last executing test programs:

35m24.735269796s ago: executing program 3 (id=1223):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4}, {0x10000002, 0x5}]}, 0x94)
socket(0x10, 0x3, 0x4)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000340)=""/62, 0x3e, 0x80, &(0x7f0000000380)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x190, 0x24, 0xf0b, 0x0, 0x1000001, {0x60, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x6}}, [@TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x9, 0x8, 0x6, 0x2, 0x7, 0x0, 0x5}}, {0xe, 0x2, [0x80, 0x85, 0x1, 0x7, 0x5]}}, {{0x1c, 0x1, {0x88, 0x2, 0xb1, 0x0, 0x0, 0x9, 0x8, 0x7}}, {0x12, 0x2, [0xbbba, 0x5, 0x8, 0x5, 0x0, 0x2, 0x1]}}, {{0x1c, 0x1, {0xa, 0xb, 0x3, 0xffffffff, 0x1, 0x3, 0x9, 0x4}}, {0xc, 0x2, [0x3, 0x7fff, 0x4, 0x0]}}, {{0x1c, 0x1, {0x2, 0x5, 0x1, 0x300000, 0x2, 0xff, 0x1, 0x7}}, {0x12, 0x2, [0xe, 0x6, 0x4, 0x1, 0x7, 0xfffc, 0x40]}}, {{0x1c, 0x1, {0x0, 0x4, 0x3, 0x0, 0x2, 0x495d, 0x0, 0x5}}, {0xe, 0x2, [0x8a, 0xfffc, 0x8001, 0x5, 0x2]}}, {{0x1c, 0x1, {0x71, 0x8, 0xfffe, 0x3, 0x1, 0xf2f, 0x1, 0x4}}, {0xc, 0x2, [0xffc6, 0xb, 0x0, 0x5]}}, {{0x1c, 0x1, {0x95, 0x2, 0x1, 0x2f, 0x0, 0x0, 0x4, 0x3}}, {0xa, 0x2, [0xfffe, 0x1, 0x4]}}, {{0x1c, 0x1, {0x6e, 0x7, 0xac, 0x0, 0x1bf73679a163b081, 0x9, 0x2, 0x7}}, {0x12, 0x2, [0x80, 0x7, 0x0, 0x5, 0x3, 0x1, 0x42b]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5c}]}, 0x190}, 0x1, 0x0, 0x0, 0x1}, 0x20000090)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0xbdb, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x10, 0x7, 0x7, 0x4}})
fsmount(r1, 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)

35m21.819218686s ago: executing program 3 (id=1225):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x52, 0x4007, @fd=r6, 0x6, 0x0, 0x0, 0x2, 0x1})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@none})

35m20.567694553s ago: executing program 3 (id=1228):
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000100)={0x6})
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
personality(0x5000004)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$mouse(&(0x7f0000000340), 0x6, 0x2a2442)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f00006c6000/0x4000)=nil, 0x4000, 0x8, 0x80010, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x3fce, &(0x7f0000000180)={0x0, 0x4ee3, 0x4, 0x3, 0x1b2}, 0x0, &(0x7f00000002c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier')

35m19.26339125s ago: executing program 3 (id=1231):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0)

35m17.647973538s ago: executing program 3 (id=1234):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x52, 0x4007, @fd=r6, 0x6, 0x0, 0x0, 0x2, 0x1})
ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000040)={0x5, 0x432, 0xa00, 0x8, 0xd, "a4c42ba02a0b3b4335931f2d038553da933b3a"})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})

35m14.119030737s ago: executing program 3 (id=1241):
mount$binderfs(0x0, 0x0, 0x0, 0x4800, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x26, 0x17, 0xc, 0x40, 0x1934, 0x706, 0xe29e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd1, 0x5e, 0xa4}}]}}]}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000001100)={0x3})
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pipe2$9p(0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000"], 0x30}, 0x0)
dup(0xffffffffffffffff)
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x1)
ppoll(&(0x7f0000000180)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x0)
close(0x3)

34m58.873652106s ago: executing program 32 (id=1241):
mount$binderfs(0x0, 0x0, 0x0, 0x4800, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x26, 0x17, 0xc, 0x40, 0x1934, 0x706, 0xe29e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd1, 0x5e, 0xa4}}]}}]}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000001100)={0x3})
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pipe2$9p(0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000"], 0x30}, 0x0)
dup(0xffffffffffffffff)
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x1)
ppoll(&(0x7f0000000180)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x0)
close(0x3)

1m48.91445435s ago: executing program 2 (id=6069):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
mprotect(&(0x7f0000660000/0x4000)=nil, 0x4000, 0x83a975551a4c0285)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getgroups(0x1, &(0x7f0000001080)=[0xee01])
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/134, 0x86)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)
capset(0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x80000, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@loopback}, @typed={0xfffffffffffffe78, 0x1, 0x0, 0x0, @ipv6=@dev}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817"]}]}, 0x114}], 0x1}, 0x140000c4)

1m47.009521991s ago: executing program 2 (id=6070):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0xe0002002})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs$userns(0x0, &(0x7f0000003940))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)

1m45.034939317s ago: executing program 2 (id=6074):
sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="8287783e623ea00a1e6474d9e40d42144f837f145aadc7a4ba5c329a925be7218ebd204080ccfba4630b4a8decb822cd13b196538c33c1cf394d707a1eda4238055032f6ba47f68e53a17f6871e1ffb8fb33f49a76", 0x55, 0x4082, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[], 0x0, 0x66}, 0x28)
symlinkat(0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000003c0)=0x6, r1, 0x0, 0x0, 0x1}}, 0x20)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)

1m43.73601384s ago: executing program 2 (id=6075):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
fcntl$dupfd(r0, 0x0, r0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x4810)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000))
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, {0x703, 0x4e4, 0x400, 0x3}})
ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'ip6gre0\x00'})
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600))
r7 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r9, 0x0, 0x0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r9, 0x0, 0x0)

1m43.436753613s ago: executing program 2 (id=6077):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000001c0)={0x3c, 0x7, 0x3, 0x8, 0x0, 0x4, 0x4, 0xf0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000080)={0x8, 0x7fff, 0x10, 0x0, 0x0, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x3, 0x4, 0xeeee0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x481}, 0x2004c080)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000140))
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c)
syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x4, 0x3a, 0x1, @mcast1, @mcast1}}}}}}}, 0x0)

22.791619833s ago: executing program 0 (id=6203):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x40080c0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x780, 0x0)
mknod(0x0, 0x0, 0x7)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0xff, 0x0, 0xee01}, {0x4bd, 0xfff, 0x3, 0xb67, 0x4, 0x7, 0x47c4e462, 0xffffffffa9ce4f30}, {0x8, 0x50, 0x100, 0x8}, 0x7, 0x6e6bb1, 0x1, 0x0, 0xf553a0de0e1028a, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x32}, 0xa, @in6=@private2, 0x3500, 0x3, 0x2, 0x4, 0x80000000, 0x3, 0x8b6}}, 0xe8)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x5)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0xffff, 0x6d7, 0x0, 0x79, 0x3, "5acf8f53872ebc82"})

21.231934257s ago: executing program 0 (id=6205):
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xdf)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000300)=0xf, 0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
close(0x3)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r4, 0x0, 0x0)
listen(r4, 0x80)
accept$netrom(r4, 0x0, 0x0)
close(0x3)

20.225112476s ago: executing program 0 (id=6206):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x23b)

19.872044241s ago: executing program 0 (id=6207):
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvlan0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000029c0)={0x4, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f000070f000/0x1000)=nil, 0x1000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0)
splice(r1, &(0x7f0000000240)=0x8, 0xffffffffffffffff, &(0x7f0000000340)=0x1, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1)

18.829453827s ago: executing program 0 (id=6209):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001e0001000000000002000000020000000100000e000000000800090000010000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x8042}, 0x2810)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x48c002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x5, 0x8, 0xf1, {0x77359400}, {0x77359400}, {0x3}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "1b34ba6b471f0adc"}}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan0\x00', <r4=>0x0})
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000200)={0x7f})
sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000240)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000680)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "dff648e1f4beecd42e216207004addf5b87842ee7caa88bbd602543307b644c2543198ba9c24ef32f1312707922a89b35e60c4f20f5b46f57e94bca19c4aa72d"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b6574000014000280080002400000000308000140000000023000018008"], 0xac}}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
socket$inet_icmp(0x2, 0x2, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xa00}, @NHA_OIF={0x8}]}, 0x34}}, 0x0)
shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil)

17.473107018s ago: executing program 0 (id=6211):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100, 0x1}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$input_event(r2, &(0x7f0000000200)={{0x77359400}, 0x11, 0xae, 0x7fffffff}, 0xffffffe7)

15.363808666s ago: executing program 1 (id=6215):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x40000)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4)
sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x601, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x40)

14.337351192s ago: executing program 4 (id=6216):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8, 0x800)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_FLOW={0x8, 0xb, 0xb05}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
r4 = syz_io_uring_setup(0x8, &(0x7f0000000840)={0x0, 0x6185, 0x400, 0x0, 0x40}, &(0x7f00000002c0), &(0x7f0000000680))
syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd, 0x0, r4}, 0x0, &(0x7f0000000300))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r5 = syz_open_dev$vim2m(&(0x7f0000002a80), 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000240)=@phonet={0x23, 0x5, 0xa, 0x4e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="23d7a2560c44ca7bf8a164cf3b271cfb486f05c5272a76c085ee354627075232cbbc821a81cb3e533b7a84b872ac0e204f4a3f811424e54fa32d4b510dd660e3a698cf857ee3151353444a07af5a2149f4f0443c9e1b75206c5a413f2a1e046de1528621438ae7e5b79d94d4c33486", 0x6f}, {0x0}, {&(0x7f0000000440)="658c4115788f055a996b4988d8f89fa47a1ce7e6ef86a847f228fd05882dd90826d4c0c91243bb8678746625c71897bc86f8aa15617c3531683ef0", 0x3b}, {&(0x7f0000000600)="f623554d970fc448b17da5f8c87381c0ace4782fc0dfaf0255a48e3fa9bddb7b42c5ef1fd699f29a7a4c56c7aae3fd7376374e3efef0445c7916fb13846c580e89d9180f00fe1a57d49b55616efa97ba3fd130d0fc15af785c251d", 0x5b}], 0x4}}], 0x1, 0x4008890)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000004c0)={0x1, @win={{0x401, 0x0, 0x47524247}, 0x7, 0x8, 0x0, 0x0, 0x0}})

13.531365717s ago: executing program 1 (id=6217):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x52, 0x4007, @fd, 0x6, 0x0, 0x0, 0x2, 0x1})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x5, 0x432, 0xa00, 0x8, 0xd, "a4c42ba02a0b3b4335931f2d038553da933b3a"})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}}, 0x4c}}, 0x20000080)

10.636573309s ago: executing program 5 (id=6219):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x4e}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080009efff000000100000000000000041e5ebcc54f30dbcf9c9e1d8258e54d96aceba50007d210ff9e5d5788bd927b132a311efbb8c724a9636b8b4893ef9cfbdfff4ebe5b7441b85f2d271ff7bb3fe6d86cf5b894f530d105c11445f99c9a537"], 0x24, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000)

9.38349294s ago: executing program 5 (id=6220):
r0 = socket(0x1e, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)=""/90, 0x5a}], 0x1, &(0x7f0000000b00)=""/203, 0xcb}, 0x8}], 0x1, 0x2002, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x4000001)

9.016179706s ago: executing program 4 (id=6221):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x20440, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = userfaultfd(0x801)
getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
r3 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, {0x0, r6}})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
read$msr(r0, 0x0, 0x0)
landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000001fc0), 0xa0000, 0x0)

8.9976513s ago: executing program 5 (id=6222):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c)
r1 = creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{}, {0x2, 0x6}], {}, [], {0x10, 0x2}}, 0x34, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000240)=""/125)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12)

8.773034465s ago: executing program 1 (id=6223):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x5)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rseq_update\x00', r0}, 0x10)
syz_open_dev$MSR(0x0, 0x0, 0x0)

7.76482616s ago: executing program 4 (id=6224):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4895)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
shmdt(0x0)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
kcmp(0x0, 0xffffffffffffffff, 0x3, r1, r0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
dup(0xffffffffffffffff)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{}, {&(0x7f00000005c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c", 0x4a}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02", 0x84}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416ad", 0x95}], 0x4}}], 0x1, 0xc0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)

7.531997086s ago: executing program 5 (id=6225):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
socket$inet6(0xa, 0x80003, 0xff)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x2, @empty}, 0x0, {[0x6159, 0x0, 0x8, 0x2]}}, 0x5c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x41}, 0x94)

6.245461589s ago: executing program 5 (id=6226):
fsopen(&(0x7f0000000080)='nfs\x00', 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
socket$inet6(0xa, 0x1, 0x100)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r3, 0xfffffffffffffffd, 0x58)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006b", 0x7}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000})
ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x2000c004)

5.904705059s ago: executing program 4 (id=6227):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
creat(0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4868b81f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc490", 0xac}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc533f123b66d04d51fb740c1efdf8db", 0x4a}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x14c}], 0x1}}], 0x2, 0x0)
sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5.702991408s ago: executing program 1 (id=6228):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=@upd={0x120, 0x12, 0x200, 0x70bd28, 0x25dfdbff, {{'pcbc(aes)\x00'}, '\x00', '\x00', 0x4400, 0x2000}, [{0x8, 0x1, 0xfff}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0xe858}, {0x8, 0x1, 0xd}, {0x8, 0x1, 0xa00}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x800}]}, 0x120}, 0x1, 0x0, 0x0, 0x50}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0xe0002002})
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x2d8, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338)
syz_open_procfs$userns(0x0, &(0x7f0000003940))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba80000012", 0x2d}], 0x1}, 0x0)

5.407137065s ago: executing program 4 (id=6229):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x4e}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080009efff000000100000000000000041e5ebcc54f30dbcf9c9e1d8258e54d96aceba50007d210ff9e5d5788bd927b132a311efbb8c724a9636b8b4893ef9cfbdfff4ebe5b7441b85f2d271ff7bb3fe6d86cf5b894f530d105c11445f99c9a537"], 0x24, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000)

3.350145393s ago: executing program 1 (id=6230):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0xc, 0x8, 0x0, 0x3}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
timer_create(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004704000001ed00b062030000000000000c440000000000007a0a00fe00ffffffd704000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9234a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14235bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e5"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)='\'\x00')
sendmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='o', 0x1}], 0x1}}], 0x1, 0x44810)
recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)

3.342146883s ago: executing program 4 (id=6231):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8, 0x800)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_FLOW={0x8, 0xb, 0xb05}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
r4 = syz_io_uring_setup(0x8, &(0x7f0000000840)={0x0, 0x6185, 0x400, 0x0, 0x40}, &(0x7f00000002c0), &(0x7f0000000680))
syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd, 0x0, r4}, 0x0, &(0x7f0000000300))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r5 = syz_open_dev$vim2m(&(0x7f0000002a80), 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000240)=@phonet={0x23, 0x5, 0xa, 0x4e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="23d7a2560c44ca7bf8a164cf3b271cfb486f05c5272a76c085ee354627075232cbbc821a81cb3e533b7a84b872ac0e204f4a3f811424e54fa32d4b510dd660e3a698cf857ee3151353444a07af5a2149f4f0443c9e1b75206c5a413f2a1e046de1528621438ae7e5b79d94d4c33486", 0x6f}, {0x0}, {&(0x7f0000000440)="658c4115788f055a996b4988d8f89fa47a1ce7e6ef86a847f228fd05882dd90826d4c0c91243bb8678746625c71897bc86f8aa15617c3531683ef0", 0x3b}, {&(0x7f0000000600)="f623554d970fc448b17da5f8c87381c0ace4782fc0dfaf0255a48e3fa9bddb7b42c5ef1fd699f29a7a4c56c7aae3fd7376374e3efef0445c7916fb13846c580e89d9180f00fe1a57d49b55616efa97ba3fd130d0fc15af785c251d", 0x5b}], 0x4}}], 0x1, 0x4008890)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000004c0)={0x1, @win={{0x401, 0x0, 0x47524247}, 0x7, 0x8, 0x0, 0x0, 0x0}})

3.177140499s ago: executing program 5 (id=6232):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x52, 0x4007, @fd, 0x6, 0x0, 0x0, 0x2, 0x1})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x5, 0x432, 0xa00, 0x8, 0xd, "a4c42ba02a0b3b4335931f2d038553da933b3a"})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}}, 0x4c}}, 0x20000080)

2.08661147s ago: executing program 33 (id=6211):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100, 0x1}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$input_event(r2, &(0x7f0000000200)={{0x77359400}, 0x11, 0xae, 0x7fffffff}, 0xffffffe7)

666.148545ms ago: executing program 2 (id=6081):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r0)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8000)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000c3ae66dada18aca911786cb22dd58340ad3fdb8287bc9d2b8624f0"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000680)={'syz1\x00', {0xc, 0x0, 0x8, 0x9}, 0x1e, [0x1, 0x0, 0x0, 0x401, 0x4, 0x0, 0x3, 0x2, 0x2, 0xebbf, 0xffff, 0x9fe, 0x3, 0x3, 0xfffffffd, 0x80000000, 0x7, 0x8001, 0x2000000, 0x3, 0x84, 0x5b, 0x2, 0x9a, 0x6, 0x9, 0x3587, 0x9, 0x8, 0xfffffff7, 0x7, 0x9, 0xffffffff, 0x0, 0xfff, 0xfffffff5, 0x14, 0x1, 0x5, 0x7, 0xfffffffc, 0x1f, 0x0, 0x581, 0x1b8000, 0x800, 0x1, 0x1, 0x2, 0x10, 0x9, 0x4c5c056b, 0x7, 0xb, 0xcb8f, 0x9, 0xa2, 0x8, 0x42, 0x6, 0x8, 0x5, 0x5c8, 0x3], [0xe, 0x8, 0x3e, 0x8, 0xb06c, 0x7, 0x5, 0x44, 0xd, 0x1000, 0x2, 0xa9, 0x695c, 0x604f, 0x80000000, 0x4, 0x0, 0x7f8, 0x6, 0x1000, 0x2, 0xfffffffa, 0x7ff, 0x9, 0x7fffffff, 0x2, 0x5, 0xa, 0x7, 0xb04, 0x9ed, 0x1, 0x2, 0x8, 0x874, 0xd, 0x7, 0x6, 0x5, 0xfffffbff, 0x9, 0x8569, 0xfffffffa, 0x0, 0x5, 0x6, 0x80000001, 0x3, 0x252, 0x0, 0x10000, 0x0, 0x4, 0xff, 0x3, 0xfffffff9, 0x52400000, 0xca, 0x5, 0x26, 0x1000, 0x80, 0x3], [0x2, 0xa, 0x40, 0x5c9, 0x5, 0x2, 0x7fffffff, 0x3, 0x0, 0x2, 0xfffffffc, 0x9, 0xf7d, 0x5, 0x2, 0x2, 0x2, 0x0, 0x1ff, 0x4, 0xec, 0x2, 0x8, 0x73, 0x0, 0x2, 0x7, 0x4, 0x3, 0x1, 0xc5, 0x9cb, 0x6dca, 0x6, 0xc, 0x1, 0x9, 0x8, 0x7fffffff, 0x7, 0x9, 0x6, 0x3, 0x9, 0x1, 0x3cc7, 0x5, 0x7f, 0xb, 0x9290, 0xb, 0x5, 0x0, 0x9, 0x40, 0x0, 0x0, 0x9, 0x7, 0x3, 0x4, 0x6, 0x9, 0x4], [0x0, 0x0, 0xffff8000, 0x2, 0x40, 0x164, 0x9, 0x2, 0x0, 0x10000, 0x7, 0x400, 0x5777, 0x8, 0xcfad, 0x2, 0x3ff, 0x200, 0x1ff, 0x401, 0xfffffffb, 0x8, 0x9, 0x0, 0x5, 0x81, 0x1, 0x8, 0xb6, 0x1b, 0x8, 0x8000, 0x9, 0x8, 0x7, 0x3, 0x0, 0x9, 0x3, 0x1, 0x4, 0x3, 0x1, 0x9, 0x6, 0x0, 0x1ff00, 0x3, 0x6, 0x7, 0x1, 0xffffffff, 0x7fec, 0x0, 0x2, 0x9, 0xfe4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x6, 0x6]}, 0x45c)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, r3, 0xf6a5d000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0x1, @dev, @private1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x4)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x2, @local}, {0xa, 0xfffd, 0x0, @empty}, 0x1, {[0x0, 0x1]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x9, @local}, {0xa, 0x0, 0x0, @empty}, 0xfffd, {[0x0, 0x0, 0x0, 0x0, 0x4, 0xe3]}}, 0x5c)

