last executing test programs:

14m16.334358371s ago: executing program 1 (id=2):
syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x3)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

14m14.079292574s ago: executing program 1 (id=7):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
socket$inet6(0xa, 0x2, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)

14m12.1388337s ago: executing program 3 (id=4):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x30}, 0x1, 0x900}, 0x0)

14m11.981086758s ago: executing program 0 (id=1):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

14m10.032367669s ago: executing program 0 (id=8):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
inotify_init1(0x800)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, 0x0, 0x0)

14m7.640555307s ago: executing program 3 (id=9):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x3)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

14m5.280217308s ago: executing program 3 (id=11):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002})
openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0)

14m3.796262871s ago: executing program 1 (id=12):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
keyctl$clear(0x3, 0xfffffffffffffffd)
ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003)
syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000680)={0xaf76, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5455a3247e500f61669905db88235f8a5447dd2a2ed6e91626f158881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb7bc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a825782f14eee686be0e358e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39e1aefe363590d1f600"})
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1010c2, 0x15)
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
sendfile(r4, r4, 0x0, 0x7a680000)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
unshare(0x64000400)
socket(0xa, 0x801, 0x0)

13m53.14170159s ago: executing program 32 (id=8):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
inotify_init1(0x800)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, 0x0, 0x0)

13m48.964091931s ago: executing program 33 (id=11):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002})
openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0)

13m47.423428826s ago: executing program 34 (id=12):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
keyctl$clear(0x3, 0xfffffffffffffffd)
ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003)
syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000680)={0xaf76, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5455a3247e500f61669905db88235f8a5447dd2a2ed6e91626f158881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb7bc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a825782f14eee686be0e358e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39e1aefe363590d1f600"})
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1010c2, 0x15)
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
sendfile(r4, r4, 0x0, 0x7a680000)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
unshare(0x64000400)
socket(0xa, 0x801, 0x0)

5m35.725479455s ago: executing program 8 (id=29):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f0000002a80)={0x2020}, 0x2020)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000240)={[{@filestreams}, {@usrquota}, {@noquota}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@nogrpid}, {@dax_inode}]}, 0x1, 0x97a3, &(0x7f0000009780)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x11)
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0)

5m32.430034601s ago: executing program 8 (id=589):
fsopen(0x0, 0x1)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_80211_inject_frame(0x0, 0x0, 0x305)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0)

5m16.366460174s ago: executing program 35 (id=589):
fsopen(0x0, 0x1)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_80211_inject_frame(0x0, 0x0, 0x305)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m47.039564439s ago: executing program 5 (id=886):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x40}}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
recvmmsg(r2, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=ANY=[], 0x30f8}}], 0x1, 0x4004044)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='io.stat\x00', 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000700), &(0x7f0000001740)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000007c0))
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x300)

1m44.599777799s ago: executing program 5 (id=889):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='dummy', 0x5)

1m42.547313875s ago: executing program 5 (id=891):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x40}}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
recvmmsg(r2, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=ANY=[], 0x30f8}}], 0x1, 0x4004044)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='io.stat\x00', 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000700), &(0x7f0000001740)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000007c0))
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x300)

1m38.402541862s ago: executing program 5 (id=895):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1m34.160260117s ago: executing program 5 (id=898):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1m31.859793573s ago: executing program 5 (id=900):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f00040600666c6167730007020000000002000000000200000000080200000000", 0x42)

1m16.187986917s ago: executing program 36 (id=900):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f00040600666c6167730007020000000002000000000200000000080200000000", 0x42)

23.975866591s ago: executing program 7 (id=969):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
socket(0x10, 0x3, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

15.5803882s ago: executing program 2 (id=976):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00'})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
socket(0x18, 0x5, 0x1046)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
chdir(&(0x7f0000000080)='./file0/file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x282c41, 0x0)
pipe2$9p(0x0, 0x4000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c1b2757f8c13802"])
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)

15.171381404s ago: executing program 7 (id=977):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

11.618039534s ago: executing program 2 (id=979):
r0 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1)
syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0)

10.89161631s ago: executing program 2 (id=980):
r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000000000004"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f00020000"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r2, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x36})

9.721125444s ago: executing program 7 (id=981):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi0\x00', 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009ec9a59322fe10d8dbb2def971540f991096f56aa22e9fd63fc945bfa6225fa333790959afccdac0b7f08fefe66c8dcf86ba6e48812902"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
listen(0xffffffffffffffff, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x28)
unshare(0x40000000)
socket$inet(0x2, 0x2, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x4bb, 0x800)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000003440)=""/4096)

8.150958282s ago: executing program 4 (id=982):
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000240)={0x2})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8)
open_by_handle_at(r3, &(0x7f0000000180)=@isofs={0x14, 0x1, {0x8, 0x7, 0x4, 0x8000, 0x8, 0x6}}, 0x2241c2)
r4 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000400)=[{0x0}], 0x1)
syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46)
r5 = io_uring_setup(0x7fd, &(0x7f0000000080)={0x0, 0xed43, 0x10000, 0x3, 0x1f9, 0x0, r4})
io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1)

7.667986408s ago: executing program 4 (id=983):
syz_usb_connect(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002ff040140861246200001010203010902200001010080fa0904000002ff0401000705810200020007050102"], 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x2], 0x1c}}, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0xa)

7.431514895s ago: executing program 7 (id=984):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x40086607, 0x0)

6.725358374s ago: executing program 7 (id=985):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@grpid}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r1 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @sliced={0x4, [0xa8, 0x0, 0x1, 0x9, 0x6e45, 0x4, 0x4, 0x3, 0xf800, 0x8000, 0xfe01, 0x3ff, 0x817e, 0x800, 0x68d, 0xd1d, 0x9, 0xadb, 0x8, 0x9, 0x0, 0x2454, 0x2d64, 0x81, 0x3, 0xfff7, 0x8ba7, 0x6, 0x5, 0x4, 0x5b, 0xa, 0x5, 0x0, 0xff, 0x7ff, 0x9, 0xf, 0x7, 0x5, 0x21b, 0x2dc2, 0x0, 0x0, 0xa6, 0xb4, 0x1ff], 0xc}})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40902, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x9, 0x0, 0x0, "810002ee0900598c44ff00be875f3c00"})
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = syz_open_pts(r4, 0x141601)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000040)={0x5, 0xff7f, 0x1, 0x9, 0x5, "995e825fc02930cf"})
fcntl$setstatus(r5, 0x4, 0x102800)
pwrite64(r0, &(0x7f0000000280)="b2", 0x1, 0xc00)
write$FUSE_INIT(r0, &(0x7f00000048c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7fe, 0x0, 0xd428, 0xffff, 0x9, 0x162c0a09, 0x0, 0x0, 0x8, 0xffffff7d}}, 0x50)

6.655400432s ago: executing program 2 (id=986):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000)
syz_usb_connect$uac2(0x0, 0xa4, &(0x7f0000000100)=ANY=[], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000200)=@string={0x2}}]})

4.362053275s ago: executing program 4 (id=987):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, r4, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c)

4.196670215s ago: executing program 7 (id=988):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
inotify_init1(0x800)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='dummy_udc', 0x9)

3.125339307s ago: executing program 4 (id=989):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x8, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/82, 0x52}], 0x1}, 0x81}], 0x61, 0x2100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x7d4105cf, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000040)

1.57383272s ago: executing program 2 (id=990):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00'})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
socket(0x18, 0x5, 0x1046)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
chdir(&(0x7f0000000080)='./file0/file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x282c41, 0x0)
pipe2$9p(0x0, 0x4000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c1b2757f8c13802"])
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)

1.191645079s ago: executing program 4 (id=991):
r0 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1)
syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0)

1.079682421s ago: executing program 4 (id=992):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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")
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x2000000, 0x0, 0x0, 0x0, 0x1, 0x80000003, 0xffffffff, 0xfffffffc], [0x8, 0xfffffffe, 0x0, 0x2, 0xfffffffd, 0x0, 0x2, 0xfffffffd]], '\x00', [{0xfffffffe, 0xf8}, {}, {0xffffffff, 0x10000}, {0xfffffff, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0xfffffffe, 0x5}, {}, {0xfffffffd, 0x4004}, {0x0, 0x7f}, {0x2}, {0x0, 0x8}, {0x401, 0xfffffffc}], '\x00', 0x1, 0x0, 0x0, 0xf8})
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14)
open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x44042, 0x1ff)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa040, 0x0)
sendfile(r2, r3, 0x0, 0x20fffe82)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
pwritev2(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x49, 0xa49f, 0x10)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x17, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b0000aa00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x20000000008, 0x0)
sendfile(r1, r0, 0x0, 0xfffe82)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
write$FUSE_STATX(r2, &(0x7f000000aa00)={0x130, 0x0, 0x0, {0x2, 0x7, 0x0, '\x00', {0x20, 0x4, 0x4, 0x800000, 0x0, 0x0, 0xa000, '\x00', 0xff, 0x3, 0x4, 0xff, {0x3, 0x4}, {0x1, 0x3}, {0xfff, 0x1}, {0x5, 0x8}, 0x7, 0x101, 0x6, 0xa5}}}, 0x130)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x24008000)

0s ago: executing program 2 (id=993):
socket$inet_tcp(0x2, 0x1, 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
copy_file_range(r1, 0x0, r1, &(0x7f00000003c0)=0xffffffffffff8000, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0)
write(r4, &(0x7f00000003c0)="653aa3c2184ee1c5b6170607265d8155c6ae", 0x12)
unlinkat(r4, &(0x7f0000004800)='./file0\x00', 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
accept4(r2, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r5 = syz_ublk_setup_io_uring(0x41eb, &(0x7f0000000000)={0x0, 0x25dc, 0x1, 0x1, 0x3a9}, &(0x7f00000000c0), 0x0, &(0x7f0000000180))
syz_ublk_setup_io_uring(0x10b5, &(0x7f0000000240)={0x0, 0x140a, 0x20000, 0x1, 0x25, 0x0, r5}, 0x0, 0x0, &(0x7f00000047c0))
sendmmsg(r2, &(0x7f0000004700), 0x0, 0x4000000)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11)
write$cgroup_int(r6, &(0x7f0000007880)=0x7fffffff, 0x12)
socket$packet(0x11, 0x3, 0x300)

kernel console output (not intermixed with test programs):

