last executing test programs:

5m54.643566964s ago: executing program 3 (id=655):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000040), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc)

5m54.320495729s ago: executing program 3 (id=657):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000540)="1a", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x100, @loopback}, 0x1c)
r1 = socket$inet_sctp(0x2, 0x4, 0x84)
syz_open_dev$hidraw(&(0x7f0000000000), 0x4, 0xc0402)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r4, 0x7d45}, 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={r4, 0x7bee, 0x2, [0x5, 0x9]}, 0xc)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r4, 0x4}, 0x8)
sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="ac", 0x1}], 0x1}}], 0x1, 0x4040004)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0xf003}, 0x0, {0x0, r8}})
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x6})
io_uring_enter(r5, 0x7f5f, 0x8000, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xb, 0x82001)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r9, 0xc10c5541, &(0x7f0000000340)={0x6, 0xe0a, 0x1})

5m53.052929131s ago: executing program 3 (id=662):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0xc6)

5m52.972689787s ago: executing program 3 (id=663):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==")
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000000)='./bus\x00', 0xc01c, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x1a)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
syz_emit_ethernet(0x1eb, 0x0, 0x0)
rmdir(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

5m52.620587185s ago: executing program 3 (id=664):
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x4, 0x4}, {0x6, 0x24, 0x1a, 0xc, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0x9f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xa, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xb, 0x3, 0x7}}}}}}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff})
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)

5m52.244942995s ago: executing program 3 (id=666):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x66}], 0x1, 0x74, 0x0, 0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfaa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9fa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

5m51.785131332s ago: executing program 32 (id=666):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x66}], 0x1, 0x74, 0x0, 0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfaa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9fa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

5m49.54714773s ago: executing program 1 (id=677):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50c, &(0x7f0000000600)="$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")

5m48.992262064s ago: executing program 1 (id=679):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000001100)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x4000)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)

5m48.546835009s ago: executing program 1 (id=680):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0xc6)

5m48.383803692s ago: executing program 1 (id=681):
r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000f00)="$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")
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x44)
syslog(0x3, &(0x7f00000003c0)=""/247, 0xf7)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000040))
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000a00)={0x7, 0x74a, 0x2, 0x80, 0x6, 0x0, [{0x7, 0x1, 0x2, '\x00', 0xc01}, {0x8, 0xcc9a, 0x4, '\x00', 0x2802}, {0x7fffffffffffffff, 0x3, 0x81, '\x00', 0x1184}, {0x100, 0x9, 0x2, '\x00', 0x800}, {0xfffffffffffffffa, 0x7, 0xfffffffffffffff8, '\x00', 0x800}, {0x4, 0x3, 0x0, '\x00', 0x1000}]})
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

5m47.191753168s ago: executing program 1 (id=685):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff})
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)

5m42.38863549s ago: executing program 1 (id=709):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000009000000000000008aa8fe5925afa31febb0d20dbc6040e08a33d17c"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

5m41.878761801s ago: executing program 33 (id=709):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000009000000000000008aa8fe5925afa31febb0d20dbc6040e08a33d17c"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

4m19.544505079s ago: executing program 4 (id=1052):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x4, @multicast1, 0x4e20, 0x2, 'wrr\x00', 0x2, 0x8, 0x2c}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4e22, 0x1, 0xa, 0x7fffffff, 0xfb}}, 0x44)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4m17.768449181s ago: executing program 4 (id=1055):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
clock_nanosleep(0x9, 0x270a5e1b8c43fa17, &(0x7f0000000000)={0x0, 0x989680}, 0x0)

4m16.568605876s ago: executing program 4 (id=1058):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r4}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0)

4m16.428368107s ago: executing program 4 (id=1059):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
creat(&(0x7f0000000340)='./bus\x00', 0x11a)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84)
chdir(0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x1800004, &(0x7f00000008c0)={[{@init_itable_val={'init_itable', 0x3d, 0x84}}, {@grpid}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x1}}]}, 0x3, 0x47e, &(0x7f0000000440)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8})

4m15.628801541s ago: executing program 4 (id=1061):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c)
sendto$inet6(r0, &(0x7f0000000340)="800037e9220700", 0x7, 0x40094, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c)

4m14.701334544s ago: executing program 4 (id=1063):
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="0b000000010001", 0x7)

4m14.283496708s ago: executing program 34 (id=1063):
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="0b000000010001", 0x7)

2m6.686787427s ago: executing program 0 (id=1444):
syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0xc56, &(0x7f0000002680)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlink(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
truncate(&(0x7f00000001c0)='./file1\x00', 0x200)

2m6.190096627s ago: executing program 0 (id=1445):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc9, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_4={0x3, 0x1, 0xa, "0082714e"}]}}, 0x0}, 0x0)

2m3.928709007s ago: executing program 0 (id=1448):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x13)
waitid(0x0, 0x0, 0x0, 0x100000a, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x240)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48094)
syz_open_procfs(0x0, 0x0)
r4 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x84a80, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r5, r6, &(0x7f0000000100)=0x7, 0xd4ba)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143043, 0x84)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0800a0009e09000000009f000400000008002600"], 0x3c}}, 0x0)
utimes(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)={{0x0, 0x2710}, {0x77359400}})
ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000280)={&(0x7f0000000240), 0x0, 0x2})

2m1.37970087s ago: executing program 0 (id=1451):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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")
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./file1\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7)

2m0.723698743s ago: executing program 0 (id=1453):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000000)=0x2f)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x11)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000280)={@my=0x1})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010100000000030000002b00000008000300", @ANYRES32=r8, @ANYBLOB="040046000a00340002020202020200000800260099090000280051802400008009000100dba06c8914000000050008"], 0x5c}}, 0x4800)
r9 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xe000, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000007c0)="08006d2a81496b27", 0x8}], 0x1}, 0x20008810)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@hyper})

2m0.580644914s ago: executing program 0 (id=1455):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x1268, &(0x7f0000002500)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x444, 0x0, 0x1, 0x0, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
chdir(&(0x7f0000001180)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x183341, 0x12c)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pwritev2(r1, 0x0, 0x0, 0x1000, 0x4, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x14)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c)

1m59.834130234s ago: executing program 35 (id=1455):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x1268, &(0x7f0000002500)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x444, 0x0, 0x1, 0x0, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
chdir(&(0x7f0000001180)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x183341, 0x12c)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pwritev2(r1, 0x0, 0x0, 0x1000, 0x4, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x14)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c)

7.40054892s ago: executing program 2 (id=1864):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
listen(r2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20)

7.296795168s ago: executing program 2 (id=1865):
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r2 = socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x4000}, 0x50)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="8b6bb8d12aef98b340c0a7d8020000001c9f2ec1fc34107b8cf12eea34b3e768c6fa00000000001b0000000000a2ded5bab318cc1a8138e144f0ad3f10478735135fb8587aa95d9d499bca6facf5f7aed285d2d5a12dc0fe2779aea4854e9a141f6ff284f0be5b682f217382c9ac4c3683f76a426fe263dbf774c3fa4705d3d1b9654033ca0a8cd4ea471bcd953e71580de1ad2257afac66fb45ba2889c2e0c22c8bf96c9255c8e98f5115a0f06f774925"], 0x0, 0x0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10)
connect$vsock_stream(r4, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @host}, 0x10)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000040)=0x6, 0x4)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="87ebf209e067e7d9257741ddd50ecb98c9761a85befb3daefd81d85fa351bf50ee39ba40b9c2f74bfe063d656e7992c3e6ecd70257c4225076e8525dac37510b85cb60126eb16ba2e2dd429ba0a728ba01a1148bd739c34e0817dfd16892c3fc53270987341c55a044a2ac5d2bf7f32ac67c345aee2a3227bb625c57906e2f79f324f352d3f098face0ddf3e0d84487f07ea3e031327a66f572637aca1efc2180db7340f16465e0d70a6ad3c0d677787589d63d62f7e66b2d68b9e01f337adad378c9d57910e8807d320f8256281d5dc637f7856bb529d0ef4b25707812cfbc705070476d9e83ff4095ac5106997a7255776b20be38373f89d94abd0839a3e211f3183", @ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="0b67726f75805642927df8fcde013b1d83fdda357606d1a039c0d81e912a39ee26868d1e31e5bbfafd00526c57577a194657612984d7aa077c17c76909011bf84bc30323eb877d450173a574b0f30045af63fcf05ff2efae1103a28eefc67faade3697513156108b26666dea6f3462e70691e53092d2d64bb40e7e9cd5c87afe941ba623adf7e5e9f264ee7d136ec30ffe2c00457935107357467d412ccb7222654e", @ANYRESDEC=0x0, @ANYBLOB=',audit,\x00'])
syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x6000)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000100505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581034000000000090582020000000000090503024002"], 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12)

7.119789932s ago: executing program 5 (id=1867):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r1)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x8, 0x9, 0xffff5551, 0x2, 0x7, 0x24000}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x0, 0x0, 0x3}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5.620079812s ago: executing program 5 (id=1870):
fanotify_init(0x40, 0x2)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000006140)={0x2020}, 0x2076)

5.619783282s ago: executing program 6 (id=1871):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x6, 0x644, &(0x7f00000006c0)="$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")
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')

5.360273292s ago: executing program 5 (id=1873):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x6, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {}, {0x0, 0x9}, {}, {}, {}, {}, {0x0, 0x5}], 0x20})

4.045212318s ago: executing program 7 (id=1874):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
listen(r2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20)

3.88349417s ago: executing program 6 (id=1875):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
mount$bpf(0x0, 0x0, &(0x7f0000000100), 0x800, &(0x7f0000002300)=ANY=[])
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000600)=@base={0x16, 0x0, 0x34, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x600}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107}, 0x4c)

3.700085105s ago: executing program 7 (id=1876):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000001100)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x4000)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)

3.348740593s ago: executing program 7 (id=1877):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept$inet(r0, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
fcntl$dupfd(r3, 0x0, r3)

3.190989645s ago: executing program 6 (id=1878):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r1)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x8, 0x9, 0xffff5551, 0x2, 0x7, 0x24000}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x0, 0x0, 0x3}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3.020286739s ago: executing program 2 (id=1879):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c)
getsockname$inet6(r0, 0x0, &(0x7f0000000180))

2.869960471s ago: executing program 7 (id=1880):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r0, &(0x7f0000000200)="fafd2c75", 0x4)
dup3(r0, r1, 0x80000)
read(r1, &(0x7f00000007c0)=""/213, 0xd5)

2.827805394s ago: executing program 2 (id=1881):
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1d4, &(0x7f0000000000)="$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")

2.531908668s ago: executing program 7 (id=1882):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000000a80)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x32d800, 0x182)
renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2)

2.50865998s ago: executing program 6 (id=1883):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
recvfrom$inet(r0, 0x0, 0x0, 0xe2, 0x0, 0x0)

2.434037375s ago: executing program 2 (id=1884):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/time\x00')

2.360509781s ago: executing program 5 (id=1885):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x90000004})
clock_adjtime(0x0, &(0x7f0000000340)={0xffff, 0x0, 0x0, 0x0, 0x6733, 0x401, 0x0, 0x0, 0xab5, 0x0, 0x3b9ac9ff, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1, 0xe52, 0x6})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x8100, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

2.325727324s ago: executing program 6 (id=1886):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000001100)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x4000)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)

1.309628155s ago: executing program 6 (id=1887):
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r2 = socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x4000}, 0x50)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="8b6bb8d12aef98b340c0a7d8020000001c9f2ec1fc34107b8cf12eea34b3e768c6fa00000000001b0000000000a2ded5bab318cc1a8138e144f0ad3f10478735135fb8587aa95d9d499bca6facf5f7aed285d2d5a12dc0fe2779aea4854e9a141f6ff284f0be5b682f217382c9ac4c3683f76a426fe263dbf774c3fa4705d3d1b9654033ca0a8cd4ea471bcd953e71580de1ad2257afac66fb45ba2889c2e0c22c8bf96c9255c8e98f5115a0f06f774925"], 0x0, 0x0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10)
connect$vsock_stream(r4, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @host}, 0x10)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000040)=0x6, 0x4)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="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", @ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="0b67726f75805642927df8fcde013b1d83fdda357606d1a039c0d81e912a39ee26868d1e31e5bbfafd00526c57577a194657612984d7aa077c17c76909011bf84bc30323eb877d450173a574b0f30045af63fcf05ff2efae1103a28eefc67faade3697513156108b26666dea6f3462e70691e53092d2d64bb40e7e9cd5c87afe941ba623adf7e5e9f264ee7d136ec30ffe2c00457935107357467d412ccb7222654e", @ANYRESDEC=0x0, @ANYBLOB=',audit,\x00'])
syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x6000)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000100505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581034000000000090582020000000000090503024002"], 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12)

1.232193391s ago: executing program 5 (id=1888):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept$inet(r0, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)

