknown parameter 'user_id00000000000000000000'
[  224.173462][ T8814] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  224.174549][ T8814] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  224.439155][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1577'.
[  224.487954][ T8855] netlink: 'syz.2.1578': attribute type 10 has an invalid length.
[  224.628551][ T8865] device syzkaller0 entered promiscuous mode
[  224.763710][ T8870] fuse: Unknown parameter 'user_id00000000000000000000'
[  224.824010][ T8872] fuse: Unknown parameter 'user_id00000000000000000000'
[  225.753127][ T8874] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  225.754255][ T8874] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  225.795268][ T8885] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1589'.
[  225.840118][ T8888] validate_nla: 1 callbacks suppressed
[  225.840129][ T8888] netlink: 'syz.2.1591': attribute type 10 has an invalid length.
[  225.885710][ T8890] device bond0 entered promiscuous mode
[  225.886856][ T8890] device bond_slave_0 entered promiscuous mode
[  225.887948][ T8890] device bond_slave_1 entered promiscuous mode
[  225.888933][ T8890] device wlan1 entered promiscuous mode
[  225.919208][ T8894] fuse: Bad value for 'fd'
[  225.939202][ T8890] device batadv0 entered promiscuous mode
[  225.986339][ T8890] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  225.987761][ T8890] Cannot create hsr debugfs directory
[  225.991980][ T8890] 8021q: adding VLAN 0 to HW filter on device hsr1
[  225.994649][ T8892] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1593'.
[  225.998494][ T5956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  226.035930][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'.
[  226.098036][ T8905] device syzkaller0 entered promiscuous mode
[  226.108065][ T8905] 0: reclassify loop, rule prio 0, protocol 800
[  226.413401][ T8918] netlink: 'syz.3.1603': attribute type 10 has an invalid length.
[  226.590494][ T8927] fuse: Bad value for 'fd'
[  226.976900][ T8908] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  226.977981][ T8908] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  227.129320][ T8940] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1610'.
[  227.261493][ T8940] device bond0 left promiscuous mode
[  227.262646][ T8940] device bond_slave_0 left promiscuous mode
[  227.263840][ T8940] device bond_slave_1 left promiscuous mode
[  227.265202][ T8940] device wlan1 left promiscuous mode
[  227.319806][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  227.362930][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  227.404135][ T8940] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  227.440296][ T8940] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  227.482419][ T8940] bond0 (unregistering): Released all slaves
[  227.485027][ T8942] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1611'.
[  227.487511][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1612'.
[  227.546952][ T8949] netlink: 'syz.0.1614': attribute type 17 has an invalid length.
[  227.591344][ T8955] fuse: Bad value for 'fd'
[  227.669051][ T8963] fuse: Bad value for 'fd'
[  227.711301][ T8969] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1624'.
[  227.713918][ T8969] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1624'.
[  227.721164][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1623'.
[  227.753743][ T8974] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1626'.
[  227.853024][ T8982] netlink: 'syz.1.1629': attribute type 17 has an invalid length.
[  228.624926][ T8957] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  228.631537][ T8957] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  228.667359][ T8989] fuse: Bad value for 'fd'
[  228.694574][ T8986] fuse: Bad value for 'fd'
[  228.747670][ T8997] fuse: Unknown parameter '0x0000000000000003'
[  228.978879][ T9010] fuse: Bad value for 'fd'
[  229.010042][ T9012] netlink: 'syz.0.1640': attribute type 17 has an invalid length.
[  229.018779][ T9014] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1643' sets config #1
[  229.022077][ T9014] binder: 9013:9014 tried to acquire reference to desc 0, got 1 instead
[  229.023714][ T9014] binder: 9013:9014 got transaction to invalid handle, 1
[  229.024977][ T9014] binder: 9014:9013 cannot find target node
[  229.026376][ T9014] binder: 9013:9014 transaction async to 0:0 failed 20/29201/-22, size 0--28 line 3045
[  229.031215][ T9016] fuse: Bad value for 'fd'
[  229.033931][ T3897] binder: undelivered TRANSACTION_COMPLETE
[  229.034886][ T3897] binder: undelivered TRANSACTION_COMPLETE
[  229.043554][ T3897] binder: undelivered TRANSACTION_ERROR: 29201
[  229.044637][ T3897] binder: undelivered transaction 21, process died.