:6789 connect error
[  635.389767][   T38] bridge_slave_1: left allmulticast mode
[  635.389807][   T38] bridge_slave_1: left promiscuous mode
[  635.390186][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.607901][   T38] bridge_slave_0: left allmulticast mode
[  636.607934][   T38] bridge_slave_0: left promiscuous mode
[  636.608155][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.991454][   T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  638.991611][ T5833] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  639.174810][ T5833] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  639.175008][   T50] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  639.176392][   T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  639.176481][   T50] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  639.176623][ T5833] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  639.182623][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.182664][ T5833] usb 6-1: Product: syz
[  639.182690][ T5833] usb 6-1: Manufacturer: syz
[  639.182722][ T5833] usb 6-1: SerialNumber: syz
[  639.182911][   T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.182946][   T50] usb 8-1: Product: syz
[  639.182973][   T50] usb 8-1: Manufacturer: syz
[  639.182999][   T50] usb 8-1: SerialNumber: syz
[  639.235508][   T50] usb 8-1: NFC: intf ffff88807ecf7000 id ffffffff8fe953e0
[  639.342573][   T50] nfcmrvl 8-1:1.0: NFC: registered with nci successfully
[  639.504616][T10056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.539285][T10056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  639.577273][  T770] nfcmrvl 8-1:1.0: NFC: send entry, len 4
[  639.577335][  T770] usb 8-1: NFC: urb ffff888036f9e400 submission failed (90)
[  639.597354][ T5833] cdc_ether 6-1:1.0: skipping garbage
[  639.597603][ T5833] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  639.673963][ T5833] usb 6-1: USB disconnect, device number 15
[  640.667132][   T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  640.693388][   T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  640.712220][   T38] bond0 (unregistering): Released all slaves
[  640.860376][T10054] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  640.863126][ T5833] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  641.010086][ T5833] usb 6-1: Using ep0 maxpacket: 8
[  641.012252][ T5833] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  641.013492][ T5833] usb 6-1: config index 0 descriptor too short (expected 301, got 72)
[  641.013533][ T5833] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  641.013592][ T5833] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  641.013656][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.070437][ T5833] usbtmc 6-1:16.0: bulk endpoints not found
[  641.235566][ T5833] usb 8-1: USB disconnect, device number 2
[  641.290825][ T5833] usb 8-1: NFC: intf ffff88807ecf7000
[  641.482563][ T5736] usb 6-1: USB disconnect, device number 16
[  641.864261][ T5757] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  642.072495][ T5757] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  642.094899][ T5757] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  642.094936][ T5757] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  642.144826][ T5757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.144861][ T5757] usb 5-1: Product: syz
[  642.144896][ T5757] usb 5-1: Manufacturer: syz
[  642.144917][ T5757] usb 5-1: SerialNumber: syz
[  642.228173][ T5757] usb 5-1: NFC: intf ffff88801cb26000 id ffffffff8fe953e0
[  642.286574][ T5757] nfcmrvl 5-1:1.0: NFC: registered with nci successfully
[  642.573495][ T6591] nfcmrvl 5-1:1.0: NFC: send entry, len 4
[  642.577569][ T6591] usb 5-1: NFC: urb ffff88807512ea00 submission failed (90)
[  642.658828][T10080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  642.671392][   T52] usb 5-1: USB disconnect, device number 13
[  642.698449][   T52] usb 5-1: NFC: intf ffff88801cb26000
[  643.363851][ T5757] libceph: connect (1)[c::]:6789 error -101
[  643.364060][ T5757] libceph: mon0 (1)[c::]:6789 connect error
[  643.382954][   T38] hsr_slave_0: left promiscuous mode
[  643.405419][   T38] hsr_slave_1: left promiscuous mode
[  643.406504][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  643.406535][   T38] batman_adv: batadv0: Removing interface: batadv_slave_0
[  643.444380][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  643.444413][   T38] batman_adv: batadv0: Removing interface: batadv_slave_1
[  643.474587][T10109] ceph: No mds server is up or the cluster is laggy
[  643.529544][   T38] veth1_macvtap: left promiscuous mode
[  643.529601][   T38] veth0_macvtap: left promiscuous mode
[  643.529733][   T38] veth1_vlan: left promiscuous mode
[  643.529820][   T38] veth0_vlan: left promiscuous mode
[  647.120061][   T52] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  647.610889][   T52] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  647.685321][   T52] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[  647.685419][   T52] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  647.685463][   T52] usb 6-1: config 0 interface 0 has no altsetting 0
[  647.804579][   T52] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  647.804627][   T52] usb 6-1: Product: syz
[  647.804655][   T52] usb 6-1: Manufacturer: syz
[  647.804682][   T52] usb 6-1: SerialNumber: syz
[  648.155989][   T52] usb 6-1: config 0 descriptor??
[  648.198366][   T52] hub 6-1:0.0: bad descriptor, ignoring hub
[  648.200970][   T52] hub 6-1:0.0: probe with driver hub failed with error -5
[  648.228310][   T52] usb 6-1: selecting invalid altsetting 0
[  649.892411][ T4929] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  649.897971][ T4929] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  649.917093][ T4929] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  649.925665][ T4929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  649.928475][ T4929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  650.061051][T10156] loop5: detected capacity change from 0 to 1024
[  650.062070][T10156] EXT4-fs: Ignoring removed bh option
[  650.224162][   T52] usb 6-1: USB disconnect, device number 17
[  650.241300][T10156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  650.241410][T10156] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  650.424337][   T38] team0 (unregistering): Port device team_slave_1 removed
[  650.646371][T10162] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 3: comm syz.5.617: lblock 3 mapped to illegal pblock 3 (length 1)
[  650.691081][T10162] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  650.691187][T10162] EXT4-fs (loop5): This should not happen!! Data will be lost
[  650.691187][T10162] 
[  650.740899][T10162] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.617: lblock 0 mapped to illegal pblock 0 (length 1)
[  650.767328][T10162] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  650.780087][T10162] EXT4-fs (loop5): This should not happen!! Data will be lost
[  650.780087][T10162] 
[  651.215197][   T38] team0 (unregistering): Port device team_slave_0 removed
[  651.425617][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  652.043224][ T5624] Bluetooth: hci4: command tx timeout
[  652.533032][ T5646] udevd[5646]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  653.755687][T10037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  653.888149][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13
[  654.136323][ T5624] Bluetooth: hci4: command tx timeout
[  656.210604][ T5624] Bluetooth: hci4: command tx timeout
[  656.212866][ T5736] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  657.001539][ T5736] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  657.022967][ T5736] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  657.023015][ T5736] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  657.070840][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.070887][ T5736] usb 5-1: Product: syz
[  657.070915][ T5736] usb 5-1: Manufacturer: syz
[  657.070940][ T5736] usb 5-1: SerialNumber: syz
[  657.138165][ T5736] usb 5-1: NFC: intf ffff88803790f000 id ffffffff8fe953e0
[  657.232467][ T5736] nfcmrvl 5-1:1.0: NFC: registered with nci successfully
[  658.289029][ T5624] Bluetooth: hci4: command tx timeout
[  658.715030][   T10] usb 5-1: USB disconnect, device number 14
[  658.815600][   T10] usb 5-1: NFC: intf ffff88803790f000
[  658.953642][ T9974] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.955077][ T9974] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.955278][ T9974] bridge_slave_0: entered allmulticast mode
[  658.957380][ T9974] bridge_slave_0: entered promiscuous mode
[  659.054835][ T9974] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.055005][ T9974] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.055202][ T9974] bridge_slave_1: entered allmulticast mode
[  659.084079][ T9974] bridge_slave_1: entered promiscuous mode
[  659.302299][ T9974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  659.358616][   T52] libceph: connect (1)[c::]:6789 error -101
[  659.358820][   T52] libceph: mon0 (1)[c::]:6789 connect error
[  659.410070][ T9974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  659.441415][T10232] ceph: No mds server is up or the cluster is laggy
[  663.107544][   T38] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.057175][ T9974] team0: Port device team_slave_0 added
[  664.469984][ T9974] team0: Port device team_slave_1 added
[  664.594128][   T38] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.640589][ T5833] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  664.764871][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14
[  664.782897][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  664.782924][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  664.782971][ T9974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  664.793026][ T5833] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  664.798937][ T5833] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  664.798984][ T5833] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  664.804191][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.804231][ T5833] usb 8-1: Product: syz
[  664.804258][ T5833] usb 8-1: Manufacturer: syz
[  664.804285][ T5833] usb 8-1: SerialNumber: syz
[  664.850743][ T5833] usb 8-1: NFC: intf ffff888027a85000 id ffffffff8fe953e0
[  664.912540][ T5833] nfcmrvl 8-1:1.0: NFC: registered with nci successfully
[  665.112582][  T978] nfcmrvl 8-1:1.0: NFC: send entry, len 4
[  665.112646][  T978] usb 8-1: NFC: urb ffff888033ab1700 submission failed (90)
[  665.115210][   T38] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.184707][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  665.185104][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  665.185401][ T9974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  665.935470][T10271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  666.233813][   T10] usb 8-1: USB disconnect, device number 3
[  666.261815][   T10] usb 8-1: NFC: intf ffff888027a85000
[  666.490004][   T38] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.853325][ T9974] hsr_slave_0: entered promiscuous mode
[  666.888067][ T9974] hsr_slave_1: entered promiscuous mode
[  667.695006][T10246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  670.702188][ T8424] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  670.883064][ T8424] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  670.884599][ T8424] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  670.884642][ T8424] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  670.887703][ T8424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.887750][ T8424] usb 5-1: Product: syz
[  670.887776][ T8424] usb 5-1: Manufacturer: syz
[  670.887803][ T8424] usb 5-1: SerialNumber: syz
[  670.965856][ T8424] usb 5-1: NFC: intf ffff888022719000 id ffffffff8fe953e0
[  670.999086][ T8424] nfcmrvl 5-1:1.0: NFC: registered with nci successfully
[  671.127520][   T38] bridge_slave_1: left allmulticast mode
[  671.127560][   T38] bridge_slave_1: left promiscuous mode
[  671.128015][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.152097][   T38] bridge_slave_0: left allmulticast mode
[  671.152134][   T38] bridge_slave_0: left promiscuous mode
[  671.152375][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.216925][   T13] nfcmrvl 5-1:1.0: NFC: send entry, len 4
[  671.216985][   T13] usb 5-1: NFC: urb ffff8880765bb700 submission failed (90)
[  671.303052][T10316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  671.309652][   T10] usb 5-1: USB disconnect, device number 15
[  671.323696][   T10] usb 5-1: NFC: intf ffff888022719000
[  671.911014][   T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  671.945509][   T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  671.971224][   T38] bond0 (unregistering): Released all slaves
[  677.738932][T10385] binder: 10384:10385 ioctl c018620c 200000000240 returned -1
[  677.739444][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.7.659'.
[  677.760739][T10152] bridge0: port 1(bridge_slave_0) entered blocking state
[  677.761244][T10152] bridge0: port 1(bridge_slave_0) entered disabled state
[  677.761454][T10152] bridge_slave_0: entered allmulticast mode
[  677.767677][T10152] bridge_slave_0: entered promiscuous mode
[  677.782366][T10152] bridge0: port 2(bridge_slave_1) entered blocking state
[  677.782722][T10152] bridge0: port 2(bridge_slave_1) entered disabled state
[  677.782895][T10152] bridge_slave_1: entered allmulticast mode
[  677.788855][T10152] bridge_slave_1: entered promiscuous mode
[  677.838405][   T31] audit: type=1400 audit(1790282476.189:18): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=10381 comm="syz.2.657" name=223A6F offset=66
[  678.151547][   T38] hsr_slave_0: left promiscuous mode
[  678.159332][   T38] hsr_slave_1: left promiscuous mode
[  678.163999][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  678.164031][   T38] batman_adv: batadv0: Removing interface: batadv_slave_0
[  678.169531][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  678.169561][   T38] batman_adv: batadv0: Removing interface: batadv_slave_1
[  678.213753][   T38] veth1_macvtap: left promiscuous mode
[  678.213807][   T38] veth0_macvtap: left promiscuous mode
[  678.213929][   T38] veth1_vlan: left promiscuous mode
[  678.214122][   T38] veth0_vlan: left promiscuous mode
[  679.121119][ T5833] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  679.411400][ T5833] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  679.413448][ T5833] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  679.413494][ T5833] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  679.453153][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.453197][ T5833] usb 5-1: Product: syz
[  679.453232][ T5833] usb 5-1: Manufacturer: syz
[  679.453259][ T5833] usb 5-1: SerialNumber: syz
[  679.468730][   T38] team0 (unregistering): Port device team_slave_1 removed
[  679.509762][   T38] team0 (unregistering): Port device team_slave_0 removed
[  679.523480][ T5833] usb 5-1: NFC: intf ffff88804cf62000 id ffffffff8fe953e0
[  679.569734][ T5833] nfcmrvl 5-1:1.0: NFC: registered with nci successfully
[  679.759782][ T5909] nfcmrvl 5-1:1.0: NFC: send entry, len 4
[  679.759832][ T5909] usb 5-1: NFC: urb ffff88803244be00 submission failed (90)
[  679.820888][T10400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  679.836017][ T5757] usb 5-1: USB disconnect, device number 16
[  679.857283][ T5757] usb 5-1: NFC: intf ffff88804cf62000
[  680.203247][T10152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  680.257250][T10152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  680.717697][T10152] team0: Port device team_slave_0 added
[  680.763079][T10152] team0: Port device team_slave_1 added
[  680.861766][T10415] loop2: detected capacity change from 0 to 1024
[  680.869411][T10415] EXT4-fs: Ignoring removed bh option
[  681.151138][T10415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  681.152686][T10415] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  681.309617][T10152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  681.309645][T10152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  681.309703][T10152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  681.372942][T10152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  681.372964][T10152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  681.373001][T10152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  681.599751][T10424] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 3: comm syz.2.666: lblock 3 mapped to illegal pblock 3 (length 1)