0s ago: executing program 1 (id=6234):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
write$cgroup_int(r0, &(0x7f0000000000)=0xb00, 0x12)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240488d4}, 0x4000)

kernel console output (not intermixed with test programs):

found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1882.787366][T18341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1882.819181][T18341] usb 2-1: Product: syz
[ 1882.826613][T18341] usb 2-1: Manufacturer: syz
[ 1882.847021][T18341] usb 2-1: SerialNumber: syz
[ 1883.061718][    T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1883.078931][T18341] usb 2-1: 32:2 : does not exist
[ 1883.130068][T19074] wireguard0: entered promiscuous mode
[ 1883.135616][T19074] wireguard0: entered allmulticast mode
[ 1883.189090][ T5166] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1883.202630][ T5166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1883.211662][ T5166] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1883.223102][T18341] usb 2-1: USB disconnect, device number 34
[ 1883.231176][ T5166] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1883.241376][ T5166] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1883.257988][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1883.298359][    T9] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 1883.382662][    T9] usb 6-1: config 0 has no interface number 0
[ 1883.431037][T17577] udevd[17577]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.32/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1883.460336][    T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1883.478061][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1883.488806][    T9] usb 6-1: Product: syz
[ 1883.498898][    T9] usb 6-1: Manufacturer: syz
[ 1883.508842][    T9] usb 6-1: SerialNumber: syz
[ 1883.551266][    T9] usb 6-1: config 0 descriptor??
[ 1883.571111][    T9] hub 6-1:0.132: bad descriptor, ignoring hub
[ 1883.585605][ T5856] syz_tun (unregistering): left allmulticast mode
[ 1883.594770][    T9] hub 6-1:0.132: probe with driver hub failed with error -5
[ 1883.633221][    T9] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input105
[ 1883.928218][T19091] netlink: 'syz.5.3148': attribute type 4 has an invalid length.
[ 1883.936629][T19091] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3148'.
[ 1885.017243][T19097] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3153'.
[ 1885.194379][T19100] loop0: detected capacity change from 0 to 128
[ 1885.209456][T19100] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1885.379279][ T5166] Bluetooth: hci1: command tx timeout
[ 1886.097669][T19100] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1887.457922][ T5166] Bluetooth: hci1: command tx timeout
[ 1888.049424][T18341] usb 6-1: USB disconnect, device number 29
[ 1889.665061][ T5166] Bluetooth: hci1: command tx timeout
[ 1890.908732][T19124] loop4: detected capacity change from 0 to 128
[ 1890.965938][T19127] loop1: detected capacity change from 0 to 128
[ 1891.001312][T19077] chnl_net:caif_netlink_parms(): no params data found
[ 1892.370938][ T5166] Bluetooth: hci1: command tx timeout
[ 1893.205001][T19144] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3161'.
[ 1894.383184][T15044] kworker/u8:5: attempt to access beyond end of device
[ 1894.383184][T15044] loop4: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1894.466681][T19077] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1894.506095][T19077] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1894.565430][T19077] bridge_slave_0: entered allmulticast mode
[ 1894.589459][T19152] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3165'.
[ 1894.609268][T19077] bridge_slave_0: entered promiscuous mode
[ 1894.625587][T19077] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1894.632961][T19077] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1894.646022][T19077] bridge_slave_1: entered allmulticast mode
[ 1894.654170][T19077] bridge_slave_1: entered promiscuous mode
[ 1895.502716][T19077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1895.546900][T19077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1895.857011][T19077] team0: Port device team_slave_0 added
[ 1895.879736][T19077] team0: Port device team_slave_1 added
[ 1895.972722][T19077] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1895.983138][T19077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1896.024833][T19077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1896.047886][T19077] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1896.054882][T19077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1896.081550][T19077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1897.052510][T19077] hsr_slave_0: entered promiscuous mode
[ 1897.071024][T19077] hsr_slave_1: entered promiscuous mode
[ 1897.082276][T19077] debugfs: 'hsr0' already exists in 'hsr'
[ 1897.098004][T19077] Cannot create hsr debugfs directory
[ 1897.228130][ T5930] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 1897.404787][ T5930] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1897.431434][ T5930] usb 5-1: config 16 has an invalid interface number: 195 but max is 0
[ 1897.452674][ T5930] usb 5-1: config 16 has 2 interfaces, different from the descriptor's value: 1
[ 1897.473895][ T5930] usb 5-1: config 16 has no interface number 1
[ 1897.486352][ T5930] usb 5-1: config 16 interface 195 altsetting 128 bulk endpoint 0xC has invalid maxpacket 1023
[ 1897.506722][ T5930] usb 5-1: config 16 interface 195 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 768
[ 1897.522134][ T5930] usb 5-1: config 16 interface 195 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1897.545486][ T5930] usb 5-1: config 16 interface 195 has no altsetting 0
[ 1897.571395][ T5930] usb 5-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=e6.ce
[ 1897.593422][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1897.634758][ T5930] usb 5-1: Product: syz
[ 1897.691023][ T5930] usb 5-1: Manufacturer: syz
[ 1897.695913][ T5930] usb 5-1: SerialNumber: syz
[ 1897.724796][T19174] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1897.759124][T19174] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1898.599137][ T5930] usb 5-1: bad CDC descriptors
[ 1898.666965][ T5930] usb 5-1: USB disconnect, device number 37
[ 1898.867037][T19194] wireguard0: entered promiscuous mode
[ 1898.881023][T19194] wireguard0: entered allmulticast mode
[ 1900.100709][T19209] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1901.250462][T19077] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1901.316145][T19077] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1901.410436][T19077] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1901.928049][T19077] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1902.393567][T19077] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1902.421448][T19077] 8021q: adding VLAN 0 to HW filter on device team0
[ 1902.446303][T18483] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1902.453578][T18483] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1902.505630][T15044] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1902.512894][T15044] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1905.125894][T19263] loop4: detected capacity change from 0 to 128
[ 1905.523761][T19272] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3198'.
[ 1906.136182][T19273] syz.4.3196: attempt to access beyond end of device
[ 1906.136182][T19273] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 1906.541438][T19272] batadv1: entered promiscuous mode
[ 1907.262246][T19272] batadv1: entered allmulticast mode
[ 1907.301632][T19276] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3198'.
[ 1907.367670][T19077] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1907.388310][ T5930] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1907.443908][T19279] fuse: Unknown parameter '0x0000000000000007'
[ 1907.570517][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1907.593759][T19077] veth0_vlan: entered promiscuous mode
[ 1907.783538][ T5930] usb 2-1: config 16 has an invalid interface number: 195 but max is 0
[ 1907.794738][T19077] veth1_vlan: entered promiscuous mode
[ 1907.829322][ T5930] usb 2-1: config 16 has 2 interfaces, different from the descriptor's value: 1
[ 1908.550718][ T5930] usb 2-1: config 16 has no interface number 1
[ 1908.557003][ T5930] usb 2-1: config 16 interface 195 altsetting 128 bulk endpoint 0xC has invalid maxpacket 1023
[ 1908.737438][T19077] veth0_macvtap: entered promiscuous mode
[ 1908.747378][ T5930] usb 2-1: config 16 interface 195 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 768
[ 1908.772712][ T5930] usb 2-1: config 16 interface 195 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1908.788949][T19287] loop5: detected capacity change from 0 to 128
[ 1908.808843][ T5930] usb 2-1: config 16 interface 195 has no altsetting 0
[ 1908.828447][T19077] veth1_macvtap: entered promiscuous mode
[ 1908.893875][ T5930] usb 2-1: string descriptor 0 read error: -71
[ 1908.929562][ T5930] usb 2-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=e6.ce
[ 1908.946590][T19077] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1908.959958][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1909.126466][T19077] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1909.189389][ T5930] usb 2-1: can't set config #16, error -71
[ 1909.838802][T19293] syz.5.3202: attempt to access beyond end of device
[ 1909.838802][T19293] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 1910.159017][ T5930] usb 2-1: USB disconnect, device number 35
[ 1910.695224][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1911.217911][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1911.269762][ T1329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1911.298979][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1911.306852][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1911.389362][ T1329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1911.514047][T17976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1911.537556][T17976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1912.335543][T19307] trusted_key: encrypted_key: insufficient parameters specified
[ 1912.344188][T19307] trusted_key: encrypted_key: insufficient parameters specified
[ 1913.100249][T19311] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3209'.
[ 1913.175929][T19311] batadv2: entered promiscuous mode
[ 1913.182182][T19313] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3209'.
[ 1913.207519][T19311] batadv2: entered allmulticast mode
[ 1913.306250][T19316] fuse: Unknown parameter '0x0000000000000007'
[ 1914.744296][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1918.138526][T19356] trusted_key: encrypted_key: insufficient parameters specified
[ 1918.150871][T19356] trusted_key: encrypted_key: insufficient parameters specified
[ 1918.866996][T19362] loop1: detected capacity change from 0 to 128
[ 1919.049255][T19357] syz.4.3215 (19357): drop_caches: 2
[ 1919.346544][T19359] loop0: detected capacity change from 0 to 2048
[ 1919.712887][T19367] syz.1.3224: attempt to access beyond end of device
[ 1919.712887][T19367] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 1921.125772][T19359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1922.168046][T19370] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[ 1922.314184][   T13] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1922.336757][   T13] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 1922.336757][   T13] 
[ 1922.519213][   T13] EXT4-fs (loop0): Total free blocks count 0
[ 1922.525858][   T13] EXT4-fs (loop0): Free/Dirty block details
[ 1922.531982][   T13] EXT4-fs (loop0): free_blocks=4096
[ 1922.537331][   T13] EXT4-fs (loop0): dirty_blocks=16
[ 1922.545678][   T13] EXT4-fs (loop0): Block reservation details
[ 1922.552820][   T13] EXT4-fs (loop0): i_reserved_data_blocks=1
[ 1922.560550][   T13] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28
[ 1922.698272][T19378] Cannot find add_set index 0 as target
[ 1922.722355][T19378] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input106
[ 1926.323419][T19403] trusted_key: encrypted_key: insufficient parameters specified
[ 1926.331693][T19403] trusted_key: encrypted_key: insufficient parameters specified
[ 1927.192629][T19408] loop5: detected capacity change from 0 to 128
[ 1928.363173][T19419] syz.5.3235: attempt to access beyond end of device
[ 1928.363173][T19419] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 1930.144087][T19427] loop1: detected capacity change from 0 to 512
[ 1930.262816][T19427] EXT4-fs: Ignoring removed oldalloc option
[ 1930.272610][T19432] loop5: detected capacity change from 0 to 128
[ 1930.287313][T19432] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1932.145060][T19432] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1933.488164][T19427] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1933.554681][T19427] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 1933.629545][T19427] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 1933.838174][T19427] EXT4-fs: failed to create workqueue
[ 1933.904742][T19427] EXT4-fs (loop1): mount failed
[ 1934.091847][T10930] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1934.436700][T19446] trusted_key: encrypted_key: insufficient parameters specified
[ 1934.448854][T19446] trusted_key: encrypted_key: insufficient parameters specified
[ 1934.708140][T10930] usb 6-1: Using ep0 maxpacket: 16
[ 1935.480115][T10930] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[ 1935.510779][T10930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1935.592611][T10930] usb 6-1: config 0 has no interface number 0
[ 1935.624840][T10930] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 1935.638014][T10930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1935.699170][T10930] usb 6-1: Product: syz
[ 1935.708410][T10930] usb 6-1: Manufacturer: syz
[ 1935.886639][T10930] usb 6-1: SerialNumber: syz
[ 1935.915013][T10930] usb 6-1: config 0 descriptor??
[ 1936.190779][T19452] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[ 1936.493079][T10930] usb 6-1: USB disconnect, device number 30
[ 1936.751249][T19460] loop1: detected capacity change from 0 to 128
[ 1936.764396][T19460] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1939.610048][T18344] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 1939.668969][T19460] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1939.797828][T18344] usb 5-1: Using ep0 maxpacket: 16
[ 1940.000059][   T13] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1940.028389][T18344] usb 5-1: device descriptor read/all, error -71
[ 1942.084874][T19477] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[ 1942.667822][T10930] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1943.314255][T10930] usb 3-1: Using ep0 maxpacket: 16
[ 1943.352841][T10930] usb 3-1: descriptor type invalid, skip
[ 1943.411099][T10930] usb 3-1: descriptor type invalid, skip
[ 1943.511511][T10930] usb 3-1: descriptor type invalid, skip
[ 1943.858834][T10930] usb 3-1: descriptor type invalid, skip
[ 1943.968264][T10930] usb 3-1: descriptor type invalid, skip
[ 1943.997818][T10930] usb 3-1: descriptor type invalid, skip
[ 1944.006582][T19494] loop4: detected capacity change from 0 to 512
[ 1944.023443][T10930] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1944.042486][T19494] EXT4-fs: Ignoring removed oldalloc option
[ 1944.051343][T10930] usb 3-1: can't read configurations, error -71
[ 1944.072071][T19494] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1944.100112][T19494] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 1944.125025][T19494] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[ 1944.161292][T19494] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c02c, mo2=0102]
[ 1944.180021][T19501] netlink: 'syz.2.3266': attribute type 11 has an invalid length.
[ 1944.192337][T19494] System zones: 0-2, 18-18, 34-34
[ 1944.211368][T19501] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3266'.
[ 1944.211474][T19494] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.3263: iget: bad i_size value: 360287970189639680
[ 1944.248414][T19494] EXT4-fs (loop4): Remounting filesystem read-only
[ 1944.256862][T19494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1944.293577][T19504] loop2: detected capacity change from 0 to 1024
[ 1944.545070][T19504] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[ 1944.681323][T19504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1944.797385][   T30] kauditd_printk_skb: 58 callbacks suppressed
[ 1944.797406][   T30] audit: type=1326 audit(1752541393.793:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1518e929 code=0x7fc00000
[ 1944.886917][   T30] audit: type=1326 audit(1752541393.833:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf1518e929 code=0x7fc00000
[ 1945.001518][   T30] audit: type=1326 audit(1752541393.983:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1518e929 code=0x7fc00000
[ 1945.008082][T19499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1945.078380][ T5959] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1945.139559][   T30] audit: type=1326 audit(1752541393.983:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7faf1518e929 code=0x7fc00000
[ 1945.230405][T19077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1945.251929][T19515] loop0: detected capacity change from 0 to 2048
[ 1945.263156][   T30] audit: type=1326 audit(1752541393.983:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1518e929 code=0x7fc00000
[ 1945.287111][ T5959] usb 6-1: Using ep0 maxpacket: 16
[ 1945.308136][ T5959] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[ 1945.316357][ T5959] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1945.367660][   T30] audit: type=1326 audit(1752541393.983:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1518e929 code=0x7fc00000
[ 1945.402693][ T5959] usb 6-1: config 0 has no interface number 0
[ 1945.422194][T19515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1945.453296][ T5959] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 1945.464388][   T30] audit: type=1326 audit(1752541393.983:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1518e929 code=0x7fc00000
[ 1945.506362][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1945.553367][ T5959] usb 6-1: Product: syz
[ 1945.573435][ T5959] usb 6-1: Manufacturer: syz
[ 1945.579776][ T5959] usb 6-1: SerialNumber: syz
[ 1945.584665][   T30] audit: type=1326 audit(1752541393.983:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1518e929 code=0x7fc00000
[ 1945.648893][ T5959] usb 6-1: config 0 descriptor??
[ 1945.738197][   T30] audit: type=1326 audit(1752541393.983:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1518e929 code=0x7fc00000
[ 1945.800990][   T30] audit: type=1326 audit(1752541393.983:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1518e929 code=0x7fc00000
[ 1946.812145][T18581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1947.653543][ T5959] usb 6-1: USB disconnect, device number 31
[ 1947.731396][   T78] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[ 1947.755072][   T78] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1947.770219][   T78] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 1947.770219][   T78] 
[ 1947.783089][   T78] EXT4-fs (loop0): Total free blocks count 0
[ 1947.794651][   T78] EXT4-fs (loop0): Free/Dirty block details
[ 1947.806140][   T78] EXT4-fs (loop0): free_blocks=4096
[ 1947.840671][   T78] EXT4-fs (loop0): dirty_blocks=16
[ 1947.879734][   T78] EXT4-fs (loop0): Block reservation details
[ 1947.956834][   T78] EXT4-fs (loop0): i_reserved_data_blocks=1
[ 1948.038145][   T78] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28
[ 1950.846520][T19561] loop4: detected capacity change from 0 to 128
[ 1950.939440][ T5166] Bluetooth: hci2: unexpected event for opcode 0x0062
[ 1951.219054][T19567] xt_bpf: check failed: parse error
[ 1952.979365][ T5166] Bluetooth: hci3: command 0x0406 tx timeout
[ 1953.497645][ T9272] Bluetooth: hci3: unexpected event for opcode 0x0062
[ 1954.980183][ T9272] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1954.989911][ T9272] Bluetooth: hci2: Injecting HCI hardware error event
[ 1954.999039][ T5166] Bluetooth: hci2: hardware error 0x00
[ 1955.702840][T19604] loop0: detected capacity change from 0 to 2048
[ 1955.799448][T19612] netlink: 'syz.1.3299': attribute type 11 has an invalid length.
[ 1955.811432][T19604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1955.813459][T19612] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3299'.
[ 1956.027833][ T9272] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1956.036556][ T9272] Bluetooth: hci1: Injecting HCI hardware error event
[ 1956.046217][ T9272] Bluetooth: hci1: hardware error 0x00
[ 1956.738313][T19615] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[ 1956.863662][T19612] loop1: detected capacity change from 0 to 1024
[ 1956.885116][   T78] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1956.901265][T19612] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[ 1956.962113][   T78] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 1956.962113][   T78] 
[ 1956.972372][   T78] EXT4-fs (loop0): Total free blocks count 0
[ 1956.982790][   T78] EXT4-fs (loop0): Free/Dirty block details
[ 1957.001191][T19612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1957.007790][   T78] EXT4-fs (loop0): free_blocks=4096
[ 1957.023737][   T78] EXT4-fs (loop0): dirty_blocks=16
[ 1957.029321][   T78] EXT4-fs (loop0): Block reservation details
[ 1957.035354][   T78] EXT4-fs (loop0): i_reserved_data_blocks=1
[ 1957.049821][   T78] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28
[ 1957.308663][T19611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1957.386926][ T5166] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1957.764153][ T5166] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1957.774454][ T5166] Bluetooth: hci3: Injecting HCI hardware error event
[ 1957.786448][ T5166] Bluetooth: hci3: hardware error 0x00
[ 1958.399142][T17333] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1959.067933][ T9272] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1959.075994][T19642] loop5: detected capacity change from 0 to 2048
[ 1960.151644][T19642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1960.418002][ T5166] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1961.276943][T11739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1962.375105][T19659] sctp: [Deprecated]: syz.1.3311 (pid 19659) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1962.375105][T19659] Use struct sctp_sack_info instead
[ 1963.342222][T19689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3318'.
[ 1963.633993][T19692] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1964.426638][T19701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3322'.
[ 1964.858252][    T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1965.377978][    T9] usb 2-1: Using ep0 maxpacket: 16
[ 1965.395828][    T9] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[ 1965.451333][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1965.481672][    T9] usb 2-1: config 0 has no interface number 0
[ 1965.522053][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 1965.545022][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1965.573054][    T9] usb 2-1: Product: syz
[ 1965.596284][    T9] usb 2-1: Manufacturer: syz
[ 1965.615486][    T9] usb 2-1: SerialNumber: syz
[ 1965.636963][    T9] usb 2-1: config 0 descriptor??
[ 1965.773700][T19728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3330'.
[ 1966.515772][ T5910] usb 2-1: USB disconnect, device number 36
[ 1966.899537][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3335'.
[ 1969.768466][T19756] netlink: 'syz.4.3339': attribute type 4 has an invalid length.
[ 1969.817797][T19756] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3339'.
[ 1969.928485][T19756] : renamed from bond0 (while UP)
[ 1972.443606][T19800] xt_bpf: check failed: parse error
[ 1973.844596][ T9272] Bluetooth: hci5: unexpected event for opcode 0x0062
[ 1976.018518][ T5910] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1976.207851][ T5910] usb 6-1: Using ep0 maxpacket: 16
[ 1976.230448][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1976.295386][ T5910] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 1976.373670][ T5910] usb 6-1: config 0 has no interface number 0
[ 1976.869798][ T5910] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1976.882456][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1976.966448][ T5910] usb 6-1: Product: syz
[ 1977.018922][ T5910] usb 6-1: Manufacturer: syz
[ 1977.075800][ T5910] usb 6-1: SerialNumber: syz
[ 1977.496682][ T5910] usb 6-1: config 0 descriptor??
[ 1977.502844][T19854] loop2: detected capacity change from 0 to 512
[ 1977.531002][T19854] EXT4-fs: Ignoring removed oldalloc option
[ 1977.541870][T19854] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1977.582576][ T5910] hub 6-1:0.132: bad descriptor, ignoring hub
[ 1977.627045][ T5910] hub 6-1:0.132: probe with driver hub failed with error -5
[ 1977.668643][T19854] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 1977.732349][T19854] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[ 1977.732443][ T5910] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input107
[ 1977.877121][T19860] netlink: 'syz.5.3362': attribute type 4 has an invalid length.
[ 1977.885306][T19860] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3362'.
[ 1977.885487][ T5166] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[ 1977.909386][ T5166] Bluetooth: hci5: Injecting HCI hardware error event
[ 1977.923163][ T9272] Bluetooth: hci5: hardware error 0x00
[ 1977.964559][T19854] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c02c, mo2=0102]
[ 1977.974540][T19854] System zones: 0-2, 18-18, 34-34
[ 1978.044124][T19854] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.3366: iget: bad i_size value: 360287970189639680
[ 1978.373064][T19854] EXT4-fs (loop2): Remounting filesystem read-only
[ 1978.388325][T19854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1978.407321][ T5166] Bluetooth: hci0: unexpected event for opcode 0x0062
[ 1978.415684][ T5910] usb 6-1: USB disconnect, device number 32
[ 1978.914966][   T30] kauditd_printk_skb: 58 callbacks suppressed
[ 1978.914985][   T30] audit: type=1326 audit(1752541427.913:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199b78e929 code=0x7fc00000
[ 1978.944083][   T30] audit: type=1326 audit(1752541427.913:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199b78e929 code=0x7fc00000
[ 1979.762787][   T30] audit: type=1326 audit(1752541427.943:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199b78e929 code=0x7fc00000
[ 1979.863204][   T30] audit: type=1326 audit(1752541427.943:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199b78e929 code=0x7fc00000
[ 1979.924943][   T30] audit: type=1326 audit(1752541427.943:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199b78e929 code=0x7fc00000
[ 1979.968258][   T30] audit: type=1326 audit(1752541427.943:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199b78e929 code=0x7fc00000
[ 1980.039714][   T30] audit: type=1326 audit(1752541427.943:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199b78e929 code=0x7fc00000
[ 1980.074785][   T30] audit: type=1326 audit(1752541427.943:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199b78e929 code=0x7fc00000
[ 1980.634684][   T30] audit: type=1326 audit(1752541427.943:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199b78e929 code=0x7fc00000
[ 1980.660269][ T9272] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 1980.665747][   T30] audit: type=1326 audit(1752541427.943:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19848 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199b78e929 code=0x7fc00000
[ 1981.784157][T19077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1982.419325][ T9272] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1982.430895][ T9272] Bluetooth: hci0: Injecting HCI hardware error event
[ 1983.465844][ T5917] hid-generic 0001:0000:0000.000F: unknown main item tag 0x0
[ 1983.519976][ T5917] hid-generic 0001:0000:0000.000F: hidraw0: <UNKNOWN> HID va0000.00 Device [syz1] on syz0
[ 1984.809667][T19924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3385'.
[ 1984.888282][T19924] : entered promiscuous mode
[ 1984.893521][T19924] bond_slave_0: entered promiscuous mode
[ 1984.900120][T19924] bond_slave_1: entered promiscuous mode
[ 1984.906819][T19924] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1984.919229][T19924] : left promiscuous mode
[ 1984.923764][T19924] bond_slave_0: left promiscuous mode
[ 1984.940241][T19924] bond_slave_1: left promiscuous mode
[ 1985.216502][T19927] loop0: detected capacity change from 0 to 2048
[ 1985.289304][T19927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1986.548226][   T12] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[ 1986.644975][   T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1986.902366][T19940] xt_bpf: check failed: parse error
[ 1987.487540][   T12] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 1987.487540][   T12] 
[ 1987.497391][   T12] EXT4-fs (loop0): Total free blocks count 0
[ 1987.503480][   T12] EXT4-fs (loop0): Free/Dirty block details
[ 1987.509488][   T12] EXT4-fs (loop0): free_blocks=4096
[ 1987.515656][   T12] EXT4-fs (loop0): dirty_blocks=16
[ 1987.683576][   T12] EXT4-fs (loop0): Block reservation details
[ 1987.720154][   T12] EXT4-fs (loop0): i_reserved_data_blocks=1
[ 1987.730251][   T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28
[ 1992.787859][T19993] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3398'.
[ 1996.206973][T20025] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3409'.
[ 1998.135713][T20039] syz.0.3410 (20039): drop_caches: 2
[ 1998.474514][T20044] netlink: 'syz.2.3413': attribute type 4 has an invalid length.
[ 1998.482506][T20044] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3413'.
[ 1998.497493][T20044] : renamed from bond0 (while UP)
[ 1998.918784][T20050] netlink: 'syz.1.3414': attribute type 10 has an invalid length.
[ 1998.940769][T20050] team0: Device ipvlan1 failed to register rx_handler
[ 2000.672473][T20075] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3421'.
[ 2000.726275][T20075] batadv1: entered promiscuous mode
[ 2000.766041][T20075] batadv1: entered allmulticast mode
[ 2000.825307][T20078] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3421'.
[ 2001.176574][T20081] overlayfs: cannot append lower layer
[ 2005.332054][T20120] netlink: 'syz.5.3430': attribute type 10 has an invalid length.
[ 2005.348534][T20120] team0: Device ipvlan1 failed to register rx_handler