[  229.045818][ T3897] binder: undelivered transaction 19, process died.
[  229.099520][ T9025] fuse: Unknown parameter '0x0000000000000003'
[  229.200012][ T9038] fuse: Bad value for 'fd'
[  229.362564][ T9054] fuse: Unknown parameter '0x0000000000000003'
[  230.319227][ T9011] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  230.333760][ T9011] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  230.378497][ T9064] fuse: Unknown parameter '0x0000000000000003'
[  230.643598][ T9078] fuse: Unknown parameter '0x0000000000000003'
[  230.871295][ T9097] device syzkaller0 entered promiscuous mode
[  230.955936][ T9098] 9pnet_virtio: no channels available for device syz
[  231.117233][ T4326] Bluetooth: hci2: command 0x0c1a tx timeout
[  232.397118][ T4326] Bluetooth: hci3: command 0x0c1a tx timeout
[  232.623400][ T9112] fuse: Unknown parameter '0x0000000000000003'
[  232.691489][ T9116] IPv6: sit1: Disabled Multicast RS
[  232.823341][ T9124] dlm: Unknown command passed to DLM device : 3
[  232.823341][ T9124] 
[  232.953810][ T9126] device syzkaller0 entered promiscuous mode
[  233.064619][ T9127] batman_adv: batadv0: Adding interface: macsec1
[  233.065753][ T9127] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.070187][ T9127] batman_adv: batadv0: Interface activated: macsec1
[  233.079221][ T9129] __nla_validate_parse: 8 callbacks suppressed
[  233.079235][ T9129] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1691'.
[  233.282904][ T9141] device syzkaller0 entered promiscuous mode
[  234.527889][ T9145] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1698'.
[  234.551544][ T9155] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1703'.
[  234.580940][ T9152] device syzkaller0 entered promiscuous mode
[  234.779115][ T9178] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1714'.
[  234.787889][ T9181] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1715' sets config #1
[  234.790766][ T9181] binder: 9180:9181 tried to acquire reference to desc 0, got 1 instead
[  234.795809][ T9181] binder: 9180:9181 got transaction to invalid handle, 1
[  234.802627][ T9181] binder: 9181:9180 cannot find target node
[  234.805217][ T9181] binder: 9180:9181 transaction async to 0:0 failed 27/29201/-22, size 0--28 line 3045
[  235.611990][ T4368] binder: undelivered TRANSACTION_COMPLETE
[  235.613030][ T4368] binder: undelivered TRANSACTION_COMPLETE
[  235.865358][ T4368] binder: undelivered TRANSACTION_ERROR: 29201
[  235.866568][ T4368] binder: undelivered transaction 28, process died.
[  235.867675][ T4368] binder: undelivered transaction 26, process died.
[  235.909603][ T9199] fuse: Unknown parameter '0x0000000000000003'
[  235.917835][ T9201] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1722'.
[  235.969009][ T4326] Bluetooth: hci3: Malformed Event: 0x2f
[  236.016371][ T4326] Bluetooth: hci2: unexpected event for opcode 0x1003
[  237.013312][ T9224] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  237.148636][ T9227] IPv6: sit1: Disabled Multicast RS
[  237.152828][ T9227] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1732' sets config #1
[  237.155383][ T9227] binder: 9226:9227 tried to acquire reference to desc 0, got 1 instead
[  237.157511][ T9227] binder: 9226:9227 got transaction to invalid handle, 1
[  237.158588][ T9227] binder: 9227:9226 cannot find target node
[  237.159484][ T9227] binder: 9226:9227 transaction async to 0:0 failed 34/29201/-22, size 0--28 line 3045
[  237.163160][ T4373] binder: undelivered TRANSACTION_COMPLETE
[  237.210738][ T9231] fuse: Unknown parameter 'fd0x0000000000000003'
[  237.339408][ T9241] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1738'.
[  237.420877][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1737'.
[  237.453779][ T9237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1737'.
[  237.803000][ T9269] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  237.878852][ T9275] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1753'.