[  681.629909][T10424] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  681.630188][T10424] EXT4-fs (loop2): This should not happen!! Data will be lost
[  681.630188][T10424] 
[  681.678243][T10424] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.666: lblock 0 mapped to illegal pblock 0 (length 1)
[  681.701145][T10424] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  681.701309][T10424] EXT4-fs (loop2): This should not happen!! Data will be lost
[  681.701309][T10424] 
[  682.100371][T10152] hsr_slave_0: entered promiscuous mode
[  682.132715][T10152] hsr_slave_1: entered promiscuous mode
[  682.152306][T10152] debugfs: 'hsr0' already exists in 'hsr'
[  682.152400][T10152] Cannot create hsr debugfs directory
[  682.387194][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  682.955043][   T52] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  683.168163][   T52] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  683.246609][   T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  683.246752][   T52] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  683.367086][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.367420][   T52] usb 5-1: Product: syz
[  683.367473][   T52] usb 5-1: Manufacturer: syz
[  683.367585][   T52] usb 5-1: SerialNumber: syz
[  684.436514][   T52] usb 5-1: NFC: intf ffff888029c5c000 id ffffffff8fe953e0
[  684.580523][   T52] nfcmrvl 5-1:1.0: NFC: registered with nci successfully
[  684.668987][ T5909] nfcmrvl 5-1:1.0: NFC: send entry, len 4
[  684.669057][ T5909] usb 5-1: NFC: urb ffff88803443a200 submission failed (90)
[  684.812425][ T4929] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  684.818410][ T4929] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  684.819770][ T4929] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  684.845850][ T4929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  684.849182][ T4929] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  684.945536][T10428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  684.975912][ T5833] usb 5-1: USB disconnect, device number 17
[  685.017611][ T5833] usb 5-1: NFC: intf ffff888029c5c000
[  685.126315][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.671'.
[  685.149903][T10453] binder: 10449:10453 ioctl c018620c 200000000240 returned -1
[  685.151974][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.7.671'.
[  685.243406][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  685.243487][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  685.585945][T10152] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  685.618942][T10152] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  685.631569][T10152] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  685.659316][T10152] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  685.670725][T10152] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  685.691277][T10152] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  685.692451][T10152] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  685.719649][T10152] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  685.891727][ T8424] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  686.041688][ T8424] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  686.043082][ T8424] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  686.043132][ T8424] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  686.049990][ T8424] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.050033][ T8424] usb 8-1: Product: syz
[  686.050059][ T8424] usb 8-1: Manufacturer: syz
[  686.050087][ T8424] usb 8-1: SerialNumber: syz
[  686.590861][   T31] audit: type=1400 audit(1790282484.929:19): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=10475 comm="syz.4.676" name=223A6F offset=66
[  688.441099][ T4929] Bluetooth: hci6: command tx timeout
[  688.442136][ T4929] Bluetooth: hci3: command 0x0406 tx timeout
[  689.165426][T10152] 8021q: adding VLAN 0 to HW filter on device bond0
[  689.322310][ T5909] bridge_slave_1: left allmulticast mode
[  689.322351][ T5909] bridge_slave_1: left promiscuous mode
[  689.322609][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[  689.408138][ T5909] bridge_slave_0: left allmulticast mode
[  689.408170][ T5909] bridge_slave_0: left promiscuous mode
[  689.416717][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.537225][ T8424] usb 8-1: can't set config #1, error -71
[  689.549890][ T8424] usb 8-1: USB disconnect, device number 4
[  689.684198][   T10] libceph: connect (1)[c::]:6789 error -101
[  689.684407][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  689.941320][   T10] libceph: connect (1)[c::]:6789 error -101
[  689.941526][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  690.031416][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  690.115213][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  690.136643][ T5909] bond0 (unregistering): Released all slaves
[  690.341521][T10491] ceph: No mds server is up or the cluster is laggy
[  690.419506][T10152] 8021q: adding VLAN 0 to HW filter on device team0
[  690.453145][ T5757] libceph: connect (1)[c::]:6789 error -101
[  690.453311][ T5757] libceph: mon0 (1)[c::]:6789 connect error
[  690.521382][ T5624] Bluetooth: hci6: command tx timeout
[  690.542472][ T5909] hsr_slave_0: left promiscuous mode
[  690.560698][ T5909] hsr_slave_1: left promiscuous mode
[  690.562122][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0
[  690.563459][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1
[  692.616305][ T5624] Bluetooth: hci6: command tx timeout
[  693.805529][ T5909] team0 (unregistering): Port device team_slave_1 removed
[  693.844189][ T5909] team0 (unregistering): Port device team_slave_0 removed
[  693.977376][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'.
[  694.034155][T10530] binder: 10525:10530 ioctl c018620c 200000000240 returned -1
[  694.226660][   T31] audit: type=1400 audit(1790282492.579:20): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=10523 comm="syz.4.694" name=223A6F offset=66
[  694.608443][ T5274] 8021q: adding VLAN 0 to HW filter on device eth17
[  694.680079][ T5624] Bluetooth: hci6: command tx timeout
[  694.781145][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'.
[  694.880113][  T978] bridge0: port 1(bridge_slave_0) entered blocking state
[  694.880252][  T978] bridge0: port 1(bridge_slave_0) entered forwarding state
[  695.075393][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  695.075510][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  698.531510][ T5757] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  698.681320][ T5757] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  698.682895][ T5757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  698.682941][ T5757] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  698.685697][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.685739][ T5757] usb 3-1: Product: syz
[  698.685766][ T5757] usb 3-1: Manufacturer: syz
[  698.685793][ T5757] usb 3-1: SerialNumber: syz
[  698.767855][ T5757] usb 3-1: NFC: intf ffff88807d9b7000 id ffffffff8fe953e0
[  698.826737][ T5757] nfcmrvl 3-1:1.0: NFC: registered with nci successfully
[  699.008716][   T12] nfcmrvl 3-1:1.0: NFC: send entry, len 4
[  699.008776][   T12] usb 3-1: NFC: urb ffff888071543200 submission failed (90)
[  699.024739][T10444] bridge0: port 1(bridge_slave_0) entered blocking state
[  699.024939][T10444] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.025103][T10444] bridge_slave_0: entered allmulticast mode
[  699.041469][T10444] bridge_slave_0: entered promiscuous mode
[  699.048994][T10444] bridge0: port 2(bridge_slave_1) entered blocking state
[  699.055341][T10444] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.055537][T10444] bridge_slave_1: entered allmulticast mode
[  699.065216][T10444] bridge_slave_1: entered promiscuous mode
[  699.095686][T10555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  699.097971][ T8424] usb 3-1: USB disconnect, device number 12
[  699.135101][ T8424] usb 3-1: NFC: intf ffff88807d9b7000
[  699.364223][T10444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  699.373998][T10444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  699.585231][T10444] team0: Port device team_slave_0 added
[  699.597086][T10444] team0: Port device team_slave_1 added
[  699.616086][T10585] loop7: detected capacity change from 0 to 1024
[  699.624177][T10585] EXT4-fs: Ignoring removed bh option
[  699.802417][T10585] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  699.802561][T10585] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  699.844537][T10444] batman_adv: batadv0: Adding interface: batadv_slave_0
[  699.844564][T10444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  699.844613][T10444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  699.846845][T10444] batman_adv: batadv0: Adding interface: batadv_slave_1
[  699.846867][T10444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  699.846915][T10444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  700.052728][T10590] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 3: comm syz.7.693: lblock 3 mapped to illegal pblock 3 (length 1)
[  700.198926][T10590] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  700.199248][T10590] EXT4-fs (loop7): This should not happen!! Data will be lost
[  700.199248][T10590] 
[  700.229313][T10591] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: comm syz.7.693: lblock 0 mapped to illegal pblock 0 (length 1)
[  700.389291][T10591] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  700.389405][T10591] EXT4-fs (loop7): This should not happen!! Data will be lost
[  700.389405][T10591] 
[  700.966019][T10444] hsr_slave_0: entered promiscuous mode
[  700.967296][T10444] hsr_slave_1: entered promiscuous mode
[  701.041711][ T9302] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  701.427796][ T8424] libceph: connect (1)[c::]:6789 error -101
[  701.427997][ T8424] libceph: mon0 (1)[c::]:6789 connect error
[  701.554683][T10603] ceph: No mds server is up or the cluster is laggy
[  701.685568][   T52] libceph: connect (1)[c::]:6789 error -101
[  701.685778][   T52] libceph: mon0 (1)[c::]:6789 connect error
[  701.747978][T10152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  702.081321][ T5736] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  702.133780][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.7.699'.
[  702.817320][ T5274] 8021q: adding VLAN 0 to HW filter on device eth18
[  702.992594][ T5736] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  703.014035][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.7.699'.
[  703.037083][ T5736] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  703.037131][ T5736] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  703.065205][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.065249][ T5736] usb 5-1: Product: syz
[  703.065275][ T5736] usb 5-1: Manufacturer: syz
[  703.065302][ T5736] usb 5-1: SerialNumber: syz
[  703.095872][ T5736] usb 5-1: NFC: intf ffff88807f9ce000 id ffffffff8fe953e0
[  703.142322][ T5736] nfcmrvl 5-1:1.0: NFC: registered with nci successfully
[  703.337341][ T5909] nfcmrvl 5-1:1.0: NFC: send entry, len 4
[  703.337402][ T5909] usb 5-1: NFC: urb ffff888036064e00 submission failed (90)
[  703.457290][T10612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  703.498634][T10444] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  703.527353][T10444] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  703.528611][T10444] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  703.559391][T10444] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  703.756312][   T10] usb 5-1: USB disconnect, device number 18
[  703.769280][   T10] usb 5-1: NFC: intf ffff88807f9ce000
[  703.917541][T10444] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  703.934080][T10444] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  703.936293][T10444] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  703.968973][T10444] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  704.842022][T10613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  705.180222][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  705.278164][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.708'.
[  707.144996][   T10] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  707.146406][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  707.146451][   T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  707.147685][T10152] veth0_vlan: entered promiscuous mode
[  708.077533][T10152] veth1_vlan: entered promiscuous mode
[  708.125103][   T31] audit: type=1400 audit(1790282506.479:21): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=10662 comm="syz.4.706" name=223A6F offset=66
[  708.181508][T10444] 8021q: adding VLAN 0 to HW filter on device bond0
[  708.245860][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.245906][   T10] usb 3-1: Product: syz
[  708.273838][   T10] usb 3-1: can't set config #1, error -71
[  708.275549][   T10] usb 3-1: USB disconnect, device number 13
[  708.373803][T10444] 8021q: adding VLAN 0 to HW filter on device team0
[  708.453660][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state
[  708.453792][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state
[  708.558466][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.558599][ T5909] bridge0: port 2(bridge_slave_1) entered forwarding state
[  711.873641][T10485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  711.893645][T10485] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  711.895235][T10485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  711.902191][T10485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  711.917859][T10485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  712.082589][ T5274] 8021q: adding VLAN 0 to HW filter on device eth19
[  714.043605][T10485] Bluetooth: hci0: command tx timeout
[  716.173335][T10485] Bluetooth: hci0: command tx timeout
[  717.896367][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'.
[  718.036121][ T8399] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  718.196352][ T8399] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  718.199246][ T8399] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  718.199291][ T8399] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  718.200122][T10485] Bluetooth: hci0: command tx timeout
[  718.207542][ T8399] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.207584][ T8399] usb 6-1: Product: syz
[  718.207609][ T8399] usb 6-1: Manufacturer: syz
[  718.207635][ T8399] usb 6-1: SerialNumber: syz
[  718.630169][ T8399] usb 6-1: NFC: intf ffff888022347000 id ffffffff8fe953e0
[  719.153915][ T8399] nfcmrvl 6-1:1.0: NFC: registered with nci successfully
[  719.346427][ T8399] usb 6-1: USB disconnect, device number 18
[  719.443867][ T8399] usb 6-1: NFC: intf ffff888022347000
[  719.773764][ T5274] 8021q: adding VLAN 0 to HW filter on device eth20
[  720.063416][ T5736] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  720.134302][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.726'.
[  720.220095][ T5736] usb 5-1: Using ep0 maxpacket: 8
[  720.220844][ T5736] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  720.223364][ T5736] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  720.223407][ T5736] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  720.223466][ T5736] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  720.223507][ T5736] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  720.223551][ T5736] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  720.223615][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.245835][T10819] binder: 10817:10819 ioctl c018620c 200000000240 returned -1
[  720.252491][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.726'.
[  720.280144][T10485] Bluetooth: hci0: command tx timeout
[  720.358375][ T5736] usbtmc 5-1:16.0: bulk endpoints not found
[  720.478945][T10444] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.539276][   T51] bridge_slave_1: left allmulticast mode
