last executing test programs:

3m12.692429695s ago: executing program 1 (id=3206):
r0 = socket$kcm(0x10, 0x0, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040006c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00010ffa10e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
fsopen(&(0x7f0000000040)='ncpfs\x00', 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100), &(0x7f0000000540))
r1 = gettid()
timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000048e582a17094b4d9f23f60a7f0"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x80)
ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000000)={0x0, 0x1, 0xffffffc, 0x8000000, 0xffffffff, 0x9, "26000000000000000000000000000019", 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x3000851, &(0x7f00000004c0)={[{@nospace_cache}, {@datacow}, {@nossd}, {@barrier}, {@discard}, {@space_cache_v1}, {@space_cache_v2}, {@nossd_spread}]}, 0x1, 0x5110, &(0x7f0000018c40)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800)
read(r5, &(0x7f0000000000)=""/35, 0x23)

3m10.586660541s ago: executing program 1 (id=3219):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_MEMORY={0x8}]}}]}, 0x44}}, 0x4800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b0568000800", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x6, 0xba2, 0x0, 0x3c, {0x8, 0xffffffff}, 0xd1, 0x9}})
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x138, 0x1a0, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0xe}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398)

3m5.003372881s ago: executing program 1 (id=3245):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300))
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random='\rh\x00 \x00'})

3m4.873742782s ago: executing program 1 (id=3248):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

3m3.903448671s ago: executing program 1 (id=3250):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
syz_open_dev$vivid(&(0x7f00000000c0), 0x3, 0x2)
ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000100)={0x7f, "54abd6d0050865ee2d04b0a051be8cb700", 0x4, 0x1, 0xffffffff, 0x10004, 0x2, 0x1, 0x2, 0x3})
add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x310)

3m0.038244069s ago: executing program 1 (id=3261):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2m58.830907252s ago: executing program 32 (id=3261):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2m41.998756919s ago: executing program 3 (id=3304):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0)
open_by_handle_at(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000f8000000000000003e"], 0x30000)

2m41.389616102s ago: executing program 3 (id=3308):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x20048004)

2m40.234356976s ago: executing program 3 (id=3311):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100)={[{@gid}, {@anchor={'anchor', 0x3d, 0x7}}, {@gid_ignore}, {@uid}, {@unhide}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@gid_forget}, {@dmode={'dmode', 0x3d, 0x4}}]}, 0x1, 0xc43, &(0x7f00000001c0)="$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")
creat(0x0, 0x0)

2m39.050345121s ago: executing program 3 (id=3315):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

2m38.066994791s ago: executing program 3 (id=3318):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='mm_collapse_huge_page\x00', r1, 0x0, 0x2}, 0x18)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket(0x2, 0x3, 0xff)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)

2m35.093907495s ago: executing program 3 (id=3325):
r0 = socket$kcm(0x10, 0x0, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040006c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00010ffa10e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
fsopen(&(0x7f0000000040)='ncpfs\x00', 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100), &(0x7f0000000540))
r1 = gettid()
timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000048e582a17094b4d9f23f60a7f0"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x80)
ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000000)={0x0, 0x1, 0xffffffc, 0x8000000, 0xffffffff, 0x9, "26000000000000000000000000000019", 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800)
read(r6, &(0x7f0000000000)=""/35, 0x23)

2m34.985504721s ago: executing program 4 (id=3326):
r0 = socket$kcm(0x10, 0x0, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040006c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00010ffa10e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
fsopen(&(0x7f0000000040)='ncpfs\x00', 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100), &(0x7f0000000540))
r1 = gettid()
timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000048e582a17094b4d9f23f60a7f0"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x80)
ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000000)={0x0, 0x1, 0xffffffc, 0x8000000, 0xffffffff, 0x9, "26000000000000000000000000000019", 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x3000851, &(0x7f00000004c0)={[{@nospace_cache}, {@datacow}, {@nossd}, {@barrier}, {@discard}, {@space_cache_v1}, {@space_cache_v2}, {@nossd_spread}]}, 0x1, 0x5110, &(0x7f0000018c40)="$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")
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800)
read(r5, &(0x7f0000000000)=""/35, 0x23)