1.156666767s ago: executing program 7 (id=1889):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000100008006"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0xc0010141, 0x0, 0x8}]})

991.223801ms ago: executing program 5 (id=1890):
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x7, 0x0)
write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x8)
setreuid(0x0, 0xee00)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000140)='&/(\\\xc7*^{@::@([(\x11&\xcb\x00', 0x0, r3)

0s ago: executing program 2 (id=1891):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r1)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x8, 0x9, 0xffff5551, 0x2, 0x7, 0x24000}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x0, 0x0, 0x3}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

kernel console output (not intermixed with test programs):

s mode
[  414.142427][   T42] veth1_vlan: left promiscuous mode
[  414.162250][ T5947] usb 1-1: USB disconnect, device number 23
[  414.178019][   T42] veth0_vlan: left promiscuous mode
[  414.471530][ T5947] usb 6-1: USB disconnect, device number 20
[  414.823216][ T5796] Bluetooth: hci3: command tx timeout
[  415.605909][T11166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1448'.
[  416.316562][   T42] team0 (unregistering): Port device team_slave_1 removed
[  416.369696][   T42] team0 (unregistering): Port device team_slave_0 removed
[  416.418546][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  416.472338][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  416.903140][ T5796] Bluetooth: hci3: command tx timeout
[  416.997043][   T42] bond0 (unregistering): Released all slaves
[  417.209356][T11170] loop5: detected capacity change from 0 to 2048
[  417.250552][T11170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  417.357799][T11103] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.402135][T11103] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.443219][T11103] bridge_slave_0: entered allmulticast mode
[  417.450663][T11103] bridge_slave_0: entered promiscuous mode
[  417.482716][T11103] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.495841][T11172] loop0: detected capacity change from 0 to 256
[  417.504552][T11103] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.511802][T11103] bridge_slave_1: entered allmulticast mode
[  417.591591][T11103] bridge_slave_1: entered promiscuous mode
[  417.679736][ T5782] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  417.701653][ T5782] FAT-fs (loop0): Filesystem has been set read-only
[  417.712222][ T5782] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  417.759140][T11103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.802122][T11103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  417.885554][T11103] team0: Port device team_slave_0 added
[  417.915930][T11103] team0: Port device team_slave_1 added
[  418.095480][T11103] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.102490][T11103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.169842][T11103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.263864][T11103] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.270859][T11103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.310893][T11181] fuse: Bad value for 'fd'
[  418.357820][T11181] fuse: Unknown parameter '0x0000000000000008‡ëò	àgçÙ%wAÝÕ˘Év…¾û'
[  418.384300][T11103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.582473][T11103] hsr_slave_0: entered promiscuous mode
[  418.705127][T11103] hsr_slave_1: entered promiscuous mode
[  418.793011][ T5949] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  418.923883][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  418.935036][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  418.953182][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  418.962111][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  418.970604][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  418.979025][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  418.986489][ T5786] Bluetooth: hci3: command tx timeout
[  419.042974][ T5949] usb 6-1: Using ep0 maxpacket: 16
[  419.195509][ T5949] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.237924][ T5949] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  419.314826][ T5949] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  419.333325][ T5949] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  419.345928][ T5949] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  419.382389][ T5949] usb 6-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40
[  419.412086][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  419.433101][ T5949] usb 6-1: SerialNumber: syz
[  419.460736][T11181] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  419.564841][ T5949] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  419.634008][ T5949] cdc_acm: probe of 6-1:1.0 failed with error -12
[  419.916094][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  419.927816][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  419.936282][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  419.945944][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  419.959104][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  419.966737][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  420.660458][T11103] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  420.680366][T11103] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  420.702347][T11103] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  420.724623][T11103] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  420.928383][T11188] chnl_net:caif_netlink_parms(): no params data found
[  420.967796][T11103] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.023952][T11199] chnl_net:caif_netlink_parms(): no params data found
[  421.052334][T11103] 8021q: adding VLAN 0 to HW filter on device team0
[  421.064059][ T5786] Bluetooth: hci0: command tx timeout
[  421.107384][ T2915] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.114625][ T2915] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.399640][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.406859][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.454113][T11188] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.461601][T11188] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.473292][T11188] bridge_slave_0: entered allmulticast mode
[  421.483600][T11188] bridge_slave_0: entered promiscuous mode
[  421.536310][T11199] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.568077][    T8] usb 6-1: USB disconnect, device number 21
[  421.582191][T11199] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.596419][T11199] bridge_slave_0: entered allmulticast mode
[  421.606943][T11199] bridge_slave_0: entered promiscuous mode
[  421.621288][T11188] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.630326][T11188] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.638818][T11188] bridge_slave_1: entered allmulticast mode
[  421.647432][T11188] bridge_slave_1: entered promiscuous mode
[  421.729480][T11188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  421.746645][T11199] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.755080][T11199] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.762317][T11199] bridge_slave_1: entered allmulticast mode
[  421.771406][T11199] bridge_slave_1: entered promiscuous mode
[  421.815073][T11188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  421.868876][T11199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  421.891744][T11199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.023560][ T5786] Bluetooth: hci1: command tx timeout
[  422.043487][T11188] team0: Port device team_slave_0 added
[  422.056913][T11188] team0: Port device team_slave_1 added
[  422.083953][T11240] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1457'.
[  422.115031][T11199] team0: Port device team_slave_0 added
[  422.268952][T11199] team0: Port device team_slave_1 added
[  422.325428][T11188] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.332428][T11188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  422.364050][T11188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  422.386820][T11188] batman_adv: batadv0: Adding interface: batadv_slave_1
[  422.403026][T11188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  422.448536][T11188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  422.486477][T11199] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.509629][T11199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  422.581282][T11199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  422.729264][T11199] batman_adv: batadv0: Adding interface: batadv_slave_1
[  422.743929][T11199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  422.772115][T11199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  422.978852][T11199] hsr_slave_0: entered promiscuous mode
[  423.016030][T11199] hsr_slave_1: entered promiscuous mode
[  423.022603][T11199] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  423.051025][T11199] Cannot create hsr debugfs directory
[  423.143551][ T5786] Bluetooth: hci0: command tx timeout
[  423.327744][   T42] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.419307][T11188] hsr_slave_0: entered promiscuous mode
[  423.451915][T11188] hsr_slave_1: entered promiscuous mode
[  423.469123][T11188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  423.478749][T11188] Cannot create hsr debugfs directory
[  423.559545][   T42] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.733495][T11103] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.765002][   T42] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.927155][   T42] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.104291][ T5786] Bluetooth: hci1: command tx timeout
[  424.311965][T11103] veth0_vlan: entered promiscuous mode
[  424.380938][T11103] veth1_vlan: entered promiscuous mode
[  424.606468][T11199] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  424.766607][T11199] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  424.792052][T11199] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  424.814656][   T42] tipc: Left network mode
[  424.841518][T11103] veth0_macvtap: entered promiscuous mode
[  424.920716][T11199] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  424.969582][T11103] veth1_macvtap: entered promiscuous mode
[  424.977376][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  424.987331][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  424.995390][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  425.011765][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  425.020522][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  425.028356][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  425.233630][ T5796] Bluetooth: hci0: command tx timeout
[  425.284005][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.294685][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.305375][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.315942][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.327737][T11103] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.428801][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.442955][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.454375][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.465329][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.477711][T11103] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.547451][T11103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.559880][T11103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.570199][T11103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.579227][T11103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.183660][ T5796] Bluetooth: hci1: command tx timeout
[  426.324860][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.332753][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.455117][T11279] chnl_net:caif_netlink_parms(): no params data found
[  426.532866][T11199] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.599094][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.607185][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.661767][T11188] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  426.713381][T11199] 8021q: adding VLAN 0 to HW filter on device team0
[  426.720339][T11188] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  426.731645][T11188] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  426.806768][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.814088][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.864293][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.871483][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.891685][T11188] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  427.082474][T11279] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.100920][T11279] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.110565][T11279] bridge_slave_0: entered allmulticast mode
[  427.124376][T11279] bridge_slave_0: entered promiscuous mode
[  427.143233][ T5796] Bluetooth: hci2: command tx timeout
[  427.182300][T11279] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.190996][T11279] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.207017][T11279] bridge_slave_1: entered allmulticast mode
[  427.218018][T11279] bridge_slave_1: entered promiscuous mode
[  427.246822][   T42] hsr_slave_0: left promiscuous mode
[  427.254374][   T42] hsr_slave_1: left promiscuous mode
[  427.260793][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.278346][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.300477][   T42] hsr_slave_0: left promiscuous mode
[  427.311656][   T42] hsr_slave_1: left promiscuous mode
[  427.317322][ T5796] Bluetooth: hci0: command tx timeout
[  427.324820][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.332359][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.341925][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.350238][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.362467][   T42] bridge_slave_1: left allmulticast mode
[  427.368890][   T42] bridge_slave_1: left promiscuous mode
[  427.375099][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.387734][   T42] bridge_slave_0: left allmulticast mode
[  427.393563][   T42] bridge_slave_0: left promiscuous mode
[  427.399557][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.436984][   T42] veth1_macvtap: left promiscuous mode
[  427.442744][   T42] veth0_macvtap: left promiscuous mode
[  427.458213][   T42] veth1_vlan: left promiscuous mode
[  427.466421][   T42] veth0_vlan: left promiscuous mode
[  428.220076][T11341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1460'.
[  428.293247][ T5796] Bluetooth: hci1: command tx timeout
[  428.650672][   T42] team0 (unregistering): Port device team_slave_1 removed
[  428.707268][   T42] team0 (unregistering): Port device team_slave_0 removed
[  428.757484][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.809312][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  429.226201][ T5796] Bluetooth: hci2: command tx timeout
[  429.330098][   T42] bond0 (unregistering): Released all slaves
[  429.834731][   T42] team0 (unregistering): Port device team_slave_1 removed
[  429.886444][   T42] team0 (unregistering): Port device team_slave_0 removed
[  429.939643][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  429.997876][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  430.576638][   T42] bond0 (unregistering): Released all slaves
[  430.691232][T11279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.827020][T11279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.008629][T11279] team0: Port device team_slave_0 added
[  431.044753][T11279] team0: Port device team_slave_1 added
[  431.178422][T11279] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.185819][T11279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.213885][T11279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.266768][T11279] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.274675][T11279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.304656][   T23] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  431.312501][ T5796] Bluetooth: hci2: command tx timeout
[  431.318729][T11279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.503057][   T23] usb 3-1: Using ep0 maxpacket: 8
[  431.517921][T11279] hsr_slave_0: entered promiscuous mode
