last executing test programs:

12m30.640424372s ago: executing program 4 (id=424):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000f00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3e, 0xffffffec, 0x294, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe2, 0x4, 0x2}]}, 0x78)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

12m29.934015875s ago: executing program 4 (id=426):
socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1, '\x00'}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
write$tun(0xffffffffffffffff, 0x0, 0x42)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x1)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8045}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

12m25.080508627s ago: executing program 4 (id=432):
capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8})
vmsplice(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)='*', 0x1}], 0x1, 0xc)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000))

12m24.411617814s ago: executing program 4 (id=436):
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000140)=0x20)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup(0xffffffffffffffff)
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x348, 0x160, 0x0, 0xffffffff, 0xa8, 0x160, 0x2b0, 0x2b0, 0xffffffff, 0x2b0, 0x2b0, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x39}, @private=0xa0100fd, 0xffffffff, 0xffffffff, 'veth1_to_batadv\x00', 'lo\x00', {}, {}, 0x1, 0x2, 0x8}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x5, @multicast2, @broadcast, @port=0x4e21, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xc, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv6=@empty, @port=0x4e22, @port=0x4e23}}}, {{@ip={@remote, @loopback, 0xff000000, 0xff, 'pimreg0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x2f, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x12, @empty, @loopback, @port=0x4e20, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @remote, @remote, @gre_key=0x80, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfd90)

12m23.012052651s ago: executing program 4 (id=439):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

12m18.915873438s ago: executing program 4 (id=442):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setgroups(0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
write$P9_RSTATu(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x230)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x40000)
ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404)

12m1.659533001s ago: executing program 32 (id=442):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setgroups(0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
write$P9_RSTATu(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x230)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x40000)
ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404)

9m19.187692662s ago: executing program 0 (id=774):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101102)
read(r0, &(0x7f0000000200)=""/213, 0xd5)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x335, @tick, 0x0, {}, 0xfc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000540)={0x1e, 0x2000, 0x1, 'queue0\x00', 0x20000})

9m14.494762754s ago: executing program 0 (id=778):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10, 0x0)

9m11.88704058s ago: executing program 0 (id=783):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x8c8, 0x0, 0x0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m8.335618759s ago: executing program 0 (id=788):
r0 = socket(0x11, 0x2, 0x2)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100))

9m7.20754897s ago: executing program 0 (id=791):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x10)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000b00))
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x1a5982)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))

9m6.052038362s ago: executing program 0 (id=795):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50)
r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
recvmmsg(r5, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_fuse_handle_req(r3, 0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
lseek(r6, 0x0, 0x2)

8m50.49769683s ago: executing program 33 (id=795):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50)
r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
recvmmsg(r5, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_fuse_handle_req(r3, 0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
lseek(r6, 0x0, 0x2)

8m32.99572027s ago: executing program 5 (id=883):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9aa, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
r5 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r5, 0x0)
ftruncate(r5, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1414000c00028005000100000000003c0002802c0001801400030000000000000000000000ffffe000000214000400fc0200000000000000000000000000000c000280050001000000000008000740000000001c001880080001400000000008000340000000443945d745eebacf48556208978a0008000240000000000800084000000000"], 0xb8}, 0x1, 0xfffff000}, 0x0)

8m31.065130664s ago: executing program 5 (id=888):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f0000000100)='%pS    \x00'}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
msync(&(0x7f000075a000/0x2000)=nil, 0x2000, 0x1)
ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]})
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
fsopen(0x0, 0x1)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0)
write$ppp(r5, &(0x7f00000010c0)="1e00", 0x2)
linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff)

8m27.519665562s ago: executing program 5 (id=891):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)

8m25.350507369s ago: executing program 5 (id=895):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = io_uring_setup(0x1293, &(0x7f0000000400)={0x0, 0x631d, 0x1000, 0x3, 0x2dc})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x1e, 0x0, 0x0)

8m24.018025501s ago: executing program 5 (id=898):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_open_dev$amidi(0x0, 0x2, 0x80042)
open$dir(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000068000100000000000000000000000000000000000c"], 0x24}}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62)
accept4(r1, 0x0, 0x0, 0x0)

8m23.427040915s ago: executing program 5 (id=901):
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xa0}}, 0x2004c010)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

8m8.028832247s ago: executing program 34 (id=901):
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xa0}}, 0x2004c010)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

6m32.056793825s ago: executing program 7 (id=1203):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4)
bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x8, r2}, 0x10)
poll(0x0, 0x0, 0x81)

6m27.094251968s ago: executing program 7 (id=1207):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x3c9, @private1, 0x4f47}, 0x1c)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

6m24.02573522s ago: executing program 7 (id=1212):
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000001140))
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0)

6m18.00363015s ago: executing program 7 (id=1222):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x3c9, @private1, 0x4f47}, 0x1c)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

6m16.226867749s ago: executing program 7 (id=1226):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000200)={0x1, 0x7, 0xffffffff, 0x4, 0xf, 0x4})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0xa98)

6m15.087633331s ago: executing program 7 (id=1228):
syz_open_dev$sg(0x0, 0x0, 0x8ae83)
r0 = socket$kcm(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
listen(r2, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x9)
accept$ax25(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0c00470c00"], 0x7)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9)
r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setuid(0xee00)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

5m59.800703955s ago: executing program 35 (id=1228):
syz_open_dev$sg(0x0, 0x0, 0x8ae83)
r0 = socket$kcm(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
listen(r2, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x9)
accept$ax25(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0c00470c00"], 0x7)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9)
r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setuid(0xee00)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

9.684740353s ago: executing program 6 (id=2137):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50e7, &(0x7f00000051c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
write(r0, &(0x7f0000000400)="953820a61a166f2767d5dd4b", 0xc)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x7, 0x4, 0x1, 0x0, 0x0, [{{r0}, 0x100000000}]})

6.839503363s ago: executing program 2 (id=2152):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

6.256648554s ago: executing program 1 (id=2156):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r2, 0xfffffffd, 0x2, r2})
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, 0x0, 0x30, 0x2, @val=@tcx={@void, @value}}, 0x40)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)
openat$dsp(0xffffff9c, &(0x7f0000000040), 0x400800, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448c9, 0x0)
io_setup(0xfb, &(0x7f0000000140)=<r7=>0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000200)="13", 0x1, 0x4}])
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x95ff, 0x3900000000000000, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r6, &(0x7f0000000340)="07000000010000", 0x7)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x1, 0x3, r2})
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')

6.148543682s ago: executing program 2 (id=2157):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r1}, 0x20)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d00000085000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

5.657742969s ago: executing program 2 (id=2159):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e)
r3 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000180)={0x9, 0x101})
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'pim6reg\x00'}}, 0x1e)
r4 = socket$pppoe(0x18, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, 0x0, 0x0)
connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'veth0_virt_wifi\x00'}}, 0x1e)
close(0x3)
ioctl$LOOP_CONFIGURE(r2, 0x301, 0x0)
set_mempolicy(0x1, 0x0, 0x7)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

5.158975891s ago: executing program 1 (id=2162):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x9)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000640), 0x802, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20)

4.858417376s ago: executing program 6 (id=2164):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x4)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000300)='./file0/../file0\x00')

4.854266867s ago: executing program 1 (id=2165):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x100, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x8140)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x62000, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)

4.424658663s ago: executing program 2 (id=2166):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'})
syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x7, 0x8001)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000080))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.256852967s ago: executing program 1 (id=2168):

3.695228342s ago: executing program 3 (id=2169):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r1}, 0x20)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d00000085000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

3.621599083s ago: executing program 1 (id=2170):
syz_open_dev$video(&(0x7f0000000140), 0x80000001, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000003, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041})
close_range(r0, 0xffffffffffffffff, 0x0)

3.607953903s ago: executing program 2 (id=2171):
r0 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r0}, 0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={'sha224-generic\x00'}})

3.507205172s ago: executing program 6 (id=2172):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r2, 0xfffffffd, 0x2, r2})
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, 0x0, 0x30, 0x2, @val=@tcx={@void, @value}}, 0x40)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)
openat$dsp(0xffffff9c, &(0x7f0000000040), 0x400800, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448c9, 0x0)
io_setup(0xfb, &(0x7f0000000140)=<r7=>0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000200)="13", 0x1, 0x4}])
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x95ff, 0x3900000000000000, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r6, &(0x7f0000000340)="07000000010000", 0x7)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x1, 0x3, r2})
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')

3.465449526s ago: executing program 8 (id=2173):
r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
r1 = fsmount(r0, 0x0, 0x8)
mknodat$loop(r1, &(0x7f0000000100)='./file0\x00', 0x0, 0x1)
faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x7)

3.334213807s ago: executing program 2 (id=2174):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000006200)=ANY=[@ANYRES32=0x0], 0x1, 0x59d6, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x141842, 0x12b)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x4020940d, &(0x7f00000005c0)={0x200000004, 0x4000})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0)
sendfile(r2, r2, 0x0, 0x7ffff000)

2.964482634s ago: executing program 8 (id=2175):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x9)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000640), 0x802, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20)

2.963992396s ago: executing program 3 (id=2176):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0), 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e)
r3 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000180)={0x9, 0x101})
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'pim6reg\x00'}}, 0x1e)
r4 = socket$pppoe(0x18, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, 0x0, 0x0)
connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'veth0_virt_wifi\x00'}}, 0x1e)
close(0x3)
ioctl$LOOP_CONFIGURE(r2, 0x301, 0x0)
set_mempolicy(0x1, 0x0, 0x7)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

2.956285689s ago: executing program 1 (id=2177):
r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b8bf420b00e209031"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00037c0000007c03"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

2.568864208s ago: executing program 3 (id=2178):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x100, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x8140)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x62000, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)

2.467591483s ago: executing program 8 (id=2179):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

2.337236177s ago: executing program 6 (id=2180):

2.093114792s ago: executing program 6 (id=2181):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'})
syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x7, 0x8001)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000080))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.927612789s ago: executing program 3 (id=2182):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x4)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000300)='./file0/../file0\x00')

1.859226099s ago: executing program 8 (id=2183):
pipe2$9p(&(0x7f0000000500)={<r0=>0xffffffffffffffff}, 0x80000)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x12, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@obj_role={'obj_role', 0x3d, ')!\xde[.*$)}\x7f\x92\xd5\x90\x01\xadY\x94-\xcb\xe2D\x10\xb2\x04[\x92\x83\xae'}}]}})

617.289882ms ago: executing program 8 (id=2184):
r0 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r0}, 0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={'sha224-generic\x00'}})

565.544567ms ago: executing program 3 (id=2185):
r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
r1 = fsmount(r0, 0x0, 0x8)
mknodat$loop(r1, &(0x7f0000000100)='./file0\x00', 0x0, 0x1)
faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x7)

387.994733ms ago: executing program 8 (id=2186):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x21f, &(0x7f0000000480)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000064c0)='./file0\x00', 0x200)

209.741488ms ago: executing program 6 (id=2187):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00')

0s ago: executing program 3 (id=2188):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0), 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e)
r3 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000180)={0x9, 0x101})
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'pim6reg\x00'}}, 0x1e)
r4 = socket$pppoe(0x18, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, 0x0, 0x0)
connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'veth0_virt_wifi\x00'}}, 0x1e)
close(0x3)
ioctl$LOOP_CONFIGURE(r2, 0x301, 0x0)
set_mempolicy(0x1, 0x0, 0x7)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

kernel console output (not intermixed with test programs):