[ 2007.141883][T20137] loop4: detected capacity change from 0 to 128
[ 2008.315963][T20146] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3439'.
[ 2010.255400][T20167] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3444'.
[ 2012.328856][T20189] loop1: detected capacity change from 0 to 128
[ 2013.085817][T20195] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3453'.
[ 2013.818683][T20203] netlink: 'syz.2.3454': attribute type 10 has an invalid length.
[ 2013.840796][T20203] team0: Device ipvlan1 failed to register rx_handler
[ 2017.045017][T20235] netlink: 'syz.1.3463': attribute type 10 has an invalid length.
[ 2017.065611][T20235] team0: Device ipvlan1 failed to register rx_handler
[ 2017.666986][T20239] loop0: detected capacity change from 0 to 128
[ 2018.782564][T20250] binfmt_misc: register: failed to install interpreter file ./file2
[ 2019.327815][T20259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3471'.
[ 2019.478933][T20265] block nbd5: not configured, cannot reconfigure
[ 2019.552642][T20266] netlink: 'syz.4.3469': attribute type 10 has an invalid length.
[ 2020.102118][T20266] team0: Device ipvlan1 failed to register rx_handler
[ 2020.342135][ T5166] Bluetooth: hci0: hardware error 0x00
[ 2021.122353][T20292] loop1: detected capacity change from 0 to 64
[ 2021.146485][T20269] loop0: detected capacity change from 0 to 32768
[ 2021.273422][T20269] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 2021.357897][T20269] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 2021.452700][T20269] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[ 2021.480351][ T5910] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 2021.489813][ T5910] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 2021.744900][T20280] loop5: detected capacity change from 0 to 32768
[ 2021.789117][T20280] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3479 (20280)
[ 2021.827315][ T5910] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 337ms
[ 2021.853877][T20304] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3490'.
[ 2021.875090][ T5910] gfs2: fsid=syz:syz.0: jid=0: Done
[ 2021.895848][T20269] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 2021.965674][T20284] loop2: detected capacity change from 0 to 32768
[ 2021.972859][T20280] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 2021.989601][T20280] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[ 2022.011449][T20284] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3481 (20284)
[ 2022.041451][T20280] BTRFS info (device loop5): disk space caching is enabled
[ 2022.083707][T20280] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 2022.117788][T20284] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2022.155470][T20284] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[ 2022.198341][T20269] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 2022.237835][T20284] BTRFS info (device loop2): using free-space-tree
[ 2022.461876][ T5166] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 2023.475092][T20280] BTRFS info (device loop5): rebuilding free space tree
[ 2023.634767][T20280] BTRFS info (device loop5): disabling free space tree
[ 2023.659783][T20280] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 2023.729602][T20280] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 2023.906953][T20302] loop1: detected capacity change from 0 to 40427
[ 2023.915930][T19077] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2023.981733][T20302] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[ 2024.026271][T20302] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2024.063894][T11739] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 2024.147578][T20302] F2FS-fs (loop1): invalid crc value
[ 2024.564072][T20343] loop4: detected capacity change from 0 to 32768
[ 2024.608761][T20343] =======================================================
[ 2024.608761][T20343] WARNING: The mand mount option has been deprecated and
[ 2024.608761][T20343]          and is ignored by this kernel. Remove the mand
[ 2024.608761][T20343]          option from the mount to silence this warning.
[ 2024.608761][T20343] =======================================================
[ 2024.764545][T20302] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 2024.915386][T20360] loop2: detected capacity change from 0 to 512
[ 2025.011143][T20343] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 2025.198892][T20343] (syz.4.3494,20343,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[ 2025.324134][T20366] loop2: detected capacity change from 0 to 128
[ 2025.417173][T20366] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 2025.479973][T20366] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 2025.582506][T20366] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2025.605570][T20366] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[ 2025.650667][T18581] ocfs2: Unmounting device (7,4) on (node local)
[ 2025.770219][T19077] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 2026.075234][T20354] loop5: detected capacity change from 0 to 40427
[ 2026.145127][T20354] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[ 2026.159947][T20354] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2026.190083][T20376] loop2: detected capacity change from 0 to 1024
[ 2026.203535][T20377] loop0: detected capacity change from 0 to 2048
[ 2026.205821][T20376] EXT4-fs: Ignoring removed oldalloc option
[ 2026.226360][T20354] F2FS-fs (loop5): build fault injection rate: 17008
[ 2026.255559][T20354] F2FS-fs (loop5): build fault injection type: 0x7
[ 2026.281674][T20376] EXT4-fs: Ignoring removed orlov option
[ 2026.301079][T20354] F2FS-fs (loop5): invalid crc value
[ 2026.310776][T20376] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 2026.321047][T20386] 9pnet_fd: Insufficient options for proto=fd
[ 2026.397142][T20377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2026.408894][T20376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2026.712533][T20354] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 2026.768955][T19077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2026.799877][T20354] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 2026.818473][T20354] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 2027.027796][T11739] syz-executor: attempt to access beyond end of device
[ 2027.027796][T11739] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[ 2027.089950][T11739] CPU: 0 UID: 0 PID: 11739 Comm: syz-executor Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) 
[ 2027.089982][T11739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2027.089995][T11739] Call Trace:
[ 2027.090003][T11739]  <TASK>
[ 2027.090014][T11739]  dump_stack_lvl+0x189/0x250
[ 2027.090047][T11739]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2027.090080][T11739]  ? __pfx_queue_work_on+0x10/0x10
[ 2027.090101][T11739]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 2027.090127][T11739]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2027.090165][T11739]  f2fs_handle_critical_error+0x37c/0x540
[ 2027.090196][T11739]  f2fs_write_end_io+0x886/0xb60
[ 2027.090247][T11739]  __submit_merged_bio+0x27a/0x6a0
[ 2027.090268][T11739]  ? up_write+0x1c4/0x420
[ 2027.090298][T11739]  __submit_merged_write_cond+0x44c/0x530
[ 2027.090329][T11739]  f2fs_sync_node_pages+0x1479/0x15e0
[ 2027.090373][T11739]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[ 2027.090426][T11739]  ? f2fs_write_checkpoint+0xe43/0x1df0
[ 2027.090458][T11739]  ? up_write+0x1c4/0x420
[ 2027.090479][T11739]  ? do_raw_spin_unlock+0x122/0x240
[ 2027.090512][T11739]  f2fs_write_checkpoint+0xe6f/0x1df0
[ 2027.090566][T11739]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 2027.090636][T11739]  ? try_to_wake_up+0x81b/0x1290
[ 2027.090669][T11739]  ? kill_f2fs_super+0x298/0x6c0
[ 2027.090703][T11739]  kill_f2fs_super+0x2c3/0x6c0
[ 2027.090735][T11739]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 2027.090759][T11739]  ? radix_tree_delete_item+0x2b6/0x400
[ 2027.090793][T11739]  ? shrinker_free+0x2ce/0x3e0
[ 2027.090817][T11739]  deactivate_locked_super+0xb9/0x130
[ 2027.090843][T11739]  cleanup_mnt+0x425/0x4c0
[ 2027.090866][T11739]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2027.090895][T11739]  task_work_run+0x1d1/0x260
[ 2027.090928][T11739]  ? __pfx_task_work_run+0x10/0x10
[ 2027.090953][T11739]  ? __x64_sys_umount+0x122/0x160
[ 2027.090984][T11739]  ? exit_to_user_mode_loop+0x40/0x110
[ 2027.091020][T11739]  exit_to_user_mode_loop+0xec/0x110
[ 2027.091053][T11739]  do_syscall_64+0x2bd/0x3b0
[ 2027.091088][T11739]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2027.091114][T11739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2027.091134][T11739]  ? clear_bhb_loop+0x60/0xb0
[ 2027.091159][T11739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2027.091179][T11739] RIP: 0033:0x7fe11618fc57
[ 2027.091197][T11739] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 2027.091215][T11739] RSP: 002b:00007ffc7c788b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2027.091241][T11739] RAX: 0000000000000000 RBX: 00007fe116210925 RCX: 00007fe11618fc57
[ 2027.091254][T11739] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7c788c40
[ 2027.091267][T11739] RBP: 00007ffc7c788c40 R08: 0000000000000000 R09: 0000000000000000
[ 2027.091279][T11739] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7c789cd0
[ 2027.091292][T11739] R13: 00007fe116210925 R14: 00000000001eed64 R15: 00007ffc7c789d10
[ 2027.091327][T11739]  </TASK>
[ 2027.397189][T11739] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 2027.469438][T20399] loop0: detected capacity change from 0 to 4096
[ 2027.611650][T20379] loop4: detected capacity change from 0 to 32768
[ 2027.620247][T20379] XFS: ikeep mount option is deprecated.
[ 2027.652040][T20401] loop2: detected capacity change from 0 to 2048
[ 2027.722281][T20379] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 2027.838067][T20401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2027.946555][T20379] XFS (loop4): Ending clean mount
[ 2028.186738][T18581] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 2028.341651][T20419] loop0: detected capacity change from 0 to 2048
[ 2028.352896][T20417] loop1: detected capacity change from 0 to 2048
[ 2028.450309][T20424] loop5: detected capacity change from 0 to 512
[ 2028.566088][T20426] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2028.587755][T20424] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[ 2028.633749][T20427] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2028.650580][T20424] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3506: invalid indirect mapped block 2683928664 (level 1)
[ 2028.781038][T20424] EXT4-fs (loop5): Remounting filesystem read-only
[ 2028.808213][T20426] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[ 2028.847708][T20426] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[ 2028.869079][T20424] EXT4-fs (loop5): 1 truncate cleaned up
[ 2028.895010][T20417] overlayfs: upper fs does not support tmpfile.
[ 2028.909459][T20424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2028.961057][T20426] Remounting filesystem read-only
[ 2028.992514][T20417] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 2029.008513][T20419] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[ 2029.026499][T20417] overlayfs: failed to set xattr on upper
[ 2029.054851][T20417] overlayfs: ...falling back to redirect_dir=nofollow.
[ 2029.081535][T11739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2029.100254][T20417] overlayfs: ...falling back to index=off.
[ 2029.115225][T20417] overlayfs: ...falling back to uuid=null.
[ 2029.129585][T20436] loop4: detected capacity change from 0 to 64
[ 2029.350245][T20427] NILFS (loop1): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3)
[ 2029.397818][T20427] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=2)
[ 2029.436669][T20427] Remounting filesystem read-only
[ 2029.579510][T17333] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=18)
[ 2029.607947][T17333] NILFS error (device loop1): nilfs_readdir: bad page in #18
[ 2029.629317][T20431] loop2: detected capacity change from 0 to 32768
[ 2029.655334][T17333] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[ 2030.327022][T20467] loop1: detected capacity change from 0 to 256
[ 2030.521761][T20467] FAT-fs (loop1): Directory bread(block 64) failed
[ 2030.542813][T20467] FAT-fs (loop1): Directory bread(block 65) failed
[ 2030.554807][T20467] FAT-fs (loop1): Directory bread(block 66) failed
[ 2030.575014][T20467] FAT-fs (loop1): Directory bread(block 67) failed
[ 2030.623456][T20467] FAT-fs (loop1): Directory bread(block 68) failed
[ 2030.634703][T20467] FAT-fs (loop1): Directory bread(block 69) failed
[ 2030.643086][T20467] FAT-fs (loop1): Directory bread(block 70) failed
[ 2030.650126][T20467] FAT-fs (loop1): Directory bread(block 71) failed
[ 2030.665995][T20467] FAT-fs (loop1): Directory bread(block 72) failed
[ 2030.688895][T20467] FAT-fs (loop1): Directory bread(block 73) failed
[ 2030.946746][T20446] loop5: detected capacity change from 0 to 32768
[ 2031.022908][T20446] add_index: next_index = 0.  Resetting!
[ 2031.047849][T20446] find_entry called with index >= next_index
[ 2031.064393][T20446] find_entry called with index >= next_index
[ 2031.087865][T20446] find_entry called with index >= next_index
[ 2031.116767][T20446] find_entry called with index >= next_index
[ 2031.433189][T20485] loop1: detected capacity change from 0 to 16
[ 2031.496163][T20471] loop2: detected capacity change from 0 to 32768
[ 2031.508802][T20485] erofs (device loop1): mounted with root inode @ nid 36.
[ 2031.663413][T20471] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 2031.775032][T20493] tipc: Started in network mode
[ 2031.797796][T20493] tipc: Node identity 1243392909a, cluster identity 4711
[ 2031.836913][T20493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2031.889863][T20496] syzkaller0: entered promiscuous mode
[ 2031.939164][T20496] syzkaller0: entered allmulticast mode
[ 2032.136862][T19077] ocfs2: Unmounting device (7,2) on (node local)
[ 2032.160392][T20497] tipc: Resetting bearer <eth:syzkaller0>
[ 2032.341774][T20501] loop1: detected capacity change from 0 to 1764
[ 2032.607755][T20492] tipc: Resetting bearer <eth:syzkaller0>
[ 2032.838661][ T5910] tipc: Node number set to 467876137
[ 2032.874666][T20492] tipc: Disabling bearer <eth:syzkaller0>
[ 2032.918751][T20503] loop2: detected capacity change from 0 to 128
[ 2032.936678][T20503] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 2033.120022][T20503] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 2033.199770][T20509] loop4: detected capacity change from 0 to 512
[ 2033.246981][T20503] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2033.269423][T20509] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[ 2033.297086][T20509] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[ 2033.308741][T20503] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[ 2033.438121][T20509] EXT4-fs (loop4): 1 truncate cleaned up
[ 2033.445671][T20509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2033.529856][T20509] EXT4-fs: group quota file already specified
[ 2033.531197][T19077] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 2033.670454][T18581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2033.746630][T20516] loop1: detected capacity change from 0 to 4096
[ 2033.896959][T20516] ntfs3(loop1): ino=1a, mi_enum_attr
[ 2033.938769][T20516] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 2036.709059][T20530] loop5: detected capacity change from 0 to 32768
[ 2036.836695][T20530] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[ 2036.849235][T20530] XFS (loop5): alignment check failed: sunit/swidth vs. blocksize(2048)
[ 2036.866017][T20568] loop4: detected capacity change from 0 to 64
[ 2036.870423][T20543] loop1: detected capacity change from 0 to 32768
[ 2037.001520][T20543] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2037.162380][T20543] XFS (loop1): Ending clean mount
[ 2037.182712][T20543] XFS (loop1): Quotacheck needed: Please wait.
[ 2037.291848][T20554] loop2: detected capacity change from 0 to 32768
[ 2037.360882][T20543] XFS (loop1): Quotacheck: Done.
[ 2037.550382][T20554] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 2037.627141][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2037.659569][T17333] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2037.691407][T20588] loop4: detected capacity change from 0 to 128
[ 2037.740753][T20588] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 2037.774756][T20588] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 2037.812612][T20588] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2038.002940][T18581] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 2038.080966][T19077] ocfs2: Unmounting device (7,2) on (node local)
[ 2039.412734][T20606] capability: warning: `syz.5.3578' uses deprecated v2 capabilities in a way that may be insecure
[ 2039.540448][T20610] loop4: detected capacity change from 0 to 2048
[ 2039.669283][T20610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2039.708970][T20609] loop1: detected capacity change from 0 to 4096
[ 2039.764621][T20609] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[ 2040.132283][T20620] netlink: 'syz.0.3583': attribute type 4 has an invalid length.
[ 2040.140369][T20620] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3583'.
[ 2040.532431][T20616] xt_CT: No such helper "snmp_trap"
[ 2040.937992][T20598] loop2: detected capacity change from 0 to 40427
[ 2040.945725][T20598] F2FS-fs: heap/no_heap options were deprecated
[ 2041.056982][T20598] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(83886083)
[ 2041.090315][T20598] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 2041.915078][T20598] F2FS-fs (loop2): Image doesn't support compression
[ 2041.963934][T20598] F2FS-fs (loop2): build fault injection rate: 690
[ 2042.314095][T20609] ntfs3(loop1): ino=1d, mi_enum_attr
[ 2042.322804][T20598] F2FS-fs (loop2): invalid crc value
[ 2042.346354][T20609] ntfs3(loop1): ino=1d, mi_enum_attr
[ 2042.352736][T20598] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-4)
[ 2042.390627][T20623] ntfs3(loop1): ino=1d, mi_enum_attr
[ 2042.396103][T20623] ntfs3(loop1): ino=1d, mi_enum_attr
[ 2042.445227][T20636] loop5: detected capacity change from 0 to 64
[ 2044.583436][T20657] netlink: 'syz.1.3598': attribute type 11 has an invalid length.
[ 2044.615796][T20657] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3598'.
[ 2044.685731][T20659] loop5: detected capacity change from 0 to 2048
[ 2044.740902][T20656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2044.805473][T20659] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2048.331828][T20695] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3603'.
[ 2048.363545][T20691] loop2: detected capacity change from 0 to 128
[ 2049.690664][T20709] loop2: detected capacity change from 0 to 2048
[ 2050.452812][T20709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2051.266774][T20738] syz.2.3624 (20738): drop_caches: 2
[ 2051.856527][T20745] xt_CT: No such helper "snmp_trap"
[ 2052.116908][T20760] loop5: detected capacity change from 0 to 2048
[ 2052.190318][T20760] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2053.370652][T20751] loop4: detected capacity change from 0 to 32768
[ 2053.538101][T20751] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3628 (20751)
[ 2053.792743][T20751] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2053.954801][T20751] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[ 2054.100554][T20751] BTRFS info (device loop4): using free-space-tree
[ 2055.206106][T18581] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2056.430454][T20817] loop5: detected capacity change from 0 to 1764
[ 2062.569310][T20865] netlink: 'syz.5.3664': attribute type 11 has an invalid length.
[ 2062.609380][T20865] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3664'.
[ 2062.652878][T20866] loop5: detected capacity change from 0 to 1024
[ 2062.724512][T20866] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled
[ 2062.819887][T20866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2062.949044][T20864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2063.247224][T11739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2063.634636][T20893] loop4: detected capacity change from 0 to 1024
[ 2063.666444][T20893] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[ 2063.724738][T20893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2064.036496][T18581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2065.363087][T20921] netlink: 'syz.4.3683': attribute type 11 has an invalid length.
[ 2065.371168][T20921] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3683'.
[ 2065.406040][T20921] loop4: detected capacity change from 0 to 1024
[ 2065.428265][T20921] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[ 2065.496800][T20921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2065.633834][T20920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2065.703617][T18581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2070.778657][T20981] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3698'.
[ 2072.322590][T21000] netlink: 'syz.2.3705': attribute type 11 has an invalid length.
[ 2072.340377][T21000] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3705'.
[ 2072.505256][T21000] loop2: detected capacity change from 0 to 1024
[ 2072.546748][T21008] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3709'.
[ 2072.571748][T21000] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[ 2072.707476][T21000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2073.679346][T20999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2074.042098][T19077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2075.842943][T21077] syz.4.3729 (21077): drop_caches: 2
[ 2079.896633][T21110] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3738'.
[ 2080.468868][T21123] syz.5.3743 (21123): drop_caches: 2
[ 2081.243058][T21122] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3744'.
[ 2081.522250][T21122] batadv1: entered promiscuous mode
[ 2081.635025][T21128] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3744'.
[ 2082.274151][T21122] batadv1: entered allmulticast mode
[ 2084.831275][T21168] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3756'.
[ 2087.175050][ T5917] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 2087.510658][ T5917] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2087.972854][ T5917] usb 5-1: config 16 has an invalid interface number: 195 but max is 0
[ 2087.994149][ T5917] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 2088.005087][ T5917] usb 5-1: config 16 has no interface number 0
[ 2088.011910][ T5917] usb 5-1: config 16 interface 195 altsetting 128 bulk endpoint 0xC has invalid maxpacket 1023
[ 2088.061516][ T5917] usb 5-1: config 16 interface 195 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 768
[ 2088.111972][ T5917] usb 5-1: config 16 interface 195 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2088.184084][ T5917] usb 5-1: config 16 interface 195 has no altsetting 0
[ 2088.229936][ T5917] usb 5-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=e6.ce
[ 2088.268028][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2088.311825][ T5917] usb 5-1: Product: syz
[ 2088.316059][ T5917] usb 5-1: Manufacturer: syz
[ 2088.351664][ T5917] usb 5-1: SerialNumber: syz
[ 2088.476348][T21196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2088.518012][T21196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2088.946190][ T5917] usb 5-1: bad CDC descriptors
[ 2089.568449][ T5917] usb 5-1: USB disconnect, device number 40
[ 2092.329220][T21260] syz.2.3786 (21260): drop_caches: 2
[ 2095.424519][T21313] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3804'.
[ 2095.569228][T21314] syz.4.3803 (21314): drop_caches: 2
[ 2097.089725][T21337] netlink: 'syz.4.3810': attribute type 10 has an invalid length.
[ 2097.100196][T21337] team0: Device ipvlan1 failed to register rx_handler
[ 2099.198355][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2100.355276][T21366] syz.2.3820 (21366): drop_caches: 2
[ 2100.576275][T21375] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3824'.
[ 2100.874374][T21378] trusted_key: encrypted_key: insufficient parameters specified
[ 2100.885816][T21378] trusted_key: encrypted_key: insufficient parameters specified
[ 2103.356217][T21410] syz.2.3835 (21410): drop_caches: 2
[ 2103.883061][T21413] trusted_key: encrypted_key: insufficient parameters specified
[ 2103.895115][T21413] trusted_key: encrypted_key: insufficient parameters specified
[ 2104.605470][T21415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3837'.
[ 2107.125092][T21439] xt_bpf: check failed: parse error
[ 2107.684784][T21454] trusted_key: encrypted_key: insufficient parameters specified
[ 2107.696445][T21454] trusted_key: encrypted_key: insufficient parameters specified
[ 2110.101663][T21473] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3857'.
[ 2110.334549][T21473] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 2110.470612][T21478] netlink: 'syz.4.3856': attribute type 10 has an invalid length.
[ 2110.484039][T21478] team0: Device ipvlan1 failed to register rx_handler
[ 2111.810787][   T30] kauditd_printk_skb: 59 callbacks suppressed
[ 2111.810809][   T30] audit: type=1800 audit(1752541564.785:412): pid=21485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3861" name="nullb0" dev="tmpfs" ino=1162 res=0 errno=0
[ 2112.428667][T21496] trusted_key: encrypted_key: insufficient parameters specified
[ 2112.440628][T21496] trusted_key: encrypted_key: insufficient parameters specified
[ 2113.542150][    T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 2113.805968][T21513] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3871'.
[ 2113.825101][T21513] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[ 2113.858708][    T9] usb 5-1: Using ep0 maxpacket: 32
[ 2113.865956][    T9] usb 5-1: config 0 has no interfaces?
[ 2113.875828][    T9] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=48.1e
[ 2114.140459][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2115.826855][    T9] usb 5-1: Product: syz
[ 2115.846903][    T9] usb 5-1: Manufacturer: syz
[ 2115.852543][    T9] usb 5-1: SerialNumber: syz
[ 2115.915077][    T9] usb 5-1: config 0 descriptor??
[ 2117.098928][    T9] usb 5-1: USB disconnect, device number 41
[ 2120.265821][T21543] trusted_key: encrypted_key: insufficient parameters specified
[ 2120.277974][T21543] trusted_key: encrypted_key: insufficient parameters specified
[ 2121.352779][T21562] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3886'.
[ 2122.686630][T21569] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3889'.
[ 2122.735842][T21569] batadv1: entered promiscuous mode
[ 2122.765993][T21569] batadv1: entered allmulticast mode
[ 2122.779737][T21573] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3889'.
[ 2123.634393][T21591] trusted_key: encrypted_key: insufficient parameters specified
[ 2123.647354][T21591] trusted_key: encrypted_key: insufficient parameters specified
[ 2125.897951][T21608] netlink: 'syz.2.3900': attribute type 10 has an invalid length.
[ 2125.908693][T21608] team0: Device ipvlan1 failed to register rx_handler
[ 2127.093553][T21617] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3903'.
[ 2127.652174][T21620] xt_CT: No such helper "snmp_trap"
[ 2127.835685][T21634] loop4: detected capacity change from 0 to 128
[ 2129.250224][T21666] xt_CT: No such helper "snmp_trap"
[ 2129.544498][T21675] loop4: detected capacity change from 0 to 2048
[ 2129.655194][T21675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2130.840878][T18483] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[ 2130.906671][T18483] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 2130.963570][T18483] EXT4-fs (loop4): This should not happen!! Data will be lost
[ 2130.963570][T18483] 
[ 2131.000795][T18483] EXT4-fs (loop4): Total free blocks count 0
[ 2131.007175][T18483] EXT4-fs (loop4): Free/Dirty block details
[ 2131.059477][T18483] EXT4-fs (loop4): free_blocks=4096
[ 2131.069331][T18483] EXT4-fs (loop4): dirty_blocks=16
[ 2131.080662][T18483] EXT4-fs (loop4): Block reservation details
[ 2131.107867][T18483] EXT4-fs (loop4): i_reserved_data_blocks=1
[ 2131.128939][   T78] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28
[ 2131.475269][T21690] loop4: detected capacity change from 0 to 512
[ 2131.498212][T21690] EXT4-fs: Ignoring removed oldalloc option
[ 2131.575302][T21690] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[ 2131.617936][T21690] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 2131.655847][T21690] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[ 2131.679000][T21692] 9pnet_fd: Insufficient options for proto=fd
[ 2131.712840][T21690] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c02c, mo2=0102]
[ 2131.772861][T21690] System zones: 0-2, 18-18, 34-34
[ 2131.801482][T21690] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.3929: iget: bad i_size value: 360287970189639680
[ 2131.977765][T21690] EXT4-fs (loop4): Remounting filesystem read-only
[ 2132.009631][T21690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2134.618005][   T30] audit: type=1326 audit(1752541588.597:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21689 comm="syz.4.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1518e929 code=0x7fc00000
[ 2135.449621][T18581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2138.198411][T21740] xt_CT: No such helper "snmp_trap"
[ 2139.463353][T21760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3952'.
[ 2139.516505][T21760] : entered promiscuous mode
[ 2139.551930][T21760] bond_slave_0: entered promiscuous mode
[ 2139.563755][T21760] bond_slave_1: entered promiscuous mode
[ 2139.594801][T21760] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2139.638764][T21760] : left promiscuous mode
[ 2139.643244][T21760] bond_slave_0: left promiscuous mode
[ 2139.680343][T21760] bond_slave_1: left promiscuous mode
[ 2140.628886][T21773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3956'.
[ 2140.638471][T21773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3956'.
[ 2143.543260][T21800] netlink: 'syz.2.3966': attribute type 10 has an invalid length.
[ 2143.553712][T21800] team0: Device ipvlan1 failed to register rx_handler
[ 2143.806185][T21806] xt_CT: No such helper "snmp_trap"
[ 2145.383737][T21824] xt_bpf: check failed: parse error
[ 2148.048443][T21846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3980'.
[ 2148.057373][T21846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3980'.
[ 2153.879227][T21911] loop4: detected capacity change from 0 to 1024
[ 2153.900001][T21911] EXT4-fs: Ignoring removed i_version option