[  431.532811][   T23] usb 3-1: config index 0 descriptor too short (expected 5924, got 36)
[  431.551998][   T23] usb 3-1: config 250 has an invalid interface number: 228 but max is -1
[  431.561997][T11279] hsr_slave_1: entered promiscuous mode
[  431.563101][   T23] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0
[  431.577906][   T23] usb 3-1: config 250 has no interface number 0
[  431.585545][   T23] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  431.597713][T11279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  431.598589][   T23] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  431.613088][T11279] Cannot create hsr debugfs directory
[  431.620143][   T23] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 513
[  431.643980][   T23] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  431.667364][   T23] usb 3-1: config 250 interface 228 has no altsetting 0
[  431.713390][   T23] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  431.733613][   T23] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  431.741942][   T23] usb 3-1: Product: syz
[  431.749742][   T23] usb 3-1: SerialNumber: syz
[  431.776119][   T23] hub 3-1:250.228: bad descriptor, ignoring hub
[  431.792709][   T23] hub: probe of 3-1:250.228 failed with error -5
[  431.810605][T11188] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.977185][   T23] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 27 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  432.009384][T11188] 8021q: adding VLAN 0 to HW filter on device team0
[  432.118709][T11199] 8021q: adding VLAN 0 to HW filter on device batadv0
[  432.130671][ T2915] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.137911][ T2915] bridge0: port 1(bridge_slave_0) entered forwarding state
[  432.227512][T11279] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.283745][    C1] usblp0: nonzero read bulk status received: -71
[  432.314904][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.322072][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state
[  432.334323][ T5949] usb 3-1: USB disconnect, device number 27
[  432.373884][ T5949] usblp0: removed
[  432.436244][T11279] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.538884][T11279] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.657141][T11279] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.765172][T11199] veth0_vlan: entered promiscuous mode
[  432.922749][T11199] veth1_vlan: entered promiscuous mode
[  433.181941][T11188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  433.308885][T11279] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  433.345514][   T23] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  433.367950][T11279] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  433.381481][T11279] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  433.389878][ T5796] Bluetooth: hci2: command tx timeout
[  433.445812][T11279] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  433.501242][T11199] veth0_macvtap: entered promiscuous mode
[  433.572603][T11199] veth1_macvtap: entered promiscuous mode
[  433.586726][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  433.613104][   T23] usb 3-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00
[  433.632426][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.666281][   T23] usb 3-1: config 0 descriptor??
[  433.735983][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.763510][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.782921][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.795326][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.809404][T11199] batman_adv: batadv0: Interface activated: batadv_slave_0
[  433.895417][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  433.907221][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.917264][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  433.928025][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.940264][T11199] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.052057][T11199] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.062725][T11199] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.071897][T11199] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.080885][T11199] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.275927][T11188] veth0_vlan: entered promiscuous mode
[  434.297907][   T23] usbhid 3-1:0.0: can't add hid device: -71
[  434.311708][T11279] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.329031][   T23] usbhid: probe of 3-1:0.0 failed with error -71
[  434.347391][   T23] usb 3-1: USB disconnect, device number 28
[  434.378015][T11188] veth1_vlan: entered promiscuous mode
[  434.432712][ T8423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.451935][ T8423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.457153][T11279] 8021q: adding VLAN 0 to HW filter on device team0
[  434.478306][   T42] hsr_slave_0: left promiscuous mode
[  434.484542][   T42] hsr_slave_1: left promiscuous mode
[  434.490583][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  434.498272][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  434.509420][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  434.517170][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  434.525698][   T42] bridge_slave_1: left allmulticast mode
[  434.531379][   T42] bridge_slave_1: left promiscuous mode
[  434.537470][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.548536][   T42] bridge_slave_0: left allmulticast mode
[  434.555222][   T42] bridge_slave_0: left promiscuous mode
[  434.561018][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.594340][   T42] veth1_macvtap: left promiscuous mode
[  434.599989][   T42] veth0_macvtap: left promiscuous mode
[  434.605900][   T42] veth1_vlan: left promiscuous mode
[  434.611273][   T42] veth0_vlan: left promiscuous mode
[  435.168729][    T8] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  435.261407][   T42] team0 (unregistering): Port device team_slave_1 removed
[  435.312052][   T42] team0 (unregistering): Port device team_slave_0 removed
[  435.354042][    T8] usb 3-1: no configurations
[  435.360952][    T8] usb 3-1: can't read configurations, error -22
[  435.375783][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  435.423665][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  435.531423][    T8] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[  435.738284][    T8] usb 3-1: no configurations
[  435.743676][    T8] usb 3-1: can't read configurations, error -22
[  435.750254][    T8] usb usb3-port1: attempt power cycle
[  435.962843][   T42] bond0 (unregistering): Released all slaves
[  436.065976][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.073191][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.125455][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.132651][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.134538][ T8423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.152483][ T8423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.173149][    T8] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  436.233410][    T8] usb 3-1: no configurations
[  436.243770][    T8] usb 3-1: can't read configurations, error -22
[  436.331463][T11188] veth0_macvtap: entered promiscuous mode
[  436.370280][T11188] veth1_macvtap: entered promiscuous mode
[  436.403277][    T8] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  436.477097][    T8] usb 3-1: no configurations
[  436.481781][    T8] usb 3-1: can't read configurations, error -22
[  436.495784][T11188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  436.517747][T11188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.529833][    T8] usb usb3-port1: unable to enumerate USB device
[  436.534801][T11417] loop7: detected capacity change from 0 to 512
[  436.549139][T11188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  436.567372][T11417] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  436.577343][T11188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.595263][T11417] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  436.607612][T11188] batman_adv: batadv0: Interface activated: batadv_slave_0
[  436.623730][T11417] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  436.658918][T11188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  436.676859][T11188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.692527][T11417] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  436.710845][T11417] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000]
[  436.723137][T11188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  436.733109][T11417] EXT4-fs (loop7): failed to initialize system zone (-117)
[  436.734151][T11188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.753194][T11188] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.771077][T11417] EXT4-fs (loop7): mount failed
[  436.802457][T11417] netlink: 'syz.7.1456': attribute type 16 has an invalid length.
[  436.814123][T11188] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.826152][T11417] netlink: 'syz.7.1456': attribute type 3 has an invalid length.
[  436.842443][T11188] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.852028][T11417] netlink: 34486 bytes leftover after parsing attributes in process `syz.7.1456'.
[  436.861761][T11188] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.872040][T11188] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.096223][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.125373][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.184224][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.192775][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.398743][T11279] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.467668][T11438] fuse: Unknown parameter 'user00000000000000000000'
[  438.115210][T11454] loop2: detected capacity change from 0 to 512
[  438.167854][T11454] EXT4-fs (loop2): orphan cleanup on readonly fs
[  438.196834][T11279] veth0_vlan: entered promiscuous mode
[  438.219202][T11279] veth1_vlan: entered promiscuous mode
[  438.227638][T11454] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1468: bad orphan inode 13
[  438.353837][T11454] ext4_test_bit(bit=12, block=18) = 1
[  438.388263][T11454] is_bad_inode(inode)=0
[  438.392506][T11454] NEXT_ORPHAN(inode)=2130706432
[  438.402618][T11279] veth0_macvtap: entered promiscuous mode
[  438.422514][T11279] veth1_macvtap: entered promiscuous mode
[  438.433346][T11454] max_ino=32
[  438.436614][T11454] i_nlink=1
[  438.441252][T11454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  438.501524][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  438.531162][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.549430][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  438.561570][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.572810][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  438.590188][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.601293][T11454] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  438.603531][T11279] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.621396][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  438.633372][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.643345][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  438.654027][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.659256][T11454] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1468: bg 0: block 248: padding at end of block bitmap is not set
[  438.669274][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  438.686436][T11454] Quota error (device loop2): write_blk: dquota write failed
[  438.701355][T11454] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  438.701874][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.711585][T11454] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.1468: Failed to acquire dquot type 1
[  438.729061][T11279] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.742221][T11454] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  438.761235][T11279] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.771396][T11279] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.773255][ T5949] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  438.782455][T11279] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.800118][T11279] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.925272][T11103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.937272][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.966472][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.975797][ T5949] usb 8-1: Using ep0 maxpacket: 8
[  439.003197][ T5949] usb 8-1: config index 0 descriptor too short (expected 5924, got 36)
[  439.011571][ T5949] usb 8-1: config 250 has an invalid interface number: 228 but max is -1
[  439.043927][ T5949] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0
[  439.065236][ T5949] usb 8-1: config 250 has no interface number 0
[  439.083113][ T5949] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  439.101835][ T5949] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  439.127433][ T5949] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 513
[  439.145691][ T8423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.153828][ T5949] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  439.172157][ T8423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.216027][ T5949] usb 8-1: config 250 interface 228 has no altsetting 0
[  439.241244][ T5949] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  439.253262][ T5949] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  439.261591][ T5949] usb 8-1: Product: syz
[  439.307400][ T5949] usb 8-1: SerialNumber: syz
[  439.341492][ T5949] hub 8-1:250.228: bad descriptor, ignoring hub
[  439.367912][ T5949] hub: probe of 8-1:250.228 failed with error -5
[  439.390724][T11474] fuse: Bad value for 'group_id'
[  439.455001][T11474] fuse: Unknown parameter '0x0000000000000008‡ëò	àgçÙ%wAÝÕ˘Év…¾û'
[  439.552854][ T5949] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  439.667887][T11480] loop5: detected capacity change from 0 to 512
[  439.731199][T11480] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  439.753001][   T23] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  439.829319][T11480] EXT4-fs (loop5): 1 truncate cleaned up
[  439.847897][T11480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.914417][T11202] usb 8-1: USB disconnect, device number 2
[  439.949828][T11202] usblp0: removed
[  439.970269][   T23] usb 3-1: Using ep0 maxpacket: 16
[  439.982010][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.007233][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  440.038068][   T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  440.072241][   T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  440.111972][   T23] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  440.134706][   T23] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40
[  440.148976][T11279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.173103][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  440.204822][   T23] usb 3-1: SerialNumber: syz
[  440.428389][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  440.434812][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  440.582560][T11474] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  440.610810][   T23] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  440.644448][   T23] cdc_acm: probe of 3-1:1.0 failed with error -12
[  440.768545][T11499] loop7: detected capacity change from 0 to 512
[  440.807180][T11499] EXT4-fs: Ignoring removed nobh option
[  440.858207][T11499] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  440.873211][ T5962] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  440.929489][T11499] EXT4-fs (loop7): 1 truncate cleaned up
[  440.965680][T11499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.055404][T11507] loop6: detected capacity change from 0 to 512
[  441.080545][ T5962] usb 6-1: no configurations
[  441.110695][T11507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.114945][ T5962] usb 6-1: can't read configurations, error -22
[  441.164943][T11507] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  441.217470][   T28] audit: type=1800 audit(1756533278.094:11): pid=11507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1479" name="file1" dev="loop6" ino=15 res=0 errno=0