ink: 16 bytes leftover after parsing attributes in process `syz.3.475'.
[  654.261193][ T7556] netlink: 36 bytes leftover after parsing attributes in process `syz.3.475'.
[  654.270556][ T7556] netlink: 36 bytes leftover after parsing attributes in process `syz.3.475'.
[  654.296712][   T29] audit: type=1326 audit(1738004322.715:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  654.325927][   T29] audit: type=1326 audit(1738004322.715:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  654.350812][   T29] audit: type=1326 audit(1738004322.715:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301fd8ec47 code=0x7ffc0000
[  654.373400][   T29] audit: type=1326 audit(1738004322.715:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f301fd8ebbc code=0x7ffc0000
[  654.396014][   T29] audit: type=1326 audit(1738004322.715:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f301fd8eaf4 code=0x7ffc0000
[  654.424926][   T29] audit: type=1326 audit(1738004322.715:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f301fd8eaf4 code=0x7ffc0000
[  654.452468][   T29] audit: type=1326 audit(1738004322.715:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f301fd8b98a code=0x7ffc0000
[  654.474988][   T29] audit: type=1326 audit(1738004322.725:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  654.497783][   T29] audit: type=1326 audit(1738004322.725:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  655.580074][ T5772] Bluetooth: hci5: command tx timeout
[  655.599855][ T6206] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.618078][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.627337][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.639287][ T7509] bridge_slave_0: entered allmulticast mode
[  655.648761][ T7509] bridge_slave_0: entered promiscuous mode
[  655.875892][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.884029][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.891982][ T7509] bridge_slave_1: entered allmulticast mode
[  655.901446][ T7509] bridge_slave_1: entered promiscuous mode
[  656.938442][ T6206] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.363063][ T7509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  657.629625][ T7509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  658.753006][ T7509] team0: Port device team_slave_0 added
[  659.083912][ T7509] team0: Port device team_slave_1 added
[  659.521316][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  659.538453][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  660.004250][ T6206] erspan0: left allmulticast mode
[  660.009784][ T6206] erspan0: left promiscuous mode
[  660.017818][ T6206] bridge0: port 3(erspan0) entered disabled state
[  660.080308][ T6206] bridge_slave_1: left allmulticast mode
[  660.086773][ T6206] bridge_slave_1: left promiscuous mode
[  660.095251][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.192863][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'.
[  660.223113][ T6206] bridge_slave_0: left allmulticast mode
[  660.229429][ T6206] bridge_slave_0: left promiscuous mode
[  660.237522][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.124907][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  661.132339][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  661.159042][ T7509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  663.227666][ T7588] netlink: 'syz.0.485': attribute type 27 has an invalid length.
[  663.375612][ T6206] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  663.434112][ T6206] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  663.488553][ T6206] 
 (unregistering): Released all slaves
[  663.512763][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  663.527268][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  663.557555][ T7509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  664.274839][ T7588] bridge0: port 3(syz_tun) entered disabled state
[  664.321335][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state
[  664.330241][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.381790][ T7588] tipc: Resetting bearer <eth:team0>
[  664.644657][ T7588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  664.684961][ T7588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  664.814121][ T7613] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  664.960322][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'.
[  665.045711][ T7588] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  665.064459][ T7588] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  665.076203][ T7588] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  665.085772][ T7588] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  665.310731][ T7588] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0
[  665.320428][ T7588] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0
[  665.330843][ T7588] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0
[  665.340252][ T7588] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0
[  665.362297][ T7588] vxlan0: left promiscuous mode
[  665.434931][ T7612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.488'.
[  665.923004][ T7509] hsr_slave_0: entered promiscuous mode
[  665.946365][ T7509] hsr_slave_1: entered promiscuous mode
[  665.960375][ T7509] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  665.969612][ T7509] Cannot create hsr debugfs directory
[  666.385429][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  666.385505][   T29] audit: type=1326 audit(1738004334.885:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  666.420380][   T29] audit: type=1326 audit(1738004334.885:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  666.423625][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.489'.
[  666.442939][   T29] audit: type=1326 audit(1738004334.885:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  666.443168][   T29] audit: type=1326 audit(1738004334.895:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301fd8ec47 code=0x7ffc0000
[  666.452225][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.489'.
[  666.452324][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.489'.
[  666.474716][   T29] audit: type=1326 audit(1738004334.895:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f301fd8ebbc code=0x7ffc0000
[  666.498467][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.489'.
[  666.553369][   T29] audit: type=1326 audit(1738004334.895:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f301fd8eaf4 code=0x7ffc0000
[  666.576044][   T29] audit: type=1326 audit(1738004334.895:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f301fd8eaf4 code=0x7ffc0000
[  666.602730][   T29] audit: type=1326 audit(1738004334.895:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f301fd8b98a code=0x7ffc0000
[  666.626783][   T29] audit: type=1326 audit(1738004334.895:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  666.649645][   T29] audit: type=1326 audit(1738004334.925:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  667.109092][ T6206] hsr_slave_0: left promiscuous mode
[  667.133578][ T6206] hsr_slave_1: left promiscuous mode
[  667.142018][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  667.149795][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  667.245112][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  667.253811][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  667.313227][ T6206] veth1_macvtap: left promiscuous mode
[  667.319051][ T6206] veth0_macvtap: left promiscuous mode
[  667.325164][ T6206] veth1_vlan: left promiscuous mode
[  667.330775][ T6206] veth0_vlan: left promiscuous mode
[  668.113210][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.494'.
[  669.534848][ T6206] team0 (unregistering): Port device team_slave_1 removed
[  669.600033][ T6206] team0 (unregistering): Port device team_slave_0 removed
[  672.078833][ T7509] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  672.193062][ T7509] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  672.364608][ T7509] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  672.513444][ T7509] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  672.830456][ T7663] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  672.923206][ T7663] netlink: 40 bytes leftover after parsing attributes in process `syz.2.500'.
[  672.991319][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'.
[  673.039518][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  673.039597][   T29] audit: type=1326 audit(1738004341.525:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  673.060168][ T7669] netlink: 36 bytes leftover after parsing attributes in process `syz.3.502'.
[  673.074151][   T29] audit: type=1326 audit(1738004341.535:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  673.082940][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.502'.
[  673.105257][   T29] audit: type=1326 audit(1738004341.535:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  673.114246][ T7669] netlink: 36 bytes leftover after parsing attributes in process `syz.3.502'.
[  673.114357][ T7669] netlink: 36 bytes leftover after parsing attributes in process `syz.3.502'.
[  673.137359][   T29] audit: type=1326 audit(1738004341.535:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301fd8ec47 code=0x7ffc0000
[  673.183031][   T29] audit: type=1326 audit(1738004341.535:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f301fd8ebbc code=0x7ffc0000
[  673.205762][   T29] audit: type=1326 audit(1738004341.535:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f301fd8eaf4 code=0x7ffc0000
[  673.228481][   T29] audit: type=1326 audit(1738004341.535:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f301fd8eaf4 code=0x7ffc0000
[  673.255240][   T29] audit: type=1326 audit(1738004341.535:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f301fd8b98a code=0x7ffc0000
[  673.279276][   T29] audit: type=1326 audit(1738004341.555:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  673.303895][   T29] audit: type=1326 audit(1738004341.555:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  673.686431][ T7509] 8021q: adding VLAN 0 to HW filter on device bond0
[  673.892753][ T7509] 8021q: adding VLAN 0 to HW filter on device team0
[  673.960496][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.968448][ T6206] bridge0: port 1(bridge_slave_0) entered forwarding state
[  674.031431][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state
[  674.039390][ T6206] bridge0: port 2(bridge_slave_1) entered forwarding state
[  675.000692][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'.
[  679.790545][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'.
[  679.845700][ T7509] 8021q: adding VLAN 0 to HW filter on device batadv0
[  682.836841][ T7740] binder: BINDER_SET_CONTEXT_MGR already set
[  682.843234][ T7740] binder: 7739:7740 ioctl 4018620d 200002c0 returned -16
[  682.877306][ T7740] binder: 7739:7740 ioctl c0306201 20000680 returned -11
[  683.714005][ T7509] veth0_vlan: entered promiscuous mode
[  683.815954][ T7509] veth1_vlan: entered promiscuous mode
[  684.074881][ T7509] veth0_macvtap: entered promiscuous mode
[  684.150193][ T7509] veth1_macvtap: entered promiscuous mode
[  684.282496][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.294440][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.304663][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.316541][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.327103][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.337898][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.353591][ T7509] batman_adv: batadv0: Interface activated: batadv_slave_0
[  684.606142][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  684.618292][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.628810][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  684.640188][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.650393][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  684.661232][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.676334][ T7509] batman_adv: batadv0: Interface activated: batadv_slave_1
[  684.854635][ T7509] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  684.864582][ T7509] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  684.873756][ T7509] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  684.882923][ T7509] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  684.931730][ T7763] No control pipe specified
[  687.091877][ T7617] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  687.701811][ T7617] usb 3-1: Using ep0 maxpacket: 32
[  687.727456][ T7617] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  687.736391][ T7617] usb 3-1: config 0 has no interface number 0
[  687.742913][ T7617] usb 3-1: config 0 interface 12 has no altsetting 0
[  687.787418][ T7617] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  687.804963][ T7617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.813741][ T7617] usb 3-1: Product: syz
[  687.818160][ T7617] usb 3-1: Manufacturer: syz
[  687.823450][ T7617] usb 3-1: SerialNumber: syz
[  687.853546][ T7617] usb 3-1: config 0 descriptor??
[  688.627810][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  688.637926][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  689.379176][ T7617] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  689.391349][ T7617] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  689.399276][ T7617] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  689.407825][ T7617] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  689.576756][ T7617] usb 3-1: USB disconnect, device number 8
[  691.489892][ T7800] No control pipe specified
[  696.500755][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'.
[  697.108698][ T7839] No control pipe specified
[  697.175903][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  697.184393][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  697.352503][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  697.360595][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  704.266005][ T7883] ax25_connect(): syz.1.572 uses autobind, please contact jreuter@yaina.de
[  704.312374][ T7883] hub 6-0:1.0: USB hub found
[  704.324339][ T7883] hub 6-0:1.0: 1 port detected
[  705.463390][ T7891] veth0_to_team: entered promiscuous mode
[  705.469606][ T7891] veth0_to_team: entered allmulticast mode
[  710.727017][ T7926] ax25_connect(): syz.3.587 uses autobind, please contact jreuter@yaina.de
[  713.239229][ T7931] overlayfs: overlapping lowerdir path
[  716.309664][ T7953] loop2: detected capacity change from 0 to 7
[  716.331645][ T7954] Bluetooth: MGMT ver 1.23
[  716.347936][ T7953] Dev loop2: unable to read RDB block 7
[  716.354170][ T7953]  loop2: unable to read partition table
[  716.611338][ T7953] loop2: partition table beyond EOD, truncated
[  716.618391][ T7953] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  717.026232][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  717.026311][   T29] audit: type=1326 audit(1738004385.505:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cc18cd29 code=0x7ffc0000
[  718.030288][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'.
[  718.168388][   T29] audit: type=1326 audit(1738004385.595:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58cc18cd29 code=0x7ffc0000
[  718.191687][   T29] audit: type=1326 audit(1738004385.595:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cc18cd29 code=0x7ffc0000
[  718.220105][   T29] audit: type=1326 audit(1738004385.605:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f58cc18cd29 code=0x7ffc0000
[  718.244828][   T29] audit: type=1326 audit(1738004385.605:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cc18cd29 code=0x7ffc0000
[  718.267508][   T29] audit: type=1326 audit(1738004385.615:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f58cc18cd29 code=0x7ffc0000
[  718.290121][   T29] audit: type=1326 audit(1738004385.615:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cc18cd29 code=0x7ffc0000
[  718.318523][   T29] audit: type=1326 audit(1738004385.625:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f58cc18cd29 code=0x7ffc0000