[  720.539316][   T51] bridge_slave_1: left promiscuous mode
[  720.539574][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.598935][   T51] bridge_slave_0: left allmulticast mode
[  720.598976][   T51] bridge_slave_0: left promiscuous mode
[  720.601244][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.350687][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  724.506439][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  724.527532][   T51] bond0 (unregistering): Released all slaves
[  724.566126][ T8424] usb 5-1: USB disconnect, device number 19
[  726.449699][   T51] hsr_slave_0: left promiscuous mode
[  726.468241][   T51] hsr_slave_1: left promiscuous mode
[  726.469424][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  726.485085][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  726.552874][   T51] veth1_vlan: left promiscuous mode
[  726.552980][   T51] veth0_vlan: left promiscuous mode
[  728.776852][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'.
[  728.847880][T10890] binder: 10884:10890 ioctl c018620c 200000000240 returned -1
[  728.856867][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.739'.
[  729.147299][   T51] team0 (unregistering): Port device team_slave_1 removed
[  729.244276][   T51] team0 (unregistering): Port device team_slave_0 removed
[  729.300712][T10894] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  729.300923][T10894] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  729.300948][T10894] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  729.300966][T10894] UDF-fs: Scanning with blocksize 512 failed
[  729.305284][T10894] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  729.305430][T10894] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  729.305456][T10894] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  729.305474][T10894] UDF-fs: Scanning with blocksize 1024 failed
[  729.307698][T10894] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  729.307813][T10894] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  729.307838][T10894] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  729.307856][T10894] UDF-fs: Scanning with blocksize 2048 failed
[  729.316132][T10894] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  729.316286][T10894] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  729.316319][T10894] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  729.316342][T10894] UDF-fs: Scanning with blocksize 4096 failed
[  729.316359][T10894] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
[  730.917695][T10905] loop7: detected capacity change from 0 to 1024
[  730.946735][T10905] EXT4-fs: Ignoring removed bh option
[  731.039705][T10905] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  731.041514][T10905] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  732.037619][ T9302] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  732.317472][T10703] bridge0: port 1(bridge_slave_0) entered blocking state
[  732.338207][T10703] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.338423][T10703] bridge_slave_0: entered allmulticast mode
[  732.362788][T10703] bridge_slave_0: entered promiscuous mode
[  732.373478][T10920] loop5: detected capacity change from 0 to 1024
[  732.377133][T10920] EXT4-fs: Ignoring removed bh option
[  732.379039][T10703] bridge0: port 2(bridge_slave_1) entered blocking state
[  732.401692][T10703] bridge0: port 2(bridge_slave_1) entered disabled state
[  732.402834][T10703] bridge_slave_1: entered allmulticast mode
[  732.406708][T10703] bridge_slave_1: entered promiscuous mode
[  732.527856][T10920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  732.527996][T10920] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  732.593541][T10703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  732.694111][T10703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  734.469461][T10910] EXT4-fs error (device loop5): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  734.610198][ T8424] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  734.833366][ T8424] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  734.927674][ T8424] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  734.927825][ T8424] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  735.056247][ T8424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.056283][ T8424] usb 5-1: Product: syz
[  735.056304][ T8424] usb 5-1: Manufacturer: syz
[  735.056324][ T8424] usb 5-1: SerialNumber: syz
[  735.128606][ T8424] usb 5-1: NFC: intf ffff88807ed20000 id ffffffff8fe953e0
[  735.151559][T10703] team0: Port device team_slave_0 added
[  735.275468][T10703] team0: Port device team_slave_1 added
[  735.385508][ T8424] nfcmrvl 5-1:1.0: NFC: registered with nci successfully
[  735.419168][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  735.473301][ T3371] nfcmrvl 5-1:1.0: NFC: send entry, len 4
[  735.473363][ T3371] usb 5-1: NFC: urb ffff8880357cdf00 submission failed (90)
[  735.483127][T10929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  735.524957][ T8424] usb 5-1: USB disconnect, device number 20
[  735.538625][ T8424] usb 5-1: NFC: intf ffff88807ed20000
[  735.683419][T10703] batman_adv: batadv0: Adding interface: batadv_slave_0
[  735.683447][T10703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  735.683496][T10703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  735.738924][T10703] batman_adv: batadv0: Adding interface: batadv_slave_1
[  735.738950][T10703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  735.738999][T10703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  736.620270][T10703] hsr_slave_0: entered promiscuous mode
[  736.736389][T10703] hsr_slave_1: entered promiscuous mode
[  736.779864][T10703] debugfs: 'hsr0' already exists in 'hsr'
[  736.780198][T10703] Cannot create hsr debugfs directory
[  737.838878][T10444] veth0_vlan: entered promiscuous mode
[  738.518718][T10444] veth1_vlan: entered promiscuous mode
[  739.299039][T10444] veth0_macvtap: entered promiscuous mode
[  739.392312][T10444] veth1_macvtap: entered promiscuous mode
[  739.450345][ T8424] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  739.612964][ T8424] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  739.616845][ T8424] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  739.616890][ T8424] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  739.635944][ T8424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.635991][ T8424] usb 5-1: Product: syz
[  739.636018][ T8424] usb 5-1: Manufacturer: syz
[  739.636045][ T8424] usb 5-1: SerialNumber: syz
[  739.764566][ T8424] usb 5-1: NFC: intf ffff888027993000 id ffffffff8fe953e0
[  739.837854][ T8424] nfcmrvl 5-1:1.0: NFC: registered with nci successfully
[  740.116943][T10444] batman_adv: batadv0: Interface activated: batadv_slave_0
[  740.168354][T10444] batman_adv: batadv0: Interface activated: batadv_slave_1
[  740.225390][   T50] usb 5-1: USB disconnect, device number 21
[  740.273306][   T50] usb 5-1: NFC: intf ffff888027993000
[  740.321360][   T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  740.327125][   T51] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  740.327189][   T51] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  740.327251][   T51] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  743.338556][T11002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.758'.
[  746.484235][   T31] audit: type=1400 audit(1790282544.839:22): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=11012 comm="syz.2.759" name=223A6F offset=66
[  746.538007][T10703] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  746.644023][T10703] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  746.653227][T10703] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  746.689291][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  746.689354][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  746.762609][T10703] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  747.200552][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  747.204563][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  747.208239][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  747.237555][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  747.240552][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  747.291367][T10703] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  747.309444][T10703] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  747.317529][T10703] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  747.386850][T10703] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  748.445867][ T6591] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.215075][T10485] Bluetooth: hci4: command tx timeout
[  750.433307][ T6591] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  751.001564][ T6591] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  751.407407][T10703] 8021q: adding VLAN 0 to HW filter on device bond0
[  751.678784][ T6591] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  751.788338][T10703] 8021q: adding VLAN 0 to HW filter on device team0
[  751.849395][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state
[  751.849505][ T6198] bridge0: port 1(bridge_slave_0) entered forwarding state
[  751.933453][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state
[  751.933565][ T6198] bridge0: port 2(bridge_slave_1) entered forwarding state
[  752.280478][T10485] Bluetooth: hci4: command tx timeout
[  753.478896][ T6591] bridge_slave_1: left allmulticast mode
[  753.478938][ T6591] bridge_slave_1: left promiscuous mode
[  753.479206][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state
[  753.548709][ T6591] bridge_slave_0: left allmulticast mode
[  753.548749][ T6591] bridge_slave_0: left promiscuous mode
[  753.549011][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.177962][T11089] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  754.178170][T11089] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  754.178196][T11089] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  754.178214][T11089] UDF-fs: Scanning with blocksize 512 failed
[  754.210480][T11089] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  754.210646][T11089] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  754.210672][T11089] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  754.210691][T11089] UDF-fs: Scanning with blocksize 1024 failed
[  754.263199][T11089] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  754.263336][T11089] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  754.263362][T11089] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  754.263380][T11089] UDF-fs: Scanning with blocksize 2048 failed
[  754.291104][T11089] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  754.291247][T11089] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  754.291281][T11089] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  754.291305][T11089] UDF-fs: Scanning with blocksize 4096 failed
[  754.291321][T11089] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1)
[  754.370289][T10485] Bluetooth: hci4: command tx timeout
[  756.440105][T10485] Bluetooth: hci4: command tx timeout
[  758.084035][ T6591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  758.109316][ T6591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  758.124799][ T6591] bond0 (unregistering): Released all slaves
[  758.205613][ T5757] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  758.351660][ T5757] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  758.353031][ T5757] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  758.413902][ T5757] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.413952][ T5757] usb 8-1: Product: syz
[  758.413982][ T5757] usb 8-1: Manufacturer: syz
[  758.414014][ T5757] usb 8-1: SerialNumber: syz
[  758.866940][T11107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  758.867491][T11107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  758.898690][ T5757] cdc_ether 8-1:1.0: skipping garbage
[  758.898942][ T5757] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22
[  758.946750][ T5757] usb 8-1: USB disconnect, device number 5
[  759.099585][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.767'.
[  759.211874][T11115] binder: 11112:11115 ioctl c018620c 200000000240 returned -1
[  759.214852][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.767'.
[  759.395672][ T6591] hsr_slave_0: left promiscuous mode
[  759.397990][ T6591] hsr_slave_1: left promiscuous mode
[  759.412447][ T6591] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  759.412483][ T6591] batman_adv: batadv0: Removing interface: batadv_slave_0
[  759.416531][ T6591] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  759.416561][ T6591] batman_adv: batadv0: Removing interface: batadv_slave_1
[  759.516309][ T8424] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  759.577985][ T6591] veth1_macvtap: left promiscuous mode
[  759.578043][ T6591] veth0_macvtap: left promiscuous mode
[  759.578206][ T6591] veth1_vlan: left promiscuous mode
[  759.578294][ T6591] veth0_vlan: left promiscuous mode
[  759.679985][ T8424] usb 8-1: Using ep0 maxpacket: 8
[  759.682185][ T8424] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  759.686168][ T8424] usb 8-1: config index 0 descriptor too short (expected 301, got 72)
[  759.686209][ T8424] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  759.686277][ T8424] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  759.686317][ T8424] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  759.686359][ T8424] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  759.686422][ T8424] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.719668][ T8424] usbtmc 8-1:16.0: bulk endpoints not found
[  760.591941][ T6591] team0 (unregistering): Port device team_slave_1 removed
[  760.625556][T11120] loop4: detected capacity change from 0 to 32768
[  760.633734][T11120] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.774 (11120)
[  760.653428][T11120] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  760.653470][T11120] BTRFS info (device loop4): using blake2b checksum algorithm
[  760.709482][ T6591] team0 (unregistering): Port device team_slave_0 removed
[  760.896115][T11120] BTRFS info (device loop4): enabling ssd optimizations
[  760.896149][T11120] BTRFS info (device loop4): turning on async discard
[  760.896172][T11120] BTRFS info (device loop4): enabling free space tree
[  760.896194][T11120] BTRFS info (device loop4): use zstd compression, level 3
[  761.572723][ T5626] usb 8-1: USB disconnect, device number 6
[  765.637578][ T5632] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  767.870864][T10703] 8021q: adding VLAN 0 to HW filter on device batadv0
[  768.434171][T11032] bridge0: port 1(bridge_slave_0) entered blocking state
[  768.434291][T11032] bridge0: port 1(bridge_slave_0) entered disabled state
[  768.434478][T11032] bridge_slave_0: entered allmulticast mode
[  768.474718][T11032] bridge_slave_0: entered promiscuous mode
[  768.513836][T11032] bridge0: port 2(bridge_slave_1) entered blocking state
[  768.517921][T11032] bridge0: port 2(bridge_slave_1) entered disabled state
[  768.518118][T11032] bridge_slave_1: entered allmulticast mode
[  768.566995][T11032] bridge_slave_1: entered promiscuous mode
[  768.883411][T11032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  768.910842][T11032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  769.206088][T11032] team0: Port device team_slave_0 added
[  769.247580][T11032] team0: Port device team_slave_1 added
[  770.675702][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13
[  770.866403][T11032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  770.866424][T11032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  770.866460][T11032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  770.937796][T11032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  770.937823][T11032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  770.937870][T11032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  770.993277][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  771.011375][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  771.015560][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  771.036530][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  771.052428][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  771.884527][T11032] hsr_slave_0: entered promiscuous mode