[  238.267029][ T9246] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  238.268818][ T9246] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  238.313741][ T9284] device syzkaller0 entered promiscuous mode
[  238.601082][ T9302] IPv6: sit1: Disabled Multicast RS
[  238.617811][ T9302] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1762' sets config #1
[  238.621699][ T9302] binder: 9299:9302 tried to acquire reference to desc 0, got 1 instead
[  238.623656][ T9302] binder: 9299:9302 got transaction to invalid handle, 1
[  238.740737][ T9304] device syzkaller0 entered promiscuous mode
[  238.952530][ T9309] fuse: Unknown parameter 'fd0x0000000000000003'
[  239.072737][ T4326] Bluetooth: hci2: unexpected event for opcode 0x1003
[  240.316217][ T4326] Bluetooth: hci3: command 0x0c1a tx timeout
[  243.116221][ T4326] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  243.117657][ T4326] Bluetooth: hci2: Injecting HCI hardware error event
[  243.119700][ T4326] Bluetooth: hci2: hardware error 0x00
[  245.276283][ T4326] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  248.796762][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  248.797832][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  250.646621][ T9335] netlink: 'syz.3.1774': attribute type 10 has an invalid length.
[  250.673518][ T9340] binder: tried to use weak ref as strong ref
[  250.674663][ T9340] binder: 9339:9340 Acquire 1 refcount change on invalid ref 0 ret -22
[  250.699318][ T9340] binder: 9339:9340 got transaction to invalid handle, 1
[  250.700433][ T9340] binder_debug: 11 callbacks suppressed
[  250.700446][ T9340] binder: 9340:9339 cannot find target node
[  250.702317][ T9340] binder: 9339:9340 transaction call to 0:0 failed 45/29201/-22, size 72-24 line 3045
[  250.704352][ T3897] binder: undelivered TRANSACTION_ERROR: 29201
[  251.611444][ T9346] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  253.226443][ T4326] Bluetooth: hci3: command 0x0c1a tx timeout
[  253.519800][ T9400] netlink: 'syz.4.1789': attribute type 10 has an invalid length.
[  253.536863][ T9400] bridge0: port 3(syz_tun) entered disabled state
[  253.605036][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1792'.
[  253.669757][ T9410] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1793'.
[  254.971206][ T9425] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  254.977800][ T9425] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  254.992401][ T9425] device syz_tun left promiscuous mode
[  254.997809][ T9425] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.998933][ T9425] bridge0: port 2(bridge_slave_1) entered listening state
[  255.000105][ T9425] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.001229][ T9425] bridge0: port 1(bridge_slave_0) entered listening state
[  255.005651][ T9425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  255.007783][ T9425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  255.011493][ T9425] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  255.012947][ T9425] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  255.106551][ T9425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.185041][ T9423] ceph: No mds server is up or the cluster is laggy
[  255.535423][ T9431] 9pnet_virtio: no channels available for device syz
[  255.641575][   T27] audit: type=1326 audit(255.500:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff917771a8 code=0x7ffc0000
[  255.711462][   T27] audit: type=1326 audit(255.500:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff917771a8 code=0x7ffc0000
[  255.739448][   T27] audit: type=1326 audit(255.510:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff917771a8 code=0x7ffc0000
[  255.786182][   T27] audit: type=1326 audit(255.520:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff917771a8 code=0x7ffc0000
[  255.789958][   T27] audit: type=1326 audit(255.520:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff917771a8 code=0x7ffc0000
[  255.793307][   T27] audit: type=1326 audit(255.520:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff917771a8 code=0x7ffc0000
[  255.806202][   T27] audit: type=1326 audit(255.530:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff917771a8 code=0x7ffc0000
[  255.809523][   T27] audit: type=1326 audit(255.530:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff917771a8 code=0x7ffc0000
[  255.813050][   T27] audit: type=1326 audit(255.540:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=49 compat=0 ip=0xffff917771a8 code=0x7ffc0000
[  255.826197][   T27] audit: type=1326 audit(255.540:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff917771a8 code=0x7ffc0000
[  255.942958][ T9417] device syzkaller0 entered promiscuous mode
[  267.834626][ T9442] netlink: 'syz.4.1803': attribute type 10 has an invalid length.