[  718.343123][   T29] audit: type=1326 audit(1738004385.625:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cc18cd29 code=0x7ffc0000
[  718.365930][   T29] audit: type=1326 audit(1738004385.625:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58cc18cd29 code=0x7ffc0000
[  718.838285][ T7965] No control pipe specified
[  720.934208][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  720.942002][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  722.482639][ T7979] overlayfs: overlapping lowerdir path
[  725.952894][ T7987] loop2: detected capacity change from 0 to 7
[  726.001877][ T7987] Dev loop2: unable to read RDB block 7
[  726.008008][ T7987]  loop2: unable to read partition table
[  726.040429][ T7987] loop2: partition table beyond EOD, truncated
[  726.047692][ T7987] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  730.175616][ T8015] No control pipe specified
[  748.081220][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'.
[  750.786697][ T8130] binder: 8129:8130 ioctl c0306201 0 returned -14
[  767.725070][ T7621] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  768.195678][ T7621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  768.209675][ T7621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  768.220056][ T7621] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  768.229634][ T7621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.257281][ T7621] usb 4-1: config 0 descriptor??
[  768.742992][ T7621] sony 0003:054C:0268.0003: unbalanced collection at end of report description
[  768.873647][ T7621] sony 0003:054C:0268.0003: parse failed
[  768.880475][ T7621] sony 0003:054C:0268.0003: probe with driver sony failed with error -22
[  768.990178][ T7621] usb 4-1: USB disconnect, device number 4
[  769.052146][ T5772] Bluetooth: hci5: command 0x0406 tx timeout
[  774.573694][ T8257] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  776.043548][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'.
[  777.757650][ T8292] veth0_vlan: entered allmulticast mode
[  777.827405][ T8292] veth0_vlan: left promiscuous mode
[  777.840295][ T8292] veth0_vlan: entered promiscuous mode
[  782.364316][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  782.371232][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  783.291899][ T8307] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  785.611863][ T7600] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  785.802015][ T7600] usb 3-1: Using ep0 maxpacket: 16
[  785.832918][ T7600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  785.844510][ T7600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  785.854913][ T7600] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[  785.864595][ T7600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.919664][ T7600] usb 3-1: config 0 descriptor??
[  786.362916][ T7600] glorious 0003:22D4:1503.0004: unknown main item tag 0x1
[  786.389851][ T7600] glorious 0003:22D4:1503.0004: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.2-1/input0
[  786.569937][ T7600] usb 3-1: USB disconnect, device number 9
[  789.695024][ T8365] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  804.008534][ T8439] netlink: 60 bytes leftover after parsing attributes in process `syz.5.773'.
[  804.840455][ T8428] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  813.823568][ T7617] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  814.039302][ T7617] usb 4-1: config 127 has an invalid interface number: 246 but max is 0
[  814.054631][ T7617] usb 4-1: config 127 has no interface number 0
[  814.061174][ T7617] usb 4-1: config 127 interface 246 altsetting 2 bulk endpoint 0xF has invalid maxpacket 32
[  814.074040][ T7617] usb 4-1: config 127 interface 246 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 4
[  814.084562][ T7617] usb 4-1: config 127 interface 246 has no altsetting 0
[  814.330687][ T7617] usb 4-1: New USB device found, idVendor=0f11, idProduct=20a0, bcdDevice=c6.2c
[  814.341300][ T7617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.349842][ T7617] usb 4-1: Product: syz
[  814.360448][ T7617] usb 4-1: Manufacturer: syz
[  814.367363][ T7617] usb 4-1: SerialNumber: syz
[  814.544138][ T8481] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  814.597966][ T8481] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  815.080273][ T7617] ldusb 4-1:127.246: Interrupt in endpoint not found
[  815.218824][ T7617] usb 4-1: USB disconnect, device number 5
[  817.346825][ T8498] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  824.612722][ T7617] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  824.826389][ T7617] usb 2-1: config 0 has no interfaces?
[  824.832650][ T7617] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  824.842632][ T7617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.964215][ T7617] usb 2-1: config 0 descriptor??
[  825.189845][ T7617] usb 2-1: USB disconnect, device number 5
[  825.582069][ T8542] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  825.582589][ T7600] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  825.809229][ T7600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  825.825119][ T7600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  825.836410][ T7600] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  825.846310][ T7600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.926861][ T7600] usb 3-1: config 0 descriptor??
[  826.359845][ T7600] usbhid 3-1:0.0: can't add hid device: -71
[  826.367849][ T7600] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  826.393164][ T7600] usb 3-1: USB disconnect, device number 10
[  828.622089][ T7600] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  828.803760][ T7600] usb 4-1: config 0 has no interfaces?
[  828.809877][ T7600] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  828.819824][ T7600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.868742][ T7600] usb 4-1: config 0 descriptor??
[  829.090401][ T7600] usb 4-1: USB disconnect, device number 6
[  830.102381][ T8564] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  830.110335][ T8570] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  832.661924][ T7617] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[  832.857169][ T7617] usb 6-1: config 0 has no interfaces?
[  832.863339][ T7617] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  832.873033][ T7617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.974459][ T7617] usb 6-1: config 0 descriptor??
[  833.948741][ T7617] usb 6-1: USB disconnect, device number 2
[  834.339111][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  834.362299][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  834.372647][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  834.408080][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  834.462870][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  834.483892][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  836.632023][   T52] Bluetooth: hci1: command tx timeout
[  836.662053][ T8615] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  836.790008][ T8616] chnl_net:caif_netlink_parms(): no params data found
[  838.001941][ T8616] bridge0: port 1(bridge_slave_0) entered blocking state
[  838.019485][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state
[  838.027668][ T8616] bridge_slave_0: entered allmulticast mode
[  838.037481][ T8616] bridge_slave_0: entered promiscuous mode
[  838.055115][ T8616] bridge0: port 2(bridge_slave_1) entered blocking state
[  838.063166][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state
[  838.071101][ T8616] bridge_slave_1: entered allmulticast mode
[  838.080808][ T8616] bridge_slave_1: entered promiscuous mode
[  838.164828][ T8624] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  838.427230][ T8616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  838.464181][ T5771] syz_tun (unregistering): left allmulticast mode
[  838.470970][ T5771] syz_tun (unregistering): left promiscuous mode
[  838.478099][ T5771] bridge0: port 3(syz_tun) entered disabled state
[  838.602345][ T8616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  838.656038][   T52] Bluetooth: hci1: command tx timeout
[  838.889889][ T8616] team0: Port device team_slave_0 added
[  838.958382][ T8616] team0: Port device team_slave_1 added
[  838.993125][ T7617] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  839.221271][ T7617] usb 4-1: config 0 has no interfaces?
[  839.224283][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  839.228258][ T7617] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  839.234219][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  839.234378][ T8616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  839.263905][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  839.279138][ T7617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.287925][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  839.329850][ T8616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  839.419935][ T7617] usb 4-1: config 0 descriptor??
[  839.681410][ T7621] usb 4-1: USB disconnect, device number 7
[  840.110973][ T6175] bridge_slave_1: left allmulticast mode
[  840.117112][ T6175] bridge_slave_1: left promiscuous mode
[  840.124287][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state
[  840.335066][ T6175] bridge_slave_0: left allmulticast mode
[  840.341144][ T6175] bridge_slave_0: left promiscuous mode
[  840.348072][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state
[  840.540775][ T8616] hsr_slave_0: entered promiscuous mode
[  840.551363][ T8616] hsr_slave_1: entered promiscuous mode
[  840.560349][ T8616] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  840.577946][ T8616] Cannot create hsr debugfs directory
[  840.832167][   T52] Bluetooth: hci1: command tx timeout
[  841.402170][ T6175] bridge0 (unregistering): left allmulticast mode
[  841.534781][ T6175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  841.579918][ T6175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  841.628704][ T6175] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  841.660083][ T6175] bond0 (unregistering): Released all slaves
[  842.143600][ T6175] tipc: Disabling bearer <eth:team0>
[  842.169001][ T6175] tipc: Left network mode
[  842.708024][ T6175] hsr_slave_0: left promiscuous mode
[  842.734877][ T6175] hsr_slave_1: left promiscuous mode
[  842.743326][ T6175] batman_adv: batadv0: Removing interface: batadv_slave_0
[  842.803899][ T6175] batman_adv: batadv0: Removing interface: batadv_slave_1
[  842.891889][   T52] Bluetooth: hci1: command tx timeout
[  843.389275][ T6175] team0 (unregistering): Port device team_slave_1 removed
[  843.418257][ T6175] team0 (unregistering): Port device team_slave_0 removed
[  843.860915][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  843.867896][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  844.537227][ T7621] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[  844.762416][ T7621] usb 2-1: config 0 has no interfaces?
[  844.774447][ T7621] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  844.785918][ T7621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.844272][ T7621] usb 2-1: config 0 descriptor??
[  845.155619][ T8616] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  845.204092][ T7600] usb 2-1: USB disconnect, device number 6
[  847.250401][ T6175] IPVS: stop unused estimator thread 0...
[  847.898014][ T8616] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  848.073375][ T8616] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  848.253470][ T8616] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  849.388240][ T8616] 8021q: adding VLAN 0 to HW filter on device bond0
[  849.528389][ T8616] 8021q: adding VLAN 0 to HW filter on device team0
[  849.667193][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  849.675205][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  849.868538][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state
[  849.876574][ T6175] bridge0: port 2(bridge_slave_1) entered forwarding state
[  855.331913][ T7622] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  855.555104][ T7622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  855.566797][ T7622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  855.577116][ T7622] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  855.586748][ T7622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  855.713034][ T8616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  855.757653][ T7622] usb 6-1: config 0 descriptor??
[  855.824239][ T7603] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  856.039772][ T7603] usb 4-1: config 0 has no interfaces?
[  856.045757][ T7603] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  856.055356][ T7603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  856.110179][ T7603] usb 4-1: config 0 descriptor??
[  856.206095][ T7622] usbhid 6-1:0.0: can't add hid device: -71
[  856.213206][ T7622] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  856.273208][ T7622] usb 6-1: USB disconnect, device number 3
[  856.590438][ T7622] usb 4-1: USB disconnect, device number 8
[  858.459534][ T8616] veth0_vlan: entered promiscuous mode
[  858.540547][ T8616] veth1_vlan: entered promiscuous mode
[  858.887432][ T8616] veth0_macvtap: entered promiscuous mode
[  858.970655][ T8616] veth1_macvtap: entered promiscuous mode
[  859.134946][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  859.145978][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.156225][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  859.167079][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.177979][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  859.188807][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.199057][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  859.217819][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.235535][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_0
[  859.299931][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  859.318766][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.332209][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  859.343127][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.353337][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  859.364772][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.375050][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  859.385918][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.401779][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_1
[  860.007929][ T8616] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  860.017280][ T8616] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  860.027803][ T8616] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  860.037318][ T8616] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  860.522401][ T7622] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[  860.836243][ T7622] usb 4-1: config 0 has no interfaces?
[  860.842304][ T7622] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  860.858012][ T7622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  860.914216][ T7622] usb 4-1: config 0 descriptor??
[  861.135558][ T7600] usb 4-1: USB disconnect, device number 9
[  868.181815][ T7622] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  868.378194][ T7622] usb 4-1: config 0 has no interfaces?
[  868.384302][ T7622] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  868.393778][ T7622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  868.451285][ T7622] usb 4-1: config 0 descriptor??
[  868.565447][ T6175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  868.573725][ T6175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  868.670965][ T7600] usb 4-1: USB disconnect, device number 10
[  868.676159][ T3624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  868.685932][ T3624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  872.983548][ T8869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.922'.