[  771.886794][T11032] hsr_slave_1: entered promiscuous mode
[  771.895584][T11223] xt_hashlimit: invalid interval
[  771.969633][T11223] xt_CT: You must specify a L4 protocol and not use inversions on it
[  771.988815][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.7.785'.
[  772.115142][T11230] binder: 11225:11230 ioctl c018620c 200000000240 returned -1
[  772.960040][ T5626] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  773.114678][ T5626] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  773.118836][ T5626] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  773.118882][ T5626] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  773.232277][ T5626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.232322][ T5626] usb 3-1: Product: syz
[  773.232349][ T5626] usb 3-1: Manufacturer: syz
[  773.232376][ T5626] usb 3-1: SerialNumber: syz
[  773.235609][ T5624] Bluetooth: hci6: command tx timeout
[  773.315972][ T5626] usb 3-1: NFC: intf ffff88802f8b7000 id ffffffff8fe953e0
[  773.358522][ T5626] nfcmrvl 3-1:1.0: NFC: registered with nci successfully
[  773.659617][ T5626] usb 3-1: USB disconnect, device number 14
[  773.890862][ T5626] usb 3-1: NFC: intf ffff88802f8b7000
[  775.239991][ T5624] Bluetooth: hci6: command tx timeout
[  775.694688][T11259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.791'.
[  775.723636][ T5626] libceph: connect (1)[c::]:6789 error -101
[  775.723805][ T5626] libceph: mon0 (1)[c::]:6789 connect error
[  775.809567][ T5626] libceph: connect (1)[c::]:6789 error -101
[  775.809727][ T5626] libceph: mon0 (1)[c::]:6789 connect error
[  775.816952][ T5626] libceph: connect (1)[c::]:6789 error -101
[  775.817150][ T5626] libceph: mon0 (1)[c::]:6789 connect error
[  776.454103][T11259] ceph: No mds server is up or the cluster is laggy
[  776.479833][ T5626] libceph: connect (1)[c::]:6789 error -101
[  776.968859][T11262] ceph: No mds server is up or the cluster is laggy
[  777.003324][ T5626] libceph: mon0 (1)[c::]:6789 connect error
[  777.004322][ T8424] libceph: connect (1)[c::]:6789 error -101
[  777.004513][ T8424] libceph: mon0 (1)[c::]:6789 connect error
[  777.433996][ T5624] Bluetooth: hci6: command tx timeout
[  778.746680][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.797'.
[  778.858752][T11295] binder: 11293:11295 ioctl c018620c 200000000240 returned -1
[  778.860663][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.797'.
[  779.480069][ T5624] Bluetooth: hci6: command tx timeout
[  783.373124][ T5757] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  783.604778][ T5757] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  783.609438][ T5757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  783.609484][ T5757] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  783.615540][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.615584][ T5757] usb 3-1: Product: syz
[  783.615612][ T5757] usb 3-1: Manufacturer: syz
[  783.615640][ T5757] usb 3-1: SerialNumber: syz
[  783.674149][ T5757] usb 3-1: NFC: intf ffff8880344bd000 id ffffffff8fe953e0
[  783.876968][ T5757] nfcmrvl 3-1:1.0: NFC: registered with nci successfully
[  783.916473][T11332] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  783.916775][T11332] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  783.916810][T11332] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  783.916833][T11332] UDF-fs: Scanning with blocksize 512 failed
[  783.978117][T11332] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  783.978323][T11332] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  783.978359][T11332] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  783.978382][T11332] UDF-fs: Scanning with blocksize 1024 failed
[  784.081253][   T10] usb 3-1: USB disconnect, device number 15
[  784.083575][   T10] usb 3-1: NFC: intf ffff8880344bd000
[  784.088145][T11332] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  784.088291][T11332] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  784.088320][T11332] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  784.088342][T11332] UDF-fs: Scanning with blocksize 2048 failed
[  784.116714][T11332] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  784.116858][T11332] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  784.116892][T11332] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  784.116915][T11332] UDF-fs: Scanning with blocksize 4096 failed
[  784.116931][T11332] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  784.194093][ T7543] bridge_slave_1: left allmulticast mode
[  784.194130][ T7543] bridge_slave_1: left promiscuous mode
[  784.194385][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.974869][ T7543] bridge_slave_0: left allmulticast mode
[  786.981145][ T7543] bridge_slave_0: left promiscuous mode
[  786.985426][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state
[  789.428335][ T7543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  789.484614][ T7543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  789.521061][ T7543] bond0 (unregistering): Released all slaves
[  789.588832][T11032] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  789.603777][T11032] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  789.627729][T11032] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  789.669360][T11032] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  789.852817][ T7543] hsr_slave_0: left promiscuous mode
[  789.872835][ T7543] hsr_slave_1: left promiscuous mode
[  789.874275][ T7543] batman_adv: batadv0: Removing interface: batadv_slave_0
[  789.896764][ T7543] batman_adv: batadv0: Removing interface: batadv_slave_1
[  791.250929][ T7543] team0 (unregistering): Port device team_slave_1 removed
[  791.337907][ T7543] team0 (unregistering): Port device team_slave_0 removed
[  791.638312][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.811'.
[  791.707734][T11382] binder: 11380:11382 ioctl c018620c 200000000240 returned -1
[  791.708388][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.811'.
[  791.861404][T11032] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  791.930813][T11032] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  792.137342][T11032] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  792.178952][T11032] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  793.526863][T11215] bridge0: port 1(bridge_slave_0) entered blocking state
[  793.533346][T11215] bridge0: port 1(bridge_slave_0) entered disabled state
[  793.533567][T11215] bridge_slave_0: entered allmulticast mode
[  793.566921][T11215] bridge_slave_0: entered promiscuous mode
[  793.609491][T11215] bridge0: port 2(bridge_slave_1) entered blocking state
[  793.609634][T11215] bridge0: port 2(bridge_slave_1) entered disabled state
[  793.614748][T11215] bridge_slave_1: entered allmulticast mode
[  793.642578][T11215] bridge_slave_1: entered promiscuous mode
[  794.455328][ T5833] libceph: connect (1)[c::]:6789 error -101
[  794.456583][ T5833] libceph: mon0 (1)[c::]:6789 connect error
[  794.482445][T11413] ceph: No mds server is up or the cluster is laggy
[  794.561422][ T5833] libceph: connect (1)[c::]:6789 error -101
[  794.621334][ T5833] libceph: mon0 (1)[c::]:6789 connect error
[  794.893613][ T5833] libceph: connect (1)[c::]:6789 error -101
[  794.894708][ T5833] libceph: mon0 (1)[c::]:6789 connect error
[  795.354231][T11215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  795.400490][ T8424] libceph: connect (1)[c::]:6789 error -101
[  795.400654][ T8424] libceph: mon0 (1)[c::]:6789 connect error
[  795.523444][T11215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  795.675641][ T5833] libceph: connect (1)[c::]:6789 error -101
[  795.675866][ T5833] libceph: mon0 (1)[c::]:6789 connect error
[  795.838473][T11421] ceph: No mds server is up or the cluster is laggy
[  795.911738][T11215] team0: Port device team_slave_0 added
[  795.933032][ T5833] libceph: connect (1)[c::]:6789 error -101
[  795.933261][ T5833] libceph: mon0 (1)[c::]:6789 connect error
[  795.958074][T11215] team0: Port device team_slave_1 added
[  796.400024][T11215] batman_adv: batadv0: Adding interface: batadv_slave_0
[  796.400051][T11215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  796.400095][T11215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  796.481008][T11215] batman_adv: batadv0: Adding interface: batadv_slave_1
[  796.481036][T11215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  796.486958][T11215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  797.965534][T11215] hsr_slave_0: entered promiscuous mode
[  798.000429][T11215] hsr_slave_1: entered promiscuous mode
[  798.013273][T11215] debugfs: 'hsr0' already exists in 'hsr'
[  798.013306][T11215] Cannot create hsr debugfs directory
[  798.525063][ T5736] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  798.671193][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13
[  798.716559][ T5736] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  798.731552][ T5736] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  798.731643][ T5736] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  798.731685][ T5736] usb 3-1: config 0 interface 0 has no altsetting 0
[  798.838411][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  798.838459][ T5736] usb 3-1: Product: syz
[  798.838484][ T5736] usb 3-1: Manufacturer: syz
[  798.838511][ T5736] usb 3-1: SerialNumber: syz
[  798.874058][ T5736] usb 3-1: config 0 descriptor??
[  798.894511][ T5736] hub 3-1:0.0: bad descriptor, ignoring hub
[  798.894555][ T5736] hub 3-1:0.0: probe with driver hub failed with error -5
[  798.963446][ T5736] usb 3-1: selecting invalid altsetting 0
[  802.408935][T11032] 8021q: adding VLAN 0 to HW filter on device bond0
[  802.484933][ T5736] usb 3-1: USB disconnect, device number 16
[  803.155874][T11116] udevd[11116]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  803.272891][T11032] 8021q: adding VLAN 0 to HW filter on device team0
[  803.334208][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  803.334307][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  803.510300][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state
[  803.510431][ T7532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  803.760762][T11486] loop5: detected capacity change from 0 to 256
[  804.132413][T11486] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  804.167665][T11485] exFAT-fs (loop5): valid_size(562949953421322) is greater than size(10)
[  804.182599][   T31] audit: type=1800 audit(1790282602.539:23): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.829" name="file1" dev="loop5" ino=1048917 res=0 errno=0
[  807.710282][T11406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  808.132943][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  808.133030][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  809.792451][T11511] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  810.090024][   T13] rtrs_client L2024: <s+>: CM error (CM event: address error, err: -ENODEV)
[  810.097256][T11511] rtrs_client L2644: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[  810.286701][T10485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  810.303968][T10485] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  810.309133][T10485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  810.379242][T10485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  810.406127][T10485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  813.563442][ T5624] Bluetooth: hci0: command tx timeout
[  814.555391][T11543] xt_hashlimit: invalid interval
[  814.646290][T11548] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  814.646714][T11548] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  814.646759][T11548] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  814.646782][T11548] UDF-fs: Scanning with blocksize 512 failed
[  814.693539][T11543] xt_CT: You must specify a L4 protocol and not use inversions on it
[  814.702755][T11548] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  814.702950][T11548] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  814.702986][T11548] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  814.703011][T11548] UDF-fs: Scanning with blocksize 1024 failed
[  814.703893][T11548] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  814.704044][T11548] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  814.704079][T11548] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  814.704104][T11548] UDF-fs: Scanning with blocksize 2048 failed
[  814.704771][T11548] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  814.704901][T11548] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  814.704935][T11548] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  814.704959][T11548] UDF-fs: Scanning with blocksize 4096 failed
[  814.704976][T11548] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1)
[  814.869664][T11215] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  814.884715][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.837'.
[  815.409538][T11215] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  815.503975][T11215] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  815.655526][ T5624] Bluetooth: hci0: command tx timeout
[  815.933746][T11215] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  815.957963][T11215] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  816.016198][T11215] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  816.357214][T11215] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  816.388415][T11215] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  818.251066][ T5624] Bluetooth: hci0: command tx timeout
[  819.295782][T11586] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  819.296144][T11586] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  819.296226][T11586] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  819.296378][T11586] UDF-fs: Scanning with blocksize 512 failed
[  819.302322][T11586] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  819.302504][T11586] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  819.302537][T11586] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  819.302560][T11586] UDF-fs: Scanning with blocksize 1024 failed
[  819.303539][T11586] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  819.303703][T11586] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  819.303736][T11586] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  819.303759][T11586] UDF-fs: Scanning with blocksize 2048 failed
[  819.304429][T11586] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  819.304557][T11586] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  819.304590][T11586] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  819.304614][T11586] UDF-fs: Scanning with blocksize 4096 failed
[  819.304630][T11586] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
[  820.281112][ T5624] Bluetooth: hci0: command tx timeout
[  820.724747][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.845'.
[  820.827271][T11594] binder: 11593:11594 ioctl c018620c 200000000240 returned -1
[  820.835692][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.845'.
[  823.013647][ T3371] bridge_slave_1: left allmulticast mode
[  823.013687][ T3371] bridge_slave_1: left promiscuous mode
[  823.013935][ T3371] bridge0: port 2(bridge_slave_1) entered disabled state
[  823.032988][ T3371] bridge_slave_0: left allmulticast mode
[  823.033021][ T3371] bridge_slave_0: left promiscuous mode
[  823.033289][ T3371] bridge0: port 1(bridge_slave_0) entered disabled state
[  826.659361][ T3371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  826.690811][ T3371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  826.715330][ T3371] bond0 (unregistering): Released all slaves
[  827.956985][ T3371] hsr_slave_0: left promiscuous mode
[  829.884029][ T3371] hsr_slave_1: left promiscuous mode
[  829.885109][ T3371] batman_adv: batadv0: Removing interface: batadv_slave_0
[  829.931926][ T3371] batman_adv: batadv0: Removing interface: batadv_slave_1
[  830.328902][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.7.858'.
[  830.345246][   T10] libceph: connect (1)[c::]:6789 error -101
[  830.345449][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  832.099021][  T975] libceph: connect (1)[c::]:6789 error -101
[  832.099241][  T975] libceph: mon0 (1)[c::]:6789 connect error