[ 2153.938368][T21911] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 2153.991901][T21911] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4001: Invalid block bitmap block 0 in block_group 0
[ 2154.058412][T21911] Quota error (device loop4): write_blk: dquota write failed
[ 2154.067738][T21911] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[ 2154.078062][T21911] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4001: Failed to acquire dquot type 0
[ 2154.190594][T21911] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.4001: Freeing blocks not in datazone - block = 0, count = 4096
[ 2154.330004][T21911] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4001: Invalid inode bitmap blk 0 in block_group 0
[ 2154.505308][ T6187] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8
[ 2154.534482][T21911] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[ 2154.791102][ T6187] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0
[ 2154.977932][T21911] EXT4-fs (loop4): 1 orphan inode deleted
[ 2155.047046][T21911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2155.220947][T21911] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.4001: iget: bad extra_isize 65535 (inode size 256)
[ 2156.997278][T18581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2158.116710][T21951] overlayfs: failed to resolve './file0': -2
[ 2160.577884][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2162.258047][T21993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4027'.
[ 2162.342039][T21993] : entered promiscuous mode
[ 2162.619452][T21993] bond_slave_0: entered promiscuous mode
[ 2162.649240][T21993] bond_slave_1: entered promiscuous mode
[ 2162.803430][T21993] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2162.987752][T21993] : left promiscuous mode
[ 2162.992637][T21993] bond_slave_0: left promiscuous mode
[ 2162.998357][T21993] bond_slave_1: left promiscuous mode
[ 2164.850687][T22006] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4028'.
[ 2165.107323][T22006] vlan2: entered allmulticast mode
[ 2165.912558][T22006] syz_tun: entered allmulticast mode
[ 2165.988486][T22025] 9pnet_fd: Insufficient options for proto=fd
[ 2166.055471][T22027] netlink: 'syz.0.4036': attribute type 4 has an invalid length.
[ 2166.063383][T22027] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4036'.
[ 2166.628883][ T5959] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 2166.894972][ T5959] usb 3-1: Using ep0 maxpacket: 32
[ 2166.941990][ T5959] usb 3-1: config 0 has no interfaces?
[ 2167.225726][ T5959] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=48.1e
[ 2167.247621][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2167.255672][ T5959] usb 3-1: Product: syz
[ 2167.278703][ T5959] usb 3-1: Manufacturer: syz
[ 2167.283364][ T5959] usb 3-1: SerialNumber: syz
[ 2167.318892][ T5959] usb 3-1: config 0 descriptor??
[ 2167.560195][ T5910] usb 3-1: USB disconnect, device number 47
[ 2170.906520][T22066] netlink: 'syz.4.4047': attribute type 10 has an invalid length.
[ 2170.925663][T22066] team0: Device ipvlan1 failed to register rx_handler
[ 2171.732873][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4049'.
[ 2171.741943][T22073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4049'.
[ 2173.811904][T22091] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4053'.
[ 2177.894436][T22129] netlink: 'syz.2.4070': attribute type 10 has an invalid length.
[ 2177.927907][ T3566] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 2177.953920][T22129] team0: Device ipvlan1 failed to register rx_handler
[ 2178.141024][   T30] audit: type=1800 audit(1752541635.097:414): pid=22132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4069" name="nullb0" dev="tmpfs" ino=1266 res=0 errno=0
[ 2178.849478][ T3566] usb 6-1: Using ep0 maxpacket: 16
[ 2178.856487][ T3566] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 2178.865373][ T3566] usb 6-1: config 0 has no interface number 0
[ 2179.037400][ T3566] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 2179.115840][ T3566] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2179.339105][ T3566] usb 6-1: Product: syz
[ 2179.773238][ T3566] usb 6-1: Manufacturer: syz
[ 2179.871989][ T3566] usb 6-1: SerialNumber: syz
[ 2179.894020][ T3566] usb 6-1: config 0 descriptor??
[ 2179.905302][ T3566] hub 6-1:0.132: bad descriptor, ignoring hub
[ 2179.916750][ T3566] hub 6-1:0.132: probe with driver hub failed with error -5
[ 2179.970195][ T3566] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input108
[ 2181.041480][T22150] netlink: 'syz.5.4065': attribute type 4 has an invalid length.
[ 2181.057861][T22150] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4065'.
[ 2185.278677][T22188] netlink: 'syz.5.4085': attribute type 10 has an invalid length.
[ 2185.288123][T22188] team0: Device ipvlan1 failed to register rx_handler
[ 2188.337852][T18341] usb 6-1: USB disconnect, device number 33
[ 2189.097265][   T30] audit: type=1800 audit(1752541647.089:415): pid=22216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4098" name="nullb0" dev="tmpfs" ino=1162 res=0 errno=0
[ 2190.223806][T22232] netlink: 'syz.2.4101': attribute type 10 has an invalid length.
[ 2190.618186][T22232] team0: Device ipvlan1 failed to register rx_handler
[ 2195.432734][T22280] loop2: detected capacity change from 0 to 2048
[ 2195.751036][T22280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2196.981565][T18483] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[ 2197.064109][T18483] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 2197.100990][T18483] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 2197.100990][T18483] 
[ 2197.139767][T18483] EXT4-fs (loop2): Total free blocks count 0
[ 2197.158071][T18483] EXT4-fs (loop2): Free/Dirty block details
[ 2197.181125][T18483] EXT4-fs (loop2): free_blocks=4096
[ 2197.199567][T18483] EXT4-fs (loop2): dirty_blocks=16
[ 2197.204749][T18483] EXT4-fs (loop2): Block reservation details
[ 2197.267815][T18483] EXT4-fs (loop2): i_reserved_data_blocks=1
[ 2197.300125][ T1329] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28
[ 2198.373520][T22312] loop4: detected capacity change from 0 to 1024
[ 2198.390396][T22312] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[ 2198.584374][T22312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2200.053969][T18581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2200.443135][T22345] netlink: 'syz.2.4133': attribute type 10 has an invalid length.
[ 2200.462794][T22345] team0: Device ipvlan1 failed to register rx_handler
[ 2205.790733][T22375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4145'.
[ 2205.799773][T22375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4145'.
[ 2206.740517][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4142'.
[ 2206.749583][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4142'.
[ 2214.565430][T22448] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd
[ 2217.690095][T22467] loop4: detected capacity change from 0 to 2048
[ 2217.845213][T22467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2218.749834][T18341] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[ 2218.923831][T18341] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2218.993037][T18341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2219.828807][T18341] usb 6-1: Product: syz
[ 2219.838264][T18341] usb 6-1: Manufacturer: syz
[ 2219.842918][T18341] usb 6-1: SerialNumber: syz
[ 2219.861923][T18341] usb 6-1: config 0 descriptor??
[ 2219.978374][T22496] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4178'.
[ 2219.995917][T22496] batadv1: entered promiscuous mode
[ 2220.032365][T22496] batadv1: entered allmulticast mode
[ 2220.088241][T22498] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4178'.
[ 2220.208817][T18341] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2221.385102][T22477] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[ 2222.162008][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2222.777358][T18341] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 2222.848132][T18341] usb 6-1: USB disconnect, device number 34
[ 2223.512965][T18581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2224.055428][T22529] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd
[ 2224.937135][T22535] binfmt_misc: register: failed to install interpreter file ./file2
[ 2226.049653][T22539] xt_bpf: check failed: parse error
[ 2228.007780][T22550] tc_dump_action: action bad kind
[ 2231.304378][T22582] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4201'.
[ 2231.528541][T22582] batadv1: entered promiscuous mode
[ 2231.558680][T22582] batadv1: entered allmulticast mode
[ 2232.998939][T22599] netlink: 'syz.4.4204': attribute type 10 has an invalid length.
[ 2233.012585][T22599] team0: Device ipvlan1 failed to register rx_handler
[ 2238.431095][T22637] syz.4.4217 (22637): drop_caches: 2
[ 2240.872253][T22660] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4226'.
[ 2241.648995][T22670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4228'.
[ 2241.751309][T22670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4228'.
[ 2242.424206][T22674] netlink: 'syz.0.4230': attribute type 10 has an invalid length.
[ 2242.440788][T22674] team0: Device ipvlan1 failed to register rx_handler
[ 2244.662383][T22687] binfmt_misc: register: failed to install interpreter file ./file2
[ 2245.516133][T22699] netlink: 'syz.5.4237': attribute type 11 has an invalid length.
[ 2245.547277][T22699] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4237'.
[ 2245.636615][T22699] loop5: detected capacity change from 0 to 1024
[ 2245.687267][T22699] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled
[ 2245.687402][T22703] loop4: detected capacity change from 0 to 128
[ 2245.933625][T22706] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4240'.
[ 2245.980762][T22706] batadv1: entered promiscuous mode
[ 2245.986125][T22706] batadv1: entered allmulticast mode
[ 2246.004155][T22699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2246.506149][T22716] netlink: 'syz.1.4242': attribute type 10 has an invalid length.
[ 2248.223698][T22716] team0: Device ipvlan1 failed to register rx_handler
[ 2248.550985][T22697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2248.563035][   T12] kworker/u8:0: attempt to access beyond end of device
[ 2248.563035][   T12] loop4: rw=1, sector=145, nr_sectors = 896 limit=128
[ 2249.558889][T11739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2251.092731][T22734] overlayfs: cannot append lower layer
[ 2252.243171][T22745] syz.5.4248: attempt to access beyond end of device
[ 2252.243171][T22745] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0
[ 2252.267841][T22745] syz.5.4248: attempt to access beyond end of device
[ 2252.267841][T22745] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0
[ 2252.282839][T22745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2252.297607][T22745] syz.5.4248: attempt to access beyond end of device
[ 2252.297607][T22745] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0
[ 2252.316196][T22745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2252.355734][T22745] syz.5.4248: attempt to access beyond end of device
[ 2252.355734][T22745] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[ 2252.378946][T22745] syz.5.4248: attempt to access beyond end of device
[ 2252.378946][T22745] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0
[ 2252.393323][T22745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2252.414451][T22745] syz.5.4248: attempt to access beyond end of device
[ 2252.414451][T22745] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 2252.430477][T22745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2252.462585][T22745] syz.5.4248: attempt to access beyond end of device
[ 2252.462585][T22745] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0
[ 2252.482236][T22745] syz.5.4248: attempt to access beyond end of device
[ 2252.482236][T22745] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 2252.497533][T22745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2252.508138][T22745] syz.5.4248: attempt to access beyond end of device
[ 2252.508138][T22745] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 2252.542010][T22745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2252.590852][T22745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2252.605203][T22745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2252.615296][T22745] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[ 2254.126755][T22754] loop4: detected capacity change from 0 to 4096
[ 2254.148114][T22754] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[ 2254.169673][T22757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4253'.
[ 2254.214521][T22757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4253'.
[ 2255.646177][T22754] ntfs3(loop4): ino=1d, mi_enum_attr
[ 2255.667855][T22754] ntfs3(loop4): ino=1d, mi_enum_attr
[ 2255.714384][T22754] ntfs3(loop4): ino=1d, mi_enum_attr
[ 2256.061279][T22754] ntfs3(loop4): ino=1d, mi_enum_attr
[ 2256.794706][T22789] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4263'.
[ 2256.879401][T22789] batadv2: entered promiscuous mode
[ 2256.904956][T22791] trusted_key: encrypted_key: insufficient parameters specified
[ 2256.924015][T22789] batadv2: entered allmulticast mode
[ 2256.935747][T22791] trusted_key: encrypted_key: insufficient parameters specified
[ 2259.583908][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4271'.
[ 2259.597734][T22815] : entered promiscuous mode
[ 2259.602509][T22815] bond_slave_0: entered promiscuous mode
[ 2259.608711][T22815] bond_slave_1: entered promiscuous mode
[ 2259.628005][T22815] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2259.642970][T22815] : left promiscuous mode
[ 2259.657865][T22815] bond_slave_0: left promiscuous mode
[ 2259.679440][T22815] bond_slave_1: left promiscuous mode
[ 2262.302226][T22850] netlink: 'syz.2.4283': attribute type 10 has an invalid length.
[ 2262.312552][T22850] team0: Device ipvlan1 failed to register rx_handler
[ 2264.012088][T22866] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 2264.038122][T22866] team0: Port device batadv1 added
[ 2264.637429][T22872] bio_check_eod: 3 callbacks suppressed
[ 2264.656335][T22872] syz.5.4292: attempt to access beyond end of device
[ 2264.656335][T22872] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0
[ 2264.689853][T22872] syz.5.4292: attempt to access beyond end of device
[ 2264.689853][T22872] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0
[ 2264.721386][T22872] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2264.755639][T22872] syz.5.4292: attempt to access beyond end of device
[ 2264.755639][T22872] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0
[ 2264.791402][T22872] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2264.812468][T22872] syz.5.4292: attempt to access beyond end of device
[ 2264.812468][T22872] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[ 2264.989811][T22872] syz.5.4292: attempt to access beyond end of device
[ 2264.989811][T22872] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0
[ 2265.078373][T22872] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2265.727756][T22872] syz.5.4292: attempt to access beyond end of device
[ 2265.727756][T22872] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 2265.741304][T22872] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2265.817837][T22872] syz.5.4292: attempt to access beyond end of device
[ 2265.817837][T22872] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0
[ 2265.831238][T22872] syz.5.4292: attempt to access beyond end of device
[ 2265.831238][T22872] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 2265.845870][T22872] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2265.865121][T22872] syz.5.4292: attempt to access beyond end of device
[ 2265.865121][T22872] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 2265.888833][T22872] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2265.952338][T22872] syz.5.4292: attempt to access beyond end of device
[ 2265.952338][T22872] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[ 2266.265511][T22886] trusted_key: encrypted_key: insufficient parameters specified
[ 2266.282884][T22872] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2266.297004][T22886] trusted_key: encrypted_key: insufficient parameters specified
[ 2266.325139][T22872] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2266.451125][T22872] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[ 2268.882654][T22898] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 2268.891560][T22898] team0: Port device batadv1 added
[ 2269.116527][T22901] overlayfs: failed to clone upperpath
[ 2270.337755][T22909] netlink: 'syz.0.4300': attribute type 11 has an invalid length.
[ 2270.354283][T22909] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4300'.
[ 2270.610394][T22907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2271.537983][T22922] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 2271.586735][T22922] team0: Port device batadv1 added
[ 2272.522737][T22931] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4309'.
[ 2273.373382][T22949] trusted_key: encrypted_key: insufficient parameters specified
[ 2273.386403][T22949] trusted_key: encrypted_key: insufficient parameters specified
[ 2276.235102][ T5917] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 2276.481407][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2276.570535][ T5917] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2277.777086][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2277.798019][ T5917] usb 6-1: config 0 descriptor??
[ 2277.806668][ T5917] pwc: Askey VC010 type 2 USB webcam detected.
[ 2277.838238][T22987] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4326'.
[ 2278.416396][ T5917] pwc: send_video_command error -71
[ 2278.446776][ T5917] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 2278.481430][ T5917] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71
[ 2278.560078][ T5917] usb 6-1: USB disconnect, device number 35
[ 2279.401109][T23008] overlayfs: failed to clone upperpath
[ 2281.141155][T23033] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4340'.
[ 2281.156271][T23032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4341'.
[ 2283.382727][T23056] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4347'.
[ 2283.392590][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2285.172985][T23075] overlayfs: failed to clone upperpath
[ 2285.810256][T23080] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4354'.
[ 2285.946018][T23079] loop2: detected capacity change from 0 to 4096
[ 2286.002983][T23079] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[ 2286.363092][T23079] ntfs3(loop2): ino=1d, mi_enum_attr
[ 2286.416348][T23079] ntfs3(loop2): ino=1d, mi_enum_attr
[ 2288.118751][ T5917] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 2288.330605][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2288.379834][ T5917] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2288.437584][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2288.484683][ T5917] usb 6-1: config 0 descriptor??
[ 2288.780889][ T5917] pwc: Askey VC010 type 2 USB webcam detected.
[ 2289.623193][ T5917] pwc: recv_control_msg error -32 req 02 val 2b00
[ 2289.662937][ T5917] pwc: recv_control_msg error -32 req 02 val 2700
[ 2289.683390][ T5917] pwc: recv_control_msg error -32 req 02 val 2c00
[ 2289.704854][ T5917] pwc: recv_control_msg error -32 req 04 val 1000
[ 2289.728698][ T5917] pwc: recv_control_msg error -32 req 04 val 1300
[ 2289.952595][ T5917] pwc: recv_control_msg error -71 req 02 val 2000
[ 2289.980358][ T5917] pwc: recv_control_msg error -71 req 02 val 2100
[ 2290.008307][ T5917] pwc: recv_control_msg error -71 req 04 val 1500
[ 2290.028141][ T5917] pwc: recv_control_msg error -71 req 02 val 2500
[ 2290.036454][ T5917] pwc: recv_control_msg error -71 req 02 val 2400
[ 2290.051020][ T5917] pwc: recv_control_msg error -71 req 02 val 2600
[ 2290.078314][ T5917] pwc: recv_control_msg error -71 req 02 val 2900
[ 2290.095313][ T5917] pwc: recv_control_msg error -71 req 02 val 2800
[ 2290.105960][ T5917] pwc: recv_control_msg error -71 req 04 val 1100
[ 2290.117999][ T5917] pwc: recv_control_msg error -71 req 04 val 1200
[ 2290.159329][ T5917] pwc: Registered as video103.
[ 2290.191392][ T5917] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input109
[ 2290.365542][ T5917] usb 6-1: USB disconnect, device number 36
[ 2291.110453][T23137] bio_check_eod: 2 callbacks suppressed
[ 2291.110709][T23137] syz.5.4376: attempt to access beyond end of device
[ 2291.110709][T23137] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0
[ 2291.142281][T23137] syz.5.4376: attempt to access beyond end of device
[ 2291.142281][T23137] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0
[ 2291.156346][T23137] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2291.168384][T23137] syz.5.4376: attempt to access beyond end of device
[ 2291.168384][T23137] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0
[ 2291.182214][T23137] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2291.210138][T23137] syz.5.4376: attempt to access beyond end of device
[ 2291.210138][T23137] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[ 2291.232166][T23137] syz.5.4376: attempt to access beyond end of device
[ 2291.232166][T23137] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0
[ 2291.246120][T23137] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2291.257554][T23137] syz.5.4376: attempt to access beyond end of device
[ 2291.257554][T23137] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 2291.271845][T23137] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2291.289246][T23137] syz.5.4376: attempt to access beyond end of device
[ 2291.289246][T23137] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0
[ 2291.303819][T23137] syz.5.4376: attempt to access beyond end of device
[ 2291.303819][T23137] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 2291.317524][T23137] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2291.330753][T23137] syz.5.4376: attempt to access beyond end of device
[ 2291.330753][T23137] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 2291.344722][T23137] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2291.363681][T23137] syz.5.4376: attempt to access beyond end of device
[ 2291.363681][T23137] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[ 2291.381485][T23137] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2291.394457][T23137] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2291.404483][T23137] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[ 2295.385311][T23173] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4387'.
[ 2296.220763][T23170] loop5: detected capacity change from 0 to 4096
[ 2296.246305][T23170] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[ 2298.189926][T23170] ntfs3(loop5): Failed to read $UpCase (-4).
[ 2301.149702][T23208] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4399'.
[ 2305.293113][T23253] netlink: 'syz.4.4414': attribute type 10 has an invalid length.
[ 2305.304589][T23253] team0: Device ipvlan1 failed to register rx_handler
[ 2306.813402][T23273] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2306.900223][T23278] netlink: 'syz.0.4424': attribute type 11 has an invalid length.
[ 2306.920787][T23278] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4424'.
[ 2306.954704][T23275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2307.194701][T23282] overlayfs: failed to clone upperpath
[ 2311.184380][T23307] netlink: 'syz.0.4431': attribute type 10 has an invalid length.
[ 2311.469298][T23309] netlink: 'syz.4.4429': attribute type 303 has an invalid length.
[ 2311.496633][T23307] team0: Device ipvlan1 failed to register rx_handler
[ 2312.413376][T23324] netlink: 'syz.5.4437': attribute type 11 has an invalid length.
[ 2312.427628][T23324] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4437'.
[ 2312.447922][T23323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2313.018368][T23331] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4438'.
[ 2313.117506][T23331] 8021q: VLANs not supported on ip6tnl0
[ 2316.381742][T23350] overlayfs: failed to clone upperpath
[ 2317.224645][ T9272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2317.235445][ T9272] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2317.245593][ T9272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2317.256155][ T9272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2317.267059][ T9272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2320.047741][ T5166] Bluetooth: hci4: command tx timeout
[ 2321.369681][T23356] chnl_net:caif_netlink_parms(): no params data found
[ 2321.817125][T23413] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4463'.
[ 2323.164469][ T9272] Bluetooth: hci4: command tx timeout
[ 2323.292897][T23413] 8021q: VLANs not supported on ip6tnl0
[ 2325.277675][ T9272] Bluetooth: hci4: command tx timeout
[ 2325.449421][T23356] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2325.456600][T23356] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2325.484557][T23356] bridge_slave_0: entered allmulticast mode
[ 2325.505826][T23356] bridge_slave_0: entered promiscuous mode
[ 2325.546486][T23435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4468'.
[ 2325.556469][T23356] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2325.566812][T23356] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2325.583323][T23356] bridge_slave_1: entered allmulticast mode
[ 2325.660227][T23356] bridge_slave_1: entered promiscuous mode
[ 2327.327196][ T9272] Bluetooth: hci4: command tx timeout
[ 2328.040662][T23356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2328.062214][T23356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2329.059387][T23460] 8021q: adding VLAN 0 to HW filter on device batadv2
[ 2329.092454][T23460] team0: Port device batadv2 added
[ 2329.322241][T23356] team0: Port device team_slave_0 added
[ 2329.372138][T23356] team0: Port device team_slave_1 added
[ 2329.525733][T23356] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2329.568012][T23356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2329.614258][T23480] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4482'.
[ 2329.627898][T23356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2329.657820][T23356] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2330.583371][T23356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2330.614877][T23356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2331.908862][T23356] hsr_slave_0: entered promiscuous mode
[ 2331.915644][T23356] hsr_slave_1: entered promiscuous mode
[ 2331.953051][T23356] debugfs: 'hsr0' already exists in 'hsr'
[ 2331.972378][T23356] Cannot create hsr debugfs directory
[ 2332.148315][T23507] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2334.174010][T23525] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4497'.
[ 2334.183268][T23525] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4497'.
[ 2335.617704][T23541] netlink: 'syz.1.4499': attribute type 303 has an invalid length.
[ 2336.682889][T23549] 8021q: adding VLAN 0 to HW filter on device batadv3
[ 2336.721969][T23549] team0: Port device batadv3 added
[ 2336.728496][T23552] overlayfs: failed to clone upperpath
[ 2338.655965][T23356] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2338.859977][T23356] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2338.947611][T23356] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2339.016090][T23356] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2339.190650][T23593] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4516'.
[ 2340.296091][T23356] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2340.395147][T23604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4520'.
[ 2340.396631][T23356] 8021q: adding VLAN 0 to HW filter on device team0
[ 2340.449737][T23608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4522'.
[ 2340.461740][T23608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4522'.
[ 2340.475837][T23608] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4522'.
[ 2340.609023][T15044] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2340.616286][T15044] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2340.749893][T23616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4527'.
[ 2340.987784][T23616] macsec1: entered allmulticast mode
[ 2341.049394][T23616] macvlan0: entered allmulticast mode
[ 2341.067470][T23616] veth1_vlan: entered allmulticast mode
[ 2341.124397][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4529'.
[ 2341.178709][T23621] macsec1: entered allmulticast mode
[ 2341.184036][T23621] macvlan0: entered allmulticast mode
[ 2341.302715][T15044] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2341.309903][T15044] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2341.612962][T23633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4533'.
[ 2342.784509][T23356] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2342.872213][T23668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4546'.
[ 2342.938003][T23668] macsec1: entered allmulticast mode
[ 2342.963969][T23668] macvlan0: entered allmulticast mode
[ 2342.978342][T23668] veth1_vlan: entered allmulticast mode
[ 2343.073204][T23674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4547'.
[ 2344.597028][T23356] veth0_vlan: entered promiscuous mode
[ 2344.838355][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2345.272101][T23356] veth1_vlan: entered promiscuous mode
[ 2345.391301][T23705] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4556'.
[ 2345.414479][T23356] veth0_macvtap: entered promiscuous mode
[ 2345.438811][T23356] veth1_macvtap: entered promiscuous mode
[ 2345.691732][T23356] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2346.311470][T23356] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2346.461412][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2346.498424][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2346.507292][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2346.571518][T23720] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4560'.
[ 2346.609122][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2346.796586][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2346.821537][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2346.866254][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2346.964536][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2348.347805][T23745] bio_check_eod: 2 callbacks suppressed
[ 2348.347975][T23745] syz.5.4441: attempt to access beyond end of device
[ 2348.347975][T23745] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0
[ 2348.367611][T23744] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4566'.
[ 2348.367957][T23745] syz.5.4441: attempt to access beyond end of device