[  874.722729][ T7600] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  874.992135][ T7600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  875.003750][ T7600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  875.014212][ T7600] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  875.023766][ T7600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.120920][ T7600] usb 4-1: config 0 descriptor??
[  875.578722][ T7600] usbhid 4-1:0.0: can't add hid device: -71
[  875.585873][ T7600] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  875.646213][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  875.649661][ T7600] usb 4-1: USB disconnect, device number 11
[  875.666189][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  875.678700][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  875.720814][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  875.749327][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  875.763611][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  876.739947][ T8889] chnl_net:caif_netlink_parms(): no params data found
[  876.997186][ T8906] xfrm0: entered allmulticast mode
[  877.853239][   T52] Bluetooth: hci0: command tx timeout
[  878.329173][ T8918] Bluetooth: MGMT ver 1.23
[  878.896786][ T8889] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.904995][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state
[  878.913173][ T8889] bridge_slave_0: entered allmulticast mode
[  878.922718][ T8889] bridge_slave_0: entered promiscuous mode
[  878.984630][ T6173] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.254069][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.262018][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.269898][ T8889] bridge_slave_1: entered allmulticast mode
[  879.282312][ T8889] bridge_slave_1: entered promiscuous mode
[  879.880411][ T6173] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.924898][ T8889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  879.949710][   T52] Bluetooth: hci0: command tx timeout
[  879.974926][ T8889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  880.150218][ T6173] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  880.175285][ T8889] team0: Port device team_slave_0 added
[  880.228559][ T8889] team0: Port device team_slave_1 added
[  880.268561][ T6173] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  880.598069][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  880.605568][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  880.634315][ T8889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  880.830374][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  880.838072][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  880.864643][ T8889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  881.482621][ T6173] bridge_slave_1: left allmulticast mode
[  881.488563][ T6173] bridge_slave_1: left promiscuous mode
[  881.495529][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.557461][ T6173] bridge_slave_0: left allmulticast mode
[  881.563616][ T6173] bridge_slave_0: left promiscuous mode
[  881.570363][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state
[  881.686925][ T8933] program syz.1.944 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  882.013411][   T52] Bluetooth: hci0: command tx timeout
[  882.223111][ T6173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  882.248199][ T6173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  882.315914][ T6173] bond0 (unregistering): Released all slaves
[  882.397580][ T8889] hsr_slave_0: entered promiscuous mode
[  882.409394][ T8889] hsr_slave_1: entered promiscuous mode
[  883.939245][ T6173] hsr_slave_0: left promiscuous mode
[  884.025565][ T6173] hsr_slave_1: left promiscuous mode
[  884.033863][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  884.041759][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0
[  884.121827][   T52] Bluetooth: hci0: command tx timeout
[  884.154080][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  884.162678][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_1
[  884.226349][ T6173] veth1_macvtap: left promiscuous mode
[  884.232539][ T6173] veth0_macvtap: left promiscuous mode
[  884.238652][ T6173] veth1_vlan: left promiscuous mode
[  884.244945][ T6173] veth0_vlan: left promiscuous mode
[  885.488026][ T6173] team0 (unregistering): Port device team_slave_1 removed
[  885.832305][ T6173] team0 (unregistering): Port device team_slave_0 removed
[  887.052847][ T8951] No control pipe specified
[  887.201928][ T7621] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  887.400879][ T7621] usb 7-1: device descriptor read/64, error -71
[  887.715632][ T7621] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  888.021937][ T8889] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  888.093938][ T7621] usb 7-1: device descriptor read/64, error -71
[  888.148256][ T8889] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  888.215299][ T8889] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  888.227495][ T7621] usb usb7-port1: attempt power cycle
[  888.399715][ T8889] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  888.641763][ T7621] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  888.705828][ T7621] usb 7-1: device descriptor read/8, error -71
[  888.940105][ T8960] program syz.1.956 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  888.978158][ T7621] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  889.041138][ T7621] usb 7-1: device descriptor read/8, error -71
[  889.178821][ T7621] usb usb7-port1: unable to enumerate USB device
[  889.382461][   T52] Bluetooth: hci2: unexpected event for opcode 0x0c47
[  889.524589][ T8889] 8021q: adding VLAN 0 to HW filter on device bond0
[  889.688310][ T8965] trusted_key: encrypted_key: key trusted:syz not found
[  890.220186][ T8889] 8021q: adding VLAN 0 to HW filter on device team0
[  890.413613][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state
[  890.421333][ T6173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  891.031941][ T7600] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  891.142732][ T8889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  891.156596][ T8889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  891.392772][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state
[  891.400502][ T6173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  892.041128][ T7600] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  892.053599][ T7600] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  892.063896][ T7600] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  892.073430][ T7600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.290155][ T8973] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  892.342691][ T7600] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  892.458530][ T8983] No control pipe specified
[  893.451925][   T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  893.460535][   T52] Bluetooth: hci2: Injecting HCI hardware error event
[  893.473395][   T52] Bluetooth: hci2: hardware error 0x00
[  894.003388][ T8889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  894.218367][ T8998] program syz.6.967 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  894.421761][ T7600] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  894.581938][ T7600] usb 3-1: device descriptor read/64, error -71
[  894.832152][ T7600] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  895.002765][ T7600] usb 3-1: device descriptor read/64, error -71
[  895.128349][ T7600] usb usb3-port1: attempt power cycle
[  895.532820][   T52] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  895.536358][ T7600] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  895.644508][ T7600] usb 3-1: device descriptor read/8, error -71
[  895.919874][ T7600] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  895.977269][ T7600] usb 3-1: device descriptor read/8, error -71
[  896.106090][ T7600] usb usb3-port1: unable to enumerate USB device
[  896.475617][ T9015] No control pipe specified
[  896.792341][ T8889] veth0_vlan: entered promiscuous mode
[  896.876276][ T8889] veth1_vlan: entered promiscuous mode
[  897.264921][ T8889] veth0_macvtap: entered promiscuous mode
[  897.324215][ T8889] veth1_macvtap: entered promiscuous mode
[  897.654142][ T7600] usb 2-1: USB disconnect, device number 7
[  897.735514][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  897.747536][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  897.758890][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  897.769908][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  897.780607][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  897.794466][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  897.805565][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  897.823008][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  897.840412][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_0
[  897.976188][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  897.987157][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  897.997465][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  898.008271][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.020916][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  898.032479][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.042677][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  898.053462][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.069070][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  898.254449][ T8889] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  898.263806][ T8889] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  898.273035][ T8889] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  898.282177][ T8889] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  900.022105][ T9053] program syz.3.987 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  902.785161][ T9096] program syz.1.1001 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  904.496264][ T6173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  904.506114][ T6173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  904.850151][ T6173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  904.862858][ T6173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.246494][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  905.253901][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  905.932121][ T7603] usb 8-1: new low-speed USB device number 2 using dummy_hcd
[  906.118964][ T7603] usb 8-1: config 0 has no interfaces?
[  906.125044][ T7603] usb 8-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  906.134581][ T7603] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.214869][ T7603] usb 8-1: config 0 descriptor??
[  906.433942][ T7603] usb 8-1: USB disconnect, device number 2
[  915.312072][ T7603] usb 8-1: new low-speed USB device number 3 using dummy_hcd
[  915.502496][ T7603] usb 8-1: config 0 has no interfaces?
[  915.508425][ T7603] usb 8-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  915.518023][ T7603] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  915.560970][ T7603] usb 8-1: config 0 descriptor??
[  915.783631][ T7603] usb 8-1: USB disconnect, device number 3
[  923.535885][ T7603] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[  924.886498][ T7603] usb 7-1: device descriptor read/all, error -71
[  927.926250][ T7621] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[  928.174927][ T7621] usb 4-1: config 0 has no interfaces?
[  928.180927][ T7621] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  928.192964][ T7621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.309891][ T7621] usb 4-1: config 0 descriptor??
[  928.554757][ T7621] usb 4-1: USB disconnect, device number 12
[  928.692012][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1085'.
[  931.736807][ T9319] IPv6: Can't replace route, no match found
[  932.268862][ T9324] kAFS: unable to lookup cell '·gâKÔ)ŒkJ¬L+ù˜«}ºŽ	�²Tùˆ/
pbΈ&õ½²åMíÇúK…µ(Þ÷
„|F’kãqº2‡J”$Oæ-7Rè‰kÐE1þÑž
‹LEB{ª®ÐNb�+*ežRM´øšÙòcóÕ\Œj½mÆÔ©«éÔ¿ÁÈúèOŠóÎÀÿtÁ"ÚkêÄkïnè
zÇHKuüø6ÆMySÍH�IU»ÝoÊÊIfô¯ÍõVš›UóŒr&¯ÑÆcúN¡ô<Dñ—¼­[£÷&¸D\q4>¢N§0‰NB£c5?¨ÞÌ7­Œc·#0*èkˆ‘»<ñ9¦mcëLå	0ð7²�뜖ËÖCtÏ’
[  932.268862][ T9324] jÕy¥H
ao‹1.¢ºBó$ãµÍã&2²MË0Ì=À`;!ÇdφOëÐéJIìXç!‹ñšJ¨ËŸBvU_Rc?Ÿê'
[  932.341963][ T9327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1094'.
[  933.199741][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'.
[  933.993227][ T7621] usb 7-1: new low-speed USB device number 8 using dummy_hcd
[  934.343063][ T7621] usb 7-1: config 0 has no interfaces?
[  934.348885][ T7621] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  934.358352][ T7621] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  934.554562][ T7621] usb 7-1: config 0 descriptor??
[  934.802300][ T7617] usb 7-1: USB disconnect, device number 8
[  936.110295][ T9362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1108'.
[  937.881592][ T9376] trusted_key: encrypted_key: key trusted:syz not found
[  938.995952][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'.
[  941.722100][ T7603] usb 8-1: new low-speed USB device number 4 using dummy_hcd
[  941.933238][   T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  941.941997][   T52] Bluetooth: hci1: Injecting HCI hardware error event
[  941.958211][   T52] Bluetooth: hci1: hardware error 0x00
[  941.985706][ T7603] usb 8-1: config 0 has no interfaces?
[  941.991915][ T7603] usb 8-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  942.001260][ T7603] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.112342][ T7603] usb 8-1: config 0 descriptor??
[  942.378816][ T7603] usb 8-1: USB disconnect, device number 4
[  942.459017][ T9403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1123'.
[  944.022996][   T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  945.329904][   T52] Bluetooth: hci3: unexpected event for opcode 0x0c47
[  945.539652][ T9430] trusted_key: encrypted_key: key trusted:syz not found
[  946.954770][ T9436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1136'.
[  947.586209][ T7621] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[  947.849362][ T7621] usb 8-1: config 0 has no interfaces?
[  947.855470][ T7621] usb 8-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  947.865053][ T7621] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  947.915868][ T7621] usb 8-1: config 0 descriptor??
[  948.134180][ T7621] usb 8-1: USB disconnect, device number 5
[  948.311729][   T29] kauditd_printk_skb: 16 callbacks suppressed
[  948.311809][   T29] audit: type=1326 audit(1738004616.805:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9451 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  948.341220][   T29] audit: type=1326 audit(1738004616.805:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9451 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  948.470852][   T29] audit: type=1326 audit(1738004616.875:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9451 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  948.494462][   T29] audit: type=1326 audit(1738004616.875:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9451 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  948.518912][   T29] audit: type=1326 audit(1738004616.875:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9451 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  948.542270][   T29] audit: type=1326 audit(1738004616.875:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9451 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  948.565082][   T29] audit: type=1326 audit(1738004616.875:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9451 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  948.587930][   T29] audit: type=1326 audit(1738004616.875:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9451 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7ffc0000
[  948.696913][ T9455] program syz.6.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  949.213378][   T29] audit: type=1800 audit(1738004617.705:101): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1147" name="file1" dev="overlay" ino=1332 res=0 errno=0
[  949.374103][   T52] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  949.383087][   T52] Bluetooth: hci3: Injecting HCI hardware error event