[  441.296422][   T28] audit: type=1800 audit(1756533278.094:12): pid=11507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1479" name="file2" dev="loop6" ino=16 res=0 errno=0
[  441.313394][T11199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.328164][T11188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.433051][ T5962] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  441.643966][ T5962] usb 6-1: no configurations
[  441.675414][ T5962] usb 6-1: can't read configurations, error -22
[  441.691785][T11518] loop6: detected capacity change from 0 to 2048
[  441.705075][T11519] fuse: Unknown parameter 'user00000000000000000000'
[  441.732616][ T5962] usb usb6-port1: attempt power cycle
[  441.776872][T11518] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  441.868580][   T28] audit: type=1800 audit(1756533278.744:13): pid=11518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1481" name="file3" dev="loop6" ino=1347 res=0 errno=0
[  442.223061][ T5962] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  442.288784][ T5962] usb 6-1: no configurations
[  442.302132][ T5962] usb 6-1: can't read configurations, error -22
[  442.483700][T11530] loop6: detected capacity change from 0 to 512
[  442.493444][ T5962] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  442.554833][ T5962] usb 6-1: no configurations
[  442.556890][T11530] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1483: iget: bad i_size value: 38620345925642
[  442.559472][ T5962] usb 6-1: can't read configurations, error -22
[  442.609554][ T5962] usb usb6-port1: unable to enumerate USB device
[  442.711830][ T5962] usb 3-1: USB disconnect, device number 33
[  442.728096][T11530] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1483: couldn't read orphan inode 15 (err -117)
[  442.789967][T11530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.910907][T11530] EXT4-fs error (device loop6): __ext4_get_inode_loc:4483: comm syz.6.1483: Invalid inode table block 3967670082 in block_group 0
[  442.976034][T11530] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  443.100096][T11188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.613008][   T23] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  443.813266][   T23] usb 3-1: Using ep0 maxpacket: 8
[  443.825305][   T23] usb 3-1: config index 0 descriptor too short (expected 5924, got 36)
[  443.835331][   T23] usb 3-1: config 250 has an invalid interface number: 228 but max is -1
[  443.836117][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  443.867620][   T23] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0
[  443.892936][   T23] usb 3-1: config 250 has no interface number 0
[  443.901491][   T23] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  443.927803][   T23] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  443.957228][   T23] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 513
[  443.992300][   T23] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  444.031286][   T23] usb 3-1: config 250 interface 228 has no altsetting 0
[  444.046848][   T23] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  444.058552][   T23] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  444.070411][   T23] usb 3-1: Product: syz
[  444.075206][   T23] usb 3-1: SerialNumber: syz
[  444.093863][   T23] hub 3-1:250.228: bad descriptor, ignoring hub
[  444.103681][   T23] hub: probe of 3-1:250.228 failed with error -5
[  444.109226][T11567] loop7: detected capacity change from 0 to 2048
[  444.123170][ T5949] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  444.158489][T11567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  444.291709][   T23] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 34 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  444.343742][ T5949] usb 6-1: Using ep0 maxpacket: 32
[  444.353557][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  444.385515][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  444.420764][ T5949] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.40
[  444.453271][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.494838][ T5949] usb 6-1: config 0 descriptor??
[  444.594732][    C1] usblp0: nonzero read bulk status received: -71
[  444.643504][T10969] usb 3-1: USB disconnect, device number 34
[  444.675738][T10969] usblp0: removed
[  444.774640][ T5962] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  444.997700][ T5949] magicmouse 0003:05AC:0265.000B: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.5-1/input0
[  445.043369][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  445.065801][ T5962] usb 7-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00
[  445.080825][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.101730][ T5962] usb 7-1: config 0 descriptor??
[  445.247563][T11202] usb 6-1: USB disconnect, device number 26
[  445.328898][T11593] fuse: Unknown parameter 'user00000000000000000000'
[  445.343461][   T23] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  445.546965][   T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  445.568424][   T23] usb 8-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  445.585732][   T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.613763][   T23] usb 8-1: config 0 descriptor??
[  445.619637][T11589] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  445.732020][ T5962] usbhid 7-1:0.0: can't add hid device: -71
[  445.739736][ T5962] usbhid: probe of 7-1:0.0 failed with error -71
[  445.752632][ T5962] usb 7-1: USB disconnect, device number 15
[  446.052347][   T23] logitech 0003:046D:C24F.000C: unknown main item tag 0x0
[  446.067928][   T23] logitech 0003:046D:C24F.000C: unknown main item tag 0x0
[  446.098326][   T23] logitech 0003:046D:C24F.000C: unknown main item tag 0x0
[  446.111572][   T23] logitech 0003:046D:C24F.000C: unknown main item tag 0x0
[  446.121986][   T23] logitech 0003:046D:C24F.000C: unknown main item tag 0x0
[  446.150013][   T23] logitech 0003:046D:C24F.000C: hidraw0: USB HID v1.01 Device [HID 046d:c24f] on usb-dummy_hcd.7-1/input0
[  446.163212][   T23] logitech 0003:046D:C24F.000C: no inputs found
[  446.257430][   T23] usb 8-1: USB disconnect, device number 3
[  446.756662][T10969] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  446.954857][T10969] usb 7-1: no configurations
[  446.969784][T10969] usb 7-1: can't read configurations, error -22
[  447.149886][T10969] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  447.177382][T11619] loop2: detected capacity change from 0 to 2048
[  447.195269][T11619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  447.253699][   T23] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  447.344351][T10969] usb 7-1: no configurations
[  447.349024][T10969] usb 7-1: can't read configurations, error -22
[  447.392660][T10969] usb usb7-port1: attempt power cycle
[  447.443568][   T23] usb 8-1: Using ep0 maxpacket: 8
[  447.458254][   T23] usb 8-1: unable to get BOS descriptor or descriptor too short
[  447.478347][   T23] usb 8-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 29440, setting to 1024
[  447.496375][   T23] usb 8-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024
[  447.527817][   T23] usb 8-1: config 8 interface 0 has no altsetting 0
[  447.548911][   T23] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  447.575137][   T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.589554][   T23] usb 8-1: Product: syz
[  447.597280][   T23] usb 8-1: Manufacturer: syz
[  447.602002][   T23] usb 8-1: SerialNumber: syz
[  447.623979][T11617] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  447.813106][T10969] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[  447.927110][T10969] usb 7-1: no configurations
[  447.931784][T10969] usb 7-1: can't read configurations, error -22
[  447.941146][   T23] usb 8-1: Quirk or no altest; falling back to MIDI 1.0
[  447.951096][   T23] usb 8-1: selecting invalid altsetting 0
[  447.984391][   T23] usb 8-1: USB disconnect, device number 4
[  448.029877][T11345] udevd[11345]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  448.094901][T10969] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  448.134090][T10969] usb 7-1: no configurations
[  448.138724][T10969] usb 7-1: can't read configurations, error -22
[  448.145967][T10969] usb usb7-port1: unable to enumerate USB device
[  448.263108][ T5875] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  448.443029][ T5875] usb 6-1: Using ep0 maxpacket: 16
[  448.450496][ T5875] usb 6-1: config 0 has an invalid interface number: 94 but max is 1
[  448.458931][ T5875] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  448.469456][ T5875] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  448.478699][ T5875] usb 6-1: config 0 has no interface number 0
[  448.485160][ T5875] usb 6-1: config 0 interface 94 altsetting 87 endpoint 0x7 has invalid maxpacket 2046, setting to 64
[  448.499873][ T5875] usb 6-1: config 0 interface 94 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  448.529774][ T5875] usb 6-1: config 0 interface 94 has no altsetting 0
[  448.541292][ T5875] usb 6-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice=35.14
[  448.550784][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.559516][ T5875] usb 6-1: Product: syz
[  448.564666][ T5875] usb 6-1: Manufacturer: syz
[  448.569305][ T5875] usb 6-1: SerialNumber: syz
[  448.583885][ T5875] usb 6-1: config 0 descriptor??
[  448.603155][   T23] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  448.796732][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.809549][   T23] usb 3-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00
[  448.817220][ T5875] appletouch 6-1:0.94: Could not find int-in endpoint
[  448.824710][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.831063][ T5875] appletouch: probe of 6-1:0.94 failed with error -5
[  448.843718][ T5875] usbhid 6-1:0.94: couldn't find an input interrupt endpoint
[  448.861790][   T23] usb 3-1: config 0 descriptor??
[  448.866695][ T5875] usb 6-1: USB disconnect, device number 27
[  449.489427][   T23] usbhid 3-1:0.0: can't add hid device: -71
[  449.508047][   T23] usbhid: probe of 3-1:0.0 failed with error -71
[  449.526164][   T23] usb 3-1: USB disconnect, device number 35
[  450.021728][T11651] loop6: detected capacity change from 0 to 2048
[  450.084913][T11651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  450.278277][T11658] loop7: detected capacity change from 0 to 512
[  450.328820][T11658] EXT4-fs (loop7): orphan cleanup on readonly fs
[  450.388605][T11658] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #4: comm syz.7.1515: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  450.448964][T11658] EXT4-fs error (device loop7): ext4_quota_enable:7134: comm syz.7.1515: Bad quota inode: 4, type: 1
[  450.492568][T11658] EXT4-fs warning (device loop7): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  450.555721][T11658] EXT4-fs (loop7): Cannot turn on quotas: error -117
[  450.574376][T11658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  450.847753][T11199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.955384][T10969] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[  452.171714][T11697] loop7: detected capacity change from 0 to 2048
[  452.185968][T10969] usb 7-1: unable to read config index 0 descriptor/start: -61
[  452.194389][T10969] usb 7-1: can't read configurations, error -61
[  452.210442][T11697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  452.367907][T10969] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[  452.594841][T10969] usb 7-1: unable to read config index 0 descriptor/start: -61
[  452.602498][T10969] usb 7-1: can't read configurations, error -61
[  452.616561][T10969] usb usb7-port1: attempt power cycle
[  452.633935][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1527'.
[  452.644817][T11704] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  452.769365][T11704] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.830295][T11709] netlink: 'syz.2.1530': attribute type 3 has an invalid length.
[  452.838738][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'.
[  453.053238][T10969] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[  453.243444][T10969] usb 7-1: unable to read config index 0 descriptor/start: -61
[  453.265837][T10969] usb 7-1: can't read configurations, error -61
[  453.437583][T10969] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[  453.497001][T10969] usb 7-1: unable to read config index 0 descriptor/start: -61
[  453.551551][T11722] loop7: detected capacity change from 0 to 2048
[  453.563920][T10969] usb 7-1: can't read configurations, error -61
[  453.581787][T11722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  453.621694][T10969] usb usb7-port1: unable to enumerate USB device
[  455.578022][T11754] binder_alloc: 11741: binder_alloc_buf, no vma
[  456.467040][T11748] fuse: Bad value for 'group_id'
[  456.562833][T11748] fuse: Unknown parameter '0xffffffffffffffff‡ëò	àgçÙ%wAÝÕ˘Év…¾û'
[  456.873120][T10969] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  457.003000][ T5949] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  457.153194][T10969] usb 6-1: Using ep0 maxpacket: 16
[  457.251720][T10969] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.273019][T10969] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  457.282818][T10969] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  457.298595][T11767] loop7: detected capacity change from 0 to 736
[  457.305781][ T5949] usb 3-1: unable to read config index 0 descriptor/start: -61
[  457.322976][ T5949] usb 3-1: can't read configurations, error -61
[  457.340796][T10969] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  457.368201][T10969] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  457.426434][T10969] usb 6-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40
[  457.508222][T10969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  457.516835][ T5949] usb 3-1: new full-speed USB device number 37 using dummy_hcd
[  457.605351][T10969] usb 6-1: SerialNumber: syz
[  457.618021][T11748] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  457.646058][T10969] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  457.688757][T10969] cdc_acm: probe of 6-1:1.0 failed with error -12
[  457.824958][ T5949] usb 3-1: unable to read config index 0 descriptor/start: -61
[  457.853705][ T5949] usb 3-1: can't read configurations, error -61
[  457.898666][ T5949] usb usb3-port1: attempt power cycle
[  458.346197][ T5949] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  458.396215][ T5949] usb 3-1: unable to read config index 0 descriptor/start: -61
[  458.418437][ T5949] usb 3-1: can't read configurations, error -61
[  458.573253][ T5949] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[  458.637320][ T5949] usb 3-1: unable to read config index 0 descriptor/start: -61
[  458.648597][ T5949] usb 3-1: can't read configurations, error -61
[  458.662823][ T5949] usb usb3-port1: unable to enumerate USB device
[  459.356948][T11202] usb 6-1: USB disconnect, device number 28
[  460.492547][T11825] loop6: detected capacity change from 0 to 512
[  460.514729][T11825] EXT4-fs: inline encryption not supported
[  460.541911][T11825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102]
[  460.551393][T11825] System zones: 1-12
[  460.614391][T11825] EXT4-fs error (device loop6): ext4_xattr_inode_iget:445: comm syz.6.1560: error while reading EA inode 32 err=-116
[  460.649267][T11825] EXT4-fs (loop6): Remounting filesystem read-only
[  460.659117][T11825] EXT4-fs warning (device loop6): ext4_evict_inode:255: couldn't mark inode dirty (err -5)
[  460.701934][T11825] EXT4-fs (loop6): 1 orphan inode deleted
[  460.722048][T11825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  460.917119][T11825] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1560'.
[  461.100135][T11188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.286882][T11846] binder: 11845:11846 ioctl c018620c 200000000000 returned -22
[  461.383315][ T5962] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[  461.486722][T11851] loop7: detected capacity change from 0 to 1024
[  461.537471][T11851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  461.600427][ T5962] usb 6-1: unable to read config index 0 descriptor/start: -61
[  461.624917][ T5962] usb 6-1: can't read configurations, error -61