[ 2348.367957][T23745] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0
[ 2348.391382][T23745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2348.405215][T23741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4568'.
[ 2348.405304][T23745] syz.5.4441: attempt to access beyond end of device
[ 2348.405304][T23745] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0
[ 2348.428332][T23741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4568'.
[ 2348.428360][T23745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2348.447874][T23741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4568'.
[ 2348.449297][T23745] syz.5.4441: attempt to access beyond end of device
[ 2348.449297][T23745] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[ 2348.475554][T23745] syz.5.4441: attempt to access beyond end of device
[ 2348.475554][T23745] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0
[ 2348.489098][T23745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2348.501570][T23745] syz.5.4441: attempt to access beyond end of device
[ 2348.501570][T23745] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 2348.516456][T23745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2348.537492][T23745] syz.5.4441: attempt to access beyond end of device
[ 2348.537492][T23745] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0
[ 2348.552549][T23745] syz.5.4441: attempt to access beyond end of device
[ 2348.552549][T23745] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 2348.566354][T23745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2348.584186][T23745] syz.5.4441: attempt to access beyond end of device
[ 2348.584186][T23745] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 2348.601308][T23745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2348.637804][T23745] syz.5.4441: attempt to access beyond end of device
[ 2348.637804][T23745] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[ 2348.666041][T23745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2348.687018][T23745] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2348.697837][T23745] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[ 2349.321483][T23752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4572'.
[ 2353.023689][T23791] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4583'.
[ 2353.403069][T23792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4585'.
[ 2353.470376][T23792] macsec1: entered allmulticast mode
[ 2353.475822][T23792] macvlan0: entered allmulticast mode
[ 2353.481414][T23792] veth1_vlan: entered allmulticast mode
[ 2354.003668][T23798] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4587'.
[ 2354.857989][ T5910] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 2355.081791][ T5910] usb 6-1: Using ep0 maxpacket: 16
[ 2355.175970][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2355.887513][ T5910] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 2355.917747][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2356.971333][ T5910] usb 6-1: config 0 descriptor??
[ 2357.401761][ T5910] usbhid 6-1:0.0: can't add hid device: -71
[ 2357.423913][ T5910] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 2357.440024][T23834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4600'.
[ 2357.459742][T23835] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4599'.
[ 2357.470029][ T5910] usb 6-1: USB disconnect, device number 37
[ 2362.285903][T23880] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 2366.600301][T23926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4628'.
[ 2366.618603][T23926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4628'.
[ 2366.627731][T23926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4628'.
[ 2366.636706][T23926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4628'.
[ 2369.070589][T23950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4635'.
[ 2369.079714][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4635'.
[ 2369.088718][T23950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4635'.
[ 2369.097759][T23950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4635'.
[ 2372.453139][T23990] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4647'.
[ 2374.170833][   T30] audit: type=1326 audit(1752541839.169:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23994 comm="syz.1.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf6d8e929 code=0x7fc00000
[ 2374.204202][T24008] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4654'.
[ 2375.057356][T24024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4658'.
[ 2376.582025][T24034] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4661'.
[ 2376.632668][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4663'.
[ 2376.796864][T24042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4664'.
[ 2379.295735][T24055] process 'syz.4.4668' launched '/dev/fd/5' with NULL argv: empty string added
[ 2380.815000][T24064] binder: 24063:24064 ioctl c0306201 200000001440 returned -11
[ 2380.858617][T24068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4672'.
[ 2382.879875][T24094] netlink: 'syz.1.4680': attribute type 10 has an invalid length.
[ 2382.890670][T24094] team0: Device ipvlan1 failed to register rx_handler
[ 2384.003732][T24102] xt_CT: No such helper "snmp_trap"
[ 2386.290479][T24125] netlink: 'syz.1.4690': attribute type 10 has an invalid length.
[ 2386.309359][T24125] team0: Device ipvlan1 failed to register rx_handler
[ 2387.291378][T24119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4689'.
[ 2387.331744][T24119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4689'.
[ 2387.457952][T24119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4689'.
[ 2387.468709][T24119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4689'.
[ 2388.233841][T24146] xt_CT: No such helper "snmp_trap"
[ 2389.715823][T24167] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4703'.
[ 2391.011466][T24185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4709'.
[ 2391.026602][T24185] macsec1: entered allmulticast mode
[ 2391.032256][T24185] macvlan0: entered allmulticast mode
[ 2391.037775][T24185] veth1_vlan: entered allmulticast mode
[ 2392.061694][T24190] xt_CT: No such helper "snmp_trap"
[ 2393.314716][T24207] netlink: 'syz.0.4715': attribute type 10 has an invalid length.
[ 2393.330848][T24207] team0: Device ipvlan1 failed to register rx_handler
[ 2396.711743][T24226] bio_check_eod: 2 callbacks suppressed
[ 2396.711782][T24226] syz.5.4720: attempt to access beyond end of device
[ 2396.711782][T24226] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0
[ 2396.761245][T24226] syz.5.4720: attempt to access beyond end of device
[ 2396.761245][T24226] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0
[ 2396.781158][T24226] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2396.808546][T24235] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4723'.
[ 2396.816734][T24226] syz.5.4720: attempt to access beyond end of device
[ 2396.816734][T24226] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0
[ 2396.840561][T24226] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2397.059868][T24226] syz.5.4720: attempt to access beyond end of device
[ 2397.059868][T24226] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[ 2397.084259][T24226] syz.5.4720: attempt to access beyond end of device
[ 2397.084259][T24226] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0
[ 2397.117749][T24226] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2397.132153][T24226] syz.5.4720: attempt to access beyond end of device
[ 2397.132153][T24226] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 2397.147426][T24226] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2397.204618][T24226] syz.5.4720: attempt to access beyond end of device
[ 2397.204618][T24226] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0
[ 2397.233408][T24226] syz.5.4720: attempt to access beyond end of device
[ 2397.233408][T24226] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 2397.247955][T24238] xt_CT: No such helper "snmp_trap"
[ 2397.254619][T24226] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2397.271709][T24226] syz.5.4720: attempt to access beyond end of device
[ 2397.271709][T24226] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 2397.287715][T24226] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2397.330190][T24226] syz.5.4720: attempt to access beyond end of device
[ 2397.330190][T24226] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[ 2397.366836][T24226] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2397.752860][T24226] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2397.767440][T24226] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[ 2398.129321][T24249] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2400.470292][T24291] x_tables: unsorted entry at hook 2
[ 2400.506078][T24298] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4743'.
[ 2401.397575][ T5930] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 2402.297456][ T5930] usb 6-1: Using ep0 maxpacket: 16
[ 2402.309678][ T5930] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 2402.322706][ T5930] usb 6-1: config 0 has no interface number 0
[ 2402.334277][ T5930] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 2402.351085][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2402.375823][ T5930] usb 6-1: Product: syz
[ 2402.561039][ T5930] usb 6-1: Manufacturer: syz
[ 2402.566453][ T5930] usb 6-1: SerialNumber: syz
[ 2402.578943][ T5930] usb 6-1: config 0 descriptor??
[ 2402.600450][ T5930] hub 6-1:0.132: bad descriptor, ignoring hub
[ 2402.606595][ T5930] hub 6-1:0.132: probe with driver hub failed with error -5
[ 2402.634090][ T5930] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input110
[ 2402.656591][T24324] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 2402.682868][T24324] CIFS mount error: No usable UNC path provided in device string!
[ 2402.682868][T24324] 
[ 2402.693093][T24324] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 2403.558172][ T5910] usb 6-1: USB disconnect, device number 38
[ 2403.681852][T24340] CIFS mount error: No usable UNC path provided in device string!
[ 2403.681852][T24340] 
[ 2403.691949][T24340] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 2404.655939][T24348] netlink: 'syz.0.4757': attribute type 1 has an invalid length.
[ 2404.685768][T24348] netlink: 'syz.0.4757': attribute type 12 has an invalid length.
[ 2404.700928][T24348] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4757'.
[ 2406.485094][T24370] netlink: 'syz.5.4763': attribute type 10 has an invalid length.
[ 2406.503747][T24370] team0: Device ipvlan1 failed to register rx_handler
[ 2406.760307][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2408.141579][T24388] netlink: 'syz.4.4768': attribute type 10 has an invalid length.
[ 2408.152339][T24388] team0: Device ipvlan1 failed to register rx_handler
[ 2408.825647][T24392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4770'.
[ 2413.356122][T24447] bio_check_eod: 2 callbacks suppressed
[ 2413.356137][T24447] syz.5.4790: attempt to access beyond end of device
[ 2413.356137][T24447] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0
[ 2414.102248][T24447] syz.5.4790: attempt to access beyond end of device
[ 2414.102248][T24447] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0
[ 2414.115455][T24447] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2414.125204][T24447] syz.5.4790: attempt to access beyond end of device
[ 2414.125204][T24447] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0
[ 2414.138163][T24447] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2414.148568][T24447] syz.5.4790: attempt to access beyond end of device
[ 2414.148568][T24447] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[ 2414.161658][T24447] syz.5.4790: attempt to access beyond end of device
[ 2414.161658][T24447] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0
[ 2414.174667][T24447] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2414.184492][T24447] syz.5.4790: attempt to access beyond end of device
[ 2414.184492][T24447] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 2414.197843][T24447] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2414.207910][T24447] syz.5.4790: attempt to access beyond end of device
[ 2414.207910][T24447] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0
[ 2414.221096][T24447] syz.5.4790: attempt to access beyond end of device
[ 2414.221096][T24447] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 2414.234216][T24447] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2414.243884][T24447] syz.5.4790: attempt to access beyond end of device
[ 2414.243884][T24447] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 2414.256908][T24447] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2414.266807][T24447] syz.5.4790: attempt to access beyond end of device
[ 2414.266807][T24447] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[ 2414.279829][T24447] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2414.289716][T24447] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2414.299243][T24447] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[ 2414.750515][T24468] netlink: 'syz.5.4794': attribute type 10 has an invalid length.
[ 2414.769416][T24468] team0: Device ipvlan1 failed to register rx_handler
[ 2415.452917][T24470] netlink: 'syz.0.4797': attribute type 1 has an invalid length.
[ 2415.463198][T24470] netlink: 'syz.0.4797': attribute type 12 has an invalid length.
[ 2415.471199][T24470] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4797'.
[ 2419.027814][T24499] x_tables: unsorted entry at hook 2
[ 2419.298088][ T5166] Bluetooth: hci4: command 0x0405 tx timeout
[ 2419.368644][T24513] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4811'.
[ 2423.098459][T24553] netlink: 'syz.2.4825': attribute type 1 has an invalid length.
[ 2423.147275][T24553] netlink: 'syz.2.4825': attribute type 12 has an invalid length.
[ 2423.417563][T24553] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4825'.
[ 2427.728344][T24607] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4846'.
[ 2427.875866][T24604] CIFS mount error: No usable UNC path provided in device string!
[ 2427.875866][T24604] 
[ 2427.886102][T24604] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 2427.918579][T24600] x_tables: unsorted entry at hook 2
[ 2431.828381][T24630] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[ 2432.651062][T24639] netlink: 'syz.1.4855': attribute type 10 has an invalid length.
[ 2432.661434][T24639] team0: Device ipvlan1 failed to register rx_handler
[ 2435.087280][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4860'.
[ 2435.268935][T24663] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd
[ 2435.962942][T18344] IPVS: starting estimator thread 0...
[ 2436.162716][T24665] IPVS: using max 28 ests per chain, 67200 per kthread
[ 2437.062358][T24673] x_tables: unsorted entry at hook 2
[ 2437.373268][T24683] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[ 2439.814981][T24708] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd
[ 2442.156027][T24723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4880'.
[ 2442.220328][ T5917] IPVS: starting estimator thread 0...
[ 2442.317511][T24725] IPVS: using max 27 ests per chain, 64800 per kthread
[ 2442.879815][T24736] !
: renamed from dummy0 (while UP)
[ 2443.737696][T24745] netlink: 'syz.1.4884': attribute type 10 has an invalid length.
[ 2443.782212][T24745] team0: Device ipvlan1 failed to register rx_handler
[ 2444.306467][ T5166] Bluetooth: hci4: command 0x0405 tx timeout
[ 2445.198599][T24754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4888'.
[ 2445.225486][ T5910] IPVS: starting estimator thread 0...
[ 2445.358839][T24756] IPVS: using max 28 ests per chain, 67200 per kthread
[ 2449.256213][T24779] overlayfs: conflicting options: userxattr,metacopy=on
[ 2452.826694][T24799] CIFS mount error: No usable UNC path provided in device string!
[ 2452.826694][T24799] 
[ 2452.836782][T24799] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 2455.707923][T24824] x_tables: unsorted entry at hook 2
[ 2455.906828][T24829] overlayfs: conflicting options: userxattr,metacopy=on
[ 2457.085967][T24836] x_tables: unsorted entry at hook 2
[ 2457.209895][T24840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4915'.
[ 2457.415539][T24846] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4916'.
[ 2458.202208][T24838] overlayfs: failed to clone upperpath
[ 2458.945610][T24860] netlink: 'syz.4.4920': attribute type 303 has an invalid length.
[ 2460.144702][T24872] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4925'.
[ 2460.225679][T24873] netlink: 'syz.0.4924': attribute type 10 has an invalid length.
[ 2460.241012][T24873] team0: Device ipvlan1 failed to register rx_handler
[ 2462.063318][T24883] overlayfs: conflicting options: userxattr,metacopy=on
[ 2463.910394][T24899] overlayfs: conflicting options: userxattr,metacopy=on
[ 2463.956209][T24902] overlayfs: conflicting options: userxattr,metacopy=on
[ 2465.468800][T24917] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4938'.
[ 2467.411104][T24937] overlayfs: conflicting options: userxattr,metacopy=on
[ 2467.717806][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2467.864122][T24947] netlink: 'syz.0.4945': attribute type 10 has an invalid length.
[ 2467.875243][T24947] team0: Device ipvlan1 failed to register rx_handler
[ 2470.990638][T24968] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4952'.
[ 2472.237977][T24980] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4955'.
[ 2474.296153][T24991] netlink: 'syz.0.4959': attribute type 1 has an invalid length.
[ 2474.316104][T24993] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2474.344427][T24991] netlink: 'syz.0.4959': attribute type 12 has an invalid length.
[ 2474.374748][T24991] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4959'.
[ 2476.831908][T25020] netlink: 'syz.2.4965': attribute type 10 has an invalid length.
[ 2476.842157][T25020] team0: Device ipvlan1 failed to register rx_handler
[ 2477.028817][T25019] x_tables: unsorted entry at hook 2
[ 2477.418885][T25024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4968'.
[ 2477.693475][ T3566] IPVS: starting estimator thread 0...
[ 2477.867429][T25025] IPVS: using max 27 ests per chain, 64800 per kthread
[ 2477.970883][T25029] overlayfs: conflicting options: userxattr,metacopy=on
[ 2479.356384][T25044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4974'.
[ 2481.854764][T25072] overlayfs: conflicting options: userxattr,metacopy=on
[ 2482.446525][T25083] overlayfs: conflicting options: userxattr,metacopy=on
[ 2484.575906][T25104] ubi31: attaching mtd0
[ 2484.594029][T25104] ubi31: scanning is finished
[ 2484.649149][T25104] ubi31: empty MTD device detected
[ 2484.807084][T25106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4993'.
[ 2487.082863][T25104] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 2487.267761][T25104] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 2487.275107][T25104] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 2487.302570][T25122] netlink: 'syz.0.4999': attribute type 39 has an invalid length.
[ 2487.449464][T25104] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 2487.456986][T25104] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 2487.475775][T25104] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 2487.539530][T25104] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1417083062
[ 2487.608073][T25104] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 2487.682105][T25124] ubi31: background thread "ubi_bgt31d" started, PID 25124
[ 2488.155683][T25140] CIFS mount error: No usable UNC path provided in device string!
[ 2488.155683][T25140] 
[ 2488.166995][T25140] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 2488.917526][T18344] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 2489.127400][T18344] usb 6-1: Using ep0 maxpacket: 32
[ 2489.148591][T18344] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[ 2489.171593][T18344] usb 6-1: config 0 has no interface number 0
[ 2489.198690][T18344] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2489.225969][T18344] usb 6-1: config 0 interface 85 has no altsetting 0
[ 2489.239190][T18344] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2489.257441][T18344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2489.272035][T18344] usb 6-1: Product: syz
[ 2489.276445][T18344] usb 6-1: Manufacturer: syz
[ 2489.282430][T18344] usb 6-1: SerialNumber: syz
[ 2489.327999][T18344] usb 6-1: config 0 descriptor??
[ 2489.693665][T25160] netlink: 'syz.1.5011': attribute type 1 has an invalid length.
[ 2489.705187][T25160] netlink: 'syz.1.5011': attribute type 12 has an invalid length.
[ 2489.717922][T25160] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5011'.
[ 2489.843373][T25163] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5012'.
[ 2489.941293][T18344] appletouch 6-1:0.85: Geyser mode initialized.
[ 2489.963415][T18344] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input111
[ 2490.123305][T25165] overlayfs: conflicting options: userxattr,metacopy=on
[ 2490.160224][T18344] usb 6-1: USB disconnect, device number 39
[ 2490.160372][    C0] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19
[ 2490.303212][T18344] appletouch 6-1:0.85: input: appletouch disconnected
[ 2490.664981][T25176] netlink: 'syz.2.5018': attribute type 1 has an invalid length.
[ 2490.709403][T25176] netlink: 'syz.2.5018': attribute type 12 has an invalid length.
[ 2490.734492][T25176] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.5018'.
[ 2494.300002][T25214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5032'.
[ 2494.512372][T25220] trusted_key: encrypted_key: insufficient parameters specified
[ 2494.523400][T25220] trusted_key: encrypted_key: insufficient parameters specified
[ 2495.366603][T25230] netlink: 'syz.5.5036': attribute type 1 has an invalid length.
[ 2495.421014][T25230] netlink: 'syz.5.5036': attribute type 12 has an invalid length.
[ 2495.448034][T25230] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.5036'.
[ 2495.616467][T25240] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5038'.
[ 2495.777484][T25242] x_tables: unsorted entry at hook 2
[ 2499.518860][T25261] overlayfs: conflicting options: userxattr,metacopy=on
[ 2500.157950][T25276] netlink: 'syz.5.5052': attribute type 10 has an invalid length.
[ 2500.179104][T25276] team0: Device ipvlan1 failed to register rx_handler
[ 2500.801679][T25287] overlayfs: conflicting options: userxattr,metacopy=on
[ 2501.064459][T25292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5059'.
[ 2501.162174][T25294] netlink: 'syz.2.5058': attribute type 10 has an invalid length.
[ 2501.181319][T25294] team0: Device ipvlan1 failed to register rx_handler
[ 2502.354254][T25311] trusted_key: encrypted_key: insufficient parameters specified
[ 2502.365454][T25311] trusted_key: encrypted_key: insufficient parameters specified
[ 2502.831677][T25309] syzkaller0: entered promiscuous mode
[ 2502.837202][T25309] syzkaller0: entered allmulticast mode
[ 2503.398477][T25326] netlink: 'syz.2.5071': attribute type 39 has an invalid length.
[ 2505.031542][T25338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5075'.
[ 2505.043496][T18341] IPVS: starting estimator thread 0...
[ 2505.157527][T25340] IPVS: using max 31 ests per chain, 74400 per kthread
[ 2505.588780][T25357] netlink: 'syz.2.5078': attribute type 10 has an invalid length.
[ 2505.607958][T25357] team0: Device ipvlan1 failed to register rx_handler
[ 2507.285900][T25372] netlink: 'syz.2.5085': attribute type 10 has an invalid length.
[ 2507.308492][T25372] team0: Device ipvlan1 failed to register rx_handler
[ 2509.147727][T18341] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 2509.319065][T18341] usb 6-1: Using ep0 maxpacket: 32
[ 2509.328082][T18341] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[ 2509.343079][T18341] usb 6-1: config 0 has no interface number 0
[ 2509.367487][T18341] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2509.395474][T18341] usb 6-1: config 0 interface 85 has no altsetting 0
[ 2509.429162][T18341] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2509.440888][T18341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2509.471505][T18341] usb 6-1: Product: syz
[ 2509.482457][T18341] usb 6-1: Manufacturer: syz
[ 2509.496029][T18341] usb 6-1: SerialNumber: syz
[ 2509.539778][T18341] usb 6-1: config 0 descriptor??
[ 2509.992673][T25409] x_tables: unsorted entry at hook 2
[ 2510.802999][T18341] appletouch 6-1:0.85: Failed to request geyser raw mode
[ 2510.815576][T18341] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[ 2510.847710][T18341] usb 6-1: USB disconnect, device number 40
[ 2511.120473][T25416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5102'.
[ 2511.645088][T25427] overlayfs: conflicting options: userxattr,metacopy=on
[ 2511.763547][T25432] overlayfs: conflicting options: userxattr,metacopy=on
[ 2512.175654][T25442] CIFS mount error: No usable UNC path provided in device string!
[ 2512.175654][T25442] 
[ 2512.185907][T25442] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 2513.314317][T25462] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5117'.
[ 2513.359909][T25461] netlink: 'syz.2.5115': attribute type 10 has an invalid length.
[ 2513.451329][T25461] team0: Device ipvlan1 failed to register rx_handler
[ 2514.261611][T25474] overlayfs: conflicting options: userxattr,metacopy=on
[ 2515.629837][T25484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5126'.
[ 2516.183937][T25492] netlink: 'syz.2.5129': attribute type 39 has an invalid length.
[ 2516.245645][T25495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5130'.
[ 2517.583885][T23360] Bluetooth: hci4: command 0x0405 tx timeout
[ 2518.867630][T25514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5136'.
[ 2518.947738][T25514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5136'.
[ 2523.533548][T25555] overlayfs: conflicting options: userxattr,metacopy=on
[ 2523.778055][T25563] netlink: 'syz.4.5139': attribute type 10 has an invalid length.
[ 2524.583572][T25563] team0: Device ipvlan1 failed to register rx_handler
[ 2525.200552][T25577] bio_check_eod: 2 callbacks suppressed
[ 2525.200589][T25577] syz.5.5152: attempt to access beyond end of device
[ 2525.200589][T25577] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0
[ 2525.448114][T25577] syz.5.5152: attempt to access beyond end of device
[ 2525.448114][T25577] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0
[ 2525.478901][T25577] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2525.507977][T25577] syz.5.5152: attempt to access beyond end of device
[ 2525.507977][T25577] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0
[ 2525.547502][T25577] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2525.594891][T25577] syz.5.5152: attempt to access beyond end of device
[ 2525.594891][T25577] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[ 2525.647836][T25577] syz.5.5152: attempt to access beyond end of device
[ 2525.647836][T25577] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0
[ 2525.681671][T25577] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2525.726556][T25577] syz.5.5152: attempt to access beyond end of device
[ 2525.726556][T25577] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 2525.757559][T25577] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2525.845873][T25577] syz.5.5152: attempt to access beyond end of device
[ 2525.845873][T25577] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0
[ 2525.947315][T25577] syz.5.5152: attempt to access beyond end of device
[ 2525.947315][T25577] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 2526.002140][T25577] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2526.052761][T25577] syz.5.5152: attempt to access beyond end of device
[ 2526.052761][T25577] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 2526.112585][T25577] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2526.158174][T25577] syz.5.5152: attempt to access beyond end of device
[ 2526.158174][T25577] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[ 2526.225653][T25577] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2526.245927][T25577] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2526.277443][T25577] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[ 2526.709012][T25589] Bluetooth: MGMT ver 1.23
[ 2526.787110][T25592] overlayfs: conflicting options: userxattr,metacopy=on
[ 2526.982950][T25595] overlayfs: conflicting options: userxattr,metacopy=on
[ 2527.197693][ T3566] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 2527.518450][ T3566] usb 6-1: Using ep0 maxpacket: 32
[ 2527.525687][ T3566] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[ 2527.544891][ T3566] usb 6-1: config 0 has no interface number 0
[ 2527.553939][ T3566] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2527.577068][ T3566] usb 6-1: config 0 interface 85 has no altsetting 0
[ 2527.587717][ T3566] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2527.596809][ T3566] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2527.627337][ T3566] usb 6-1: Product: syz
[ 2527.631560][ T3566] usb 6-1: Manufacturer: syz
[ 2527.636192][ T3566] usb 6-1: SerialNumber: syz
[ 2527.649920][ T3566] usb 6-1: config 0 descriptor??
[ 2527.801061][T25614] overlayfs: conflicting options: userxattr,metacopy=on
[ 2528.278610][ T3566] appletouch 6-1:0.85: Failed to read mode from device.
[ 2528.343490][T25622] netlink: 'syz.4.5169': attribute type 10 has an invalid length.
[ 2528.372864][T25622] team0: Device ipvlan1 failed to register rx_handler
[ 2528.830066][ T3566] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[ 2528.907553][ T3566] usb 6-1: USB disconnect, device number 41
[ 2529.144575][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2530.567882][T25650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2532.283123][T25659] netlink: 'syz.2.5183': attribute type 39 has an invalid length.
[ 2532.315550][T25657] Set syz1 is full, maxelem 1038 reached
[ 2532.819141][T25668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2534.571439][T25680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5190'.
[ 2535.143736][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5193'.
[ 2537.480640][T25709] netlink: 'syz.5.5200': attribute type 39 has an invalid length.
[ 2538.393184][T25727] overlayfs: conflicting options: userxattr,metacopy=on
[ 2538.562261][T25732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5206'.
[ 2538.813380][T25739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5210'.
[ 2538.929708][T25742] netlink: 'syz.0.5207': attribute type 10 has an invalid length.
[ 2538.958378][T25742] team0: Device ipvlan1 failed to register rx_handler
[ 2541.576187][T25774] CIFS mount error: No usable UNC path provided in device string!