[  949.390852][ T8991] Bluetooth: hci3: hardware error 0x00
[  950.167681][ T9470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1150'.
[  950.296603][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'.
[  950.306321][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'.
[  950.316514][ T9473] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1151'.
[  951.113419][   T29] audit: type=1326 audit(1738004619.615:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.6.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b5b8cd29 code=0x7ffc0000
[  951.451992][ T8991] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  952.051822][ T7621] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[  952.261362][ T7621] usb 4-1: config 0 has no interfaces?
[  952.269383][ T7621] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  952.278945][ T7621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  952.364611][ T7621] usb 4-1: config 0 descriptor??
[  952.605967][ T7621] usb 4-1: USB disconnect, device number 13
[  952.655410][ T9506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1163'.
[  952.853247][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1164'.
[  952.862965][ T9508] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1164'.
[  953.633940][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  953.634018][   T29] audit: type=1326 audit(1738004622.135:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.7.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e638cd29 code=0x7ffc0000
[  953.663630][   T29] audit: type=1326 audit(1738004622.135:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.7.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e638cd29 code=0x7ffc0000
[  953.941967][   T29] audit: type=1326 audit(1738004622.225:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.7.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17e638cd29 code=0x7ffc0000
[  953.964939][   T29] audit: type=1326 audit(1738004622.225:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.7.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e638cd29 code=0x7ffc0000
[  953.987833][   T29] audit: type=1326 audit(1738004622.225:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.7.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e638cd29 code=0x7ffc0000
[  954.010644][   T29] audit: type=1326 audit(1738004622.245:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.7.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f17e638cd29 code=0x7ffc0000
[  954.035378][   T29] audit: type=1326 audit(1738004622.245:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.7.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e638cd29 code=0x7ffc0000
[  954.058903][   T29] audit: type=1326 audit(1738004622.245:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.7.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e638cd29 code=0x7ffc0000
[  956.199877][   T29] audit: type=1800 audit(1738004624.675:119): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1174" name="file1" dev="overlay" ino=1368 res=0 errno=0
[  956.640809][ T9544] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1176'.
[  957.399080][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'.
[  957.410752][ T9546] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1177'.
[  958.098455][ T7621] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[  958.348179][ T7621] usb 2-1: config 0 has no interfaces?
[  958.354409][ T7621] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  958.363982][ T7621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.085960][ T7621] usb 2-1: config 0 descriptor??
[  959.339443][ T7621] usb 2-1: USB disconnect, device number 8
[  965.321111][ T9576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1189'.
[  965.696113][ T9579] 9pnet_virtio: no channels available for device syz
[  966.715149][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  966.722429][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  969.169833][ T9594] program syz.1.1196 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  978.587854][ T9633] program syz.1.1210 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  981.499606][   T29] audit: type=1800 audit(1738004649.995:120): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1216" name="file1" dev="overlay" ino=1417 res=0 errno=0
[  985.663577][ T7621] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  985.975318][ T7621] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  985.993609][ T7621] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  986.009330][ T7621] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[  986.018910][ T7621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.463967][ T7621] usb 4-1: config 0 descriptor??
[  986.521685][ T7621] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  986.664551][ T9675] program syz.7.1226 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  988.770467][ T9682] trusted_key: encrypted_key: key trusted:syz not found
[  988.983290][   T29] audit: type=1800 audit(1738004657.365:121): pid=9684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1229" name="file1" dev="overlay" ino=373 res=0 errno=0
[  989.021832][ T7603] usb 4-1: USB disconnect, device number 14
[  989.413739][ T9695] binder: 9694:9695 ioctl c0306201 20000680 returned -14
[  991.539808][ T9718] program syz.1.1240 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  992.032632][   T29] audit: type=1800 audit(1738004660.465:122): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1242" name="file1" dev="overlay" ino=1465 res=0 errno=0
[  992.304692][ T7603] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  992.752343][ T8991] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  992.761173][ T8991] Bluetooth: hci0: Injecting HCI hardware error event
[  992.784467][ T8991] Bluetooth: hci0: hardware error 0x00
[  996.283975][ T8991] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  997.488436][ T7603] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  997.499367][ T7603] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  997.512734][ T7603] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[  997.522345][ T7603] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.722056][ T7603] usb 7-1: config 0 descriptor??
[ 1001.623516][ T7603] usb 7-1: can't set config #0, error -71
[ 1001.665853][ T7603] usb 7-1: USB disconnect, device number 9
[ 1003.626482][   T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1003.642858][   T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1003.653173][   T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1003.665646][ T9755] program syz.2.1254 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1003.686301][   T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1003.717295][   T52] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1003.731905][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1005.466493][ T7621] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1005.712607][ T7621] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1005.723293][ T7621] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1005.736775][ T7621] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[ 1005.752915][ T7621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1005.959288][   T52] Bluetooth: hci5: command tx timeout
[ 1006.058716][ T7621] usb 3-1: config 0 descriptor??
[ 1006.146162][ T7621] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1007.630159][ T9754] chnl_net:caif_netlink_parms(): no params data found
[ 1008.015741][   T52] Bluetooth: hci5: command tx timeout
[ 1008.387402][ T7621] usb 3-1: USB disconnect, device number 15
[ 1009.559688][ T9754] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1009.567836][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1009.576554][ T9754] bridge_slave_0: entered allmulticast mode
[ 1009.586179][ T9754] bridge_slave_0: entered promiscuous mode
[ 1009.694475][ T9754] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1009.702574][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1009.710763][ T9754] bridge_slave_1: entered allmulticast mode
[ 1009.720359][ T9754] bridge_slave_1: entered promiscuous mode
[ 1010.091886][   T52] Bluetooth: hci5: command tx timeout
[ 1010.298522][ T9754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1010.357574][ T9754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1010.669687][ T9798] program syz.3.1267 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1010.763839][ T9754] team0: Port device team_slave_0 added
[ 1010.844306][ T9754] team0: Port device team_slave_1 added
[ 1010.942720][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'.
[ 1010.952301][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'.
[ 1010.961572][ T9800] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1268'.
[ 1011.863344][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1011.870701][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1011.926077][ T9754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1012.212209][   T52] Bluetooth: hci5: command tx timeout
[ 1012.868644][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1012.876145][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1012.903303][ T9754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1016.991023][ T9754] hsr_slave_0: entered promiscuous mode
[ 1017.001334][ T9754] hsr_slave_1: entered promiscuous mode
[ 1017.013809][ T9754] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1017.021752][ T9754] Cannot create hsr debugfs directory
[ 1017.532034][ T6171] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1017.697051][ T6171] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1017.978436][ T6171] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1018.357684][ T6171] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1018.899551][ T9754] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1018.968773][ T9830] program syz.2.1279 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1019.063038][ T6171] bridge_slave_1: left allmulticast mode
[ 1019.068971][ T6171] bridge_slave_1: left promiscuous mode
[ 1019.076066][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1019.152249][ T6171] bridge_slave_0: left allmulticast mode
[ 1019.173859][ T6171] bridge_slave_0: left promiscuous mode
[ 1019.180963][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1019.375354][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1281'.
[ 1019.384989][ T9834] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1281'.
[ 1019.473907][ T9754] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1019.523057][ T9754] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1019.875884][ T6171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1019.942341][ T6171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1019.981302][ T6171] bond0 (unregistering): Released all slaves
[ 1020.012722][ T9754] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1021.591095][ T6171] hsr_slave_0: left promiscuous mode
[ 1021.632088][ T6171] hsr_slave_1: left promiscuous mode
[ 1021.645088][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1021.653263][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1021.735728][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1021.743764][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1021.827333][ T6171] veth1_macvtap: left promiscuous mode
[ 1021.833296][ T6171] veth0_macvtap: left promiscuous mode
[ 1021.839396][ T6171] veth1_vlan: left promiscuous mode
[ 1021.845238][ T6171] veth0_vlan: left promiscuous mode
[ 1023.447931][ T6171] team0 (unregistering): Port device team_slave_1 removed
[ 1023.638156][ T6171] team0 (unregistering): Port device team_slave_0 removed
[ 1024.297264][ T9754] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1024.409361][ T9854] binder: BINDER_SET_CONTEXT_MGR already set
[ 1024.415810][ T9854] binder: 9853:9854 ioctl 4018620d 200002c0 returned -16
[ 1024.572320][ T9754] 8021q: adding VLAN 0 to HW filter on device team0
[ 1024.658521][ T6230] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1024.666684][ T6230] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1024.693791][ T6230] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1024.701755][ T6230] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1024.967965][ T9754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1024.979781][ T9754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1025.737906][ T9862] program syz.2.1292 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1026.372320][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1293'.
[ 1026.383176][ T9866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1293'.
[ 1027.033766][ T9754] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1027.932250][ T9888] binder: BINDER_SET_CONTEXT_MGR already set
[ 1027.938759][ T9888] binder: 9887:9888 ioctl 4018620d 20000100 returned -16
[ 1028.125465][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1028.132545][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1029.626615][ T9754] veth0_vlan: entered promiscuous mode
[ 1029.762305][ T9754] veth1_vlan: entered promiscuous mode
[ 1030.676840][ T9754] veth0_macvtap: entered promiscuous mode
[ 1030.860219][ T9754] veth1_macvtap: entered promiscuous mode
[ 1031.552134][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1031.563390][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1031.574404][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1031.585273][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1031.598181][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1031.608991][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1031.619252][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1031.630413][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1031.645830][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1032.040091][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1032.051671][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1032.064199][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1032.075843][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1032.086265][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1032.097167][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1032.107396][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1032.118322][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1032.133754][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1032.376562][ T9754] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.386954][ T9754] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.396313][ T9754] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.405516][ T9754] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.423062][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'.
[ 1032.432788][ T9909] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1307'.
[ 1032.593379][ T7603] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1032.867048][ T7603] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1032.880350][ T7603] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1032.894388][ T7603] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[ 1032.904378][ T7603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1032.946730][ T7603] usb 3-1: config 0 descriptor??
[ 1033.132395][ T7603] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1033.457372][ T9918] 9pnet_fd: Insufficient options for proto=fd
[ 1036.445500][ T7603] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1036.712892][ T7603] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1036.724457][ T7603] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1036.734098][ T7603] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1036.806721][ T7600] usb 3-1: USB disconnect, device number 16
[ 1036.834584][ T7603] usb 7-1: config 0 descriptor??
[ 1039.084632][ T7603] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[ 1039.117259][ T7603] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0005/input/input7
[ 1039.496749][ T7603] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[ 1040.596178][ T7621] usb 7-1: USB disconnect, device number 10