[  461.930805][T11199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.003157][ T5962] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[  462.212179][ T5962] usb 6-1: unable to read config index 0 descriptor/start: -61
[  462.233518][ T5962] usb 6-1: can't read configurations, error -61
[  462.261134][ T5962] usb usb6-port1: attempt power cycle
[  462.498120][T11883] loop2: detected capacity change from 0 to 512
[  462.517539][T11883] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  462.553781][T11883] EXT4-fs (loop2): failed to open journal device unknown-block(7,45) -6
[  462.683443][ T5962] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[  462.737135][ T5962] usb 6-1: unable to read config index 0 descriptor/start: -61
[  462.762392][ T5962] usb 6-1: can't read configurations, error -61
[  462.937991][ T5962] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[  462.986839][ T5962] usb 6-1: unable to read config index 0 descriptor/start: -61
[  463.007846][ T5962] usb 6-1: can't read configurations, error -61
[  463.022058][ T5962] usb usb6-port1: unable to enumerate USB device
[  463.092982][   T23] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[  463.314639][   T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[  463.344172][   T23] usb 3-1: not running at top speed; connect to a high speed hub
[  463.364901][   T23] usb 3-1: config 1 interface 0 has no altsetting 0
[  463.379749][   T23] usb 3-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.40
[  463.391378][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.399881][   T23] usb 3-1: Product: syz
[  463.404342][   T23] usb 3-1: Manufacturer: syz
[  463.409097][   T23] usb 3-1: SerialNumber: syz
[  463.876555][   T23] usbhid 3-1:1.0: can't add hid device: -71
[  463.890902][   T23] usbhid: probe of 3-1:1.0 failed with error -71
[  463.911212][   T23] usb 3-1: USB disconnect, device number 40
[  464.706050][   T23] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  464.742121][T11936] loop7: detected capacity change from 0 to 512
[  464.851763][T11936] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.952955][   T23] usb 6-1: Using ep0 maxpacket: 8
[  464.974464][   T23] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  465.003055][T11199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.026389][   T23] usb 6-1: config 179 has no interface number 0
[  465.036834][   T23] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  465.076500][   T23] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  465.094042][   T23] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  465.107807][   T23] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  465.121663][   T23] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  465.173148][   T23] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  465.201226][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.247478][T11919] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  465.353277][ T5947] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  465.516356][   T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input31
[  465.528793][ T5947] usb 7-1: device descriptor read/64, error -71
[  465.548896][ T5962] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  465.707492][T11919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.719365][T11919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.748855][ T5962] usb 8-1: unable to read config index 0 descriptor/start: -61
[  465.757508][ T5962] usb 8-1: can't read configurations, error -61
[  465.842971][ T5947] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  465.923071][ T5962] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  465.949372][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  465.949382][T11202] usb 6-1: USB disconnect, device number 33
[  465.964977][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  465.989081][T11202] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  466.014022][ T5947] usb 7-1: device descriptor read/64, error -71
[  466.163481][ T5947] usb usb7-port1: attempt power cycle
[  466.171921][ T5962] usb 8-1: unable to read config index 0 descriptor/start: -61
[  466.189240][ T5962] usb 8-1: can't read configurations, error -61
[  466.196264][ T5962] usb usb8-port1: attempt power cycle
[  466.573184][ T5947] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  466.623548][ T5962] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  466.639015][ T5947] usb 7-1: device descriptor read/8, error -71
[  466.688172][ T5962] usb 8-1: unable to read config index 0 descriptor/start: -61
[  466.699246][ T5962] usb 8-1: can't read configurations, error -61
[  466.763943][T11980] loop5: detected capacity change from 0 to 1024
[  466.852984][ T5962] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  466.913094][ T5962] usb 8-1: unable to read config index 0 descriptor/start: -61
[  466.920837][ T5962] usb 8-1: can't read configurations, error -61
[  466.943038][ T5947] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  466.943338][ T5962] usb usb8-port1: unable to enumerate USB device
[  466.995401][ T5947] usb 7-1: device descriptor read/8, error -71
[  467.147086][ T5947] usb usb7-port1: unable to enumerate USB device
[  467.357053][T11997] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1590'.
[  468.864944][T12021] loop5: detected capacity change from 0 to 2048
[  468.892323][T12021] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  468.927170][T12021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.221910][T11279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.963003][ T5947] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  470.166611][ T5947] usb 6-1: unable to read config index 0 descriptor/start: -61
[  470.183566][ T5947] usb 6-1: can't read configurations, error -61
[  470.333180][ T5947] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[  470.373272][ T5962] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  470.524486][ T5962] usb 7-1: device descriptor read/64, error -71
[  470.526367][ T5947] usb 6-1: unable to read config index 0 descriptor/start: -61
[  470.539790][ T5947] usb 6-1: can't read configurations, error -61
[  470.546466][ T5947] usb usb6-port1: attempt power cycle
[  470.718907][T12055] loop2: detected capacity change from 0 to 1764
[  470.804011][ T5962] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  470.953188][ T5947] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  470.973716][ T5962] usb 7-1: device descriptor read/64, error -71
[  470.989969][ T5947] usb 6-1: unable to read config index 0 descriptor/start: -61
[  470.998048][ T5947] usb 6-1: can't read configurations, error -61
[  471.093232][ T5962] usb usb7-port1: attempt power cycle
[  471.153001][ T5947] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  471.196122][ T5947] usb 6-1: unable to read config index 0 descriptor/start: -61
[  471.205281][ T5947] usb 6-1: can't read configurations, error -61
[  471.221591][ T5947] usb usb6-port1: unable to enumerate USB device
[  471.431601][T12068] loop7: detected capacity change from 0 to 2048
[  471.472317][T12068] EXT4-fs (loop7): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  471.498089][T12068] EXT4-fs error (device loop7): ext4_lookup:1858: inode #16: comm syz.7.1619: iget: bad i_size value: 8796093031208
[  471.523085][ T5962] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  471.560447][ T5962] usb 7-1: device descriptor read/8, error -71
[  471.644684][T11199] EXT4-fs (loop7): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  471.838417][ T5962] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  471.873785][ T5962] usb 7-1: device descriptor read/8, error -71
[  472.003300][ T5962] usb usb7-port1: unable to enumerate USB device
[  472.041456][T12079] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1623'.
[  472.043871][T12078] loop2: detected capacity change from 0 to 1024
[  472.078658][T12078] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  472.140341][T12078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  472.180785][T12078] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  472.214452][T12078] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  472.227508][T12078] EXT4-fs (loop2): This should not happen!! Data will be lost
[  472.227508][T12078] 
[  472.238546][T12078] EXT4-fs (loop2): Total free blocks count 0
[  472.244990][T12078] EXT4-fs (loop2): Free/Dirty block details
[  472.258047][T12078] EXT4-fs (loop2): free_blocks=20480
[  472.264281][T12078] EXT4-fs (loop2): dirty_blocks=32
[  472.269642][T12078] EXT4-fs (loop2): Block reservation details
[  472.275936][T12078] EXT4-fs (loop2): i_reserved_data_blocks=2
[  472.298616][T12086] loop7: detected capacity change from 0 to 736
[  472.321450][   T42] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  472.447094][T12088] loop2: detected capacity change from 0 to 256
[  472.459371][T12088] exfat: Deprecated parameter 'namecase'
[  472.465851][T12088] exfat: Deprecated parameter 'namecase'
[  472.501220][T12088] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d)
[  472.811082][T12094] loop2: detected capacity change from 0 to 2048
[  472.832321][T12094] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  473.421784][T12106] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1632'.
[  473.736806][T12110] fuse: Bad value for 'fd'
[  474.403050][ T5962] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[  474.597815][ T5962] usb 7-1: unable to read config index 0 descriptor/start: -61
[  474.616607][ T5962] usb 7-1: can't read configurations, error -61
[  474.793106][ T5962] usb 7-1: new full-speed USB device number 33 using dummy_hcd
[  474.986382][ T5962] usb 7-1: unable to read config index 0 descriptor/start: -61
[  474.994587][ T5962] usb 7-1: can't read configurations, error -61
[  475.001174][ T5962] usb usb7-port1: attempt power cycle
[  475.423133][ T5962] usb 7-1: new full-speed USB device number 34 using dummy_hcd
[  475.504049][ T5962] usb 7-1: unable to read config index 0 descriptor/start: -61
[  475.511628][T12128] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1641'.
[  475.545498][ T5962] usb 7-1: can't read configurations, error -61
[  475.710883][ T5962] usb 7-1: new full-speed USB device number 35 using dummy_hcd
[  475.770271][ T5962] usb 7-1: unable to read config index 0 descriptor/start: -61
[  475.786436][ T5962] usb 7-1: can't read configurations, error -61
[  475.800542][ T5962] usb usb7-port1: unable to enumerate USB device
[  476.172486][T12148] fuse: Unknown parameter 'grou00000000000000000000'
[  476.313965][T12151] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1647'.
[  476.983090][   T23] usb 6-1: new full-speed USB device number 38 using dummy_hcd
[  477.211787][   T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  477.243529][   T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  477.256533][   T23] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  477.272014][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  477.302777][   T23] usb 6-1: SerialNumber: syz
[  477.333789][   T23] usb 6-1: 0:2 : does not exist
[  477.564393][   T23] usb 6-1: USB disconnect, device number 38
[  477.565569][    T8] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  477.783056][    T8] usb 7-1: Using ep0 maxpacket: 16
[  477.799791][    T8] usb 7-1: config 0 has an invalid interface number: 94 but max is 1
[  477.810331][    T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  477.821208][    T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  477.845253][    T8] usb 7-1: config 0 has no interface number 0
[  477.854860][    T8] usb 7-1: config 0 interface 94 altsetting 87 endpoint 0x7 has invalid maxpacket 2046, setting to 64
[  477.884723][    T8] usb 7-1: config 0 interface 94 altsetting 87 has a duplicate endpoint with address 0x7, skipping
[  477.886811][ T1032] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.895630][    T8] usb 7-1: config 0 interface 94 altsetting 87 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[  477.951333][    T8] usb 7-1: config 0 interface 94 has no altsetting 0
[  477.975618][    T8] usb 7-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice=35.14
[  477.995195][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.012925][    T8] usb 7-1: Product: syz
[  478.028103][    T8] usb 7-1: Manufacturer: syz
[  478.039161][    T8] usb 7-1: SerialNumber: syz
[  478.058897][    T8] usb 7-1: config 0 descriptor??
[  478.078763][ T1032] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.261191][ T1032] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.289281][    T8] appletouch 7-1:0.94: Could not find int-in endpoint
[  478.308955][    T8] appletouch: probe of 7-1:0.94 failed with error -5
[  478.316911][    T8] usbhid 7-1:0.94: couldn't find an input interrupt endpoint
[  478.331298][    T8] usb 7-1: USB disconnect, device number 36
[  478.368072][ T1032] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.128223][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  479.140469][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  479.148676][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  479.159925][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  479.168153][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  479.183026][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  480.169725][T12198] fuse: Unknown parameter 'grou00000000000000000000'
[  480.263739][ T5949] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  480.309309][T12204] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1659'.
[  480.501500][ T5949] usb 3-1: config 0 has no interfaces?
[  480.507173][ T5949] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  480.539209][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.560956][ T5949] usb 3-1: config 0 descriptor??
[  480.569820][T12176] chnl_net:caif_netlink_parms(): no params data found
[  480.638598][ T1032] hsr_slave_0: left promiscuous mode
[  480.657121][ T1032] hsr_slave_1: left promiscuous mode
[  480.673620][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  480.681107][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0
[  480.703911][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  480.711381][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1
[  480.728841][ T1032] bridge_slave_1: left allmulticast mode
[  480.737054][ T1032] bridge_slave_1: left promiscuous mode
[  480.742922][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.769551][ T1032] bridge_slave_0: left allmulticast mode
[  480.783382][ T1032] bridge_slave_0: left promiscuous mode
[  480.789236][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.877091][ T1032] veth1_macvtap: left promiscuous mode
[  480.882703][ T1032] veth0_macvtap: left promiscuous mode
[  480.909590][ T1032] veth1_vlan: left promiscuous mode
[  480.915151][ T1032] veth0_vlan: left promiscuous mode
[  481.190633][ T5962] usb 3-1: USB disconnect, device number 41
[  481.304165][ T5786] Bluetooth: hci1: command tx timeout
[  482.011802][ T1032] team0 (unregistering): Port device team_slave_1 removed
[  482.061640][ T1032] team0 (unregistering): Port device team_slave_0 removed
[  482.112671][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  482.167087][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  482.716366][ T1032] bond0 (unregistering): Released all slaves
[  483.093924][T12176] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.115896][T12176] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.139960][T12176] bridge_slave_0: entered allmulticast mode
[  483.210323][T12176] bridge_slave_0: entered promiscuous mode
[  483.285640][T12176] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.299015][T12176] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.409347][T12176] bridge_slave_1: entered allmulticast mode
[  483.437232][ T5786] Bluetooth: hci1: command tx timeout
[  483.695275][T12176] bridge_slave_1: entered promiscuous mode
[  484.155876][T12176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  484.180913][T12176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  484.564255][T12176] team0: Port device team_slave_0 added
[  484.595635][T12176] team0: Port device team_slave_1 added
[  484.756957][T12249] netlink: 'syz.2.1667': attribute type 4 has an invalid length.
[  484.933756][T12176] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.991248][T12176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.105547][T12176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  485.151516][T12176] batman_adv: batadv0: Adding interface: batadv_slave_1