[  267.841919][ T9452] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1806'.
[  268.037374][ T9470] binder: 9459:9470 got transaction to invalid handle, 1
[  268.038771][ T9470] binder: 9470:9459 cannot find target node
[  268.039745][ T9470] binder: 9459:9470 transaction call to 0:0 failed 48/29201/-22, size 72-24 line 3045
[  270.428259][ T9478] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  270.431825][ T9478] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  270.820123][ T6302] binder: undelivered TRANSACTION_ERROR: 29201
[  271.515067][ T9500] dlm: Unknown command passed to DLM device : 3
[  271.515067][ T9500] 
[  271.656932][ T9508] device syzkaller0 entered promiscuous mode
[  271.662060][ T9510] netlink: 'syz.2.1824': attribute type 12 has an invalid length.
[  271.663631][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'.
[  271.665182][ T9510] bond0: option primary_reselect: invalid value (138)
[  271.669502][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1
[  271.671342][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.674314][ T9511] batman_adv: batadv0: Adding interface: macsec1
[  271.675712][ T9511] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.694021][ T9511] batman_adv: batadv0: Interface activated: macsec1
[  271.800524][ T9514] IPv6: sit1: Disabled Multicast RS
[  271.805070][ T9514] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1826' sets config #1
[  271.818207][ T9514] binder: 9513:9514 got transaction to invalid handle, 1
[  271.823018][ T9514] binder: 9514:9513 cannot find target node
[  271.828641][ T9514] binder: 9513:9514 transaction async to 0:0 failed 52/29201/-22, size 0-0 line 3045
[  271.849667][ T6302] binder: undelivered TRANSACTION_ERROR: 29201
[  272.094587][ T9531] siw: device registration error -23
[  273.111153][ T9547] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1839'.
[  273.127415][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1840'.
[  273.246767][ T9555] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1843' sets config #1
[  273.259735][ T9555] binder: 9550:9555 got transaction to invalid handle, 1
[  273.260957][ T9555] binder: 9555:9550 cannot find target node
[  273.261967][ T9555] binder: 9550:9555 transaction async to 0:0 failed 56/29201/-22, size 0-0 line 3045
[  273.278831][ T6302] binder: undelivered TRANSACTION_ERROR: 29201
[  273.703339][ T9594] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1863' sets config #1
[  273.708881][ T9594] binder: 9592:9594 got transaction to invalid handle, 1
[  273.709972][ T9594] binder: 9594:9592 cannot find target node
[  273.720170][ T9594] binder: 9592:9594 transaction async to 0:0 failed 60/29201/-22, size 0-0 line 3045
[  273.731230][ T3897] binder: undelivered TRANSACTION_ERROR: 29201
[  273.843491][ T9602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1866'.
[  274.280022][ T9620] ==================================================================
[  274.281547][ T9620] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x20c/0x210
[  274.282956][ T9620] Read of size 2 at addr ffff0000f53735fb by task syz.1.1873/9620
[  274.284393][ T9620] 
[  274.284806][ T9620] CPU: 0 PID: 9620 Comm: syz.1.1873 Not tainted syzkaller #0
[  274.286028][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  274.287739][ T9620] Call trace:
[  274.288285][ T9620]  dump_backtrace+0x1c0/0x1ec