[ 1041.084263][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1319'.
[ 1041.093817][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1319'.
[ 1041.103200][ T9956] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1319'.
[ 1044.528374][ T9734] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1045.584113][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1332'.
[ 1045.584241][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1332'.
[ 1045.584320][ T9993] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1332'.
[ 1046.111148][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1046.119507][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1046.509078][ T4604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1046.517604][ T4604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1046.584378][ T8991] Bluetooth: hci0: command 0x1003 tx timeout
[ 1046.591014][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1051.262397][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'.
[ 1051.271930][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'.
[ 1051.281079][T10024] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1342'.
[ 1051.591997][   T29] audit: type=1326 audit(1738004720.085:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.8.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917958cd29 code=0x7ffc0000
[ 1051.618836][   T29] audit: type=1326 audit(1738004720.085:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.8.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f917958cd29 code=0x7ffc0000
[ 1051.643649][   T29] audit: type=1326 audit(1738004720.085:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.8.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917958cd29 code=0x7ffc0000
[ 1051.666600][   T29] audit: type=1326 audit(1738004720.095:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.8.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f917958cd29 code=0x7ffc0000
[ 1051.689615][   T29] audit: type=1326 audit(1738004720.095:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.8.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917958cd29 code=0x7ffc0000
[ 1054.968526][T10048] overlayfs: failed to resolve './file0': -2
[ 1058.268818][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1357'.
[ 1058.282466][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'.
[ 1058.294094][T10060] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1357'.
[ 1058.867553][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'.
[ 1058.877007][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'.
[ 1058.890602][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'.
[ 1062.118762][T10089] overlayfs: failed to resolve './file1': -2
[ 1068.222084][ T7621] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1068.471598][ T7621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11
[ 1068.483868][ T7621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024
[ 1068.496211][ T7621] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1068.505702][ T7621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.646763][ T7621] usb 2-1: config 0 descriptor??
[ 1068.655880][T10113] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1069.073765][ T7621] ath6kl: Failed to submit usb control message: -71
[ 1069.081126][ T7621] ath6kl: unable to send the bmi data to the device: -71
[ 1069.089279][ T7621] ath6kl: Unable to send get target info: -71
[ 1069.227101][ T7621] ath6kl: Failed to init ath6kl core: -71
[ 1069.257868][ T7621] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1070.267254][ T7621] usb 2-1: USB disconnect, device number 9
[ 1079.324343][ T5832] kworker/1:4 (5832) used greatest stack depth: 5112 bytes left
[ 1089.848460][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1089.855708][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1096.758451][T10233] binder: 10232:10233 ioctl c0306201 20000680 returned -11
[ 1098.954400][T10244] use of bytesused == 0 is deprecated and will be removed in the future,
[ 1098.964682][T10244] use the actual size instead.
[ 1101.207992][T10269] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1430'.
[ 1101.432865][T10267] binder: BINDER_SET_CONTEXT_MGR already set
[ 1101.439273][T10267] binder: 10263:10267 ioctl 4018620d 200002c0 returned -16
[ 1101.940694][T10274] binder: BINDER_SET_CONTEXT_MGR already set
[ 1101.947367][T10274] binder: 10272:10274 ioctl 4018620d 20000100 returned -16
[ 1102.093143][T10274] binder: BINDER_SET_CONTEXT_MGR already set
[ 1102.102914][T10274] binder: 10272:10274 ioctl 4018620d 200002c0 returned -16
[ 1104.954818][T10287] binder: BINDER_SET_CONTEXT_MGR already set
[ 1104.962046][T10287] binder: 10286:10287 ioctl 4018620d 20000100 returned -16
[ 1105.040736][T10287] binder: BINDER_SET_CONTEXT_MGR already set
[ 1105.048655][T10287] binder: 10286:10287 ioctl 4018620d 20000040 returned -16
[ 1107.812509][T10306] binder: BINDER_SET_CONTEXT_MGR already set
[ 1107.818733][T10306] binder: 10304:10306 ioctl 4018620d 20000100 returned -16
[ 1107.953434][T10306] binder: BINDER_SET_CONTEXT_MGR already set
[ 1107.959870][T10306] binder: 10304:10306 ioctl 4018620d 200002c0 returned -16
[ 1108.012468][T10308] binder: BINDER_SET_CONTEXT_MGR already set
[ 1108.018944][T10308] binder: 10307:10308 ioctl 4018620d 20000100 returned -16
[ 1108.080356][T10308] binder: BINDER_SET_CONTEXT_MGR already set
[ 1108.087471][T10308] binder: 10307:10308 ioctl 4018620d 200002c0 returned -16
[ 1108.193734][T10308] binder: 10307:10308 ioctl c0306201 20000680 returned -11
[ 1109.532924][T10325] veth0_vlan: entered allmulticast mode
[ 1113.815554][T10371] overlayfs: failed to resolve './file1': -2
[ 1119.057071][T10409] overlayfs: failed to resolve './file0': -2
[ 1122.185058][ T7617] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[ 1122.395394][ T7617] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[ 1122.404131][ T7617] usb 3-1: config 0 has no interface number 0
[ 1122.410470][ T7617] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1122.422069][ T7617] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1122.434171][ T7617] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1122.445796][ T7617] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[ 1122.457071][ T7617] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1122.470509][ T7617] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1122.484873][ T7617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1122.504421][ T7617] usb 3-1: config 0 descriptor??
[ 1122.527109][T10439] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1126.195549][ T7617] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1126.782692][ T7603] usb 3-1: USB disconnect, device number 17
[ 1126.796620][ T7603] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[ 1128.013809][ T8991] Bluetooth: hci5: command 0x0406 tx timeout
[ 1134.451716][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1514'.
[ 1134.466890][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1514'.
[ 1134.478038][T10499] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1514'.
[ 1135.007145][T10510] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1519'.
[ 1135.016958][T10510] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1519'.
[ 1147.113070][ T7617] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1147.271610][ T7617] usb 7-1: Using ep0 maxpacket: 8
[ 1147.284806][ T7617] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1147.295591][ T7617] usb 7-1: config 0 has no interfaces?
[ 1148.255995][ T7617] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1148.267408][ T7617] usb 7-1: config 0 has no interfaces?
[ 1148.317894][ T7617] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1148.328808][ T7617] usb 7-1: config 0 has no interfaces?
[ 1148.967785][ T7617] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1148.988519][ T7617] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1149.007819][ T7617] usb 7-1: Product: syz
[ 1149.012783][ T7617] usb 7-1: Manufacturer: syz
[ 1149.017813][ T7617] usb 7-1: SerialNumber: syz
[ 1149.053193][ T7617] usb 7-1: config 0 descriptor??
[ 1149.746408][ T7617] usb 7-1: can't set config #0, error -71
[ 1149.757538][ T7617] usb 7-1: USB disconnect, device number 11
[ 1150.784968][T10597] syz_tun: entered promiscuous mode
[ 1151.036655][T10604] mmap: syz.3.1558 (10604) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1151.050305][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1151.050927][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1154.140987][T10620] netlink: 'syz.1.1564': attribute type 10 has an invalid length.
[ 1158.452806][T10660] netlink: 'syz.3.1579': attribute type 10 has an invalid length.
[ 1158.478131][T10660] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1158.493755][T10660] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1161.169546][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'.
[ 1161.178931][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'.
[ 1161.194760][T10684] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1585'.
[ 1163.731719][T10710] ieee802154 phy0 wpan0: encryption failed: -22
[ 1163.911255][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'.
[ 1163.920638][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1599'.
[ 1163.930293][T10713] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1599'.
[ 1166.688809][T10725] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1166.697586][T10725] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1167.453970][T10725] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1167.480090][T10725] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1168.072954][T10725] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1168.083016][T10725] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1168.092573][T10725] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1168.109305][T10725] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1168.779114][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'.
[ 1168.790014][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'.
[ 1168.799735][T10743] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1612'.
[ 1168.884227][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'.
[ 1168.893917][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1611'.
[ 1168.903311][T10745] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1611'.
[ 1169.024552][T10751] ieee802154 phy0 wpan0: encryption failed: -22
[ 1171.113350][T10772] xt_CT: No such helper "pptp"
[ 1171.269734][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'.
[ 1171.279424][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'.
[ 1171.288705][T10779] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1627'.
[ 1171.312209][T10778] binder: BINDER_SET_CONTEXT_MGR already set
[ 1171.318412][T10778] binder: 10776:10778 ioctl 4018620d 20000040 returned -16
[ 1172.374710][T10793] fuse: Unknown parameter 'use00000000000000000000'
[ 1175.410230][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'.
[ 1175.422693][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1638'.
[ 1175.457308][T10808] ieee802154 phy0 wpan0: encryption failed: -22
[ 1178.558502][T10820] binder: 10819:10820 ioctl 4018620d 0 returned -22
[ 1178.855704][T10825] fuse: Unknown parameter 'use00000000000000000000'
[ 1180.829265][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1651'.
[ 1180.838781][T10845] netlink: 'syz.3.1651': attribute type 21 has an invalid length.
[ 1184.763520][T10859] binder: 10858:10859 ioctl 4018620d 0 returned -22
[ 1185.074386][T10862] fuse: Unknown parameter 'use00000000000000000000'
[ 1186.020692][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'.
[ 1186.030512][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'.
[ 1186.040089][T10871] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1662'.
[ 1188.182724][T10893] netlink: 'syz.8.1663': attribute type 10 has an invalid length.
[ 1188.231716][T10893] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1188.246779][T10893] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1188.410139][T10895] binder: 10894:10895 ioctl 4018620d 0 returned -22
[ 1188.543382][T10897] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1193.452387][T10925] netlink: 'syz.8.1684': attribute type 10 has an invalid length.
[ 1193.894888][T10930] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1193.976713][T10931] binder: BINDER_SET_CONTEXT_MGR already set
[ 1193.983534][T10931] binder: 10928:10931 ioctl 4018620d 20000100 returned -16
[ 1194.108991][T10931] binder: BINDER_SET_CONTEXT_MGR already set
[ 1194.115602][T10931] binder: 10928:10931 ioctl 4018620d 20000040 returned -16
[ 1201.520303][T10971] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1201.649898][T10974] binder: BINDER_SET_CONTEXT_MGR already set
[ 1201.657132][T10974] binder: 10972:10974 ioctl 4018620d 20000100 returned -16
[ 1201.728464][T10974] binder: BINDER_SET_CONTEXT_MGR already set
[ 1201.738354][T10974] binder: 10972:10974 ioctl 4018620d 20000040 returned -16
[ 1206.783114][T11010] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1206.799212][T11005] binder: BINDER_SET_CONTEXT_MGR already set
[ 1206.806597][T11005] binder: 11004:11005 ioctl 4018620d 20000040 returned -16
[ 1211.556006][T11049] binder: 11047:11049 ioctl c0306201 0 returned -14
[ 1212.468372][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1212.475414][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1216.370467][   T29] audit: type=1326 audit(1738004884.855:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b5b8cd29 code=0x7ffc0000
[ 1216.395988][   T29] audit: type=1326 audit(1738004884.865:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98b5b8cd29 code=0x7ffc0000
[ 1216.420503][   T29] audit: type=1326 audit(1738004884.865:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b5b8cd29 code=0x7ffc0000
[ 1216.969250][   T29] audit: type=1326 audit(1738004884.955:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f98b5b8cd29 code=0x7ffc0000
[ 1216.994704][   T29] audit: type=1326 audit(1738004884.955:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b5b8cd29 code=0x7ffc0000
[ 1221.176457][T11101] 9pnet_fd: Insufficient options for proto=fd
[ 1228.026047][ T7601] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1228.258039][ T7601] usb 2-1: Using ep0 maxpacket: 32
[ 1228.292731][ T7601] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1228.302027][ T7601] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1228.310890][ T7601] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1228.320392][ T7601] usb 2-1: config 1 has no interface number 0
[ 1228.326902][ T7601] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1228.338262][ T7601] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1228.351732][ T7601] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1228.363776][ T7601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1228.765537][ T7601] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[ 1229.354778][ T7601] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[ 1229.640756][ T7617] usb 2-1: USB disconnect, device number 10
[ 1229.648582][ T7617] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[ 1240.808155][T11208] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1788'.
[ 1243.073136][T11227] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1246.736850][T11259] fuse: Bad value for 'user_id'
[ 1246.742106][T11259] fuse: Bad value for 'user_id'
[ 1248.100215][T11265] binder: BINDER_SET_CONTEXT_MGR already set
[ 1248.106656][T11265] binder: 11264:11265 ioctl 4018620d 20000100 returned -16
[ 1248.236642][T11265] binder: BINDER_SET_CONTEXT_MGR already set
[ 1248.243164][T11265] binder: 11264:11265 ioctl 4018620d 200002c0 returned -16
[ 1252.902686][T11292] fuse: Bad value for 'user_id'
[ 1252.908035][T11292] fuse: Bad value for 'user_id'
[ 1253.505696][T11302] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1826'.
[ 1254.551602][ T7617] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1254.749684][ T7617] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1254.764122][ T7617] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1254.773696][ T7617] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1254.923882][ T7617] usb 7-1: config 0 descriptor??