2m34.290369297s ago: executing program 33 (id=3325):
r0 = socket$kcm(0x10, 0x0, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040006c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00010ffa10e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
fsopen(&(0x7f0000000040)='ncpfs\x00', 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100), &(0x7f0000000540))
r1 = gettid()
timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000048e582a17094b4d9f23f60a7f0"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x80)
ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000000)={0x0, 0x1, 0xffffffc, 0x8000000, 0xffffffff, 0x9, "26000000000000000000000000000019", 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800)
read(r6, &(0x7f0000000000)=""/35, 0x23)

2m33.908133281s ago: executing program 4 (id=3329):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

2m33.598282661s ago: executing program 4 (id=3331):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/mnt\x00')

2m29.581510943s ago: executing program 4 (id=3342):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

2m27.684190789s ago: executing program 4 (id=3344):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60)
listen(r1, 0x0)
accept4$nfc_llcp(r1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)

2m26.139703768s ago: executing program 4 (id=3347):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80802, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mkdir(&(0x7f0000000480)='./file1\x00', 0x58)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
pipe2$9p(&(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/ttyS3\x00'}, {0x20, '%*'}, {0x20, '&'}, {0x20, '/dev/ttyS3\x00'}], 0xa, "344327873c"}, 0x2d)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x104}}, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0)

2m25.251911692s ago: executing program 34 (id=3347):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80802, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mkdir(&(0x7f0000000480)='./file1\x00', 0x58)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
pipe2$9p(&(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/ttyS3\x00'}, {0x20, '%*'}, {0x20, '&'}, {0x20, '/dev/ttyS3\x00'}], 0xa, "344327873c"}, 0x2d)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x104}}, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0)

8.134460049s ago: executing program 6 (id=3738):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="30dfc92c0a", 0x5}], 0x1, 0x0, 0x0, 0x40c1}], 0x1, 0xc004)

7.834442634s ago: executing program 6 (id=3740):
ioperm(0x8, 0xa, 0x3)
getpgid(0x0)

7.169364527s ago: executing program 2 (id=3741):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
close_range(r3, 0xffffffffffffffff, 0x0)

7.168752296s ago: executing program 7 (id=3742):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

7.042469166s ago: executing program 6 (id=3744):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000300), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0600"], 0x48}}, 0x0)

6.434343629s ago: executing program 6 (id=3747):
socket(0x10, 0x803, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000000)=""/26, 0x0)
clock_settime(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000000280), 0x80000000000003, 0x26e300)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
exit(0x7)

6.248022793s ago: executing program 8 (id=3748):
unshare(0x6e010e00)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x8001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
capset(0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0xd)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x200000000000008f, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x6)
r3 = socket(0x23, 0x5, 0x0)
listen(r3, 0x0)
connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x41)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x8000, 0x0)
r4 = getpgid(0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x2, r4})
process_vm_writev(0x0, &(0x7f0000000180)=[{&(0x7f0000000100)}], 0x1, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/48, 0x30}, {&(0x7f0000000400)=""/80, 0x50}], 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006c40), 0x0, 0x40015)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00", 0x2)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, 0x0, 0x0)

5.055524628s ago: executing program 2 (id=3749):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x7fffffff, 0x5, 0xb, 0x11, "2fca70b1cac71bae4d9be8f3e9e5f7eb5d3b1237f217455e6f0106e40bfe51ec8e60a6ad35237dcfb0c85f1a717f44d1045ccaf28ad199bc052b4bd84a9788d2", "31dc9d0fb5c966c596237e9176f35b13ea3ec0b05fd40345b06dd0fa555c6273", [0x2, 0xe9]})

4.067453927s ago: executing program 8 (id=3752):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="30dfc92c0a", 0x5}], 0x1, 0x0, 0x0, 0x40c1}], 0x1, 0xc004)

4.029253411s ago: executing program 2 (id=3753):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x0, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)

4.009534013s ago: executing program 7 (id=3754):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x1, 0x3, 0x404})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x7ff, 0xa, 0x1})

3.65858304s ago: executing program 8 (id=3755):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