[  274.289093][ T9620]  show_stack+0x2c/0x3c
[  274.289812][ T9620]  __dump_stack+0x30/0x40
[  274.290511][ T9620]  dump_stack_lvl+0xf4/0x15c
[  274.291241][ T9620]  print_address_description+0x88/0x218
[  274.292127][ T9620]  print_report+0x50/0x68
[  274.292854][ T9620]  kasan_report+0xa8/0xfc
[  274.293584][ T9620]  __asan_report_load2_noabort+0x2c/0x38
[  274.294569][ T9620]  ieee80211_monitor_select_queue+0x20c/0x210
[  274.295652][ T9620]  netdev_core_pick_tx+0x130/0x320
[  274.296472][ T9620]  __dev_queue_xmit+0x738/0x3118
[  274.297331][ T9620]  dev_queue_xmit+0x24/0x34
[  274.298161][ T9620]  packet_sendmsg+0x2f9c/0x3fd0
[  274.299092][ T9620]  ____sys_sendmsg+0x5c8/0x938
[  274.299936][ T9620]  __sys_sendmsg+0x288/0x374
[  274.300724][ T9620]  __arm64_sys_sendmsg+0x80/0x94
[  274.301516][ T9620]  invoke_syscall+0x98/0x2b4
[  274.302263][ T9620]  el0_svc_common+0x138/0x258
[  274.303093][ T9620]  do_el0_svc+0x58/0x130
[  274.303778][ T9620]  el0_svc+0x58/0x128
[  274.304479][ T9620]  el0t_64_sync_handler+0x84/0xf0
[  274.305366][ T9620]  el0t_64_sync+0x18c/0x190
[  274.306104][ T9620] 
[  274.306495][ T9620] Allocated by task 9476:
[  274.307221][ T9620]  kasan_set_track+0x4c/0x80
[  274.307921][ T9620]  kasan_save_alloc_info+0x24/0x30
[  274.308733][ T9620]  __kasan_kmalloc+0xa0/0xb8
[  274.309460][ T9620]  __kmalloc+0xec/0x178
[  274.310147][ T9620]  hash_ipportip6_resize+0xbc4/0x18fc
[  274.311015][ T9620]  call_ad+0x498/0x944
[  274.311686][ T9620]  ip_set_ad+0x5f4/0x7d8
[  274.312381][ T9620]  ip_set_uadd+0x74/0x8c
[  274.313117][ T9620]  nfnetlink_rcv_msg+0xad0/0xfac
[  274.313976][ T9620]  netlink_rcv_skb+0x218/0x3e8
[  274.314770][ T9620]  nfnetlink_rcv+0x214/0x1bfc
[  274.315523][ T9620]  netlink_unicast+0x60c/0x814
[  274.316382][ T9620]  netlink_sendmsg+0x6f4/0x9c0
[  274.317166][ T9620]  ____sys_sendmsg+0x5c8/0x938
[  274.318029][ T9620]  __sys_sendmsg+0x288/0x374
[  274.318858][ T9620]  __arm64_sys_sendmsg+0x80/0x94
[  274.319790][ T9620]  invoke_syscall+0x98/0x2b4
[  274.320543][ T9620]  el0_svc_common+0x138/0x258
[  274.321355][ T9620]  do_el0_svc+0x58/0x130
[  274.322035][ T9620]  el0_svc+0x58/0x128
[  274.322690][ T9620]  el0t_64_sync_handler+0x84/0xf0
[  274.323519][ T9620]  el0t_64_sync+0x18c/0x190
[  274.324263][ T9620] 
[  274.324660][ T9620] Freed by task 9476:
[  274.325317][ T9620]  kasan_set_track+0x4c/0x80
[  274.326017][ T9620]  kasan_save_free_info+0x38/0x5c
[  274.326747][ T9620]  ____kasan_slab_free+0x148/0x1b0
[  274.327563][ T9620]  __kasan_slab_free+0x18/0x28
[  274.328329][ T9620]  slab_free_freelist_hook+0x16c/0x1e8
[  274.329237][ T9620]  __kmem_cache_free+0xbc/0x218
[  274.330063][ T9620]  kfree+0xd0/0x1a8
[  274.330833][ T9620]  hash_ipportip6_resize+0x1680/0x18fc
[  274.331705][ T9620]  call_ad+0x3b8/0x944
[  274.332471][ T9620]  ip_set_ad+0x5f4/0x7d8
[  274.333119][ T9620]  ip_set_uadd+0x74/0x8c
[  274.333780][ T9620]  nfnetlink_rcv_msg+0xad0/0xfac
[  274.334552][ T9620]  netlink_rcv_skb+0x218/0x3e8
[  274.335249][ T9620]  nfnetlink_rcv+0x214/0x1bfc
[  274.335958][ T9620]  netlink_unicast+0x60c/0x814
[  274.336789][ T9620]  netlink_sendmsg+0x6f4/0x9c0
[  274.337544][ T9620]  ____sys_sendmsg+0x5c8/0x938
[  274.338254][ T9620]  __sys_sendmsg+0x288/0x374
[  274.339012][ T9620]  __arm64_sys_sendmsg+0x80/0x94
[  274.339958][ T9620]  invoke_syscall+0x98/0x2b4