[ 1254.970607][ T7617] pwc: Askey VC010 type 2 USB webcam detected.
[ 1255.373538][ T7617] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1255.504715][ T7617] pwc: recv_control_msg error -32 req 02 val 2700
[ 1255.525185][ T7617] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1255.692265][ T7617] pwc: recv_control_msg error -32 req 04 val 1000
[ 1255.710076][ T7617] pwc: recv_control_msg error -32 req 04 val 1300
[ 1255.720763][ T7617] pwc: recv_control_msg error -32 req 04 val 1400
[ 1255.816497][ T7617] pwc: recv_control_msg error -32 req 02 val 2000
[ 1255.832144][ T7617] pwc: recv_control_msg error -32 req 02 val 2100
[ 1256.059719][ T7617] pwc: recv_control_msg error -71 req 02 val 2500
[ 1256.078690][ T7617] pwc: recv_control_msg error -71 req 02 val 2400
[ 1256.102893][ T7617] pwc: recv_control_msg error -71 req 02 val 2600
[ 1256.147486][ T7617] pwc: recv_control_msg error -71 req 02 val 2900
[ 1256.171741][ T7617] pwc: recv_control_msg error -71 req 02 val 2800
[ 1256.206736][ T7617] pwc: recv_control_msg error -71 req 04 val 1100
[ 1256.237774][ T7617] pwc: recv_control_msg error -71 req 04 val 1200
[ 1256.262117][ T7617] pwc: Registered as video103.
[ 1256.269592][ T7617] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8
[ 1256.332763][ T7617] usb 7-1: USB disconnect, device number 12
[ 1256.654782][T11329] fuse: Bad value for 'user_id'
[ 1256.660318][T11329] fuse: Bad value for 'user_id'
[ 1257.511624][T11343] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1842'.
[ 1262.129467][T11364] fuse: Bad value for 'fd'
[ 1262.466920][T11366] kvm_intel: kvm [11361]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x900000a
[ 1268.335462][T11407] fuse: Bad value for 'fd'
[ 1273.114185][T11436] fuse: Bad value for 'fd'
[ 1273.965261][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1273.973506][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1276.677876][T11458] tipc: Started in network mode
[ 1276.683752][T11458] tipc: Node identity 1, cluster identity 2
[ 1276.695306][T11458] tipc: Node number set to 1
[ 1276.706037][T11458] tipc: Cannot configure node identity twice
[ 1279.005305][T11472] fuse: Bad value for 'fd'
[ 1284.327789][T11505] fuse: Bad value for 'fd'
[ 1287.384197][T11523] loop8: detected capacity change from 0 to 4096
[ 1287.397695][T11523] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[ 1288.998217][T11541] fuse: Bad value for 'fd'
[ 1289.051206][   T29] audit: type=1326 audit(1738004957.515:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11516 comm="syz.2.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982978cd29 code=0x7fc00000
[ 1289.782102][T11548] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1918'.
[ 1290.808762][T11559] ax25_connect(): syz.2.1921 uses autobind, please contact jreuter@yaina.de
[ 1290.845092][T11559] hub 6-0:1.0: USB hub found
[ 1290.850881][T11559] hub 6-0:1.0: 1 port detected
[ 1291.638248][T11566] loop2: detected capacity change from 0 to 16
[ 1291.778475][T11566] erofs (device loop2): mounted with root inode @ nid 36.
[ 1292.633086][T11576] fuse: Invalid rootmode
[ 1292.751795][ T7621] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1292.966789][ T7621] usb 4-1: Using ep0 maxpacket: 32
[ 1292.994065][ T7621] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1293.002928][ T7621] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1293.011912][ T7621] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1293.021148][ T7621] usb 4-1: config 1 has no interface number 0
[ 1293.027574][ T7621] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1293.039134][ T7621] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1293.053162][ T7621] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1293.066147][ T7621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1293.403077][ T7621] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[ 1293.684027][ T7621] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[ 1293.921248][ T7601] usb 4-1: USB disconnect, device number 15
[ 1293.929322][ T7601] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[ 1294.898615][T11588] loop2: detected capacity change from 0 to 2048
[ 1294.991782][T11588] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1295.113467][T11593] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1298.862179][T11606] fuse: Invalid rootmode
[ 1300.091753][ T7617] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1300.287146][ T7617] usb 4-1: Using ep0 maxpacket: 32
[ 1300.350565][ T7617] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1300.359617][ T7617] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1300.368662][ T7617] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1300.378006][ T7617] usb 4-1: config 1 has no interface number 0
[ 1300.384532][ T7617] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1300.395842][ T7617] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1300.414648][ T7617] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1300.424208][ T7617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1300.666655][ T7617] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[ 1300.880974][ T7617] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[ 1301.086450][ T7601] usb 4-1: USB disconnect, device number 16
[ 1301.094461][ T7601] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[ 1302.114858][T11632] fuse: Invalid rootmode
[ 1302.662131][T11638] binder: BINDER_SET_CONTEXT_MGR already set
[ 1302.668541][T11638] binder: 11637:11638 ioctl 4018620d 20000100 returned -16
[ 1302.762864][T11638] binder: BINDER_SET_CONTEXT_MGR already set
[ 1302.769175][T11638] binder: 11637:11638 ioctl 4018620d 20000040 returned -16
[ 1303.257415][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'.
[ 1303.267116][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'.
[ 1303.276348][T11645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1961'.
[ 1304.282444][ T7601] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1304.452071][ T7601] usb 9-1: Using ep0 maxpacket: 32
[ 1304.469075][ T7601] usb 9-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1304.477977][ T7601] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1304.487032][ T7601] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1304.496413][ T7601] usb 9-1: config 1 has no interface number 0
[ 1304.502910][ T7601] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1304.514233][ T7601] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1304.528039][ T7601] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1304.537542][ T7601] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1304.676323][T11665] fuse: Bad value for 'rootmode'
[ 1304.707792][ T7601] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found
[ 1305.323702][ T7601] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached
[ 1305.588385][ T7601] usb 9-1: USB disconnect, device number 2
[ 1305.597889][ T7601] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected
[ 1305.774574][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'.
[ 1305.785159][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1975'.
[ 1305.794514][T11677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1975'.
[ 1305.994990][T11679] binder: BINDER_SET_CONTEXT_MGR already set
[ 1306.001512][T11679] binder: 11678:11679 ioctl 4018620d 20000040 returned -16
[ 1307.275932][T11695] fuse: Bad value for 'rootmode'
[ 1308.143371][ T7601] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1308.294092][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1990'.
[ 1308.303895][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1990'.
[ 1308.313242][T11711] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1990'.
[ 1308.355939][ T7601] usb 2-1: Using ep0 maxpacket: 32
[ 1308.405737][ T7601] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1308.414867][ T7601] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1308.424303][ T7601] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1308.437370][ T7601] usb 2-1: config 1 has no interface number 0
[ 1308.444709][ T7601] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1308.456083][ T7601] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1308.469528][ T7601] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1308.479053][ T7601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1308.842809][ T7601] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[ 1308.943397][T11718] fuse: Bad value for 'group_id'
[ 1308.954059][T11718] fuse: Bad value for 'group_id'
[ 1309.537174][ T7601] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[ 1309.796536][ T7617] usb 2-1: USB disconnect, device number 11
[ 1309.804887][ T7617] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[ 1309.844385][T11725] fuse: Bad value for 'rootmode'
[ 1311.643819][ T7617] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1311.682259][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2004'.
[ 1311.692570][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2004'.
[ 1311.701813][T11745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2004'.
[ 1311.863168][ T7617] usb 2-1: device descriptor read/64, error -71
[ 1311.959236][T11749] fuse: Bad value for 'group_id'
[ 1311.965488][T11749] fuse: Bad value for 'group_id'
[ 1312.126089][ T7617] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1312.301984][ T7617] usb 2-1: device descriptor read/64, error -71
[ 1312.422907][ T7617] usb usb2-port1: attempt power cycle
[ 1312.876514][ T7617] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1312.956641][ T7617] usb 2-1: device descriptor read/8, error -71
[ 1313.221706][ T7617] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1313.332335][ T7617] usb 2-1: device descriptor read/8, error -71
[ 1313.399116][T11758] binder: 11757:11758 ioctl c0306201 0 returned -14
[ 1313.443250][ T7617] usb usb2-port1: unable to enumerate USB device
[ 1313.742102][ T7617] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1313.922294][ T7617] usb 7-1: Using ep0 maxpacket: 32
[ 1313.935419][ T7617] usb 7-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1313.944518][ T7617] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1313.953517][ T7617] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1313.963011][ T7617] usb 7-1: config 1 has no interface number 0
[ 1313.973986][ T7617] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1313.986823][ T7617] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1314.002952][ T7617] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1314.012579][ T7617] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1314.058949][ T7617] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[ 1314.619092][ T7617] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached
[ 1314.870556][ T7601] usb 7-1: USB disconnect, device number 13
[ 1314.878782][ T7601] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[ 1315.264877][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'.
[ 1315.274660][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2017'.
[ 1315.284039][T11775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2017'.
[ 1315.793386][T11779] fuse: Bad value for 'group_id'
[ 1315.798605][T11779] fuse: Bad value for 'group_id'
[ 1315.942728][T11781] loop6: detected capacity change from 0 to 1764
[ 1316.790279][T11790] binder: BINDER_SET_CONTEXT_MGR already set
[ 1316.796786][T11790] binder: 11789:11790 ioctl 4018620d 20000100 returned -16
[ 1316.966243][T11790] binder: BINDER_SET_CONTEXT_MGR already set
[ 1316.973381][T11790] binder: 11789:11790 ioctl 4018620d 20000040 returned -16
[ 1317.084024][T11791] binder: 11789:11791 ioctl c0306201 0 returned -14
[ 1318.331968][ T7601] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1318.453889][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2029'.
[ 1318.463622][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2029'.
[ 1318.477969][T11806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2029'.
[ 1318.511813][ T7601] usb 4-1: device descriptor read/64, error -71
[ 1318.759353][ T7601] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1318.927464][ T7601] usb 4-1: device descriptor read/64, error -71
[ 1319.048200][ T7601] usb usb4-port1: attempt power cycle
[ 1319.411003][ T7601] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 1319.455044][ T7601] usb 4-1: device descriptor read/8, error -71
[ 1320.063679][T11821] binder: BINDER_SET_CONTEXT_MGR already set
[ 1320.070259][T11821] binder: 11820:11821 ioctl 4018620d 20000100 returned -16
[ 1320.171046][T11821] binder: BINDER_SET_CONTEXT_MGR already set
[ 1320.177976][T11821] binder: 11820:11821 ioctl 4018620d 20000040 returned -16
[ 1320.269018][T11822] binder: 11820:11822 ioctl c0306201 0 returned -14
[ 1320.363702][ T7601] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1320.537117][ T7601] usb 4-1: device descriptor read/8, error -71
[ 1320.782147][ T7601] usb usb4-port1: unable to enumerate USB device
[ 1322.808559][T11832] loop6: detected capacity change from 0 to 16
[ 1322.828548][T11832] erofs (device loop6): mounted with root inode @ nid 36.
[ 1323.495782][T11845] loop8: detected capacity change from 0 to 1024
[ 1323.588559][T11845] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1324.067316][T11845] syz.8.2043 (11845) used greatest stack depth: 4760 bytes left
[ 1324.290568][ T9754] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1325.171082][T11864] loop6: detected capacity change from 0 to 1024
[ 1325.210083][ T7601] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 1325.356912][T11864] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1325.491388][T11864] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[ 1325.525227][T11866] loop1: detected capacity change from 0 to 2048
[ 1325.568895][T11866] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1325.608605][T11864] EXT4-fs (loop6): Remounting filesystem read-only
[ 1325.774631][T11873] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1325.830050][ T7601] usb 4-1: device descriptor read/64, error -71
[ 1325.920933][ T8616] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1326.081636][ T7601] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1326.255413][ T7601] usb 4-1: device descriptor read/64, error -71
[ 1326.376728][ T7601] usb usb4-port1: attempt power cycle
[ 1326.611058][T11883] loop2: detected capacity change from 0 to 1024
[ 1326.728397][T11883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1326.751749][ T7601] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1326.784015][ T7601] usb 4-1: device descriptor read/8, error -71
[ 1327.032810][ T7601] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1327.089355][ T7601] usb 4-1: device descriptor read/8, error -71
[ 1327.214101][ T7601] usb usb4-port1: unable to enumerate USB device
[ 1327.246458][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1328.358871][T11904] loop6: detected capacity change from 0 to 2048
[ 1328.454746][T11904] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1328.552287][T11908] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1329.135151][T11916] binder: BINDER_SET_CONTEXT_MGR already set
[ 1329.141703][T11916] binder: 11915:11916 ioctl 4018620d 20000100 returned -16
[ 1329.199052][T11916] binder: BINDER_SET_CONTEXT_MGR already set
[ 1329.207204][T11916] binder: 11915:11916 ioctl 4018620d 20000040 returned -16
[ 1332.077791][T11925] loop6: detected capacity change from 0 to 40427
[ 1332.904202][T11925] F2FS-fs (loop6): Unable to read 1th superblock
[ 1332.916191][T11925] F2FS-fs (loop6): Unable to read 2th superblock
[ 1334.641788][T11936] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1334.891887][T11936] usb 4-1: device descriptor read/64, error -71
[ 1335.171788][T11936] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1335.317524][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1335.324359][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1335.393120][T11936] usb 4-1: device descriptor read/64, error -71
[ 1335.513705][T11936] usb usb4-port1: attempt power cycle
[ 1337.024564][T11936] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1337.104378][T11936] usb 4-1: device descriptor read/8, error -71