[  485.158933][T12176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.185227][T12176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  485.310252][T12176] hsr_slave_0: entered promiscuous mode
[  485.331829][T12176] hsr_slave_1: entered promiscuous mode
[  485.342668][T12176] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  485.360705][T12176] Cannot create hsr debugfs directory
[  485.463314][ T5786] Bluetooth: hci1: command tx timeout
[  485.528049][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  485.556413][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  485.569337][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  485.582281][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  485.593588][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  485.601864][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  485.699590][ T1032] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.838256][ T1032] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.019926][ T1032] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.170678][ T1032] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.974749][T12260] chnl_net:caif_netlink_parms(): no params data found
[  487.056409][T11202] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[  487.218667][T12291] loop2: detected capacity change from 0 to 128
[  487.228994][T12291] EXT4-fs: Ignoring removed nobh option
[  487.269361][T11202] usb 6-1: config 0 has no interfaces?
[  487.275428][T11202] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  487.286068][T12291] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  487.301951][T11202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.307671][T12291] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  487.323463][T11202] usb 6-1: config 0 descriptor??
[  487.385080][T12291] EXT4-fs error (device loop2): ext4_validate_block_bitmap:421: comm syz.2.1671: bg 0: bad block bitmap checksum
[  487.470111][T11103] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  487.543155][ T5786] Bluetooth: hci1: command tx timeout
[  487.663404][T12260] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.680447][T12260] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.690625][T12260] bridge_slave_0: entered allmulticast mode
[  487.703188][ T5786] Bluetooth: hci0: command tx timeout
[  487.710536][T12260] bridge_slave_0: entered promiscuous mode
[  487.810714][T12260] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.818158][T11890] usb 6-1: USB disconnect, device number 39
[  487.842385][T12260] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.850015][T12260] bridge_slave_1: entered allmulticast mode
[  487.858013][T12260] bridge_slave_1: entered promiscuous mode
[  487.886134][T12176] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  487.896963][T12176] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  487.947188][T12176] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  487.988848][T12260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  488.001854][T12260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.011648][T12176] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  488.121114][T12260] team0: Port device team_slave_0 added
[  488.140377][T12260] team0: Port device team_slave_1 added
[  488.217319][T12260] batman_adv: batadv0: Adding interface: batadv_slave_0
[  488.229181][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.255982][T12260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.269724][T12260] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.276931][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.303862][T12260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  488.547241][T12312] loop5: detected capacity change from 0 to 1024
[  488.569550][T12312] EXT4-fs: Ignoring removed nobh option
[  488.573748][T12260] hsr_slave_0: entered promiscuous mode
[  488.597846][T12260] hsr_slave_1: entered promiscuous mode
[  488.614228][T12312] EXT4-fs: inline encryption not supported
[  488.620126][T12312] ext4: Unknown parameter 'func'
[  488.635019][T12260] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  488.642625][T12260] Cannot create hsr debugfs directory
[  488.674804][T11370] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  489.009029][T12323] loop2: detected capacity change from 0 to 1024
[  489.025890][T12323] EXT4-fs: Ignoring removed i_version option
[  489.035037][T12323] EXT4-fs: Ignoring removed nobh option
[  489.069003][T12323] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  489.120641][T12323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  489.170091][ T1032] hsr_slave_0: left promiscuous mode
[  489.177280][ T1032] hsr_slave_1: left promiscuous mode
[  489.185093][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  489.192607][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.214054][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.227237][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.245936][ T1032] bridge_slave_1: left allmulticast mode
[  489.257483][ T1032] bridge_slave_1: left promiscuous mode
[  489.265205][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.276490][ T1032] bridge_slave_0: left allmulticast mode
[  489.293215][ T1032] bridge_slave_0: left promiscuous mode
[  489.299023][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.348217][T11103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.396460][ T1032] veth1_macvtap: left promiscuous mode
[  489.402085][ T1032] veth0_macvtap: left promiscuous mode
[  489.423643][ T1032] veth1_vlan: left promiscuous mode
[  489.429050][ T1032] veth0_vlan: left promiscuous mode
[  489.800029][ T5786] Bluetooth: hci0: command tx timeout
[  490.196803][ T1032] team0 (unregistering): Port device team_slave_1 removed
[  490.248689][ T1032] team0 (unregistering): Port device team_slave_0 removed
[  490.302566][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  490.357680][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  491.165283][ T1032] bond0 (unregistering): Released all slaves
[  491.567977][T12176] 8021q: adding VLAN 0 to HW filter on device bond0
[  491.691990][T12176] 8021q: adding VLAN 0 to HW filter on device team0
[  491.734146][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.741363][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  491.863008][ T5786] Bluetooth: hci0: command tx timeout
[  492.076821][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.084047][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.246010][T12176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  492.383129][ T5875] usb 3-1: new full-speed USB device number 42 using dummy_hcd
[  492.597144][ T5875] usb 3-1: config 0 has no interfaces?
[  492.602736][ T5875] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  492.616577][T12260] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  492.632225][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.645925][T12260] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  492.665741][ T5875] usb 3-1: config 0 descriptor??
[  492.675728][T12260] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  492.701082][T12260] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  492.982402][T12260] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.056408][T12176] 8021q: adding VLAN 0 to HW filter on device batadv0
[  493.079648][T12260] 8021q: adding VLAN 0 to HW filter on device team0
[  493.159524][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.166792][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.194165][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.201390][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.365382][T12260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  493.380322][T11202] usb 3-1: USB disconnect, device number 42
[  493.865848][T12395] loop5: detected capacity change from 0 to 1024
[  493.953012][ T5786] Bluetooth: hci0: command tx timeout
[  494.110108][T12260] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.137827][T12176] veth0_vlan: entered promiscuous mode
[  494.207844][T12176] veth1_vlan: entered promiscuous mode
[  494.349857][T12176] veth0_macvtap: entered promiscuous mode
[  494.378862][T12176] veth1_macvtap: entered promiscuous mode
[  494.429143][T12176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.450724][T12176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.471801][T12176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.486628][T12415] loop2: detected capacity change from 0 to 1024
[  494.487340][T12176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.537745][T12176] batman_adv: batadv0: Interface activated: batadv_slave_0
[  494.555849][ T5875] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  494.614229][T12176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.614513][ T7989] hfsplus: b-tree write err: -5, ino 4
[  494.635291][T12176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.670187][T12176] batman_adv: batadv0: Interface activated: batadv_slave_1
[  494.726818][T12176] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  494.753156][T12176] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  494.768258][ T5875] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  494.778199][ T5875] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  494.793064][T12176] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  494.801831][T12176] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  494.827635][ T5875] usb 6-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config
[  494.842362][ T5875] usb 6-1: config 220 has no interface number 2
[  494.859788][ T5875] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  494.880782][ T5875] usb 6-1: config 220 interface 0 has no altsetting 0
[  494.929157][ T5875] usb 6-1: config 220 interface 76 has no altsetting 0
[  494.969516][ T5875] usb 6-1: config 220 interface 1 has no altsetting 0
[  494.997720][ T5875] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  495.008505][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.024901][ T5875] usb 6-1: Product: syz
[  495.029140][ T5875] usb 6-1: Manufacturer: syz
[  495.049501][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.078236][ T5875] usb 6-1: SerialNumber: syz
[  495.095159][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.116874][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.146403][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.325639][T12260] veth0_vlan: entered promiscuous mode
[  495.358204][ T5875] usb 6-1: selecting invalid altsetting 0
[  495.362203][T12260] veth1_vlan: entered promiscuous mode
[  495.391278][ T5875] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  495.435953][ T5875] usb 6-1: No valid video chain found.
[  495.466096][T12260] veth0_macvtap: entered promiscuous mode
[  495.467518][ T5875] usb 6-1: selecting invalid altsetting 0
[  495.490113][T12260] veth1_macvtap: entered promiscuous mode
[  495.513813][ T5875] usbtest: probe of 6-1:220.1 failed with error -22
[  495.546428][ T5875] usb 6-1: USB disconnect, device number 40
[  495.622125][T12260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.652975][T12260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.669099][T12260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.689901][T12260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.710770][T12260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.741649][T12260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.756520][T12260] batman_adv: batadv0: Interface activated: batadv_slave_0
[  495.809236][T12260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.860406][T12260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.870757][T12260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.882663][T12260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.919477][T12260] batman_adv: batadv0: Interface activated: batadv_slave_1
[  495.940684][T12443] loop7: detected capacity change from 0 to 128
[  495.952165][T12260] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.978745][T12443] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  496.018201][T12260] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  496.027539][T12443] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  496.067621][T12260] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  496.083168][T12260] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  496.365817][ T7989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.398744][ T7989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.527481][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.553418][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.767305][T12176] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  496.851054][T12459] loop6: detected capacity change from 0 to 1024
[  496.901867][T12459] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  496.979067][T12459] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  497.125977][T12459] EXT4-fs error (device loop6): ext4_map_blocks:718: inode #15: block 3: comm syz.6.1665: lblock 3 mapped to illegal pblock 3 (length 3)
[  497.192703][T12459] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  497.229206][T12459] EXT4-fs (loop6): This should not happen!! Data will be lost
[  497.229206][T12459] 
[  497.265069][T12467] EXT4-fs error (device loop6): ext4_map_blocks:718: inode #15: block 8: comm syz.6.1665: lblock 8 mapped to illegal pblock 8 (length 8)
[  497.323215][ T5875] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  497.992347][ T5875] usb 8-1: config 0 has no interfaces?
[  498.018256][T12467] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  498.036689][ T5875] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  498.143236][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.161175][T12467] EXT4-fs (loop6): This should not happen!! Data will be lost
[  498.161175][T12467] 
[  498.183835][ T5875] usb 8-1: config 0 descriptor??
[  498.291482][T12476] Bluetooth: MGMT ver 1.22
[  498.334358][T12260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  498.440935][ T5857] usb 8-1: USB disconnect, device number 9
[  498.673435][ T5875] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[  498.907258][ T5875] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  498.942981][ T5875] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  498.985755][ T5875] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  499.016135][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.044391][ T5875] usb 6-1: Product: syz
[  499.048630][ T5875] usb 6-1: Manufacturer: syz
[  499.082454][ T5875] usb 6-1: SerialNumber: syz
[  499.102238][T12480] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  499.187329][T12503] fuse: Bad value for 'group_id'
[  499.305031][T12503] fuse: Unknown parameter '0x0000000000000008‡ëò	àgçÙ%wAÝÕ˘Év…¾û'
[  499.347648][T12480] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  499.593338][ T5857] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  499.803138][ T5857] usb 3-1: Using ep0 maxpacket: 16
[  499.882412][ T5857] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  499.933850][ T5857] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  499.962388][ T5857] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  499.981527][ T5857] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  499.992342][ T5857] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  500.023516][ T5857] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40
[  500.045750][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  500.076179][ T5857] usb 3-1: SerialNumber: syz
[  500.159284][T12503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  500.170732][ T5857] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  500.182202][ T5857] cdc_acm: probe of 3-1:1.0 failed with error -12
[  500.234159][ T5875] cdc_ncm 6-1:1.0: bind() failure
[  500.266394][ T5875] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  500.278718][ T5875] cdc_ncm 6-1:1.1: bind() failure
[  500.291479][ T5875] usb 6-1: USB disconnect, device number 41
[  500.777205][ T5857] kernel write not supported for file /register (pid: 5857 comm: kworker/0:5)
[  501.233070][T11890] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  501.443110][T11890] usb 6-1: Using ep0 maxpacket: 8
[  501.521262][T11890] usb 6-1: config 0 has no interfaces?