[  274.340695][ T9620]  el0_svc_common+0x138/0x258
[  274.341443][ T9620]  do_el0_svc+0x58/0x130
[  274.342167][ T9620]  el0_svc+0x58/0x128
[  274.342887][ T9620]  el0t_64_sync_handler+0x84/0xf0
[  274.343669][ T9620]  el0t_64_sync+0x18c/0x190
[  274.344457][ T9620] 
[  274.344868][ T9620] Last potentially related work creation:
[  274.345886][ T9620]  kasan_save_stack+0x40/0x70
[  274.346660][ T9620]  __kasan_record_aux_stack+0xc0/0xdc
[  274.347504][ T9620]  kasan_record_aux_stack_noalloc+0x14/0x20
[  274.348476][ T9620]  insert_work+0x64/0x37c
[  274.349177][ T9620]  __queue_work+0xcbc/0x1234
[  274.349904][ T9620]  delayed_work_timer_fn+0x74/0x90
[  274.350746][ T9620]  call_timer_fn+0x1b8/0x95c
[  274.351466][ T9620]  __run_timers+0x4d0/0x6f0
[  274.352218][ T9620]  run_timer_softirq+0x7c/0x114
[  274.353081][ T9620]  handle_softirqs+0x318/0xc60
[  274.353893][ T9620]  __do_softirq+0x14/0x20
[  274.354667][ T9620] 
[  274.355096][ T9620] Second to last potentially related work creation:
[  274.356197][ T9620]  kasan_save_stack+0x40/0x70
[  274.357009][ T9620]  __kasan_record_aux_stack+0xc0/0xdc
[  274.357878][ T9620]  kasan_record_aux_stack_noalloc+0x14/0x20
[  274.358746][ T9620]  insert_work+0x64/0x37c
[  274.359409][ T9620]  __queue_work+0xcbc/0x1234
[  274.360091][ T9620]  delayed_work_timer_fn+0x74/0x90
[  274.360918][ T9620]  call_timer_fn+0x1b8/0x95c
[  274.361628][ T9620]  __run_timers+0x4d0/0x6f0
[  274.362356][ T9620]  run_timer_softirq+0x7c/0x114
[  274.363137][ T9620]  handle_softirqs+0x318/0xc60
[  274.363892][ T9620]  __do_softirq+0x14/0x20
[  274.364633][ T9620] 
[  274.365002][ T9620] The buggy address belongs to the object at ffff0000f5373400
[  274.365002][ T9620]  which belongs to the cache kmalloc-512 of size 512
[  274.367301][ T9620] The buggy address is located 507 bytes inside of
[  274.367301][ T9620]  512-byte region [ffff0000f5373400, ffff0000f5373600)
[  274.369536][ T9620] 
[  274.369898][ T9620] The buggy address belongs to the physical page:
[  274.370930][ T9620] page:00000000c36ca2ce refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x135370
[  274.372647][ T9620] head:00000000c36ca2ce order:2 compound_mapcount:0 compound_pincount:0
[  274.373966][ T9620] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff)
[  274.375336][ T9620] raw: 05ffc00000010200 fffffc0003196f00 dead000000000002 ffff0000c0002600
[  274.376704][ T9620] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  274.378058][ T9620] page dumped because: kasan: bad access detected
[  274.379105][ T9620] 
[  274.379479][ T9620] Memory state around the buggy address:
[  274.380077][ T9624] siw: device registration error -23
[  274.380415][ T9620]  ffff0000f5373480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  274.382501][ T9620]  ffff0000f5373500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  274.383768][ T9620] >ffff0000f5373580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  274.385042][ T9620]                                                                 ^
[  274.386305][ T9620]  ffff0000f5373600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  274.387616][ T9620]  ffff0000f5373680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  274.388843][ T9620] ==================================================================
[  274.390124][ T9620] Disabling lock debugging due to kernel taint