[  832.148354][T11692] binder: 11682:11692 ioctl c018620c 200000000240 returned -1
[  832.148982][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.7.858'.
[  832.221109][T11681] ceph: No mds server is up or the cluster is laggy
[  832.447164][ T3371] team0 (unregistering): Port device team_slave_1 removed
[  832.553614][ T3371] team0 (unregistering): Port device team_slave_0 removed
[  832.647189][T10485] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  832.659385][T10485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  832.673158][T10485] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  832.678796][T10485] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  832.679638][T10485] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  832.768916][T11698] loop5: detected capacity change from 0 to 1024
[  832.784198][T11698] EXT4-fs: Ignoring removed bh option
[  832.848616][T11698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  832.848749][T11698] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  833.093393][T11704] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 3: comm syz.5.861: lblock 3 mapped to illegal pblock 3 (length 1)
[  833.134629][T11704] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  833.135363][T11704] EXT4-fs (loop5): This should not happen!! Data will be lost
[  833.135363][T11704] 
[  833.153903][T11704] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.861: lblock 0 mapped to illegal pblock 0 (length 1)
[  833.196698][T11704] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  833.196804][T11704] EXT4-fs (loop5): This should not happen!! Data will be lost
[  833.196804][T11704] 
[  834.461893][T11702] EXT4-fs error (device loop5): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  834.764600][T10485] Bluetooth: hci4: command tx timeout
[  835.293995][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  836.889999][T10485] Bluetooth: hci4: command tx timeout
[  838.920057][T10485] Bluetooth: hci4: command tx timeout
[  839.315758][T11519] bridge0: port 1(bridge_slave_0) entered blocking state
[  839.315895][T11519] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.316017][T11519] bridge_slave_0: entered allmulticast mode
[  839.319153][T11519] bridge_slave_0: entered promiscuous mode
[  839.527508][T11519] bridge0: port 2(bridge_slave_1) entered blocking state
[  839.529160][T11519] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.529349][T11519] bridge_slave_1: entered allmulticast mode
[  839.555195][T11519] bridge_slave_1: entered promiscuous mode
[  839.700130][T11519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  839.708357][T11519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  840.057559][T11519] team0: Port device team_slave_0 added
[  840.265486][T11740] loop7: detected capacity change from 0 to 2048
[  840.298861][T11740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  841.051628][T10485] Bluetooth: hci4: command tx timeout
[  842.812768][T11519] team0: Port device team_slave_1 added
[  843.028556][T11519] batman_adv: batadv0: Adding interface: batadv_slave_0
[  843.028586][T11519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  843.028633][T11519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  846.121655][T11519] batman_adv: batadv0: Adding interface: batadv_slave_1
[  846.121686][T11519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  846.121735][T11519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  846.413603][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13
[  848.271164][T11519] hsr_slave_0: entered promiscuous mode
[  848.289771][T11519] hsr_slave_1: entered promiscuous mode
[  848.473265][T11764] loop7: detected capacity change from 0 to 32768
[  848.529325][T11764] JBD2: Ignoring recovery information on journal
[  848.937328][ T5736] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  849.202776][ T5736] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  849.369565][ T5736] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  849.369673][ T5736] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  849.483923][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.483986][ T5736] usb 3-1: Product: syz
[  849.484059][ T5736] usb 3-1: Manufacturer: syz
[  849.484132][ T5736] usb 3-1: SerialNumber: syz
[  849.924266][T11764] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  850.107773][ T5736] usb 3-1: NFC: intf ffff88807765f000 id ffffffff8fe953e0
[  850.191564][ T5736] nfcmrvl 3-1:1.0: NFC: registered with nci successfully
[  850.328375][ T9302] ocfs2: Unmounting device (7,7) on (node local)
[  850.436322][   T38] nfcmrvl 3-1:1.0: NFC: send entry, len 4
[  850.436422][   T38] usb 3-1: NFC: urb ffff888042233600 submission failed (90)
[  850.530221][T11793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  850.579150][ T5736] usb 3-1: USB disconnect, device number 17
[  850.592251][ T5736] usb 3-1: NFC: intf ffff88807765f000
[  850.596459][T11809] netlink: 32 bytes leftover after parsing attributes in process `syz.7.874'.
[  851.170259][ T8424] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  851.322176][ T8424] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  851.323553][ T8424] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  851.323596][ T8424] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  851.335430][ T8424] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.335472][ T8424] usb 6-1: Product: syz
[  851.335498][ T8424] usb 6-1: Manufacturer: syz
[  851.335525][ T8424] usb 6-1: SerialNumber: syz
[  851.372120][ T8424] usb 6-1: NFC: intf ffff8880328dd000 id ffffffff8fe953e0
[  851.432518][ T8424] nfcmrvl 6-1:1.0: NFC: registered with nci successfully
[  852.713736][   T51] nfcmrvl 6-1:1.0: NFC: send entry, len 4
[  852.713785][   T51] usb 6-1: NFC: urb ffff8880329bbc00 submission failed (90)
[  852.826561][T11817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  852.870441][ T8424] usb 6-1: USB disconnect, device number 19
[  852.888353][ T8424] usb 6-1: NFC: intf ffff8880328dd000
[  853.133471][  T770] bridge_slave_1: left allmulticast mode
[  853.133513][  T770] bridge_slave_1: left promiscuous mode
[  853.133767][  T770] bridge0: port 2(bridge_slave_1) entered disabled state
[  853.182389][  T770] bridge_slave_0: left allmulticast mode
[  853.182452][  T770] bridge_slave_0: left promiscuous mode
[  853.182711][  T770] bridge0: port 1(bridge_slave_0) entered disabled state
[  854.102419][   T31] audit: type=1400 audit(1790282652.419:24): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=11828 comm="syz.7.879" name=223A6F offset=66
[  857.106506][  T770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  857.128383][  T770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  857.146441][  T770] bond0 (unregistering): Released all slaves
[  857.161522][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'.
[  857.213626][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'.
[  857.239695][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14
[  857.668395][  T770] hsr_slave_0: left promiscuous mode
[  857.674932][  T770] hsr_slave_1: left promiscuous mode
[  857.675998][  T770] batman_adv: batadv0: Removing interface: batadv_slave_0
[  857.677467][  T770] batman_adv: batadv0: Removing interface: batadv_slave_1
[  862.757132][  T770] team0 (unregistering): Port device team_slave_1 removed
[  862.803975][  T770] team0 (unregistering): Port device team_slave_0 removed
[  862.849033][T11869] loop4: detected capacity change from 0 to 32768
[  862.857702][T11869] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.888 (11869)
[  862.916551][T11869] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  862.916605][T11869] BTRFS info (device loop4): using blake2b checksum algorithm
[  863.004561][T11869] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  863.065959][T11869] BTRFS error (device loop4): open_ctree failed: -ENOMEM
[  863.673325][T11875] loop7: detected capacity change from 0 to 32768
[  863.701523][T11875] JBD2: Ignoring recovery information on journal
[  863.820896][T11875] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  865.028367][   T31] audit: type=1804 audit(1790282663.379:25): pid=11900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.890" name="/newroot/76/file1/bus" dev="loop7" ino=17058 res=1 errno=0
[  865.285877][T11904] loop2: detected capacity change from 0 to 1024
[  865.302701][T11904] EXT4-fs: Ignoring removed bh option
[  865.378299][T11904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  865.378427][T11904] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  865.724306][T11910] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 3: comm syz.2.887: lblock 3 mapped to illegal pblock 3 (length 1)
[  865.782849][T11910] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  865.782948][T11910] EXT4-fs (loop2): This should not happen!! Data will be lost
[  865.782948][T11910] 
[  865.785730][T11911] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.887: lblock 0 mapped to illegal pblock 0 (length 1)
[  865.819183][T11911] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  865.819282][T11911] EXT4-fs (loop2): This should not happen!! Data will be lost
[  865.819282][T11911] 
[  866.452728][T11695] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.454894][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  866.471488][T11695] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.472032][T11695] bridge_slave_0: entered allmulticast mode
[  866.474152][T11695] bridge_slave_0: entered promiscuous mode
[  867.860003][ T9302] ocfs2: Unmounting device (7,7) on (node local)
[  867.895937][T11695] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.896061][T11695] bridge0: port 2(bridge_slave_1) entered disabled state
[  867.896250][T11695] bridge_slave_1: entered allmulticast mode
[  867.898435][T11695] bridge_slave_1: entered promiscuous mode
[  868.792898][T11695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  868.797919][T11695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  868.908986][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'.
[  869.009655][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'.
[  869.107788][T11925] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  869.108063][T11925] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  869.108097][T11925] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  869.108121][T11925] UDF-fs: Scanning with blocksize 512 failed
[  869.109447][T11925] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  869.109629][T11925] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  869.109663][T11925] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  869.109688][T11925] UDF-fs: Scanning with blocksize 1024 failed
[  869.135570][T11695] team0: Port device team_slave_0 added
[  869.162343][T11695] team0: Port device team_slave_1 added
[  869.196768][T11925] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  869.196943][T11925] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  869.196976][T11925] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  869.197002][T11925] UDF-fs: Scanning with blocksize 2048 failed
[  869.253675][T11925] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  869.253807][T11925] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  869.253832][T11925] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  869.253851][T11925] UDF-fs: Scanning with blocksize 4096 failed
[  869.253866][T11925] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1)
[  869.381939][T11695] batman_adv: batadv0: Adding interface: batadv_slave_0
[  869.381966][T11695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  869.382015][T11695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  869.384239][T11695] batman_adv: batadv0: Adding interface: batadv_slave_1
[  869.384264][T11695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  869.384319][T11695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  869.585622][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  869.585753][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  870.730716][T11695] hsr_slave_0: entered promiscuous mode
[  870.749683][T11695] hsr_slave_1: entered promiscuous mode
[  870.917164][T11695] debugfs: 'hsr0' already exists in 'hsr'
[  870.917198][T11695] Cannot create hsr debugfs directory
[  872.699894][T11937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.897'.
[  872.790735][   T25] libceph: connect (1)[c::]:6789 error -101
[  872.790937][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  872.821349][T11937] ceph: No mds server is up or the cluster is laggy
[  873.331265][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  873.336886][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  873.341505][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  873.365958][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  873.369155][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  876.376496][T10485] Bluetooth: hci6: command tx timeout
[  878.502997][T10485] Bluetooth: hci6: command tx timeout
[  878.506111][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'.
[  878.530570][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.908'.
[  879.966742][T11695] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  879.985810][T11695] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  879.990697][T11695] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  880.014222][T11695] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  880.015481][T11695] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  880.046491][   T31] audit: type=1400 audit(1790282678.399:26): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=11995 comm="syz.5.900" name=223A6F offset=66
[  880.047175][T11695] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  880.052934][T11695] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  880.095287][T11695] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  880.520618][T10485] Bluetooth: hci6: command tx timeout
[  880.583118][T12016] loop4: detected capacity change from 0 to 1024
[  880.593755][T12016] EXT4-fs: Ignoring removed bh option
[  880.685020][T12016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  880.685159][T12016] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  880.997692][T12031] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.906: lblock 3 mapped to illegal pblock 3 (length 1)
[  881.017332][T12031] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  881.017417][T12031] EXT4-fs (loop4): This should not happen!! Data will be lost
[  881.017417][T12031] 
[  881.036021][T12031] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.906: lblock 0 mapped to illegal pblock 0 (length 1)
[  881.040059][T12031] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  881.040150][T12031] EXT4-fs (loop4): This should not happen!! Data will be lost
[  881.040150][T12031] 
[  881.781145][ T5632] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  882.600058][T10485] Bluetooth: hci6: command tx timeout
[  886.140566][ T5909] bridge_slave_1: left allmulticast mode
[  886.140606][ T5909] bridge_slave_1: left promiscuous mode
[  886.140884][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[  886.195698][ T5909] bridge_slave_0: left allmulticast mode
[  886.195737][ T5909] bridge_slave_0: left promiscuous mode
[  886.195981][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[  890.006792][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  890.055891][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  890.062387][ T5909] bond0 (unregistering): Released all slaves
[  890.757862][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  890.772358][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  890.787896][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  890.820210][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  890.828874][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  891.453930][ T5909] hsr_slave_0: left promiscuous mode
[  891.474679][ T5909] hsr_slave_1: left promiscuous mode
[  891.475694][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0
[  891.515903][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1
[  893.479652][T10485] Bluetooth: hci0: command tx timeout
[  894.848217][T12110] loop4: detected capacity change from 0 to 2048