[  501.560182][T11890] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  501.644002][T11890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.679261][T12544] loop6: detected capacity change from 0 to 4096
[  501.705017][T11890] usb 6-1: config 0 descriptor??
[  501.817454][T12544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.883675][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  501.892572][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  502.036117][ T5875] usb 6-1: USB disconnect, device number 42
[  502.125897][T12260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.663832][ T5857] usb 7-1: new full-speed USB device number 37 using dummy_hcd
[  502.793445][T11890] usb 3-1: USB disconnect, device number 43
[  502.886005][ T5857] usb 7-1: config 0 has no interfaces?
[  502.901839][ T5857] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  502.915297][T12564] loop5: detected capacity change from 0 to 1024
[  502.947971][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.961568][T12564] EXT4-fs: Ignoring removed i_version option
[  502.980153][T12564] EXT4-fs: Ignoring removed nobh option
[  502.984241][ T5857] usb 7-1: config 0 descriptor??
[  503.015976][T12564] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  503.037447][T12568] loop2: detected capacity change from 0 to 256
[  503.080074][T12564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  503.082799][T12568] exfat: Bad value for 'gid'
[  503.295023][ T5857] usb 7-1: USB disconnect, device number 37
[  503.375085][T11279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.861530][T12595] loop7: detected capacity change from 0 to 736
[  503.932955][T10969] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  504.135186][T10969] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  504.146833][T10969] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  504.159507][T10969] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  504.177465][T10969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.195759][T10969] usb 6-1: config 0 descriptor??
[  505.823185][ T5857] usb 7-1: new full-speed USB device number 38 using dummy_hcd
[  505.903127][  T787] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  505.922148][T12632] loop7: detected capacity change from 0 to 736
[  506.016086][ T5857] usb 7-1: config 0 has no interfaces?
[  506.023371][ T5857] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  506.046864][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.074650][ T5857] usb 7-1: config 0 descriptor??
[  506.084323][  T787] usb 3-1: Using ep0 maxpacket: 16
[  506.101401][  T787] usb 3-1: config 0 has an invalid interface number: 94 but max is 1
[  506.112138][  T787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  506.129473][  T787] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  506.139155][  T787] usb 3-1: config 0 has no interface number 0
[  506.146973][  T787] usb 3-1: config 0 interface 94 altsetting 87 endpoint 0x7 has invalid maxpacket 2046, setting to 64
[  506.158403][  T787] usb 3-1: config 0 interface 94 altsetting 87 has a duplicate endpoint with address 0x7, skipping
[  506.172921][  T787] usb 3-1: config 0 interface 94 altsetting 87 endpoint 0x9 has invalid wMaxPacketSize 0
[  506.183923][  T787] usb 3-1: config 0 interface 94 altsetting 87 has 3 endpoint descriptors, different from the interface descriptor's value: 10
[  506.197716][  T787] usb 3-1: config 0 interface 94 has no altsetting 0
[  506.214657][  T787] usb 3-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice=35.14
[  506.243091][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.256155][  T787] usb 3-1: Product: syz
[  506.260352][T12637] loop7: detected capacity change from 0 to 512
[  506.278550][  T787] usb 3-1: Manufacturer: syz
[  506.312727][T12637] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 546, start 22000003)
[  506.315709][ T5857] usb 7-1: USB disconnect, device number 38
[  506.331195][  T787] usb 3-1: SerialNumber: syz
[  506.340049][  T787] usb 3-1: config 0 descriptor??
[  506.351740][T12637] FAT-fs (loop7): Filesystem has been set read-only
[  506.361731][T12637] FAT-fs (loop7): error, invalid access to FAT (entry 0x22000003)
[  506.568676][  T787] appletouch 3-1:0.94: Could not find int-in endpoint
[  506.575681][  T787] appletouch: probe of 3-1:0.94 failed with error -5
[  506.584561][  T787] usbhid 3-1:0.94: couldn't find an input interrupt endpoint
[  506.598106][  T787] usb 3-1: USB disconnect, device number 44
[  506.685756][T10969] usb 6-1: USB disconnect, device number 43
[  506.926451][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1738'.
[  507.122440][T12655] loop6: detected capacity change from 0 to 736
[  507.350371][T12657] loop2: detected capacity change from 0 to 512
[  507.430661][T12657] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1741: bad orphan inode 15
[  507.561771][T12657] ext4_test_bit(bit=14, block=18) = 1
[  507.567342][T12657] is_bad_inode(inode)=0
[  507.571660][T12657] NEXT_ORPHAN(inode)=1023
[  507.580242][T12657] max_ino=32
[  507.583904][T12657] i_nlink=0
[  507.593618][T12657] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2983: inode #15: comm syz.2.1741: corrupted xattr block 19: invalid header
[  507.648947][T12657] EXT4-fs warning (device loop2): ext4_evict_inode:272: xattr delete (err -117)
[  507.665836][T12657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  507.683035][T12668] loop7: detected capacity change from 0 to 1024
[  507.704183][T12668] EXT4-fs: Ignoring removed i_version option
[  507.711589][T12657] ext4 filesystem being mounted at /84/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  507.743651][T12668] EXT4-fs: Ignoring removed nobh option
[  507.766351][T12668] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  507.816452][T12657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1741'.
[  507.877926][T12668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  507.929005][T11103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  508.020987][T12176] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.085571][  T787] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  508.264383][ T5857] usb 6-1: new full-speed USB device number 44 using dummy_hcd
[  508.284725][  T787] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  508.297692][  T787] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  508.308676][  T787] usb 7-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config
[  508.319419][  T787] usb 7-1: config 220 has no interface number 2
[  508.326019][  T787] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  508.341408][  T787] usb 7-1: config 220 interface 0 has no altsetting 0
[  508.350489][  T787] usb 7-1: config 220 interface 76 has no altsetting 0
[  508.357049][T12682] loop7: detected capacity change from 0 to 256
[  508.364078][  T787] usb 7-1: config 220 interface 1 has no altsetting 0
[  508.393499][T12682] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  508.394940][  T787] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  508.422219][  T787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.431090][  T787] usb 7-1: Product: syz
[  508.439231][  T787] usb 7-1: Manufacturer: syz
[  508.444047][  T787] usb 7-1: SerialNumber: syz
[  508.475626][ T5857] usb 6-1: config 0 has no interfaces?
[  508.481313][ T5857] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  508.494014][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.513922][ T5857] usb 6-1: config 0 descriptor??
[  508.682737][  T787] usb 7-1: selecting invalid altsetting 0
[  508.701879][  T787] usb 7-1: Found UVC 7.01 device syz (8086:0b07)
[  508.714616][  T787] usb 7-1: No valid video chain found.
[  508.727377][    T8] usb 6-1: USB disconnect, device number 44
[  508.764649][  T787] usb 7-1: selecting invalid altsetting 0
[  508.776550][  T787] usbtest: probe of 7-1:220.1 failed with error -22
[  508.787669][  T787] usb 7-1: USB disconnect, device number 39
[  508.911707][T12689] netlink: 'syz.2.1750': attribute type 3 has an invalid length.
[  509.258039][T12691] loop6: detected capacity change from 0 to 736
[  509.529023][T12693] loop5: detected capacity change from 0 to 512
[  509.664350][T12693] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1753: bad orphan inode 15
[  509.776346][T12693] ext4_test_bit(bit=14, block=5) = 0
[  509.833234][T12693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  509.841402][T12705] loop2: detected capacity change from 0 to 1024
[  510.079530][T12708] loop7: detected capacity change from 0 to 128
[  510.130700][T11279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.142771][T12708] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  510.448546][T12717] loop2: detected capacity change from 0 to 256
[  510.511492][T12719] loop7: detected capacity change from 0 to 736
[  510.573012][T10969] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[  510.622378][T12717] FAT-fs (loop2): Directory bread(block 64) failed
[  510.648404][T12717] FAT-fs (loop2): Directory bread(block 65) failed
[  510.673418][T12717] FAT-fs (loop2): Directory bread(block 66) failed
[  510.680094][T12717] FAT-fs (loop2): Directory bread(block 67) failed
[  510.697138][T12717] FAT-fs (loop2): Directory bread(block 68) failed
[  510.713137][T12717] FAT-fs (loop2): Directory bread(block 69) failed
[  510.730143][T12717] FAT-fs (loop2): Directory bread(block 70) failed
[  510.740177][T12717] FAT-fs (loop2): Directory bread(block 71) failed
[  510.767362][T12717] FAT-fs (loop2): Directory bread(block 72) failed
[  510.788783][T12717] FAT-fs (loop2): Directory bread(block 73) failed
[  510.789058][T10969] usb 6-1: config 0 has no interfaces?
[  510.822691][T10969] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  510.842992][T10969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.882742][T10969] usb 6-1: config 0 descriptor??
[  511.044234][T12727] loop6: detected capacity change from 0 to 128
[  511.099392][T12727] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  511.127263][T12727] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  511.152465][ T5947] usb 6-1: USB disconnect, device number 45
[  511.208910][T12260] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  511.435995][T12737] loop2: detected capacity change from 0 to 512
[  511.480183][T12740] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  511.483629][T12737] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.1769: corrupted in-inode xattr: invalid ea_ino
[  511.515783][T12737] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1769: couldn't read orphan inode 15 (err -117)
[  511.532128][T12737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  511.920560][T12745] loop5: detected capacity change from 0 to 736
[  512.175536][T12753] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.1769: Directory hole found for htree leaf block 0
[  512.740530][T12765] loop7: detected capacity change from 0 to 4096
[  512.776179][T12765] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  512.967197][ T5947] usb 6-1: new full-speed USB device number 46 using dummy_hcd
[  512.982205][T12176] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.116088][T12771] loop7: detected capacity change from 0 to 128
[  513.161747][   T28] audit: type=1800 audit(1756533350.034:14): pid=12771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1781" name="file1" dev="loop7" ino=1048678 res=0 errno=0
[  513.194490][T12771] FAT-fs (loop7): error, invalid FAT chain (i_pos 548, last_block 8)
[  513.205751][ T5947] usb 6-1: config 0 has no interfaces?
[  513.212288][ T5947] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  513.222126][T12771] FAT-fs (loop7): Filesystem has been set read-only
[  513.235765][T12771] FAT-fs (loop7): error, corrupted file size (i_pos 548, 522)
[  513.255137][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.277437][ T5947] usb 6-1: config 0 descriptor??
[  513.452315][T11103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.504061][T10969] usb 6-1: USB disconnect, device number 46
[  514.280048][T12790] loop5: detected capacity change from 0 to 1764
[  514.287835][T12791] loop6: detected capacity change from 0 to 1024
[  514.298898][T12791] EXT4-fs: Ignoring removed i_version option
[  514.306739][T12791] EXT4-fs: Ignoring removed nobh option
[  514.313417][T12791] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  514.346529][T12791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  514.413260][T12260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.223394][ T5947] usb 6-1: new full-speed USB device number 47 using dummy_hcd
[  515.406440][ T5947] usb 6-1: config 0 has no interfaces?
[  515.412288][ T5947] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  515.421736][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.433647][ T5947] usb 6-1: config 0 descriptor??
[  515.613483][T12820] loop2: detected capacity change from 0 to 1024
[  515.621099][T12820] EXT4-fs: Ignoring removed i_version option
[  515.632386][T12820] EXT4-fs: Ignoring removed nobh option
[  515.641676][T12820] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  515.666583][  T787] usb 6-1: USB disconnect, device number 47
[  515.694581][T12820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  515.864177][T11103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.084063][T12825] loop6: detected capacity change from 0 to 8192
[  516.193744][T12832] netlink: 'syz.7.1801': attribute type 4 has an invalid length.
[  516.231817][T12825] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF
[  516.307107][T12825] FAT-fs (loop6): Filesystem has been set read-only
[  516.409350][T12838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1804'.
[  516.414380][T12836] loop2: detected capacity change from 0 to 512
[  516.496256][T12836] EXT4-fs error (device loop2): ext4_get_journal_inode:5807: comm syz.2.1803: inode #1792: comm syz.2.1803: iget: illegal inode #
[  516.540064][T12836] EXT4-fs (loop2): Remounting filesystem read-only
[  516.569001][T12836] EXT4-fs (loop2): no journal found
[  516.575166][T12836] EXT4-fs (loop2): can't get journal size
[  516.582652][T12836] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  516.622598][T12836] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  516.699050][T12836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.992213][T12849] loop5: detected capacity change from 0 to 1024
[  516.996418][T12836] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  517.022650][T12849] EXT4-fs: Ignoring removed i_version option
[  517.029831][T12849] EXT4-fs: Ignoring removed nobh option
[  517.046599][T12849] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  517.534946][T12849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.654175][T11103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.934402][T11279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.952519][T12855] loop6: detected capacity change from 0 to 1024
[  518.036020][T12855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  518.361899][T12260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.803198][T10969] usb 7-1: new full-speed USB device number 40 using dummy_hcd
[  519.035756][T10969] usb 7-1: config 0 has no interfaces?
[  519.041337][T10969] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  519.097696][T10969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.383342][T10969] usb 7-1: config 0 descriptor??
[  519.714882][T12892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1817'.
[  519.896874][T10969] usb 7-1: USB disconnect, device number 40
[  519.915688][T12888] loop5: detected capacity change from 0 to 1024
[  519.925875][T12888] EXT4-fs: Ignoring removed i_version option
[  519.949402][T12888] EXT4-fs: Ignoring removed nobh option
[  519.985184][T12888] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  520.124997][T12888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  520.271177][T11279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.455595][T12904] loop5: detected capacity change from 0 to 512
[  520.475995][T12904] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  520.550699][T12904] EXT4-fs (loop5): 1 truncate cleaned up
[  520.574822][T12904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  520.627592][T12912] loop2: detected capacity change from 0 to 8
[  520.752430][T12904] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  520.812698][T12904] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.068408][T12918] loop5: detected capacity change from 0 to 2048