3.569305205s ago: executing program 7 (id=3756):
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioperm(0x0, 0x7fff, 0x15f9)
unlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3.329904733s ago: executing program 7 (id=3757):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x1, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210)
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/mcfilter\x00')
pread64(r1, 0x0, 0x0, 0x604)

3.156364615s ago: executing program 0 (id=3758):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x11, 0x2b6, &(0x7f0000000200)="$eJzs3U9rE0EYx/HfbNI22lK3tiJ4rBb0Ilov4iUieRGeRG0iFENFrfjnVMWTiN69+xZ8EV4U34CePPkC6mllZifZJLvZTUOTber3Aw2b7D47z2T/zDyBsgLw37rV+Pn52m/7Z6SKKtK7G1IgqSZVJZ3R2dqznd3t3Xarmbejiouwf0ZxpElts7XTygq1cS7CC+27qpZ6P8NkRFF081fZSaB07urPEEgL/up062tTzyzf6zHj9g45j1lj9rWvF1ouOw8AQLn8+B/4cX7Jz9+DQNrww/6RHP/HtV92AhMX5a7tGf9dlRUZe3xPuVVJvedKOLs+6FSJo7Q8N/B+XvGZ1TfBNEVVpcslOPFgu926vPWo3Qz0RnWvZ7M199qMT92OgmzXM2rTHCP03WTPKBddH+ZsHzbj/J9L6st/dcwWx2a+mu/mjgn1Sc3u/K8aGXuY3JEKB45UnP+V4Xt0vQztVvK3jXq9HvRtsuIaOedb8Ap6WcuuSNQ5o1bU/wNBWJSnizo9EBX37mpB1Gpm1Gbn3ZCotb4o25vu2Ty8vUkzH8xts64/+qJGz/w/sPltKPfKTK4asxEPBe4bj/szn91c1e0zTI0c6cul+y0uDEv9b/49DQfwXvd1XctPX756WGm3W0/swr2MhcdL3U/m3kqZ25S8oL3kkwVFTmrjzqA0zcQuHeoO7f2jcGN7lR2Jg3KsFxrfpnsilbFQ8v0JU5Ec9LIzQUnsvMvE9V9Sr1TjyZ59CTPn6SP+EOD3GNk5dreCS2KjeEYu6eSBKrjF4RVcuuZK1Yyu5jp/Uboweouhz/OYMA390F1+/wcAAAAAAAAAAAAAAAAAAJg10/h3grL7CAAAAAAAAAAAAAAAAAAAAADArOs+/1ed5/9qtOf/Dj6K5TCf//txRzz/F5i8fwEAAP//FZd8vg==")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
truncate(&(0x7f0000000140)='./file2\x00', 0x5c00)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0})
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f0000000a40)="$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")
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0xff, 0x2}}, 0x18)
connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18)
sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000080))

3.114440101s ago: executing program 7 (id=3759):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r1 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty, 0x7fff}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
write$binfmt_misc(r1, &(0x7f00000002c0), 0xfff7)

3.114283193s ago: executing program 8 (id=3760):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x80)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
get_robust_list(0x0, 0x0, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

2.859908189s ago: executing program 8 (id=3761):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x61ac, "dc3207000100070000000000569400", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c2413b9d44aec57f2e2ad238a7b448ed886910284ed923c31d4b8affbf514fd", r2, <r3=>0xffffffffffffffff})
close_range(r0, r2, 0x0)
ioctl$SYNC_IOC_FILE_INFO(r3, 0x40103e05, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x2e, 0x0, 0x0})

2.694324159s ago: executing program 8 (id=3762):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x10, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0xfffffffd, 0x0, 0x3f9, 0x0, 0x34}, 0x9c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000a0a010100000000000000000200000808000640ec0000000800f43f0000003a08000440000000020981020073797a3000000000200011800d0001007379"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback, 0x1}, 0x1c)
socket(0x10, 0x3, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

2.634503481s ago: executing program 0 (id=3763):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x1, 0x6a7, &(0x7f00000007c0)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)

2.420315823s ago: executing program 0 (id=3764):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCFLSH(r0, 0x404c4701, 0x20000000)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5)