[  894.885513][T12110] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  895.061381][T10485] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  895.128891][T10485] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  895.143693][T10485] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  895.149767][T10485] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  895.216793][T10485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  895.567173][ T5624] Bluetooth: hci0: command tx timeout
[  897.748952][ T5624] Bluetooth: hci2: command tx timeout
[  897.750192][ T5624] Bluetooth: hci0: command tx timeout
[  897.925236][ T5909] team0 (unregistering): Port device team_slave_1 removed
[  898.055838][ T5909] team0 (unregistering): Port device team_slave_0 removed
[  898.965539][T11950] bridge0: port 1(bridge_slave_0) entered blocking state
[  898.975756][T11950] bridge0: port 1(bridge_slave_0) entered disabled state
[  898.975959][T11950] bridge_slave_0: entered allmulticast mode
[  898.990764][T11950] bridge_slave_0: entered promiscuous mode
[  899.013709][T11950] bridge0: port 2(bridge_slave_1) entered blocking state
[  899.013831][T11950] bridge0: port 2(bridge_slave_1) entered disabled state
[  899.014000][T11950] bridge_slave_1: entered allmulticast mode
[  899.021324][T11950] bridge_slave_1: entered promiscuous mode
[  899.248698][T11950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  899.276470][T11950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  899.390666][T11950] team0: Port device team_slave_0 added
[  899.398645][T11950] team0: Port device team_slave_1 added
[  899.754470][T11950] batman_adv: batadv0: Adding interface: batadv_slave_0
[  899.754492][T11950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  899.754528][T11950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  899.773232][T11950] batman_adv: batadv0: Adding interface: batadv_slave_1
[  899.773258][T11950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  899.773303][T11950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  899.805092][T10485] Bluetooth: hci0: command tx timeout
[  899.805137][T10485] Bluetooth: hci2: command tx timeout
[  900.218267][T11950] hsr_slave_0: entered promiscuous mode
[  900.219438][T11950] hsr_slave_1: entered promiscuous mode
[  901.880034][ T5624] Bluetooth: hci2: command tx timeout
[  904.012481][ T5624] Bluetooth: hci2: command tx timeout
[  909.461791][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13
[  910.137233][T12195] loop7: detected capacity change from 0 to 32768
[  911.624812][T12231] loop4: detected capacity change from 0 to 2048
[  911.631413][T12231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  911.673311][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.938'.
[  911.723324][ T5909] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  911.727207][T12237] binder: 12232:12237 ioctl c018620c 0 returned -14
[  911.727808][T12237] netlink: 12 bytes leftover after parsing attributes in process `syz.7.938'.
[  912.333011][T12085] bridge0: port 1(bridge_slave_0) entered blocking state
[  912.357616][T12085] bridge0: port 1(bridge_slave_0) entered disabled state
[  912.357822][T12085] bridge_slave_0: entered allmulticast mode
[  912.380242][T12085] bridge_slave_0: entered promiscuous mode
[  912.681326][ T5909] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.730304][T12085] bridge0: port 2(bridge_slave_1) entered blocking state
[  912.730515][T12085] bridge0: port 2(bridge_slave_1) entered disabled state
[  912.730714][T12085] bridge_slave_1: entered allmulticast mode
[  912.732936][T12085] bridge_slave_1: entered promiscuous mode
[  912.892973][T12111] bridge0: port 1(bridge_slave_0) entered blocking state
[  912.893097][T12111] bridge0: port 1(bridge_slave_0) entered disabled state
[  912.893309][T12111] bridge_slave_0: entered allmulticast mode
[  912.925508][T12111] bridge_slave_0: entered promiscuous mode
[  912.954411][T12111] bridge0: port 2(bridge_slave_1) entered blocking state
[  912.954534][T12111] bridge0: port 2(bridge_slave_1) entered disabled state
[  912.954722][T12111] bridge_slave_1: entered allmulticast mode
[  912.988965][T12111] bridge_slave_1: entered promiscuous mode
[  913.068068][T12268] loop7: detected capacity change from 0 to 256
[  913.163662][T12268] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  913.241836][T12268] exFAT-fs (loop7): valid_size(562949953421322) is greater than size(10)
[  913.246316][T12111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  913.283124][   T31] audit: type=1800 audit(1790282711.639:27): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.941" name="file1" dev="loop7" ino=1048996 res=0 errno=0
[  913.287732][T12111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  913.354732][   T30] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  913.523301][   T30] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  913.530724][   T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  913.530767][   T30] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  913.536684][   T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  913.536724][   T30] usb 3-1: Product: syz
[  913.536750][   T30] usb 3-1: Manufacturer: syz
[  913.536777][   T30] usb 3-1: SerialNumber: syz
[  913.623440][   T30] usb 3-1: NFC: intf ffff88807ecf1000 id ffffffff8fe953e0
[  913.680237][   T30] nfcmrvl 3-1:1.0: NFC: registered with nci successfully
[  913.803983][ T5909] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.838271][T12111] team0: Port device team_slave_0 added
[  913.844954][T12111] team0: Port device team_slave_1 added
[  913.910704][ T5868] nfcmrvl 3-1:1.0: NFC: send entry, len 4
[  913.910768][ T5868] usb 3-1: NFC: urb ffff888027604e00 submission failed (90)
[  913.937258][T12085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  913.967727][T12258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  913.976942][ T7997] usb 3-1: USB disconnect, device number 18
[  913.988413][ T7997] usb 3-1: NFC: intf ffff88807ecf1000
[  914.200388][T12111] batman_adv: batadv0: Adding interface: batadv_slave_0
[  914.200416][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  914.200464][T12111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  914.204481][T12111] batman_adv: batadv0: Adding interface: batadv_slave_1
[  914.204502][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  914.204544][T12111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  914.279813][T12085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  914.517886][ T5909] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.878885][T12085] team0: Port device team_slave_0 added
[  916.016148][T12085] team0: Port device team_slave_1 added
[  916.099920][T11950] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  916.115343][T11950] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  916.116425][T11950] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  916.122622][T11950] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  916.123730][T11950] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  916.133380][T11950] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  916.179644][T12111] hsr_slave_0: entered promiscuous mode
[  916.187296][T12111] hsr_slave_1: entered promiscuous mode
[  916.188132][T12111] debugfs: 'hsr0' already exists in 'hsr'
[  916.188161][T12111] Cannot create hsr debugfs directory
[  916.190473][T11950] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  916.220172][   T30] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  916.222277][T11950] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  916.228837][T12085] batman_adv: batadv0: Adding interface: batadv_slave_0
[  916.228859][T12085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  916.228903][T12085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  916.349983][   T30] usb 3-1: device descriptor read/64, error -71
[  916.356292][T12085] batman_adv: batadv0: Adding interface: batadv_slave_1
[  916.356320][T12085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  916.356368][T12085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  916.590301][   T30] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  916.610903][T12085] hsr_slave_0: entered promiscuous mode
[  916.615627][T12085] hsr_slave_1: entered promiscuous mode
[  916.618156][T12085] debugfs: 'hsr0' already exists in 'hsr'
[  916.618186][T12085] Cannot create hsr debugfs directory
[  916.730064][   T30] usb 3-1: device descriptor read/64, error -71
[  916.850929][   T30] usb usb3-port1: attempt power cycle
[  918.287072][   T30] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  918.303387][   T30] usb 3-1: device descriptor read/8, error -71
[  918.496105][ T5909] bridge_slave_1: left allmulticast mode
[  918.496147][ T5909] bridge_slave_1: left promiscuous mode
[  918.496403][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.582050][ T5909] bridge_slave_0: left allmulticast mode
[  918.582088][ T5909] bridge_slave_0: left promiscuous mode
[  918.589294][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[  918.609968][   T30] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  918.630917][   T30] usb 3-1: device descriptor read/8, error -71
[  918.679645][ T5909] bridge_slave_1: left allmulticast mode
[  918.679677][ T5909] bridge_slave_1: left promiscuous mode
[  918.680030][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.709148][ T5909] bridge_slave_0: left allmulticast mode
[  918.709188][ T5909] bridge_slave_0: left promiscuous mode
[  918.713715][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[  918.752690][   T30] usb usb3-port1: unable to enumerate USB device
[  921.209179][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  921.224202][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  921.226210][ T5909] bond0 (unregistering): Released all slaves
[  921.535762][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  921.539767][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  921.563341][ T5909] bond0 (unregistering): Released all slaves
[  921.692181][ T5274] 8021q: adding VLAN 0 to HW filter on device eth15
[  922.274995][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'.
[  922.348402][T12320] binder: 12315:12320 ioctl c018620c 200000000240 returned -1
[  922.774731][ T5909] hsr_slave_0: left promiscuous mode
[  922.779764][ T5909] hsr_slave_1: left promiscuous mode
[  922.795599][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0
[  922.801575][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1
[  922.844349][ T5909] hsr_slave_0: left promiscuous mode
[  922.848471][ T5909] hsr_slave_1: left promiscuous mode
[  922.849455][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  922.849483][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0
[  922.852437][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  922.852484][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1
[  922.892264][ T5909] veth1_macvtap: left promiscuous mode
[  922.892326][ T5909] veth0_macvtap: left promiscuous mode
[  922.892457][ T5909] veth1_vlan: left promiscuous mode
[  922.892545][ T5909] veth0_vlan: left promiscuous mode
[  922.999367][T12321] loop4: detected capacity change from 0 to 32768
[  923.089948][T12321] JBD2: Ignoring recovery information on journal
[  923.172910][T12321] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  924.377832][   T31] audit: type=1800 audit(1790282722.729:28): pid=12344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.946" name="file1" dev="loop4" ino=17059 res=0 errno=0
[  924.768430][ T5909] team0 (unregistering): Port device team_slave_1 removed
[  924.798694][ T5909] team0 (unregistering): Port device team_slave_0 removed
[  924.818917][ T5632] ocfs2: Unmounting device (7,4) on (node local)
[  925.139952][T11916] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  925.290877][T11916] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  925.318182][T11916] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  925.318230][T11916] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  925.330344][T11916] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.330389][T11916] usb 8-1: Product: syz
[  925.330416][T11916] usb 8-1: Manufacturer: syz
[  925.330443][T11916] usb 8-1: SerialNumber: syz
[  925.379431][T11916] usb 8-1: NFC: intf ffff88807a834000 id ffffffff8fe953e0
[  925.457459][T11916] nfcmrvl 8-1:1.0: NFC: registered with nci successfully
[  927.888213][   T25] usb 8-1: USB disconnect, device number 7
[  927.920924][   T25] usb 8-1: NFC: intf ffff88807a834000
[  929.875867][ T5909] team0 (unregistering): Port device team_slave_1 removed
[  929.921818][ T5909] team0 (unregistering): Port device team_slave_0 removed
[  930.595030][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'.
[  930.618857][T12382] binder: 12381:12382 ioctl c018620c 200000000240 returned -1
[  931.006232][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  931.006311][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  934.252615][T10485] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  934.257046][T10485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  934.276608][T10485] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  934.297333][T10485] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  934.312120][T10485] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  934.719025][T12409] loop4: detected capacity change from 0 to 1024
[  934.730431][T12409] EXT4-fs: Ignoring removed bh option
[  934.935386][T12409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  934.935553][T12409] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  935.675973][T12409] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.964: lblock 3 mapped to illegal pblock 3 (length 1)
[  936.440435][ T5624] Bluetooth: hci4: command tx timeout
[  937.337943][T12409] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  937.337987][T12409] EXT4-fs (loop4): This should not happen!! Data will be lost
[  937.337987][T12409] 
[  937.355290][T12419] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.964: lblock 0 mapped to illegal pblock 0 (length 1)
[  937.397532][T12419] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  937.397574][T12419] EXT4-fs (loop4): This should not happen!! Data will be lost
[  937.397574][T12419] 
[  937.641059][T12413] EXT4-fs error (device loop4): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  937.751253][ T5632] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  937.967164][T12111] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  938.012115][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  939.337840][ T5624] Bluetooth: hci4: command tx timeout
[  940.638541][T12111] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  941.389238][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  941.400262][ T5624] Bluetooth: hci4: command tx timeout
[  942.516518][T12111] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  942.530094][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  942.595831][T12111] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  942.641106][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  943.483611][ T5624] Bluetooth: hci4: command tx timeout
[  943.620790][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'.
[  943.697578][T12457] binder: 12455:12457 ioctl c018620c 200000000240 returned -1
[  949.092676][T12474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.975'.
[  949.119682][ T5626] libceph: connect (1)[c::]:6789 error -101
[  949.121282][ T5626] libceph: mon0 (1)[c::]:6789 connect error
[  949.343267][T12474] ceph: No mds server is up or the cluster is laggy
[  949.381859][ T8424] libceph: connect (1)[c::]:6789 error -101
[  949.382057][ T8424] libceph: mon0 (1)[c::]:6789 connect error
[  950.185416][T10485] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  950.208059][T10485] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  950.209421][T10485] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  950.229419][T10485] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  950.260728][T10485] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  951.200697][ T5909] bridge_slave_1: left allmulticast mode
[  951.200739][ T5909] bridge_slave_1: left promiscuous mode
[  951.201092][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[  951.269068][ T5909] bridge_slave_0: left allmulticast mode
[  951.269111][ T5909] bridge_slave_0: left promiscuous mode