[ 2541.576187][T25774] 
[ 2541.586296][T25774] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 2541.616692][T25775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5220'.
[ 2542.701613][T25782] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 2543.169756][T25790] netlink: 'syz.0.5223': attribute type 10 has an invalid length.
[ 2543.194509][T25790] team0: Device ipvlan1 failed to register rx_handler
[ 2543.992859][T25794] overlayfs: cannot append lower layer
[ 2544.348240][T25803] overlayfs: conflicting options: userxattr,metacopy=on
[ 2544.663606][T25811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2546.040264][T25824] netlink: 'syz.0.5237': attribute type 1 has an invalid length.
[ 2546.155236][T25824] netlink: 'syz.0.5237': attribute type 12 has an invalid length.
[ 2546.167418][T25824] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5237'.
[ 2548.015242][T25835] netlink: 'syz.1.5238': attribute type 10 has an invalid length.
[ 2548.034047][T25835] team0: Device ipvlan1 failed to register rx_handler
[ 2548.827902][T25839] overlayfs: conflicting options: userxattr,metacopy=on
[ 2549.481102][T25854] trusted_key: encrypted_key: insufficient parameters specified
[ 2549.492982][T25854] trusted_key: encrypted_key: insufficient parameters specified
[ 2550.335652][T25859] x_tables: unsorted entry at hook 2
[ 2552.081536][T25879] netlink: 'syz.0.5252': attribute type 10 has an invalid length.
[ 2552.097814][T25879] team0: Device ipvlan1 failed to register rx_handler
[ 2553.658588][T25893] overlayfs: conflicting options: userxattr,metacopy=on
[ 2553.861809][T25897] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2553.987362][T25905] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5261'.
[ 2556.064084][T25918] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5267'.
[ 2558.267949][T25931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5272'.
[ 2558.400393][T25942] CIFS mount error: No usable UNC path provided in device string!
[ 2558.400393][T25942] 
[ 2558.410464][T25942] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 2558.470846][T25946] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2558.585498][T25949] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5278'.
[ 2558.848742][T25952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5280'.
[ 2559.830807][T25966] overlayfs: conflicting options: userxattr,metacopy=on
[ 2559.905655][T25965] overlayfs: conflicting options: userxattr,metacopy=on
[ 2561.085241][T25986] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5292'.
[ 2561.126391][T25987] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2561.635024][T26001] netlink: 'syz.4.5294': attribute type 10 has an invalid length.
[ 2561.645893][T26001] team0: Device ipvlan1 failed to register rx_handler
[ 2562.304553][T25998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5295'.
[ 2563.910436][T26017] netlink: 'syz.4.5300': attribute type 10 has an invalid length.
[ 2563.930493][T26017] team0: Device ipvlan1 failed to register rx_handler
[ 2564.007922][T26016] netlink: 'syz.5.5302': attribute type 1 has an invalid length.
[ 2567.089512][T26050] overlayfs: conflicting options: userxattr,metacopy=on
[ 2567.192919][T26054] netlink: 'syz.5.5316': attribute type 1 has an invalid length.
[ 2568.564246][T26068] Bluetooth: MGMT ver 1.23
[ 2570.553327][T26088] netlink: 'syz.4.5323': attribute type 10 has an invalid length.
[ 2570.563779][T26088] team0: Device ipvlan1 failed to register rx_handler
[ 2572.753656][T26122] netlink: 'syz.2.5337': attribute type 1 has an invalid length.
[ 2572.786955][T26122] netlink: 'syz.2.5337': attribute type 12 has an invalid length.
[ 2572.814219][T26122] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.5337'.
[ 2573.376266][T26129] netlink: 'syz.4.5340': attribute type 1 has an invalid length.
[ 2573.408433][T26129] netlink: 'syz.4.5340': attribute type 12 has an invalid length.
[ 2573.437019][T26129] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.5340'.
[ 2573.944593][T26140] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5342'.
[ 2574.909766][T26143] overlayfs: failed to clone upperpath
[ 2577.445995][T26170] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2578.178535][T26182] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5358'.
[ 2578.417914][T26190] netlink: 'syz.0.5359': attribute type 39 has an invalid length.
[ 2578.564798][T26192] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5361'.
[ 2578.906276][T26200] ubi: mtd0 is already attached to ubi31
[ 2579.167712][T18341] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 2579.460949][T18341] usb 6-1: Using ep0 maxpacket: 16
[ 2579.500241][T18341] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2579.550695][T18341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2579.564224][T26202] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5365'.
[ 2579.597763][T18341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2579.617497][T18341] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2579.640066][T18341] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2579.660898][T18341] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2579.699509][T26208] overlayfs: conflicting options: userxattr,metacopy=on
[ 2579.853419][T18341] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2579.861714][T18341] usb 6-1: Manufacturer: syz
[ 2579.870817][T18341] usb 6-1: config 0 descriptor??
[ 2581.075256][T26217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5370'.
[ 2582.004399][T26221] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2582.431965][T18341] rc_core: IR keymap rc-hauppauge not found
[ 2582.448167][T26238] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5375'.
[ 2582.466843][T18341] Registered IR keymap rc-empty
[ 2582.775104][T18341] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2582.798988][T18341] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2582.856713][T18341] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 2582.920232][T18341] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input114
[ 2582.947155][T18341] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2583.209359][T18341] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2583.267787][T18341] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2583.351770][T18341] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2583.390469][T18341] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2583.647433][T18341] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2584.483533][T18341] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2585.011617][T26265] netlink: 'syz.2.5383': attribute type 10 has an invalid length.
[ 2585.031659][T26265] team0: Device ipvlan1 failed to register rx_handler
[ 2585.200219][T18341] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2585.550936][T18341] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2585.598172][T18341] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2585.872949][T18341] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[ 2585.933167][T26269] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5385'.
[ 2585.953493][T18341] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2586.044666][T26275] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2586.067550][T18341] usb 6-1: USB disconnect, device number 42
[ 2587.734436][T26292] autofs: Unknown parameter 'fd0x0000000000000000'
[ 2590.993701][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2592.744832][T26344] netlink: 'syz.1.5411': attribute type 39 has an invalid length.
[ 2592.838888][T26346] x_tables: unsorted entry at hook 2
[ 2594.373137][T26375] x_tables: unsorted entry at hook 2
[ 2596.553836][T26392] overlayfs: conflicting options: userxattr,metacopy=on
[ 2598.147119][T26405] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5431'.
[ 2598.234813][T26407] overlayfs: conflicting options: userxattr,metacopy=on
[ 2598.977777][T26415] netlink: 'syz.1.5435': attribute type 10 has an invalid length.
[ 2598.987966][T26415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5435'.
[ 2599.023404][T26415] team0: Port device geneve0 added
[ 2602.394747][T26445] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5445'.
[ 2602.787483][T26454] netlink: 'syz.5.5447': attribute type 10 has an invalid length.
[ 2602.806576][T26454] team0: Device ipvlan1 failed to register rx_handler
[ 2603.391452][T26457] overlayfs: conflicting options: userxattr,metacopy=on
[ 2604.009252][T26451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5448'.
[ 2606.586200][T26489] netlink: 'syz.5.5461': attribute type 1 has an invalid length.
[ 2606.596705][T26489] netlink: 'syz.5.5461': attribute type 12 has an invalid length.
[ 2607.300244][T26489] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.5461'.
[ 2609.903970][T26537] overlayfs: cannot append lower layer
[ 2611.530611][T26562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5489'.
[ 2612.299868][T26573] overlayfs: conflicting options: userxattr,metacopy=on
[ 2612.441652][T26577] overlayfs: conflicting options: userxattr,metacopy=on
[ 2613.808466][T26593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5502'.
[ 2613.928528][T26595] netlink: 'syz.2.5504': attribute type 1 has an invalid length.
[ 2614.032463][T26595] netlink: 'syz.2.5504': attribute type 12 has an invalid length.
[ 2614.099748][T26595] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.5504'.
[ 2615.230418][T26617] netlink: 'syz.1.5510': attribute type 12 has an invalid length.
[ 2615.242506][T26617] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5510'.
[ 2615.799221][T26629] x_tables: unsorted entry at hook 2
[ 2615.979031][T26635] overlayfs: conflicting options: userxattr,metacopy=on
[ 2616.538241][T26651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2624.990876][T26688] overlayfs: conflicting options: userxattr,metacopy=on
[ 2627.489318][T26708] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[ 2627.495897][T26708] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 2627.531815][T26708] vhci_hcd vhci_hcd.0: Device attached
[ 2627.827795][ T5930] usb 43-1: new high-speed USB device number 2 using vhci_hcd
[ 2628.628243][T26708] cifs: Unknown parameter 'mode'
[ 2628.654108][T26709] vhci_hcd: connection reset by peer
[ 2628.690728][ T1329] vhci_hcd: stop threads
[ 2628.695049][ T1329] vhci_hcd: release socket
[ 2628.717677][ T1329] vhci_hcd: disconnect device
[ 2628.733339][T26721] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5546'.
[ 2632.328762][T26746] 9pnet_fd: Insufficient options for proto=fd
[ 2632.496507][T26751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5554'.
[ 2633.552711][T26759] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5557'.
[ 2633.630923][T26763] overlayfs: conflicting options: userxattr,metacopy=on
[ 2633.697389][ T5930] vhci_hcd: vhci_device speed not set
[ 2633.776042][T26765] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5559'.
[ 2635.945041][T26781] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5565'.
[ 2636.162107][T26788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5567'.
[ 2636.331009][T26792] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5569'.
[ 2638.722033][T26807] overlayfs: conflicting options: userxattr,metacopy=on
[ 2640.502406][T26826] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5581'.
[ 2640.599633][T26829] overlayfs: conflicting options: userxattr,metacopy=on
[ 2641.152575][T26834] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5584'.
[ 2644.567901][T23360] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2644.583516][T23360] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2644.599039][T23360] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2644.608576][T23360] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2644.855046][T23360] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2647.689249][T23360] Bluetooth: hci2: command tx timeout
[ 2648.731227][T26858] chnl_net:caif_netlink_parms(): no params data found
[ 2648.933702][T26897] trusted_key: encrypted_key: insufficient parameters specified
[ 2648.945458][T26897] trusted_key: encrypted_key: insufficient parameters specified
[ 2649.780418][T23360] Bluetooth: hci2: command tx timeout
[ 2649.793238][T26904] loop6: detected capacity change from 0 to 524287999
[ 2650.132329][T26905] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5602'.
[ 2650.540397][T26858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2650.566291][T26858] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2650.828183][T26858] bridge_slave_0: entered allmulticast mode
[ 2650.836588][T26858] bridge_slave_0: entered promiscuous mode
[ 2650.865597][T26858] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2650.923292][T26858] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2650.966960][T26858] bridge_slave_1: entered allmulticast mode
[ 2651.000454][T26858] bridge_slave_1: entered promiscuous mode
[ 2651.366695][T26858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2651.384337][T26858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2651.795365][T26924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5607'.
[ 2651.805670][T26924] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5607'.
[ 2651.857274][T23360] Bluetooth: hci2: command tx timeout
[ 2652.368252][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2653.147018][T26858] team0: Port device team_slave_0 added
[ 2653.169832][T26858] team0: Port device team_slave_1 added
[ 2653.469472][T26858] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2653.476477][T26858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2653.629587][T26858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2653.937505][T23360] Bluetooth: hci2: command tx timeout
[ 2654.352588][T26858] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2654.360104][T26858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2654.407516][T26858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2654.612420][T26947] x_tables: unsorted entry at hook 2
[ 2655.614613][T26858] hsr_slave_0: entered promiscuous mode
[ 2655.823311][T26858] hsr_slave_1: entered promiscuous mode
[ 2655.846250][T26858] debugfs: 'hsr0' already exists in 'hsr'
[ 2655.860613][T26858] Cannot create hsr debugfs directory
[ 2657.279128][T26973] netlink: 'syz.4.5625': attribute type 1 has an invalid length.
[ 2657.313453][T26973] netlink: 'syz.4.5625': attribute type 12 has an invalid length.
[ 2657.342250][T26973] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.5625'.
[ 2657.423726][T26981] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5629'.
[ 2657.457941][T26858] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2657.634816][T26858] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2658.947732][T26995] ubi: mtd0 is already attached to ubi31
[ 2659.469321][T26992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5633'.
[ 2659.488705][T26858] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2659.642333][T26858] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2660.057121][T26858] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2660.883540][T26858] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2660.993838][T26858] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2661.395103][T26858] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2662.272565][T26858] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2663.059723][T26858] 8021q: adding VLAN 0 to HW filter on device team0
[ 2663.143030][T17976] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2663.150241][T17976] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2663.171151][T27041] netlink: 'syz.5.5646': attribute type 1 has an invalid length.
[ 2663.181631][T27041] netlink: 'syz.5.5646': attribute type 12 has an invalid length.
[ 2663.189682][T27041] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.5646'.
[ 2663.296089][T17976] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2663.303358][T17976] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2667.224976][T27081] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5656'.
[ 2668.104749][T26858] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2668.560084][T26858] veth0_vlan: entered promiscuous mode
[ 2668.609348][T26858] veth1_vlan: entered promiscuous mode
[ 2668.870981][T26858] veth0_macvtap: entered promiscuous mode
[ 2668.882236][T26858] veth1_macvtap: entered promiscuous mode
[ 2669.660329][T26858] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2669.673165][T26858] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2669.855373][T15044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2669.958165][T15044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2669.966939][T15044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2670.771535][T27114] netlink: 'syz.5.5665': attribute type 39 has an invalid length.
[ 2670.813142][T15044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2671.337019][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2671.552573][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2671.617129][ T9825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2671.692695][ T9825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2673.098252][T27124] overlayfs: conflicting options: userxattr,metacopy=on
[ 2673.382511][T27132] overlayfs: conflicting options: userxattr,metacopy=on
[ 2673.668679][T27134] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5668'.
[ 2677.902013][T27174] trusted_key: encrypted_key: insufficient parameters specified
[ 2677.922340][T27174] trusted_key: encrypted_key: insufficient parameters specified
[ 2682.127694][T27197] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5686'.
[ 2683.511776][T27208] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2684.264694][T27222] trusted_key: encrypted_key: insufficient parameters specified
[ 2684.276496][T27222] trusted_key: encrypted_key: insufficient parameters specified
[ 2685.573199][T27228] netlink: 'syz.4.5696': attribute type 10 has an invalid length.
[ 2685.689547][T27228] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5696'.
[ 2685.752454][T27228] team0: Port device geneve0 added
[ 2686.065979][T27234] loop6: detected capacity change from 0 to 524287999
[ 2686.429654][T27240] netlink: 'syz.0.5698': attribute type 10 has an invalid length.
[ 2686.458191][T27240] team0: Device ipvlan1 failed to register rx_handler
[ 2694.227977][T27295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5718'.
[ 2694.291032][T27300] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[ 2694.297581][T27300] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 2694.970513][T27300] vhci_hcd vhci_hcd.0: Device attached
[ 2695.319914][T27301] vhci_hcd: connection closed
[ 2695.462872][    T9] usb 43-1: new high-speed USB device number 3 using vhci_hcd
[ 2695.837584][T27302] vhci_hcd: sendmsg failed!, ret=-32 for 48
[ 2696.151092][T21294] vhci_hcd: stop threads
[ 2696.504947][T21294] vhci_hcd: release socket
[ 2696.509878][T21294] vhci_hcd: disconnect device
[ 2696.641350][T27311] netlink: 'syz.0.5722': attribute type 39 has an invalid length.
[ 2696.839083][T27318] bio_check_eod: 2 callbacks suppressed
[ 2696.839138][T27318] syz.5.5723: attempt to access beyond end of device
[ 2696.839138][T27318] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0
[ 2696.876080][T27318] syz.5.5723: attempt to access beyond end of device
[ 2696.876080][T27318] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0
[ 2696.891774][T27318] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2696.906099][T27318] syz.5.5723: attempt to access beyond end of device
[ 2696.906099][T27318] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0
[ 2696.921756][T27318] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2696.947843][T27318] syz.5.5723: attempt to access beyond end of device
[ 2696.947843][T27318] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[ 2696.967201][T27318] syz.5.5723: attempt to access beyond end of device
[ 2696.967201][T27318] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0
[ 2696.983422][T27318] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2696.995670][T27318] syz.5.5723: attempt to access beyond end of device
[ 2696.995670][T27318] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 2697.010301][T27318] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2697.027401][T27318] syz.5.5723: attempt to access beyond end of device
[ 2697.027401][T27318] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0
[ 2697.047262][T27318] syz.5.5723: attempt to access beyond end of device
[ 2697.047262][T27318] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 2697.070748][T27318] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2697.088053][T27318] syz.5.5723: attempt to access beyond end of device
[ 2697.088053][T27318] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 2697.105618][T27318] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2697.121844][T27318] syz.5.5723: attempt to access beyond end of device
[ 2697.121844][T27318] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[ 2697.140209][T27318] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2697.153259][T27318] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2697.165792][T27318] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[ 2699.166928][T27342] block device autoloading is deprecated and will be removed.
[ 2701.167292][    T9] vhci_hcd: vhci_device speed not set
[ 2701.473329][T27357] netlink: 'syz.4.5737': attribute type 1 has an invalid length.
[ 2701.560482][T27357] netlink: 'syz.4.5737': attribute type 12 has an invalid length.
[ 2701.609615][T27357] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.5737'.
[ 2701.898935][ T9272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2701.925625][T27365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2701.947767][ T9272] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2701.983149][ T9272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2701.993901][ T9272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2702.002095][ T9272] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2702.216802][T27365] netlink: 'syz.1.5736': attribute type 3 has an invalid length.
[ 2702.224729][T27365] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5736'.
[ 2703.361142][T27377] overlayfs: conflicting options: userxattr,metacopy=on
[ 2704.260345][ T9272] Bluetooth: hci5: command tx timeout
[ 2704.536850][T27363] chnl_net:caif_netlink_parms(): no params data found
[ 2706.481990][ T9272] Bluetooth: hci5: command tx timeout
[ 2707.317222][T27363] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2707.324416][T27363] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2707.347714][T27363] bridge_slave_0: entered allmulticast mode
[ 2707.389353][T27363] bridge_slave_0: entered promiscuous mode
[ 2707.573619][T27363] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2707.605341][T27404] loop6: detected capacity change from 0 to 524287999
[ 2707.617582][T27363] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2707.624925][T27363] bridge_slave_1: entered allmulticast mode
[ 2707.683582][T27363] bridge_slave_1: entered promiscuous mode
[ 2708.380239][T27363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2708.392783][T27420] netlink: 'syz.1.5751': attribute type 1 has an invalid length.
[ 2708.418645][T27363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2708.436914][T27420] netlink: 'syz.1.5751': attribute type 12 has an invalid length.
[ 2708.497811][T27420] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5751'.
[ 2708.507300][ T9272] Bluetooth: hci5: command tx timeout
[ 2709.365425][T27363] team0: Port device team_slave_0 added
[ 2709.588797][T27363] team0: Port device team_slave_1 added
[ 2709.765666][T27431] netlink: 'syz.4.5755': attribute type 10 has an invalid length.
[ 2709.786461][T27431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5755'.
[ 2710.600672][ T9272] Bluetooth: hci5: command tx timeout
[ 2710.903044][T27363] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2710.931142][T27363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2711.036931][T27363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2711.245199][T27363] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2711.268006][T27363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2711.482567][T27363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2712.816883][T21294] bridge_slave_1: left allmulticast mode
[ 2712.861923][T21294] bridge_slave_1: left promiscuous mode
[ 2712.887011][T21294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2712.951301][T21294] bridge_slave_0: left allmulticast mode
[ 2712.976731][T21294] bridge_slave_0: left promiscuous mode
[ 2713.006264][T21294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2713.604877][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2714.509702][T27466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5764'.
[ 2717.190055][T27489] fuse: Bad value for 'fd'
[ 2717.631256][T21294]  (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2717.643673][T21294]  (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2717.658695][T21294]  (unregistering): Released all slaves
[ 2717.696692][T27363] hsr_slave_0: entered promiscuous mode
[ 2717.722045][T27363] hsr_slave_1: entered promiscuous mode
[ 2717.742996][T27363] debugfs: 'hsr0' already exists in 'hsr'
[ 2717.757380][T27363] Cannot create hsr debugfs directory
[ 2719.841013][T27518] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5777'.
[ 2721.105509][T27530] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5779'.
[ 2725.494109][T27570] netlink: 716 bytes leftover after parsing attributes in process `syz.5.5788'.
[ 2725.575812][T27572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5788'.
[ 2726.505939][T27572] veth1_vlan (unregistering): left allmulticast mode
[ 2726.564664][T27572] macvlan0 (unregistering): left allmulticast mode
[ 2727.770978][T21294] hsr_slave_0: left promiscuous mode
[ 2727.787566][T21294] hsr_slave_1: left promiscuous mode
[ 2727.793823][T21294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2727.821794][T21294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2727.839654][T21294] macvlan0: left allmulticast mode
[ 2728.586232][T21294] team0 (unregistering): Port device batadv1 removed
[ 2732.423437][T27617] netlink: 'syz.1.5799': attribute type 10 has an invalid length.
[ 2733.170960][T27626] netlink: 'syz.2.5801': attribute type 10 has an invalid length.
[ 2735.053262][T21294] team0 (unregistering): Port device team_slave_1 removed
[ 2735.189471][T21294] team0 (unregistering): Port device team_slave_0 removed
[ 2735.597256][T27637] ubi: mtd0 is already attached to ubi31
[ 2735.870579][ T5930] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 2736.066465][ T5930] usb 6-1: Using ep0 maxpacket: 16
[ 2736.079125][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2736.117336][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2736.143605][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2736.153771][ T5930] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2736.164566][ T5930] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2736.194716][ T5930] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2736.204735][ T5930] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2736.213789][ T5930] usb 6-1: Manufacturer: syz
[ 2736.243704][ T5930] usb 6-1: config 0 descriptor??
[ 2736.367636][T27617] team0: Device ipvlan1 failed to register rx_handler
[ 2736.384328][T27626] team0: Device ipvlan1 failed to register rx_handler
[ 2737.737220][T27363] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2737.889931][T27363] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2737.984873][T27363] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2738.092525][T27363] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2739.947540][ T5930] rc_core: IR keymap rc-hauppauge not found
[ 2739.953936][ T5930] Registered IR keymap rc-empty
[ 2739.976416][T27685] overlayfs: conflicting options: userxattr,metacopy=on
[ 2740.065287][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2740.904005][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2740.923941][T21294] IPVS: stop unused estimator thread 0...
[ 2741.121101][ T5930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 2741.329662][T27363] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2741.340192][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input115
[ 2741.421691][T27363] 8021q: adding VLAN 0 to HW filter on device team0
[ 2741.428677][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2741.470986][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2741.737276][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2741.767020][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2741.801830][T17976] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2741.809685][T17976] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2741.811844][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2741.954044][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2742.214812][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2742.504349][T17976] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2742.511613][T17976] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2742.679639][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2742.711596][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2742.759443][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2742.800107][ T5930] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[ 2742.828083][ T5930] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2743.522978][ T5930] usb 6-1: USB disconnect, device number 43
[ 2748.092704][T27363] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2748.259655][T27363] veth0_vlan: entered promiscuous mode
[ 2748.369303][T27363] veth1_vlan: entered promiscuous mode
[ 2748.479589][T27363] veth0_macvtap: entered promiscuous mode
[ 2748.532239][T27363] veth1_macvtap: entered promiscuous mode
[ 2749.124141][T27759] bio_check_eod: 3 callbacks suppressed
[ 2749.124166][T27759] syz.5.5829: attempt to access beyond end of device
[ 2749.124166][T27759] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0
[ 2749.175921][T27759] syz.5.5829: attempt to access beyond end of device
[ 2749.175921][T27759] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0
[ 2749.191546][T27759] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2749.269815][T27759] syz.5.5829: attempt to access beyond end of device
[ 2749.269815][T27759] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0
[ 2749.296012][T27759] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2749.365150][T27363] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2749.416888][T27759] syz.5.5829: attempt to access beyond end of device
[ 2749.416888][T27759] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[ 2749.451859][T27363] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2749.494368][T27759] syz.5.5829: attempt to access beyond end of device