[ 1337.372537][T11936] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1337.715731][T11936] usb 4-1: device descriptor read/8, error -71
[ 1337.847885][T11936] usb usb4-port1: unable to enumerate USB device
[ 1338.840292][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'.
[ 1338.854778][T11954] netlink: 'syz.2.2087': attribute type 21 has an invalid length.
[ 1339.856307][T11958] 9pnet_fd: Insufficient options for proto=fd
[ 1340.379817][T11960] loop3: detected capacity change from 0 to 1764
[ 1342.057254][ T7617] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1342.232363][ T7617] usb 2-1: device descriptor read/64, error -71
[ 1342.541470][ T7617] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1342.687042][T11992] 9pnet_fd: Insufficient options for proto=fd
[ 1342.721624][ T7617] usb 2-1: device descriptor read/64, error -71
[ 1342.839990][ T7617] usb usb2-port1: attempt power cycle
[ 1343.258229][ T7617] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1343.333865][ T7617] usb 2-1: device descriptor read/8, error -71
[ 1343.920329][T12002] fuse: Unknown parameter 'grou00000000000000000000'
[ 1346.452225][ T7617] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1346.667729][T12008] loop2: detected capacity change from 0 to 1764
[ 1346.681876][ T7617] usb 2-1: device not accepting address 19, error -71
[ 1346.699826][ T7617] usb usb2-port1: unable to enumerate USB device
[ 1347.535108][T12031] 9pnet_fd: Insufficient options for proto=fd
[ 1348.192012][T11936] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1348.361818][T11936] usb 7-1: device descriptor read/64, error -71
[ 1348.835329][ T7599] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1348.991812][T11936] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1349.031619][ T7599] usb 2-1: Using ep0 maxpacket: 32
[ 1349.042998][ T7599] usb 2-1: no configurations
[ 1349.047871][ T7599] usb 2-1: can't read configurations, error -22
[ 1349.070776][T12046] loop8: detected capacity change from 0 to 2048
[ 1349.142763][T11936] usb 7-1: device descriptor read/64, error -71
[ 1349.217516][ T7599] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1349.226754][T12046] UDF-fs: warning (device loop8): udf_fill_super: No fileset found
[ 1349.253027][T11936] usb usb7-port1: attempt power cycle
[ 1349.410314][ T7599] usb 2-1: Using ep0 maxpacket: 32
[ 1349.438888][ T7599] usb 2-1: no configurations
[ 1349.443944][ T7599] usb 2-1: can't read configurations, error -22
[ 1349.473195][ T7599] usb usb2-port1: attempt power cycle
[ 1349.625090][T11936] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1349.668736][T11936] usb 7-1: device descriptor read/8, error -71
[ 1349.841740][ T7599] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1349.875966][ T7599] usb 2-1: Using ep0 maxpacket: 32
[ 1349.893019][ T7599] usb 2-1: no configurations
[ 1349.898352][ T7599] usb 2-1: can't read configurations, error -22
[ 1349.921727][T11936] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1349.954645][T11936] usb 7-1: device descriptor read/8, error -71
[ 1349.972692][T12041] loop2: detected capacity change from 0 to 32768
[ 1349.986353][T12041] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2120 (12041)
[ 1350.039346][T12041] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1350.050354][T12041] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm
[ 1350.059898][T12041] BTRFS info (device loop2): disk space caching is enabled
[ 1350.061836][ T7599] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1350.067411][T12041] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1350.093702][T11936] usb usb7-port1: unable to enumerate USB device
[ 1350.155354][ T7599] usb 2-1: Using ep0 maxpacket: 32
[ 1350.166660][ T7599] usb 2-1: no configurations
[ 1350.172253][ T7599] usb 2-1: can't read configurations, error -22
[ 1350.187534][ T7599] usb usb2-port1: unable to enumerate USB device
[ 1350.225314][T12067] binder: BINDER_SET_CONTEXT_MGR already set
[ 1350.231867][T12067] binder: 12065:12067 ioctl 4018620d 20000100 returned -16
[ 1350.257560][T12067] binder: BINDER_SET_CONTEXT_MGR already set
[ 1350.264231][T12067] binder: 12065:12067 ioctl 4018620d 20000040 returned -16
[ 1350.284225][T12041] BTRFS info (device loop2): rebuilding free space tree
[ 1350.327549][T12041] BTRFS info (device loop2): disabling free space tree
[ 1350.335135][T12041] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1350.345399][T12041] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1350.537774][   T29] audit: type=1326 audit(1738005018.995:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301fd8cd29 code=0x7fc00000
[ 1350.705267][ T5775] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1351.050882][T12082] 9pnet_fd: Insufficient options for proto=fd
[ 1352.868344][T12097] binder: BINDER_SET_CONTEXT_MGR already set
[ 1352.874982][T12097] binder: 12094:12097 ioctl 4018620d 20000100 returned -16
[ 1352.946485][T12097] binder: BINDER_SET_CONTEXT_MGR already set
[ 1352.952901][T12097] binder: 12094:12097 ioctl 4018620d 20000040 returned -16
[ 1353.023842][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2140'.
[ 1353.033619][T12103] netlink: 'syz.8.2140': attribute type 21 has an invalid length.
[ 1353.152763][T12101] loop3: detected capacity change from 0 to 256
[ 1354.012193][T12114] binder: BINDER_SET_CONTEXT_MGR already set
[ 1354.018591][T12114] binder: 12113:12114 ioctl 4018620d 20000100 returned -16
[ 1354.112926][T12114] binder: BINDER_SET_CONTEXT_MGR already set
[ 1354.119254][T12114] binder: 12113:12114 ioctl 4018620d 20000040 returned -16
[ 1355.200727][T12125] 9pnet_fd: Insufficient options for proto=fd
[ 1355.679800][T12130] binder: BINDER_SET_CONTEXT_MGR already set
[ 1355.683456][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2151'.
[ 1355.686220][T12130] binder: 12129:12130 ioctl 4018620d 20000100 returned -16
[ 1355.695130][T12128] netlink: 'syz.8.2151': attribute type 21 has an invalid length.
[ 1355.782925][T12130] binder: BINDER_SET_CONTEXT_MGR already set
[ 1355.789124][T12130] binder: 12129:12130 ioctl 4018620d 20000040 returned -16
[ 1357.621992][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2165'.
[ 1357.631573][T12158] netlink: 'syz.1.2165': attribute type 21 has an invalid length.
[ 1357.666368][T12160] 9pnet_fd: Insufficient options for proto=fd
[ 1359.061076][T12174] vivid-000: disconnect
[ 1359.095907][T12171] vivid-000: reconnect
[ 1359.722742][ T7599] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1359.926228][ T7599] usb 2-1: Using ep0 maxpacket: 32
[ 1359.938806][ T7599] usb 2-1: no configurations
[ 1359.946922][ T7599] usb 2-1: can't read configurations, error -22
[ 1359.978836][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'.
[ 1359.988318][T12187] netlink: 'syz.3.2178': attribute type 21 has an invalid length.
[ 1360.011841][T12189] binder: BINDER_SET_CONTEXT_MGR already set
[ 1360.018045][T12189] binder: 12188:12189 ioctl 4018620d 20000100 returned -16
[ 1360.099814][T12189] binder: BINDER_SET_CONTEXT_MGR already set
[ 1360.106562][T12189] binder: 12188:12189 ioctl 4018620d 20000040 returned -16
[ 1360.111713][ T7599] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1360.332207][ T7599] usb 2-1: Using ep0 maxpacket: 32
[ 1360.352947][ T7599] usb 2-1: no configurations
[ 1360.357787][ T7599] usb 2-1: can't read configurations, error -22
[ 1360.392138][ T7599] usb usb2-port1: attempt power cycle
[ 1360.742407][ T7599] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1360.816488][ T7599] usb 2-1: Using ep0 maxpacket: 32
[ 1360.853480][ T7599] usb 2-1: no configurations
[ 1360.858767][ T7599] usb 2-1: can't read configurations, error -22
[ 1361.052484][ T7599] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1361.125800][ T7599] usb 2-1: Using ep0 maxpacket: 32
[ 1361.158868][ T7599] usb 2-1: no configurations
[ 1361.164196][ T7599] usb 2-1: can't read configurations, error -22
[ 1361.220279][ T7599] usb usb2-port1: unable to enumerate USB device
[ 1361.957316][T12179] loop2: detected capacity change from 0 to 32768
[ 1362.126183][T12179] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[ 1362.135518][T12214] loop8: detected capacity change from 0 to 256
[ 1362.143212][T12179] bcachefs (loop2): initializing new filesystem
[ 1362.150155][T12179] bcachefs (loop2): going read-write
[ 1362.167389][T12179] bcachefs (loop2): marking superblocks
[ 1362.213655][T12214] vfat: Unknown parameter 'smackfsdef'
[ 1362.307069][ T6171] =====================================================
[ 1362.314639][ T6171] BUG: KMSAN: uninit-value in bch2_alloc_v4_validate+0x6cd/0x1c10
[ 1362.322825][ T6171]  bch2_alloc_v4_validate+0x6cd/0x1c10
[ 1362.328552][ T6171]  bch2_bkey_val_validate+0x357/0x530
[ 1362.334348][ T6171]  validate_bset_keys+0x20e3/0x2350
[ 1362.339866][ T6171]  validate_bset_for_write+0x2b3/0x410
[ 1362.345817][ T6171]  __bch2_btree_node_write+0x53df/0x6830
[ 1362.351777][ T6171]  bch2_btree_node_write_trans+0x2fd/0x890
[ 1362.357874][ T6171]  btree_interior_update_work+0x3e3f/0x4820
[ 1362.364221][ T6171]  process_scheduled_works+0xae0/0x1c40
[ 1362.370029][ T6171]  worker_thread+0xea7/0x14f0
[ 1362.375634][ T6171]  kthread+0x6b9/0xef0
[ 1362.379948][ T6171]  ret_from_fork+0x6d/0x90
[ 1362.384745][ T6171]  ret_from_fork_asm+0x1a/0x30
[ 1362.389747][ T6171] 
[ 1362.392289][ T6171] Uninit was stored to memory at:
[ 1362.397653][ T6171]  bch2_alloc_v4_validate+0x207/0x1c10
[ 1362.408551][ T6171]  bch2_bkey_val_validate+0x357/0x530
[ 1362.415847][ T6171]  validate_bset_keys+0x20e3/0x2350
[ 1362.422997][ T6171]  validate_bset_for_write+0x2b3/0x410
[ 1362.428675][ T6171]  __bch2_btree_node_write+0x53df/0x6830
[ 1362.434923][ T6171]  bch2_btree_node_write_trans+0x2fd/0x890
[ 1362.441020][ T6171]  btree_interior_update_work+0x3e3f/0x4820
[ 1362.447254][ T6171]  process_scheduled_works+0xae0/0x1c40
[ 1362.453164][ T6171]  worker_thread+0xea7/0x14f0
[ 1362.458068][ T6171]  kthread+0x6b9/0xef0
[ 1362.462491][ T6171]  ret_from_fork+0x6d/0x90
[ 1362.467162][ T6171]  ret_from_fork_asm+0x1a/0x30
[ 1362.472246][ T6171] 
[ 1362.474674][ T6171] Uninit was stored to memory at:
[ 1362.480004][ T6171]  bch2_sort_keys_keep_unwritten_whiteouts+0x16af/0x19d0
[ 1362.487341][ T6171]  __bch2_btree_node_write+0x3ae8/0x6830
[ 1362.493776][ T6171]  bch2_btree_node_write_trans+0x2fd/0x890
[ 1362.499866][ T6171]  btree_interior_update_work+0x3e3f/0x4820
[ 1362.511113][ T6171]  process_scheduled_works+0xae0/0x1c40
[ 1362.518463][ T6171]  worker_thread+0xea7/0x14f0
[ 1362.523585][ T6171]  kthread+0x6b9/0xef0
[ 1362.527893][ T6171]  ret_from_fork+0x6d/0x90
[ 1362.532653][ T6171]  ret_from_fork_asm+0x1a/0x30
[ 1362.537640][ T6171] 
[ 1362.540079][ T6171] Uninit was created at:
[ 1362.544754][ T6171]  ___kmalloc_large_node+0x22c/0x370
[ 1362.550266][ T6171]  __kmalloc_large_node_noprof+0x3f/0x1e0
[ 1362.556354][ T6171]  __kmalloc_node_noprof+0xc96/0x1250
[ 1362.562037][ T6171]  __kvmalloc_node_noprof+0xc0/0x2d0
[ 1362.567583][ T6171]  __bch2_btree_node_mem_alloc+0x2be/0xa80
[ 1362.573765][ T6171]  bch2_fs_btree_cache_init+0x4f0/0xb60
[ 1362.579560][ T6171]  bch2_fs_open+0x4b24/0x59c0
[ 1362.584790][ T6171]  bch2_fs_get_tree+0x986/0x2330
[ 1362.590021][ T6171]  vfs_get_tree+0xb1/0x5a0
[ 1362.594811][ T6171]  do_new_mount+0x71f/0x15e0
[ 1362.599659][ T6171]  path_mount+0x742/0x1f10
[ 1362.609382][ T6171]  __se_sys_mount+0x71f/0x800
[ 1362.615923][ T6171]  __x64_sys_mount+0xe4/0x150
[ 1362.620849][ T6171]  x64_sys_call+0x39bf/0x3c30
[ 1362.625828][ T6171]  do_syscall_64+0xcd/0x1e0
[ 1362.630673][ T6171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1362.636938][ T6171] 
[ 1362.639383][ T6171] CPU: 0 UID: 0 PID: 6171 Comm: kworker/u8:20 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0
[ 1362.650394][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1362.660775][ T6171] Workqueue: btree_update btree_interior_update_work
[ 1362.667837][ T6171] =====================================================
[ 1362.675032][ T6171] Disabling lock debugging due to kernel taint
[ 1362.681437][ T6171] Kernel panic - not syncing: kmsan.panic set ...
[ 1362.688019][ T6171] CPU: 0 UID: 0 PID: 6171 Comm: kworker/u8:20 Tainted: G    B              6.13.0-syzkaller-08265-g9c5968db9e62 #0
[ 1362.700344][ T6171] Tainted: [B]=BAD_PAGE
[ 1362.704633][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1362.714868][ T6171] Workqueue: btree_update btree_interior_update_work
[ 1362.721791][ T6171] Call Trace:
[ 1362.725270][ T6171]  <TASK>
[ 1362.728313][ T6171]  dump_stack_lvl+0x216/0x2d0
[ 1362.733174][ T6171]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1362.739221][ T6171]  dump_stack+0x1e/0x24
[ 1362.743537][ T6171]  panic+0x4e2/0xcf0
[ 1362.747656][ T6171]  ? kmsan_get_metadata+0xd1/0x1c0
[ 1362.753020][ T6171]  kmsan_report+0x2c7/0x2d0
[ 1362.757738][ T6171]  ? __msan_memcpy+0x108/0x1c0
[ 1362.762711][ T6171]  ? btree_interior_update_work+0x3e3f/0x4820
[ 1362.768994][ T6171]  ? ret_from_fork+0x6d/0x90
[ 1362.773801][ T6171]  ? ret_from_fork_asm+0x1a/0x30
[ 1362.778930][ T6171]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[ 1362.785489][ T6171]  ? __msan_warning+0x95/0x120
[ 1362.790464][ T6171]  ? bch2_alloc_v4_validate+0x6cd/0x1c10
[ 1362.796350][ T6171]  ? bch2_bkey_val_validate+0x357/0x530
[ 1362.802133][ T6171]  ? validate_bset_keys+0x20e3/0x2350
[ 1362.807743][ T6171]  ? validate_bset_for_write+0x2b3/0x410
[ 1362.813563][ T6171]  ? __bch2_btree_node_write+0x53df/0x6830
[ 1362.819567][ T6171]  ? bch2_btree_node_write_trans+0x2fd/0x890
[ 1362.825813][ T6171]  ? btree_interior_update_work+0x3e3f/0x4820
[ 1362.832086][ T6171]  ? process_scheduled_works+0xae0/0x1c40
[ 1362.838007][ T6171]  ? worker_thread+0xea7/0x14f0
[ 1362.843052][ T6171]  ? kthread+0x6b9/0xef0
[ 1362.847496][ T6171]  ? ret_from_fork+0x6d/0x90
[ 1362.852310][ T6171]  ? ret_from_fork_asm+0x1a/0x30
[ 1362.857435][ T6171]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1362.862864][ T6171]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1362.868288][ T6171]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[ 1362.874845][ T6171]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1362.880265][ T6171]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1362.886318][ T6171]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[ 1362.892414][ T6171]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1362.897839][ T6171]  ? kmsan_internal_memmove_metadata+0x17b/0x230
[ 1362.904395][ T6171]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1362.909814][ T6171]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1362.915861][ T6171]  __msan_warning+0x95/0x120
[ 1362.920659][ T6171]  bch2_alloc_v4_validate+0x6cd/0x1c10
[ 1362.926395][ T6171]  ? __pfx_bch2_alloc_v4_validate+0x10/0x10
[ 1362.932526][ T6171]  bch2_bkey_val_validate+0x357/0x530
[ 1362.938166][ T6171]  validate_bset_keys+0x20e3/0x2350
[ 1362.943686][ T6171]  validate_bset_for_write+0x2b3/0x410
[ 1362.949341][ T6171]  __bch2_btree_node_write+0x53df/0x6830
[ 1362.955162][ T6171]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1362.960590][ T6171]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1362.966643][ T6171]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1362.972070][ T6171]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1362.978161][ T6171]  bch2_btree_node_write_trans+0x2fd/0x890
[ 1362.984238][ T6171]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1362.990299][ T6171]  btree_interior_update_work+0x3e3f/0x4820
[ 1362.996464][ T6171]  ? btree_interior_update_work+0x3bf7/0x4820
[ 1363.002757][ T6171]  ? __pfx_btree_interior_update_work+0x10/0x10
[ 1363.009206][ T6171]  process_scheduled_works+0xae0/0x1c40
[ 1363.015008][ T6171]  worker_thread+0xea7/0x14f0
[ 1363.019936][ T6171]  kthread+0x6b9/0xef0
[ 1363.024214][ T6171]  ? __pfx_worker_thread+0x10/0x10
[ 1363.029545][ T6171]  ? __pfx_kthread+0x10/0x10
[ 1363.034354][ T6171]  ret_from_fork+0x6d/0x90
[ 1363.038987][ T6171]  ? __pfx_kthread+0x10/0x10
[ 1363.043791][ T6171]  ret_from_fork_asm+0x1a/0x30
[ 1363.048758][ T6171]  </TASK>
[ 1363.052229][ T6171] Kernel Offset: disabled
[ 1363.056641][ T6171] Rebooting in 86400 seconds..