[  951.293341][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[  952.359973][ T5624] Bluetooth: hci6: command tx timeout
[  952.678731][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  952.718316][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  952.758546][ T5909] bond0 (unregistering): Released all slaves
[  953.137287][ T5909] hsr_slave_0: left promiscuous mode
[  953.180476][ T5909] hsr_slave_1: left promiscuous mode
[  953.181505][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0
[  953.200674][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1
[  953.760591][T10485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  953.765847][T10485] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  953.768609][T10485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  953.796669][T10485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  953.810320][T10485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  954.102560][ T5757] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  954.277264][ T5757] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  954.285755][ T5757] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  954.313710][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.313762][ T5757] usb 3-1: Product: syz
[  954.313790][ T5757] usb 3-1: Manufacturer: syz
[  954.313818][ T5757] usb 3-1: SerialNumber: syz
[  954.318429][ T5909] team0 (unregistering): Port device team_slave_1 removed
[  954.384368][ T5909] team0 (unregistering): Port device team_slave_0 removed
[  954.442116][ T5624] Bluetooth: hci6: command tx timeout
[  954.574903][T12503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  954.575631][T12503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  954.623033][ T5757] cdc_ether 3-1:1.0: skipping garbage
[  954.623270][ T5757] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  954.695278][ T5757] usb 3-1: USB disconnect, device number 23
[  955.164171][ T5757] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  955.360222][ T5757] usb 3-1: Using ep0 maxpacket: 8
[  955.380443][ T5757] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  955.415981][ T5757] usb 3-1: config index 0 descriptor too short (expected 301, got 72)
[  955.416208][ T5757] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  955.416460][ T5757] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  955.416693][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  955.879961][ T5624] Bluetooth: hci0: command tx timeout
[  955.902294][ T5757] usbtmc 3-1:16.0: bulk endpoints not found
[  956.531085][ T5624] Bluetooth: hci6: command tx timeout
[  956.604823][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'.
[  956.657994][T12402] bridge0: port 1(bridge_slave_0) entered blocking state
[  956.658202][T12402] bridge0: port 1(bridge_slave_0) entered disabled state
[  956.658360][T12402] bridge_slave_0: entered allmulticast mode
[  956.660853][T12528] binder: 12526:12528 ioctl c018620c 200000000240 returned -1
[  956.678809][T12402] bridge_slave_0: entered promiscuous mode
[  956.692160][T12402] bridge0: port 2(bridge_slave_1) entered blocking state
[  956.695731][T12402] bridge0: port 2(bridge_slave_1) entered disabled state
[  956.695921][T12402] bridge_slave_1: entered allmulticast mode
[  956.707452][T12402] bridge_slave_1: entered promiscuous mode
[  956.936657][T12402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  956.951709][T12402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  957.136298][T12402] team0: Port device team_slave_0 added
[  957.149920][ T5757] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  957.849910][   T30] usb 3-1: USB disconnect, device number 24
[  957.960132][ T5624] Bluetooth: hci0: command tx timeout
[  958.023905][T12538] loop7: detected capacity change from 0 to 1024
[  958.036920][T12538] EXT4-fs: Ignoring removed bh option
[  958.117049][T12538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  958.117183][T12538] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  958.135151][T12402] team0: Port device team_slave_1 added
[  958.600014][ T5624] Bluetooth: hci6: command tx timeout
[  958.690061][   T30] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  959.071336][ T5757] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  959.072769][ T5757] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  959.072803][ T5757] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  959.074837][ T5757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.074868][ T5757] usb 5-1: Product: syz
[  959.074888][ T5757] usb 5-1: Manufacturer: syz
[  959.074907][ T5757] usb 5-1: SerialNumber: syz
[  959.081755][ T5757] usb 5-1: NFC: intf ffff88802729e000 id ffffffff8fe953e0
[  959.117030][ T5757] nfcmrvl 5-1:1.0: NFC: registered with nci successfully
[  959.222831][   T30] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  959.225452][   T30] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  959.225520][   T30] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  959.225563][   T30] usb 3-1: config 0 interface 0 has no altsetting 0
[  959.228199][   T30] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  959.228245][   T30] usb 3-1: Product: syz
[  959.228272][   T30] usb 3-1: Manufacturer: syz
[  959.228300][   T30] usb 3-1: SerialNumber: syz
[  959.383377][T12548] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 3: comm syz.7.985: lblock 3 mapped to illegal pblock 3 (length 1)
[  959.384508][T12548] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  959.384555][T12548] EXT4-fs (loop7): This should not happen!! Data will be lost
[  959.384555][T12548] 
[  959.455210][  T975] usb 5-1: USB disconnect, device number 22
[  959.467612][  T975] usb 5-1: NFC: intf ffff88802729e000
[  959.500898][T12548] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: comm syz.7.985: lblock 0 mapped to illegal pblock 0 (length 1)
[  959.507563][T12548] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  959.507611][T12548] EXT4-fs (loop7): This should not happen!! Data will be lost
[  959.507611][T12548] 
[  959.628676][T12402] batman_adv: batadv0: Adding interface: batadv_slave_0
[  959.628706][T12402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  959.628754][T12402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  959.690742][   T30] usb 3-1: config 0 descriptor??
[  959.906104][   T30] hub 3-1:0.0: bad descriptor, ignoring hub
[  959.906145][   T30] hub 3-1:0.0: probe with driver hub failed with error -5
[  959.910751][   T30] usb 3-1: selecting invalid altsetting 0
[  960.040101][ T5624] Bluetooth: hci0: command tx timeout
[  960.087321][T12540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  960.098292][T12540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  960.152428][T12402] batman_adv: batadv0: Adding interface: batadv_slave_1
[  960.152456][T12402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  960.152504][T12402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  960.426840][   T30] usb 3-1: USB disconnect, device number 25
[  961.232260][ T9302] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  962.686537][ T5624] Bluetooth: hci0: command tx timeout
[  962.955792][T11111] udevd[11111]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  963.197209][T12402] hsr_slave_0: entered promiscuous mode
[  963.201777][T12402] hsr_slave_1: entered promiscuous mode
[  963.836571][T12567] loop4: detected capacity change from 0 to 32768
[  963.899785][T12567] JBD2: Ignoring recovery information on journal
[  963.994643][T12567] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  964.554183][T12571] loop4: detected capacity change from 32768 to 64
[  964.595357][T12569] jbd2/loop4-75: attempt to access beyond end of device
[  964.595357][T12569] loop4: rw=2049, sector=23584, nr_sectors = 1168 limit=64
[  964.613664][T12569] Aborting journal on device loop4-75.
[  964.623683][T12572] (syz.4.992,12572,0):ocfs2_start_trans:376 ERROR: status = -30
[  964.623730][T12572] OCFS2: abort (device loop4): ocfs2_start_trans: Detected aborted journal
[  964.623757][T12572] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  964.623775][T12572] OCFS2: File system is now read-only.
[  964.623789][T12572] (syz.4.992,12572,0):ocfs2_write_begin_nolock:1753 ERROR: status = -30
[  964.623851][T12572] (syz.4.992,12572,0):ocfs2_write_begin:1888 ERROR: status = -30
[  964.624017][T12572] (syz.4.992,12572,0):ocfs2_start_trans:376 ERROR: status = -30
[  964.624058][T12572] OCFS2: abort (device loop4): ocfs2_start_trans: Detected aborted journal
[  964.624084][T12572] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  964.624103][T12572] (syz.4.992,12572,0):ocfs2_write_begin_nolock:1753 ERROR: status = -30
[  964.624161][T12572] (syz.4.992,12572,0):ocfs2_write_begin:1888 ERROR: status = -30
[  964.629598][T12567] (syz.4.992,12567,1):__ocfs2_journal_access:727 ERROR: Error -30 getting 1 access to buffer!
[  964.629649][T12567] (syz.4.992,12567,1):ocfs2_write_end_nolock:1945 ERROR: status = -30
[  964.629715][T12567] (syz.4.992,12567,1):ocfs2_commit_trans:401 ERROR: status = -5
[  964.663674][T12569] jbd2/loop4-75: attempt to access beyond end of device
[  964.663674][T12569] loop4: rw=8427521, sector=640, nr_sectors = 1 limit=64
[  964.663895][T12569] Buffer I/O error on dev loop4, logical block 640, lost sync page write
[  964.663924][T12569] JBD2: I/O error when updating journal superblock for loop4-75.
[  964.663966][T12569] JBD2: Detected IO errors -5 while flushing file data on loop4-75
[  964.680473][T12569] jbd2/loop4-75: attempt to access beyond end of device
[  964.680473][T12569] loop4: rw=2049, sector=24752, nr_sectors = 56 limit=64
[  964.680657][T12569] journal_release_journal_head: freeing b_frozen_data
[  964.680728][T12569] JBD2: Detected IO errors -5 while flushing file data on loop4-75
[  964.745989][T12567] ------------[ cut here ]------------
[  964.746010][T12567] kernel BUG at fs/ocfs2/aops.c:2256!
[  964.746043][T12567] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  964.837543][T12567] CPU: 1 UID: 0 PID: 12567 Comm: syz.4.992 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  964.848419][T12567] Tainted: [L]=SOFTLOCKUP
[  964.852921][T12567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  964.862985][T12567] RIP: 0010:ocfs2_dio_wr_get_block+0x15fa/0x18a0
[  964.869364][T12567] Code: 48 89 ee 48 89 df e8 e5 fb 04 00 89 c5 e9 cb f1 ff ff bd e4 ff ff ff e9 2d fc ff ff e8 8f dc d9 fd 90 0f 0b e8 87 dc d9 fd 90 <0f> 0b e8 7f dc d9 fd 90 0f 0b 48 89 ef e8 44 29 4c fe e9 a1 ed ff
[  964.888994][T12567] RSP: 0018:ffffc90002ee71f0 EFLAGS: 00010287
[  964.895693][T12567] RAX: 0000000000027ee2 RBX: ffff88803e0b0860 RCX: ffffc9000d529000
[  964.903678][T12567] RDX: 0000000000080000 RSI: ffffffff843234e9 RDI: ffff88807e991f40
[  964.911683][T12567] RBP: 0000000000000000 R08: 0000000000000004 R09: 00000000ffffffe2
[  964.919840][T12567] R10: 0000000000004000 R11: 0000000000000000 R12: 00000000ffffffe2
[  964.927947][T12567] R13: ffff88805564a080 R14: ffff88823bf96000 R15: 0000000000004000
[  964.935930][T12567] FS:  00007fc62be186c0(0000) GS:ffff888123c53000(0000) knlGS:0000000000000000
[  964.944879][T12567] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  964.951565][T12567] CR2: 000000110c43e90a CR3: 00000000546e5000 CR4: 0000000000350ef0
[  964.959547][T12567] Call Trace:
[  964.962828][T12567]  <TASK>
[  964.965767][T12567]  ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10
[  964.971712][T12567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.977459][T12567]  ? submit_page_section+0x317/0xa60
[  964.982767][T12567]  ? iov_iter_npages+0x40/0x500
[  964.987647][T12567]  ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10
[  964.993584][T12567]  __blockdev_direct_IO+0x195e/0x3380
[  964.999025][T12567]  ? __pfx___blockdev_direct_IO+0x10/0x10
[  965.004869][T12567]  ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10
[  965.010830][T12567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  965.016491][T12567]  ? current_time+0x29f/0x3b0
[  965.021203][T12567]  ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10
[  965.027237][T12567]  ? ocfs2_direct_IO+0x263/0x360
[  965.032208][T12567]  ocfs2_direct_IO+0x263/0x360
[  965.037009][T12567]  generic_file_direct_write+0x198/0x410
[  965.042932][T12567]  __generic_file_write_iter+0x11b/0x240
[  965.048985][T12567]  ocfs2_file_write_iter+0xda5/0x2200
[  965.054414][T12567]  ? __pfx_ocfs2_file_write_iter+0x10/0x10
[  965.060483][T12567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  965.066333][T12567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  965.072082][T12567]  ? __kasan_kmalloc+0xaa/0xb0
[  965.076894][T12567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  965.082587][T12567]  ? splice_from_pipe_next+0x1ec/0x5a0
[  965.088115][T12567]  iter_file_splice_write+0x830/0x10b0
[  965.093640][T12567]  ? __pfx_iter_file_splice_write+0x10/0x10
[  965.099587][T12567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  965.105296][T12567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  965.111019][T12567]  ? __pfx_iter_file_splice_write+0x10/0x10
[  965.116965][T12567]  direct_splice_actor+0x192/0x690
[  965.122110][T12567]  splice_direct_to_actor+0x345/0xa30
[  965.127616][T12567]  ? __pfx_direct_splice_actor+0x10/0x10
[  965.133297][T12567]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  965.139237][T12567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  965.144910][T12567]  ? lock_acquire+0x1d1/0x380
[  965.149625][T12567]  do_splice_direct+0x174/0x240
[  965.154588][T12567]  ? __pfx_do_splice_direct+0x10/0x10
[  965.159987][T12567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  965.165664][T12567]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  965.171756][T12567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  965.177417][T12567]  ? rw_verify_area+0xce/0x6d0
[  965.182245][T12567]  do_sendfile+0xadc/0xe20
[  965.186701][T12567]  ? __pfx_do_sendfile+0x10/0x10
[  965.191687][T12567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  965.197365][T12567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  965.203030][T12567]  ? __x64_sys_futex+0x358/0x4d0
[  965.208025][T12567]  __x64_sys_sendfile64+0x1d8/0x220
[  965.213247][T12567]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  965.219007][T12567]  ? srso_alias_return_thunk+0x5/0xfbef5
[  965.224691][T12567]  do_syscall_64+0x123/0x790
[  965.229488][T12567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  965.235409][T12567] RIP: 0033:0x7fc62af9e159
[  965.239845][T12567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  965.259484][T12567] RSP: 002b:00007fc62be18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  965.267929][T12567] RAX: ffffffffffffffda RBX: 00007fc62b225fa0 RCX: 00007fc62af9e159
[  965.275923][T12567] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008
[  965.283908][T12567] RBP: 00007fc62b03506b R08: 0000000000000000 R09: 0000000000000000
[  965.291899][T12567] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000
[  965.299883][T12567] R13: 00007fc62b226038 R14: 00007fc62b225fa0 R15: 00007ffe6ac59348
[  965.307898][T12567]  </TASK>
[  965.311020][T12567] Modules linked in:
[  965.316074][T12567] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  965.404383][T12567] RIP: 0010:ocfs2_dio_wr_get_block+0x15fa/0x18a0
[  965.404447][T12567] Code: 48 89 ee 48 89 df e8 e5 fb 04 00 89 c5 e9 cb f1 ff ff bd e4 ff ff ff e9 2d fc ff ff e8 8f dc d9 fd 90 0f 0b e8 87 dc d9 fd 90 <0f> 0b e8 7f dc d9 fd 90 0f 0b 48 89 ef e8 44 29 4c fe e9 a1 ed ff
[  965.404476][T12567] RSP: 0018:ffffc90002ee71f0 EFLAGS: 00010287
[  965.404500][T12567] RAX: 0000000000027ee2 RBX: ffff88803e0b0860 RCX: ffffc9000d529000
[  965.404520][T12567] RDX: 0000000000080000 RSI: ffffffff843234e9 RDI: ffff88807e991f40
[  965.404539][T12567] RBP: 0000000000000000 R08: 0000000000000004 R09: 00000000ffffffe2
[  965.404557][T12567] R10: 0000000000004000 R11: 0000000000000000 R12: 00000000ffffffe2
[  965.404575][T12567] R13: ffff88805564a080 R14: ffff88823bf96000 R15: 0000000000004000
[  965.404598][T12567] FS:  00007fc62be186c0(0000) GS:ffff888123c53000(0000) knlGS:0000000000000000
[  965.404623][T12567] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  965.404643][T12567] CR2: 0000001b33ee6ff8 CR3: 00000000546e5000 CR4: 0000000000350ef0
[  965.404664][T12567] Kernel panic - not syncing: Fatal exception
[  965.507145][T12567] Kernel Offset: disabled
[  965.511821][T12567] Rebooting in 86400 seconds..