[ 2749.494368][T27759] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0
[ 2749.587464][T27759] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2749.614773][T27759] syz.5.5829: attempt to access beyond end of device
[ 2749.614773][T27759] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 2749.633529][T21294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2749.647375][T21294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2749.681121][T27759] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2749.712396][T21294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2749.731048][T27759] syz.5.5829: attempt to access beyond end of device
[ 2749.731048][T27759] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0
[ 2749.754953][T21294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2749.788326][T27759] syz.5.5829: attempt to access beyond end of device
[ 2749.788326][T27759] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 2749.805069][T27768] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5832'.
[ 2749.826710][T27759] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2749.879908][T27759] syz.5.5829: attempt to access beyond end of device
[ 2749.879908][T27759] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 2749.944822][T27759] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2750.013568][T27759] syz.5.5829: attempt to access beyond end of device
[ 2750.013568][T27759] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[ 2750.079595][T27759] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2750.171503][T27759] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2750.197430][T17976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2750.218176][T27759] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[ 2750.229430][T17976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2750.606534][T17976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2751.429760][T17976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2752.719186][T27792] netlink: 'syz.0.5733': attribute type 12 has an invalid length.
[ 2752.806554][T27792] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5733'.
[ 2754.419587][T27815] bio_check_eod: 2 callbacks suppressed
[ 2754.419608][T27815] syz.0.5844: attempt to access beyond end of device
[ 2754.419608][T27815] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 2755.027604][   T33] bridge_slave_1: left allmulticast mode
[ 2755.033292][   T33] bridge_slave_1: left promiscuous mode
[ 2755.287460][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2756.555958][   T33] bridge_slave_0: left allmulticast mode
[ 2756.603266][   T33] bridge_slave_0: left promiscuous mode
[ 2756.651068][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2757.160572][T27115] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 2757.627270][T27115] usb 2-1: Using ep0 maxpacket: 32
[ 2757.667603][T27115] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[ 2757.675931][T27115] usb 2-1: config 0 has no interface number 0
[ 2758.267263][T27115] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2758.424118][T27115] usb 2-1: config 0 interface 85 has no altsetting 0
[ 2758.440216][T27115] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2758.456770][T27115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2758.496523][T27115] usb 2-1: Product: syz
[ 2758.581095][T23360] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2758.622071][T23360] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2758.653316][T23360] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2758.667643][T27115] usb 2-1: Manufacturer: syz
[ 2758.673313][T27115] usb 2-1: SerialNumber: syz
[ 2759.142436][T23360] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2759.228662][T23360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2759.258201][T27115] usb 2-1: config 0 descriptor??
[ 2759.540913][T27115] appletouch 2-1:0.85: Failed to read mode from device.
[ 2759.551416][T27115] appletouch 2-1:0.85: probe with driver appletouch failed with error -5
[ 2760.850691][T27115] usb 2-1: USB disconnect, device number 37
[ 2761.879698][T23360] Bluetooth: hci0: command tx timeout
[ 2762.348019][   T33] team0: Port device geneve0 removed
[ 2762.766775][   T33]  (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2762.780447][   T33]  (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2762.808344][   T33]  (unregistering): Released all slaves
[ 2763.111546][T27870] netlink: 716 bytes leftover after parsing attributes in process `syz.2.5858'.
[ 2763.399418][T27875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5858'.
[ 2764.167434][T23360] Bluetooth: hci0: command tx timeout
[ 2765.200601][T27883] ubi: mtd0 is already attached to ubi31
[ 2766.178018][T23360] Bluetooth: hci0: command tx timeout
[ 2767.726144][T27875] veth1_vlan (unregistering): left allmulticast mode
[ 2767.869162][T27875] macvlan0 (unregistering): left allmulticast mode
[ 2768.203617][T27895] loop6: detected capacity change from 0 to 524287999
[ 2768.398031][T27899] syz.5.5866: attempt to access beyond end of device
[ 2768.398031][T27899] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0
[ 2768.411299][T27899] syz.5.5866: attempt to access beyond end of device
[ 2768.411299][T27899] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0
[ 2768.424585][T27899] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2768.434572][T27899] syz.5.5866: attempt to access beyond end of device
[ 2768.434572][T27899] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0
[ 2769.225579][T27899] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2769.236283][T27899] syz.5.5866: attempt to access beyond end of device
[ 2769.236283][T27899] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[ 2769.249449][T27899] syz.5.5866: attempt to access beyond end of device
[ 2769.249449][T27899] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0
[ 2769.262479][T27899] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2769.272264][T27899] syz.5.5866: attempt to access beyond end of device
[ 2769.272264][T27899] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 2769.285766][T27899] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2769.960052][T27899] syz.5.5866: attempt to access beyond end of device
[ 2769.960052][T27899] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0
[ 2769.973833][T27899] syz.5.5866: attempt to access beyond end of device
[ 2769.973833][T27899] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 2769.988600][T27899] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2769.998854][T27899] syz.5.5866: attempt to access beyond end of device
[ 2769.998854][T27899] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 2770.012714][T27899] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2770.023098][T27899] syz.5.5866: attempt to access beyond end of device
[ 2770.023098][T27899] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[ 2770.036922][T27899] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 2770.046894][T27899] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[ 2770.056792][T27899] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[ 2770.164389][T23360] Bluetooth: hci0: command tx timeout
[ 2770.397392][T27895]  loop6: unable to read partition table
[ 2770.422362][T27895] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[ 2770.509550][T27907] netlink: 'syz.5.5868': attribute type 1 has an invalid length.
[ 2770.591880][T27907] netlink: 'syz.5.5868': attribute type 12 has an invalid length.
[ 2770.618818][T27907] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.5868'.
[ 2771.633352][T27920] ubi: mtd0 is already attached to ubi31
[ 2772.014877][T27844] chnl_net:caif_netlink_parms(): no params data found
[ 2772.501840][T27903] Bluetooth: hci2: command 0x0406 tx timeout
[ 2773.489377][T27935] bio_check_eod: 2 callbacks suppressed
[ 2773.489395][T27935] syz.1.5877: attempt to access beyond end of device
[ 2773.489395][T27935] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0
[ 2773.508646][T27935] syz.1.5877: attempt to access beyond end of device
[ 2773.508646][T27935] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0
[ 2773.521726][T27935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 2773.531629][T27935] syz.1.5877: attempt to access beyond end of device
[ 2773.531629][T27935] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0
[ 2773.545199][T27935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 2773.555550][T27935] syz.1.5877: attempt to access beyond end of device
[ 2773.555550][T27935] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0
[ 2773.568801][T27935] syz.1.5877: attempt to access beyond end of device
[ 2773.568801][T27935] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0
[ 2773.582381][T27935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 2773.592300][T27935] syz.1.5877: attempt to access beyond end of device
[ 2773.592300][T27935] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 2773.605590][T27935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 2773.615839][T27935] syz.1.5877: attempt to access beyond end of device
[ 2773.615839][T27935] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0
[ 2773.629120][T27935] syz.1.5877: attempt to access beyond end of device
[ 2773.629120][T27935] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 2773.643484][T27935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 2773.653398][T27935] syz.1.5877: attempt to access beyond end of device
[ 2773.653398][T27935] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 2773.666703][T27935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 2773.677529][T27935] syz.1.5877: attempt to access beyond end of device
[ 2773.677529][T27935] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[ 2773.690749][T27935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 2773.700765][T27935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 2773.710708][T27935] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[ 2774.296553][ T5910] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 2774.583871][   T33] hsr_slave_0: left promiscuous mode
[ 2774.809775][   T33] hsr_slave_1: left promiscuous mode
[ 2774.904014][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2775.029599][ T5910] usb 1-1: Using ep0 maxpacket: 32
[ 2775.110753][ T5910] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[ 2775.193290][ T5910] usb 1-1: config 0 has no interface number 0
[ 2775.240679][ T5910] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2775.336736][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2775.371242][ T5910] usb 1-1: config 0 interface 85 has no altsetting 0
[ 2775.454061][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2775.504405][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2775.539064][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2775.539473][ T5910] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2775.558623][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2775.602080][   T33] macvlan0: left allmulticast mode
[ 2775.607699][   T33] veth1_vlan: left allmulticast mode
[ 2775.613331][   T33] veth1_macvtap: left promiscuous mode
[ 2775.619789][   T33] veth0_macvtap: left promiscuous mode
[ 2775.626520][   T33] veth1_vlan: left promiscuous mode
[ 2775.643241][   T33] veth0_vlan: left promiscuous mode
[ 2775.845162][ T5910] usb 1-1: Product: syz
[ 2775.858370][ T5910] usb 1-1: Manufacturer: syz
[ 2775.865434][ T5910] usb 1-1: SerialNumber: syz
[ 2775.878776][ T5910] usb 1-1: config 0 descriptor??
[ 2777.107870][ T5910] usb 1-1: can't set config #0, error -71
[ 2777.140947][ T5910] usb 1-1: USB disconnect, device number 32
[ 2778.559590][   T33] team0 (unregistering): Port device team_slave_1 removed
[ 2778.635230][   T33] team0 (unregistering): Port device team_slave_0 removed
[ 2779.442563][T27959] warning: `syz.2.5882' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 2779.457981][T27958] lo speed is unknown, defaulting to 1000
[ 2779.464398][T27958] lo speed is unknown, defaulting to 1000
[ 2779.474061][T27958] lo speed is unknown, defaulting to 1000
[ 2779.489234][T27958] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 2779.507869][T27958] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 2779.567621][T27844] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2779.575427][T27844] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2779.735025][T27844] bridge_slave_0: entered allmulticast mode
[ 2779.781659][T27844] bridge_slave_0: entered promiscuous mode
[ 2779.824122][T27844] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2779.825824][T27958] lo speed is unknown, defaulting to 1000
[ 2779.838656][T27844] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2779.845977][T27844] bridge_slave_1: entered allmulticast mode
[ 2780.399646][T27844] bridge_slave_1: entered promiscuous mode
[ 2780.410937][T27958] lo speed is unknown, defaulting to 1000
[ 2780.555429][T27844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2780.611720][T27844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2781.217590][T27958] lo speed is unknown, defaulting to 1000
[ 2781.227371][T27958] lo speed is unknown, defaulting to 1000
[ 2781.234566][T27958] lo speed is unknown, defaulting to 1000
[ 2781.245091][T27958] lo speed is unknown, defaulting to 1000
[ 2781.252361][T27958] lo speed is unknown, defaulting to 1000
[ 2781.259779][T27958] lo speed is unknown, defaulting to 1000
[ 2781.517741][T27978] overlayfs: conflicting options: userxattr,metacopy=on
[ 2782.604832][T27844] team0: Port device team_slave_0 added
[ 2782.613693][T27844] team0: Port device team_slave_1 added
[ 2784.533532][T27844] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2784.541813][T27844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2784.883101][T27844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2785.397727][T27844] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2785.407338][T27844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2785.546823][T27844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2785.604034][   T33] IPVS: stop unused estimator thread 0...
[ 2785.707563][T27844] hsr_slave_0: entered promiscuous mode
[ 2785.716624][T27844] hsr_slave_1: entered promiscuous mode
[ 2785.809772][T27844] debugfs: 'hsr0' already exists in 'hsr'
[ 2785.865465][T27844] Cannot create hsr debugfs directory
[ 2786.144385][   T33] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2787.282408][   T33] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2787.454775][   T33] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2788.506159][T28030] [U] ��M٭��Q&�� K�4
[ 2788.552744][T28029] [U] [�)�U�}��ǔ��JϬ}N�SEF*�	�����NZ��F[F_H��'��W"�X�~����;VA�)^�`�1C':Z�������FOB�	*?۟C�Z�S��<8ZNѷ���ј��EY�	T�T<$C�R�Ɩ�/VG���{Y�~Y5\�
;ƃZ��DX���Y�A��"XI�F�{��`A$í�55?�
��S�A�M��O����ͻ*K��
[ 2788.589331][   T33] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2789.549246][T28038] trusted_key: encrypted_key: insufficient parameters specified
[ 2791.473779][T28050] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5906'.
[ 2792.151379][T28053] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5907'.
[ 2793.581824][   T33] bridge_slave_1: left allmulticast mode
[ 2793.601649][   T33] bridge_slave_1: left promiscuous mode
[ 2793.608632][T28062] loop6: detected capacity change from 0 to 524287999
[ 2793.657359][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2793.782451][   T33] bridge_slave_0: left allmulticast mode
[ 2793.835013][   T33] bridge_slave_0: left promiscuous mode
[ 2793.874962][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2793.944917][ T5216] udevd[5216]: worker [27498] terminated by signal 33 (Unknown signal 33)
[ 2793.997247][ T5216] udevd[5216]: worker [27498] failed while handling '/devices/virtual/block/loop6'
[ 2794.248357][T28076] overlayfs: conflicting options: userxattr,metacopy=on
[ 2794.518151][T18344] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 2795.227458][T18344] usb 6-1: Using ep0 maxpacket: 32
[ 2795.259501][T18344] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[ 2795.303626][T18344] usb 6-1: config 0 has no interface number 0
[ 2795.319075][T18344] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2795.356841][T18344] usb 6-1: config 0 interface 85 has no altsetting 0
[ 2795.387593][T18344] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2795.405268][T18344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2795.435087][T18344] usb 6-1: Product: syz
[ 2795.457406][T18344] usb 6-1: Manufacturer: syz
[ 2795.703060][T18344] usb 6-1: SerialNumber: syz
[ 2795.728905][T18344] usb 6-1: config 0 descriptor??
[ 2796.497186][T18344] appletouch 6-1:0.85: Failed to read mode from device.
[ 2796.515130][T18344] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[ 2796.893192][T18344] usb 6-1: USB disconnect, device number 44
[ 2797.358148][T28100] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5921'.
[ 2797.730440][T28103] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5924'.
[ 2797.869993][T28106] fuse: Unknown parameter '0x00000000000000070000000000000000000000000000000000000000'
[ 2798.557000][   T33] team0: Port device geneve0 removed
[ 2798.724121][T28112] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2799.738402][   T33]  (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2799.761586][   T33]  (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2799.778241][   T33]  (unregistering): Released all slaves
[ 2801.812341][T28149] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5936'.
[ 2802.044088][   T33] tipc: Left network mode
[ 2802.875997][T28159] loop6: detected capacity change from 0 to 524287999
[ 2804.374789][T27844] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2804.919130][T27844] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2805.022498][T27844] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2805.085838][T27844] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2805.276210][T28180] netlink: 'syz.5.5943': attribute type 12 has an invalid length.
[ 2805.341221][T28180] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.5943'.
[ 2806.335732][T28185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5944'.
[ 2806.848521][   T33] hsr_slave_0: left promiscuous mode
[ 2807.082748][   T33] hsr_slave_1: left promiscuous mode
[ 2807.190278][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2807.491471][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2807.617657][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2807.625101][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2807.966134][   T33] macvlan0: left allmulticast mode
[ 2808.022107][   T33] veth1_vlan: left allmulticast mode
[ 2808.071163][   T33] veth1_macvtap: left promiscuous mode
[ 2808.097877][   T33] veth0_macvtap: left promiscuous mode
[ 2808.118277][   T33] veth1_vlan: left promiscuous mode
[ 2808.143227][   T33] veth0_vlan: left promiscuous mode
[ 2810.941769][   T33] team0 (unregistering): Port device team_slave_1 removed
[ 2811.094654][   T33] team0 (unregistering): Port device team_slave_0 removed
[ 2812.948067][T28251] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5958'.
[ 2812.985340][T27844] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2813.358078][T28253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5957'.
[ 2815.073720][   T33] IPVS: stop unused estimator thread 0...
[ 2815.621698][T23360] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 2816.399323][T28274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5963'.
[ 2816.701512][T27903] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2816.714129][T27903] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2816.723632][T27903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2816.733172][T27903] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2816.741301][T27903] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2816.983124][T28281] ubi: mtd0 is already attached to ubi31
[ 2817.720422][T28278] lo speed is unknown, defaulting to 1000
[ 2817.777556][ T5930] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 2818.147459][ T5930] usb 6-1: Using ep0 maxpacket: 16
[ 2818.176856][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2818.487268][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2818.521053][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2818.532402][ T5930] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2818.547935][ T5930] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2818.627636][ T5930] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2818.643781][ T5930] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2818.664118][ T5930] usb 6-1: Manufacturer: syz
[ 2818.681547][ T5930] usb 6-1: config 0 descriptor??
[ 2818.687464][T28293] netlink: 716 bytes leftover after parsing attributes in process `syz.0.5967'.
[ 2818.819074][T27903] Bluetooth: hci0: command tx timeout
[ 2818.836192][T28293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5967'.
[ 2820.897152][T27903] Bluetooth: hci0: command tx timeout
[ 2822.217379][ T5930] rc_core: IR keymap rc-hauppauge not found
[ 2822.241110][ T5930] Registered IR keymap rc-empty
[ 2822.256853][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2822.287403][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2822.329866][ T5930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 2822.409315][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input118
[ 2822.431307][T28308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5972'.
[ 2822.468242][T28309] netlink: 'syz.1.5973': attribute type 12 has an invalid length.
[ 2822.491201][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2822.509538][T28309] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5973'.
[ 2822.537700][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2822.582207][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2822.629376][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2822.658623][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2822.689217][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2822.748006][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2822.787990][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2822.833129][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2822.880942][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2822.952910][ T5930] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[ 2822.977225][T27903] Bluetooth: hci0: command tx timeout
[ 2822.997532][ T5930] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2823.589354][T21294] bridge_slave_1: left allmulticast mode
[ 2823.616665][ T5930] usb 6-1: USB disconnect, device number 45
[ 2823.635211][T21294] bridge_slave_1: left promiscuous mode
[ 2823.693739][T21294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2823.768819][T21294] bridge_slave_0: left allmulticast mode
[ 2823.790721][T21294] bridge_slave_0: left promiscuous mode
[ 2823.817368][T28326] [U] ��M٭��Q&�� K�4
[ 2823.879347][T28325] [U] [�)�U�}��ǔ��JϬ}N�SEF*�	�����NZ��F[F_H��'��W"�X�~����;VA�)^�`�1C':Z�������FOB�	*?۟C�Z�S��<8ZNѷ���ј��EY�	T�T<$C�R�Ɩ�/VG���{Y�~Y5\�
;ƃZ��DX���Y�A��"XI�F�{��`A$í�55?�
��S�A�M��O����ͻ*K��
[ 2823.887643][T21294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2825.063517][T27903] Bluetooth: hci0: command tx timeout
[ 2825.903411][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5982'.
[ 2826.916196][T21294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2826.939688][T21294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2826.951153][T21294] bond0 (unregistering): Released all slaves
[ 2827.002477][T28332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5978'.
[ 2827.279144][T28278] chnl_net:caif_netlink_parms(): no params data found
[ 2828.490375][T23360] Bluetooth: hci5: command 0x0406 tx timeout
[ 2828.714783][T21294] hsr_slave_0: left promiscuous mode
[ 2828.823189][T21294] hsr_slave_1: left promiscuous mode
[ 2828.850784][T21294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2828.912339][T21294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2831.171594][T21294] team0 (unregistering): Port device team_slave_1 removed
[ 2831.222888][T21294] team0 (unregistering): Port device team_slave_0 removed
[ 2833.090707][T28278] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2833.128742][T28278] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2833.136270][T28278] bridge_slave_0: entered allmulticast mode
[ 2833.146074][T28278] bridge_slave_0: entered promiscuous mode
[ 2833.337860][T28278] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2833.365712][T28278] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2833.398241][T28278] bridge_slave_1: entered allmulticast mode
[ 2833.406295][T28278] bridge_slave_1: entered promiscuous mode
[ 2834.080856][T28278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2834.142706][T28278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2834.851564][T28278] team0: Port device team_slave_0 added
[ 2834.862579][T28278] team0: Port device team_slave_1 added
[ 2836.351212][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2836.729438][T28450] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 2836.902881][T28278] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2836.955209][T28278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2837.062416][T28278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2837.112645][T28278] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2837.130387][T28278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2837.285809][T28278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2837.513723][T28278] hsr_slave_0: entered promiscuous mode
[ 2837.531556][T28278] hsr_slave_1: entered promiscuous mode
[ 2838.111261][T28477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6009'.
[ 2838.252045][T28478] ubi: mtd0 is already attached to ubi31
[ 2838.820899][T11203] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 2839.042931][T28487] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6011'.
[ 2839.157297][T11203] usb 2-1: Using ep0 maxpacket: 16
[ 2839.198234][T11203] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2839.239339][T11203] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2839.303202][T28492] ubi: mtd0 is already attached to ubi31
[ 2839.477129][T11203] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2839.497122][T11203] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2839.506853][T11203] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2839.535693][T11203] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2839.944153][T11203] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2840.233201][T11203] usb 2-1: Manufacturer: syz
[ 2840.247470][ T5959] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 2840.317930][T11203] usb 2-1: config 0 descriptor??
[ 2840.443336][ T5959] usb 6-1: Using ep0 maxpacket: 16
[ 2840.459492][ T5959] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2840.480601][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2840.514969][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2840.566434][T28503] netlink: 'syz.2.6014': attribute type 1 has an invalid length.
[ 2840.600266][ T5959] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2840.620260][ T5959] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2840.628460][T28503] netlink: 'syz.2.6014': attribute type 12 has an invalid length.
[ 2840.669313][ T5959] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2840.704006][ T5959] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2840.716755][T28503] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.6014'.
[ 2840.737919][ T5959] usb 6-1: Manufacturer: syz
[ 2840.771271][ T5959] usb 6-1: config 0 descriptor??
[ 2841.349219][T28495] 9pnet: Unknown protocol version 9p200
[ 2841.722203][T28278] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2841.894202][T28278] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2841.917643][T11203] rc_core: IR keymap rc-hauppauge not found
[ 2841.943287][T11203] Registered IR keymap rc-empty
[ 2841.968249][T11203] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2842.009295][T11203] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2842.019806][T28278] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2842.059594][T11203] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 2842.094932][T28278] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2842.149949][T11203] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input119
[ 2842.227345][T11203] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2842.267433][T11203] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2842.517179][T11203] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2842.638012][T28533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6019'.
[ 2843.210799][T11203] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2843.437343][T11203] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2843.477343][T11203] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2843.547161][T11203] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2843.587181][T11203] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2843.637182][T11203] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2843.697314][T11203] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2843.770707][T11203] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[ 2843.817177][T11203] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2843.842284][T28278] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2843.868311][T28278] 8021q: adding VLAN 0 to HW filter on device team0
[ 2845.297921][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2845.305164][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2845.395158][T11203] usb 2-1: USB disconnect, device number 38
[ 2845.542915][T28479] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2845.550196][T28479] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2845.777654][ T5959] rc_core: IR keymap rc-hauppauge not found
[ 2845.801584][ T5959] Registered IR keymap rc-empty
[ 2845.834149][ T5959] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2845.888373][ T5959] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2845.933714][ T5959] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 2845.978785][ T5959] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input120