[  521.114057][T12918] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  521.140225][T12918] UDF-fs: Scanning with blocksize 512 failed
[  521.172605][T12918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  521.280432][T12912] SQUASHFS error: Unable to read directory block [629:46]
[  523.732018][T12938] loop5: detected capacity change from 0 to 1024
[  523.777933][T12938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.845920][T12947] loop7: detected capacity change from 0 to 1024
[  523.854015][T12947] hfsplus: type requires a 4 character value
[  523.861236][T12947] hfsplus: unable to parse mount options
[  524.075436][T11279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.166046][T12953] loop2: detected capacity change from 0 to 512
[  524.187352][T12953] EXT4-fs: Ignoring removed nobh option
[  524.247819][T12953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  524.301371][T12953] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1837: iget: bad i_size value: 38620345925642
[  524.329837][T12953] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1837: couldn't read orphan inode 15 (err -117)
[  524.406672][T12953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  524.532122][T12953] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.1837: iget: bad i_size value: 38620345925642
[  524.672408][T12967] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.1837: iget: bad i_size value: 38620345925642
[  525.495364][T12953] ext4: Unknown parameter './file0/file0'
[  525.700282][T11103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.932323][T12976] loop7: detected capacity change from 0 to 1024
[  525.954212][T12976] EXT4-fs: Ignoring removed nobh option
[  525.982305][T12976] EXT4-fs: Ignoring removed bh option
[  525.990383][T12976] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  526.046484][T12976] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.069692][T12979] loop2: detected capacity change from 0 to 2048
[  526.097025][T12979] UDF-fs: warning (device loop2): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[  526.113900][T12979] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[  526.286779][T12984] loop5: detected capacity change from 0 to 1024
[  526.330374][T12976] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4031: comm syz.7.1844: Allocating blocks 497-513 which overlap fs metadata
[  526.412880][T12988] loop2: detected capacity change from 0 to 2048
[  526.430796][T12988] UDF-fs: bad mount option "defcont‡Þð+Ì8rÛ8xtroot}®°oèDÉ·°BúpM#d%" or missing value
[  526.579090][T12976] EXT4-fs (loop7): pa ffff88807778c9f8: logic 256, phys. 385, len 8
[  526.587436][T12976] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[  528.279539][T12996] hfsplus: xattr searching failed
[  528.285497][T12998] hfsplus: xattr search failed
[  529.003520][T12176] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.168307][T13012] loop6: detected capacity change from 0 to 512
[  529.199363][T13012] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  529.229147][T13012] EXT4-fs (loop6): 1 truncate cleaned up
[  529.231659][T13015] loop7: detected capacity change from 0 to 256
[  529.246488][T13012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  529.400735][T13015] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d)
[  530.282059][T12260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.826151][T13033] loop7: detected capacity change from 0 to 8192
[  531.013696][T13033] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF
[  531.032915][T13033] FAT-fs (loop7): Filesystem has been set read-only
[  531.171856][T13044] loop5: detected capacity change from 0 to 512
[  531.192426][T13044] EXT4-fs error (device loop5): ext4_get_journal_inode:5807: comm syz.5.1861: inode #1792: comm syz.5.1861: iget: illegal inode #
[  531.240026][T13044] EXT4-fs (loop5): Remounting filesystem read-only
[  531.265671][T13044] EXT4-fs (loop5): no journal found
[  531.280557][T13044] EXT4-fs (loop5): can't get journal size
[  531.292605][T13044] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  531.337645][T13044] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  531.370663][T13044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  531.508444][T13044] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  531.581101][T11279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.595600][T13055] 9pnet_fd: Insufficient options for proto=fd
[  531.772809][T13057] fuse: Bad value for 'group_id'
[  532.578160][T13057] fuse: Unknown parameter '0x0000000000000007‡ëò	àgçÙ%wAÝÕ˘Év…¾û'
[  532.608041][T13065] loop7: detected capacity change from 0 to 1024
[  532.621635][T13065] EXT4-fs: Ignoring removed bh option
[  532.628721][T13065] EXT4-fs: Ignoring removed bh option
[  532.647466][T13068] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  532.659756][T13065] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  532.734026][T13065] EXT4-fs error (device loop7): ext4_map_blocks:608: inode #3: block 2: comm syz.7.1869: lblock 2 mapped to illegal pblock 2 (length 1)
[  532.872511][T13065] EXT4-fs (loop7): Remounting filesystem read-only
[  532.893115][T13065] Quota error (device loop7): qtree_write_dquot: dquota write failed
[  532.898162][  T787] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  532.901283][T13065] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  532.959490][T13065] EXT4-fs (loop7): 1 orphan inode deleted
[  532.981464][T13065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.018343][T13065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.115308][  T787] usb 3-1: Using ep0 maxpacket: 16
[  533.153028][  T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  533.193643][  T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  533.241668][  T787] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  533.272029][  T787] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  533.308439][  T787] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  533.329628][T13081] loop6: detected capacity change from 0 to 1024
[  533.357018][  T787] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40
[  533.367406][T13081] EXT4-fs: Ignoring removed nobh option
[  533.373196][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  533.387156][  T787] usb 3-1: SerialNumber: syz
[  533.420164][T13081] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  533.433549][T13057] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  533.483923][  T787] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  533.499994][T13081] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.1871: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  533.541446][  T787] cdc_acm: probe of 3-1:1.0 failed with error -12
[  533.751492][T13081] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1871: couldn't read orphan inode 11 (err -117)
[  533.765326][T13081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  534.696543][ T5796] Bluetooth: hci3: command 0x0406 tx timeout
[  534.896781][T12260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.236556][T13097] 9pnet_fd: Insufficient options for proto=fd
[  535.688662][T13102] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  535.693854][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  535.701410][  T787] usb 3-1: USB disconnect, device number 45
[  536.050127][T13116] loop2: detected capacity change from 0 to 8
[  536.123586][T13116] SQUASHFS error: zlib decompression failed, data probably corrupt
[  536.147020][T13116] SQUASHFS error: Failed to read block 0x9b: -5
[  536.185399][T13116] SQUASHFS error: Unable to read metadata cache entry [99]
[  536.203377][T13116] SQUASHFS error: Unable to read inode 0x127
[  536.357578][T13119] loop7: detected capacity change from 0 to 512
[  536.409804][T13119] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  536.448675][T13119] EXT4-fs (loop7): invalid journal inode
[  536.478375][T13119] EXT4-fs (loop7): can't get journal size
[  536.502292][T13119] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002]
[  536.528505][T13119] System zones: 1-12, 13-13
[  536.540798][T13119] EXT4-fs (loop7): 1 truncate cleaned up
[  536.547372][T13131] 9pnet_fd: Insufficient options for proto=fd
[  536.554560][T13119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  536.736398][T13133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  537.568123][T12176] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.655596][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  537.687471][T13139] fuse: Bad value for 'group_id'
[  537.695115][T13139] fuse: Unknown parameter '0x0000000000000007‡ëò	àgçÙ%wAÝÕ˘Év…¾û'
[  538.183297][    T8] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  642.852841][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  642.859944][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P13141/1:b..l
[  642.868599][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=83217, q=420 ncpus=2)
[  642.876368][    C1] task:syz.7.1889      state:R  running task     stack:27528 pid:13141 ppid:12176  flags:0x00004000
[  642.888494][    C1] Call Trace:
[  642.891815][    C1]  <TASK>
[  642.894821][    C1]  __schedule+0x14d2/0x44d0
[  642.899410][    C1]  ? mark_lock+0x94/0x320
[  642.903783][    C1]  ? asan.module_dtor+0x20/0x20
[  642.908685][    C1]  ? mark_lock+0x94/0x320
[  642.913063][    C1]  ? preempt_schedule+0xab/0xc0
[  642.917972][    C1]  preempt_schedule_common+0x82/0xc0
[  642.923299][    C1]  preempt_schedule+0xab/0xc0
[  642.928047][    C1]  ? schedule_preempt_disabled+0x20/0x20
[  642.933749][    C1]  ? __lock_acquire+0x7c80/0x7c80
[  642.938827][    C1]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  642.944500][    C1]  preempt_schedule_thunk+0x1a/0x30
[  642.949767][    C1]  _raw_spin_unlock+0x3a/0x40
[  642.954771][    C1]  unmap_page_range+0x236f/0x2fe0
[  642.959891][    C1]  ? copy_page_range+0x3600/0x3600
[  642.965082][    C1]  ? unmap_single_vma+0x1b0/0x2a0
[  642.970188][    C1]  unmap_vmas+0x25e/0x3a0
[  642.974587][    C1]  ? unmap_page_range+0x2fe0/0x2fe0
[  642.979852][    C1]  ? __lock_acquire+0x7c80/0x7c80
[  642.985026][    C1]  exit_mmap+0x200/0xb50
[  642.989320][    C1]  ? exit_mm_release+0x1a/0x30
[  642.994126][    C1]  ? vm_brk+0x30/0x30
[  642.998151][    C1]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  643.003858][    C1]  ? uprobe_clear_state+0x278/0x290
[  643.009095][    C1]  ? mm_update_next_owner+0x562/0x6c0
[  643.014523][    C1]  __mmput+0x118/0x3c0
[  643.018635][    C1]  exit_mm+0x1da/0x2c0
[  643.022843][    C1]  ? do_exit+0x23c0/0x23c0
[  643.027337][    C1]  ? taskstats_exit+0x35e/0x9e0
[  643.032280][    C1]  do_exit+0x88e/0x23c0
[  643.036492][    C1]  ? put_task_struct+0xc0/0xc0
[  643.041307][    C1]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  643.047323][    C1]  ? get_signal+0x1068/0x1400
[  643.052046][    C1]  ? lock_chain_count+0x20/0x20
[  643.056935][    C1]  ? _raw_spin_lock_irq+0xaf/0xe0
[  643.062010][    C1]  do_group_exit+0x21b/0x2d0
[  643.066650][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  643.071898][    C1]  get_signal+0x12fc/0x1400
[  643.076471][    C1]  arch_do_signal_or_restart+0x96/0x780
[  643.082071][    C1]  ? get_sigframe_size+0x20/0x20
[  643.087078][    C1]  ? exit_to_user_mode_loop+0x3b/0x110
[  643.092586][    C1]  exit_to_user_mode_loop+0x70/0x110
[  643.097921][    C1]  exit_to_user_mode_prepare+0xb1/0x140
[  643.103516][    C1]  syscall_exit_to_user_mode+0x1a/0x50
[  643.109116][    C1]  do_syscall_64+0x61/0xb0
[  643.113583][    C1]  ? clear_bhb_loop+0x40/0x90
[  643.118301][    C1]  ? clear_bhb_loop+0x40/0x90
[  643.123014][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  643.128968][    C1] RIP: 0033:0x7fdd68d8ebe9
[  643.133424][    C1] RSP: 002b:00007fdd69bb30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  643.141893][    C1] RAX: fffffffffffffe00 RBX: 00007fdd68fc5fa8 RCX: 00007fdd68d8ebe9
[  643.149908][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdd68fc5fa8
[  643.157923][    C1] RBP: 00007fdd68fc5fa0 R08: 0000000000000000 R09: 0000000000000000
[  643.165928][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  643.173935][    C1] R13: 00007fdd68fc6038 R14: 00007ffce1dc2fd0 R15: 00007ffce1dc30b8
[  643.181957][    C1]  </TASK>
[  643.185009][    C1] rcu: rcu_preempt kthread starved for 10452 jiffies! g83217 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  643.196233][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  643.206244][    C1] rcu: RCU grace-period kthread stack dump:
[  643.212155][    C1] task:rcu_preempt     state:R  running task     stack:27752 pid:17    ppid:2      flags:0x00004000
[  643.223011][    C1] Call Trace:
[  643.226331][    C1]  <TASK>
[  643.229301][    C1]  __schedule+0x14d2/0x44d0
[  643.233880][    C1]  ? alloc_object+0x650/0x650
[  643.238605][    C1]  ? asan.module_dtor+0x20/0x20
[  643.243492][    C1]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  643.249525][    C1]  ? lock_chain_count+0x20/0x20
[  643.254413][    C1]  ? preempt_schedule+0xab/0xc0
[  643.259329][    C1]  preempt_schedule_common+0x82/0xc0
[  643.264665][    C1]  preempt_schedule+0xab/0xc0
[  643.269387][    C1]  ? schedule_preempt_disabled+0x20/0x20
[  643.275066][    C1]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  643.280736][    C1]  preempt_schedule_thunk+0x1a/0x30
[  643.286012][    C1]  _raw_spin_unlock_irqrestore+0xfa/0x110
[  643.291806][    C1]  ? _raw_spin_unlock+0x40/0x40
[  643.296708][    C1]  ? finish_swait+0xc7/0x1d0
[  643.301341][    C1]  rcu_gp_fqs_loop+0x31b/0x1560
[  643.306249][    C1]  ? rcu_gp_init+0x110e/0x1510
[  643.311069][    C1]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  643.317273][    C1]  ? rcu_gp_init+0x1510/0x1510
[  643.322103][    C1]  ? rcu_gp_cleanup+0xb4c/0xca0
[  643.327034][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  643.332292][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  643.337548][    C1]  rcu_gp_kthread+0x99/0x380
[  643.342199][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  643.347451][    C1]  ? __kthread_parkme+0x7a/0x1c0
[  643.352454][    C1]  ? __kthread_parkme+0x162/0x1c0
[  643.357533][    C1]  kthread+0x2fa/0x390
[  643.361631][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  643.366786][    C1]  ? kthread_blkcg+0xd0/0xd0
[  643.371410][    C1]  ret_from_fork+0x48/0x80
[  643.375858][    C1]  ? kthread_blkcg+0xd0/0xd0
[  643.380472][    C1]  ret_from_fork_asm+0x11/0x20
[  643.385294][    C1]  </TASK>
[  643.388340][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  643.394703][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[  643.401757][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  643.411838][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  643.417604][    C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 36 3a 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56
[  643.437244][    C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6
[  643.443348][    C1] RAX: d3f74e2d91153900 RBX: ffffffff8161923b RCX: d3f74e2d91153900
[  643.451352][    C1] RDX: 0000000000000001 RSI: ffffffff8aaaba20 RDI: ffffffff8afc7040
[  643.459351][    C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9
[  643.467352][    C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a8f28
[  643.475351][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100364e780
[  643.483372][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  643.492331][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  643.498939][    C1] CR2: 0000564b7c50da38 CR3: 0000000065c9e000 CR4: 00000000003506e0
[  643.506945][    C1] Call Trace:
[  643.510254][    C1]  <TASK>
[  643.513214][    C1]  default_idle+0x13/0x20
[  643.517590][    C1]  default_idle_call+0x6c/0xa0
[  643.522398][    C1]  do_idle+0x1eb/0x510
[  643.526512][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  643.531747][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  643.537957][    C1]  cpu_startup_entry+0x43/0x60
[  643.542764][    C1]  start_secondary+0xee/0xf0
[  643.547395][    C1]  secondary_startup_64_no_verify+0x179/0x17b
[  643.553601][    C1]  </TASK>
[  644.230909][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  644.237328][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  644.248954][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  644.255473][ T1284] ieee802154 phy1 wpan1: encryption failed: -22