[ 2846.025943][ T5959] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2846.066292][ T5959] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2846.127553][ T5959] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2846.184658][ T5959] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2846.505422][ T5959] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2846.897330][ T5959] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2846.959460][ T5959] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2847.057514][ T5959] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2847.101223][ T5959] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2847.155116][ T5959] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2847.223149][ T5959] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[ 2847.280285][ T5959] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2847.987164][T28278] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2847.999272][T28582] netlink: 'syz.0.6029': attribute type 12 has an invalid length.
[ 2848.087804][T28582] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.6029'.
[ 2849.164434][T28586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6030'.
[ 2849.266858][ T5959] usb 6-1: USB disconnect, device number 46
[ 2850.863838][T28620] ubi: mtd0 is already attached to ubi31
[ 2851.380794][T18341] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 2851.678208][T18341] usb 1-1: Using ep0 maxpacket: 16
[ 2851.723216][T18341] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2851.792001][T28278] veth0_vlan: entered promiscuous mode
[ 2851.813319][T18341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2851.864547][T18341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2851.880947][T28278] veth1_vlan: entered promiscuous mode
[ 2851.930008][T18341] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2851.990379][T18341] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2852.063082][T28278] veth0_macvtap: entered promiscuous mode
[ 2852.076581][T18341] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2852.119899][T28278] veth1_macvtap: entered promiscuous mode
[ 2852.129995][T18341] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2852.158816][T18341] usb 1-1: Manufacturer: syz
[ 2852.185808][T18341] usb 1-1: config 0 descriptor??
[ 2852.244262][T28278] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2852.350786][T28278] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2852.424108][ T6187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2852.592730][ T6187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2852.659412][ T6187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2852.772894][ T6187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2853.767917][T17976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2853.944648][T17976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2854.599537][T17976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2854.636321][T17976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2857.449614][T18341] rc_core: IR keymap rc-hauppauge not found
[ 2857.455575][T18341] Registered IR keymap rc-empty
[ 2857.502721][T18341] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 2857.553410][T18341] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 2858.067978][T18341] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 2858.160181][T18341] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input121
[ 2858.240810][T18341] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 2858.417758][T18341] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 2858.437203][T18341] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 2858.870638][T18341] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 2858.897999][T18341] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 2858.957197][T18341] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 2859.052988][T18341] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 2859.597218][T18341] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 2859.718751][T18341] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 2859.777606][T18341] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 2859.819330][T18341] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[ 2859.855586][T18341] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2859.943626][T18341] usb 1-1: USB disconnect, device number 33
[ 2860.988507][T28718] loop6: detected capacity change from 0 to 524287999
[ 2862.179211][T28727] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6056'.
[ 2864.243045][T28741] ubi: mtd0 is already attached to ubi31
[ 2864.669425][T10930] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 2864.947494][T10930] usb 6-1: Using ep0 maxpacket: 16
[ 2865.153933][T10930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2865.227980][T10930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2865.304842][T10930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2865.347309][T10930] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2865.388339][T10930] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2865.447534][T28754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6063'.
[ 2865.714947][T10930] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2865.734445][T10930] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2865.752918][T10930] usb 6-1: Manufacturer: syz
[ 2865.793067][T10930] usb 6-1: config 0 descriptor??
[ 2867.245244][T28774] 9pnet_fd: Insufficient options for proto=fd
[ 2869.484451][T28788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2871.001522][T28798] netlink: 'syz.2.6070': attribute type 10 has an invalid length.
[ 2871.827151][T10930] rc_core: IR keymap rc-hauppauge not found
[ 2871.899377][T10930] Registered IR keymap rc-empty
[ 2871.943094][T10930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2872.007291][T10930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2872.436805][T10930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 2872.541637][T10930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input122
[ 2872.672111][T10930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2873.655598][T10930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2873.831072][T10930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2873.848020][T28805] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6073'.
[ 2873.887268][T10930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2873.929328][T10930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2873.988648][T10930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2874.080580][T10930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2874.137604][T10930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2874.309438][T10930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2874.379163][T10930] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2874.778260][T10930] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[ 2875.039179][T10930] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2875.074533][T10930] usb 6-1: USB disconnect, device number 47
[ 2880.999268][T23360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2881.015255][T23360] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2881.026518][T23360] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2881.037262][T23360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2881.045431][T23360] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2881.199534][T28879] siw: device registration error -23
[ 2881.377581][T28882] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[ 2881.746243][T28877] lo speed is unknown, defaulting to 1000
[ 2882.558669][T28893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6091'.
[ 2883.227180][T27903] Bluetooth: hci3: command tx timeout
[ 2883.731424][T28908] netlink: 'syz.4.6094': attribute type 10 has an invalid length.
[ 2884.635832][T21294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2884.705399][T28908] team0: Device ipvlan1 failed to register rx_handler
[ 2885.306752][T27903] Bluetooth: hci3: command tx timeout
[ 2885.347935][T21294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2885.403685][T28877] chnl_net:caif_netlink_parms(): no params data found
[ 2885.543264][T21294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2886.426917][T21294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2886.927183][T28877] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2887.047415][T28877] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2887.054739][T28877] bridge_slave_0: entered allmulticast mode
[ 2887.251772][T28877] bridge_slave_0: entered promiscuous mode
[ 2887.382548][T27903] Bluetooth: hci3: command tx timeout
[ 2887.943323][T28877] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2888.064422][T28877] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2888.074090][T28877] bridge_slave_1: entered allmulticast mode
[ 2888.106486][T28877] bridge_slave_1: entered promiscuous mode
[ 2889.457815][T27903] Bluetooth: hci3: command tx timeout
[ 2890.659303][T28877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2891.097506][T28944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6101'.
[ 2891.172828][ T5959] IPVS: starting estimator thread 0...
[ 2891.417350][T28954] IPVS: using max 37 ests per chain, 88800 per kthread
[ 2891.629390][T28877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2891.807103][T28961] netlink: 'syz.0.6105': attribute type 10 has an invalid length.
[ 2894.121406][T28877] team0: Port device team_slave_0 added
[ 2894.723296][T28877] team0: Port device team_slave_1 added
[ 2895.039160][T28877] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2895.046150][T28877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2895.074052][T28877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2895.706101][T28877] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2895.907215][T28877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2896.684435][T28877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2896.707317][T21294] bridge_slave_1: left allmulticast mode
[ 2896.722767][T21294] bridge_slave_1: left promiscuous mode
[ 2896.731862][T21294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2896.871778][T21294] bridge_slave_0: left allmulticast mode
[ 2896.877606][T21294] bridge_slave_0: left promiscuous mode
[ 2896.887943][T21294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2897.048583][T28991] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2898.299519][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2898.710017][T29007] bio_check_eod: 2 callbacks suppressed
[ 2898.710110][T29007] syz.5.6114: attempt to access beyond end of device
[ 2898.710110][T29007] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 2899.404032][T29012] netlink: 'syz.4.6117': attribute type 10 has an invalid length.
[ 2900.581150][T29006] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6115'.
[ 2902.757859][T21294]  (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2902.788828][T21294]  (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2902.869035][T21294]  (unregistering): Released all slaves
[ 2902.915160][T29012] team0: Device ipvlan1 failed to register rx_handler
[ 2903.430458][T29044] siw: device registration error -23
[ 2905.473089][T28877] hsr_slave_0: entered promiscuous mode
[ 2905.486947][T28877] hsr_slave_1: entered promiscuous mode
[ 2905.495672][T28877] debugfs: 'hsr0' already exists in 'hsr'
[ 2905.582611][T29059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6127'.
[ 2906.305912][T28877] Cannot create hsr debugfs directory
[ 2906.488246][ T5910] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 2906.675321][ T5910] usb 2-1: Using ep0 maxpacket: 32
[ 2906.764446][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2907.308713][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 2907.429253][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2907.603153][ T5910] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2907.633561][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2907.656669][ T5910] usb 2-1: config 0 descriptor??
[ 2907.675152][T29056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2907.695460][ T5910] hub 2-1:0.0: USB hub found
[ 2907.930499][ T5910] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2907.981008][ T5910] usbhid 2-1:0.0: can't add hid device: -71
[ 2907.992148][ T5910] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2908.043881][ T5910] usb 2-1: USB disconnect, device number 39
[ 2914.721237][T29128] ubi: mtd0 is already attached to ubi31
[ 2915.373771][T21294] hsr_slave_0: left promiscuous mode
[ 2915.442442][T21294] hsr_slave_1: left promiscuous mode
[ 2915.461738][T21294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2916.480159][T21294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2916.607088][T11203] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 2916.642054][T21294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2917.347178][T21294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2917.597355][T11203] usb 1-1: device not accepting address 34, error -71
[ 2918.119840][T21294] veth1_macvtap: left promiscuous mode
[ 2918.135903][T21294] veth0_macvtap: left promiscuous mode
[ 2919.795196][T29147] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6148'.
[ 2920.629739][T21294] team0 (unregistering): Port device batadv3 removed
[ 2920.806513][T21294] team0 (unregistering): Port device batadv2 removed
[ 2920.923850][T21294] team0 (unregistering): Port device batadv1 removed
[ 2923.044062][T21294] team0 (unregistering): Port device team_slave_1 removed
[ 2923.219610][T21294] team0 (unregistering): Port device team_slave_0 removed
[ 2923.736131][T29189] ubi: mtd0 is already attached to ubi31
[ 2924.517351][ T5910] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 2924.684349][ T5910] usb 2-1: Using ep0 maxpacket: 16
[ 2924.696399][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2924.706798][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2924.719443][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2924.729553][ T5910] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2924.740473][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2924.767654][ T5910] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2924.776764][ T5910] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2924.784951][ T5910] usb 2-1: Manufacturer: syz
[ 2924.792708][ T5910] usb 2-1: config 0 descriptor??
[ 2924.926908][T29167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6151'.
[ 2924.966348][T29179] geneve2: entered promiscuous mode
[ 2925.781615][T11203] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 2926.071876][T11203] usb 5-1: config 0 has no interfaces?
[ 2926.095434][T11203] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2926.107384][T18344] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 2926.175377][T11203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2926.205443][T11203] usb 5-1: Product: syz
[ 2926.259789][T11203] usb 5-1: Manufacturer: syz
[ 2926.294109][T18344] usb 1-1: config 0 has no interfaces?
[ 2926.311066][T18344] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2926.320726][T18344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2926.384300][T11203] usb 5-1: SerialNumber: syz
[ 2926.416218][T11203] usb 5-1: config 0 descriptor??
[ 2926.425045][T18344] usb 1-1: Product: syz
[ 2926.449416][T18344] usb 1-1: Manufacturer: syz
[ 2926.477018][T18344] usb 1-1: SerialNumber: syz
[ 2926.588616][T18344] usb 1-1: config 0 descriptor??
[ 2926.601194][T28877] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2926.868009][T28877] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2926.967135][ T5910] rc_core: IR keymap rc-hauppauge not found
[ 2927.519361][ T5910] Registered IR keymap rc-empty
[ 2927.524422][ T5910] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2927.877146][ T5910] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2927.898326][ T5910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 2927.914964][T21294] IPVS: stop unused estimator thread 0...
[ 2927.942754][ T5910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input123
[ 2927.998236][T29204] pimreg: entered allmulticast mode
[ 2928.034558][ T5910] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2928.062453][T29199] pimreg: entered allmulticast mode
[ 2928.087192][T28877] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2928.121391][T28877] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2928.137742][ T5910] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2928.186491][ T5910] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2928.221042][ T5910] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2928.323275][ T5910] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2928.387384][ T5910] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2928.417529][ T5910] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2928.448675][ T5910] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2928.479545][ T5910] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2928.537141][ T5910] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2928.616425][ T5910] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[ 2928.656849][ T5910] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2929.678450][ T5910] usb 2-1: USB disconnect, device number 40
[ 2930.079219][T11203] usb 5-1: USB disconnect, device number 42
[ 2930.132599][T27493] udevd[27493]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[ 2930.407450][T28877] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2930.932299][T28877] 8021q: adding VLAN 0 to HW filter on device team0
[ 2931.050991][T28282] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2931.058194][T28282] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2931.629123][T17976] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2931.636289][T17976] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2931.669261][T10930] usb 1-1: USB disconnect, device number 36
[ 2937.341695][T29271] block nbd5: shutting down sockets
[ 2937.691081][T29288] syz.4.6173: attempt to access beyond end of device
[ 2937.691081][T29288] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 2938.467856][T23360] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2938.490202][T23360] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2938.499586][T23360] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2938.529738][T23360] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2938.548126][T23360] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2938.995599][T29295] lo speed is unknown, defaulting to 1000
[ 2939.009209][T11203] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 2939.229090][T11203] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 2939.466468][T11203] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 2939.487025][T11203] usb 2-1: config 220 interface 0 has no altsetting 0
[ 2939.517101][T11203] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 2939.527168][T11203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2939.535235][T11203] usb 2-1: Product: syz
[ 2939.565887][T11203] usb 2-1: Manufacturer: syz
[ 2939.587270][T11203] usb 2-1: SerialNumber: syz
[ 2939.847827][T11203] usb 2-1: Found UVC 0.00 device syz (8086:0b07)
[ 2939.854299][T11203] usb 2-1: No valid video chain found.
[ 2939.898116][T11203] usb 2-1: USB disconnect, device number 41
[ 2940.598442][T21294] bridge_slave_1: left allmulticast mode
[ 2940.610217][T21294] bridge_slave_1: left promiscuous mode
[ 2940.629386][T21294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2940.708902][ T5166] Bluetooth: hci1: command tx timeout
[ 2940.833891][ T5166] Bluetooth: hci0: command 0x0406 tx timeout
[ 2941.055341][T21294] bridge_slave_0: left allmulticast mode
[ 2941.257635][T21294] bridge_slave_0: left promiscuous mode
[ 2941.263468][T21294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2941.292676][T29329] syz.1.6178: attempt to access beyond end of device
[ 2941.292676][T29329] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 2942.737392][T23360] Bluetooth: hci1: command tx timeout
[ 2944.006527][T29351] fuse: Bad value for 'fd'
[ 2944.828022][T23360] Bluetooth: hci1: command tx timeout
[ 2946.115542][T21294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2946.543415][T21294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2946.575862][T21294] bond0 (unregistering): Released all slaves
[ 2946.641230][T29295] chnl_net:caif_netlink_parms(): no params data found
[ 2946.897585][T23360] Bluetooth: hci1: command tx timeout
[ 2947.219221][T21294] hsr_slave_0: left promiscuous mode
[ 2947.238368][T21294] hsr_slave_1: left promiscuous mode
[ 2947.254530][T21294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2947.284873][T21294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2949.684288][T29394] syz.4.6195: attempt to access beyond end of device
[ 2949.684288][T29394] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 2950.087636][T21294] team0 (unregistering): Port device team_slave_1 removed
[ 2950.616425][T21294] team0 (unregistering): Port device team_slave_0 removed
[ 2951.636768][T29402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6197'.
[ 2954.693073][T29438] input: syz1 as /devices/virtual/input/input124
[ 2955.832034][T29295] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2955.857456][T29295] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2955.890953][T29295] bridge_slave_0: entered allmulticast mode
[ 2956.015172][T29295] bridge_slave_0: entered promiscuous mode
[ 2956.027613][T29451] loop6: detected capacity change from 0 to 524287999
[ 2956.048283][T29295] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2956.087870][T29295] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2956.098193][T29295] bridge_slave_1: entered allmulticast mode
[ 2956.109352][T29295] bridge_slave_1: entered promiscuous mode
[ 2956.323005][T29295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2956.425512][T29295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2957.306636][T29295] team0: Port device team_slave_0 added
[ 2957.331834][T29295] team0: Port device team_slave_1 added
[ 2958.127236][T29295] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2958.135282][T29295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2958.447281][T29295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2958.507685][T29295] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2958.545865][T29295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2958.671307][T29295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2959.223784][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2959.559283][T29479] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[ 2959.992507][T29295] hsr_slave_0: entered promiscuous mode
[ 2960.016266][T29295] hsr_slave_1: entered promiscuous mode
[ 2960.034010][T29295] debugfs: 'hsr0' already exists in 'hsr'
[ 2960.043469][T29295] Cannot create hsr debugfs directory
[ 2960.421532][T29487] input: syz1 as /devices/virtual/input/input125
[ 2960.702097][T29488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6212'.
[ 2964.588650][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6216'.
[ 2966.517236][T29295] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2966.633513][T29295] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2966.808334][T29295] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2966.861041][T29295] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2968.455813][T29295] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2968.554684][T29295] 8021q: adding VLAN 0 to HW filter on device team0
[ 2968.700841][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2968.708023][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2968.917120][T29557] syz.5.6222: attempt to access beyond end of device
[ 2968.917120][T29557] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 2969.699290][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2969.706485][ T6101] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2972.399516][T29295] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2974.259869][T29295] veth0_vlan: entered promiscuous mode
[ 2974.370321][T29295] veth1_vlan: entered promiscuous mode
[ 2974.610468][T29608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6231'.
[ 2974.951392][T29295] veth0_macvtap: entered promiscuous mode
[ 2975.020831][T29295] veth1_macvtap: entered promiscuous mode
[ 2975.156764][T29295] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2975.194757][T29295] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2975.287050][T27115] IPVS: starting estimator thread 0...
[ 2975.305545][T29191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2975.355123][T29191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2975.387333][T29618] IPVS: using max 37 ests per chain, 88800 per kthread
[ 2975.417712][T29191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2975.474993][T29191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2976.123770][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2976.196805][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2976.401222][T28479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2976.480455][T28479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2977.890818][ T5166] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2977.907852][ T5166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2977.916655][ T5166] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2977.927977][ T5166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2977.938000][ T5166] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2978.374832][T29630] lo speed is unknown, defaulting to 1000
[ 2978.828742][T29641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6235'.
[ 2980.018954][ T5166] Bluetooth: hci3: command tx timeout
[ 2980.561248][T28479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2981.844241][T28479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2982.097143][ T5166] Bluetooth: hci3: command tx timeout
[ 2982.154641][T28479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2982.575115][T28479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2982.804121][T29630] chnl_net:caif_netlink_parms(): no params data found
[ 2983.835269][T29630] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2983.850074][T29630] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2983.860718][T29630] bridge_slave_0: entered allmulticast mode
[ 2983.870060][T29630] bridge_slave_0: entered promiscuous mode
[ 2983.879195][T28479] bridge_slave_1: left allmulticast mode
[ 2983.884889][T28479] bridge_slave_1: left promiscuous mode
[ 2983.892663][T28479] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2983.905407][T28479] bridge_slave_0: left allmulticast mode
[ 2983.913806][T28479] bridge_slave_0: left promiscuous mode
[ 2983.920477][T28479] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2984.178924][ T5166] Bluetooth: hci3: command tx timeout
[ 2984.600200][T28479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2984.611938][T28479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2984.624966][T28479] bond0 (unregistering): Released all slaves
[ 2984.641505][T29630] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2984.649464][T29630] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2984.657144][T29630] bridge_slave_1: entered allmulticast mode
[ 2984.664655][T29630] bridge_slave_1: entered promiscuous mode
[ 2984.730780][T29630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2984.743508][T29630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2984.840854][T29630] team0: Port device team_slave_0 added
[ 2984.851073][T29630] team0: Port device team_slave_1 added
[ 2984.906675][T29630] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2984.914510][T29630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2984.946676][T29630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2984.990579][T29630] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2985.006658][T29630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2985.035786][T29630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2985.194070][T29630] hsr_slave_0: entered promiscuous mode
[ 2985.203477][T29630] hsr_slave_1: entered promiscuous mode
[ 2985.214731][T29630] debugfs: 'hsr0' already exists in 'hsr'
[ 2985.221572][T29630] Cannot create hsr debugfs directory
[ 2985.472764][T28479] hsr_slave_0: left promiscuous mode
[ 2985.490137][T28479] hsr_slave_1: left promiscuous mode
[ 2985.496337][T28479] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2985.504356][T28479] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2985.515235][T28479] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2985.523016][T28479] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2985.566867][T28479] veth1_macvtap: left promiscuous mode
[ 2985.579303][T28479] veth0_macvtap: left promiscuous mode
[ 2985.736442][T28479] pimreg (unregistering): left allmulticast mode
[ 2986.214010][T28479] team0 (unregistering): Port device team_slave_1 removed
[ 2986.266890][ T5166] Bluetooth: hci3: command tx timeout
[ 2986.289325][T28479] team0 (unregistering): Port device team_slave_0 removed
[ 2987.363302][T29630] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2987.391774][T29630] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2987.403149][T29630] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2987.431882][T29630] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2987.634841][T29630] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2987.664537][T29630] 8021q: adding VLAN 0 to HW filter on device team0
[ 2987.683236][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2987.690473][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2987.745359][T28479] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2987.752623][T28479] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2988.091357][T29630] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2988.500092][T29630] veth0_vlan: entered promiscuous mode
[ 2988.535095][T29630] veth1_vlan: entered promiscuous mode
[ 2988.595041][T29630] veth0_macvtap: entered promiscuous mode
[ 2988.610795][T29630] veth1_macvtap: entered promiscuous mode
[ 2988.644663][T29630] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2988.675921][T29630] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2988.703481][T28479] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2988.725146][T28479] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2988.742269][T28479] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2988.760982][T28479] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2988.889811][T29191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2988.915247][T29191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2989.007192][T28479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2989.015068][T28479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3020.661993][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 3082.101137][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 3099.537182][ T5166] Bluetooth: hci1: command 0x0406 tx timeout
[ 3104.667100][ T5166] Bluetooth: hci3: command 0x0406 tx timeout
[ 3143.540826][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 3204.983393][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 3266.421398][ T1300] ieee802154 phy1 wpan1: encryption failed: -22