2.170359492s ago: executing program 0 (id=3765):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x7fffffff, 0x5, 0xb, 0x11, "2fca70b1cac71bae4d9be8f3e9e5f7eb5d3b1237f217455e6f0106e40bfe51ec8e60a6ad35237dcfb0c85f1a717f44d1045ccaf28ad199bc052b4bd84a9788d2", "31dc9d0fb5c966c596237e9176f35b13ea3ec0b05fd40345b06dd0fa555c6273", [0x2, 0xe9]})

2.133797647s ago: executing program 7 (id=3766):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d010300010009210500000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

2.031160647s ago: executing program 5 (id=3767):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="30dfc92c0a", 0x5}], 0x1, 0x0, 0x0, 0x40c1}], 0x1, 0xc004)

1.96247182s ago: executing program 0 (id=3768):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x1, 0x3, 0x404})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x7ff, 0xa, 0x1})

1.863961724s ago: executing program 5 (id=3769):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x24008800)

1.795678723s ago: executing program 0 (id=3770):
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1}, 0x80, 0x0}, 0x80)

1.731491314s ago: executing program 5 (id=3771):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r0, 0x0, 0x20000084)

1.663806196s ago: executing program 6 (id=3772):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000)
r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r0, 0x2287, &(0x7f0000000000))

1.509954633s ago: executing program 5 (id=3773):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x80)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
get_robust_list(0x0, 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

1.509547838s ago: executing program 2 (id=3774):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x61ac, "dc3207000100070000000000569400", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c2413b9d44aec57f2e2ad238a7b448ed886910284ed923c31d4b8affbf514fd", r2, <r3=>0xffffffffffffffff})
close_range(r0, r2, 0x0)
ioctl$SYNC_IOC_FILE_INFO(r3, 0x40103e05, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x2e, 0x0, 0x0})

1.422266748s ago: executing program 6 (id=3775):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x11, 0x2b6, &(0x7f0000000200)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
truncate(&(0x7f0000000140)='./file2\x00', 0x5c00)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0})
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f0000000a40)="$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")
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0xff, 0x2}}, 0x18)
connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18)
sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000080))

1.222547704s ago: executing program 2 (id=3776):
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="8000be000a000200634ccf"], 0x28}}, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000000c0))
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@datasec={0x6, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x2, 0x2}], "8f54b7"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '@'}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d002, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x18, 0x0, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
sendfile(r4, r0, 0x0, 0x80006)
dup(0xffffffffffffffff)

836.555756ms ago: executing program 5 (id=3777):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, 0x1, 0x2, 0xf07, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0)

162.400847ms ago: executing program 5 (id=3778):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCFLSH(r0, 0x404c4701, 0x20000000)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5)

0s ago: executing program 2 (id=3779):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsmount(r1, 0x0, 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
ftruncate(0xffffffffffffffff, 0xee72)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
dup3(0xffffffffffffffff, r5, 0x80000)

kernel console output (not intermixed with test programs):

sb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  935.159050][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.184197][    T9] usb 4-1: config 0 descriptor??
[  935.192483][T16909] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  935.616951][ T5823] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  935.925908][T15984] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[  935.932609][T15510] usb 4-1: USB disconnect, device number 11
[  936.481454][T16962] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3015'.
[  937.166123][T16973] blktrace: Concurrent blktraces are not allowed on sg0
[  939.883220][T16996] fuse: Bad value for 'fd'
[  941.733088][T17029] blktrace: Concurrent blktraces are not allowed on sg0
[  944.870709][T17070] blktrace: Concurrent blktraces are not allowed on sg0
[  947.968684][T17104] blktrace: Concurrent blktraces are not allowed on sg0
[  950.595974][T17123] loop1: detected capacity change from 0 to 64
[  950.753412][T17123] syz.1.3052: attempt to access beyond end of device
[  950.753412][T17123] loop1: rw=0, sector=2590, nr_sectors = 2 limit=64
[  950.792477][T17123] Buffer I/O error on dev loop1, logical block 1295, async page read
[  950.878740][T17123] syz.1.3052: attempt to access beyond end of device
[  950.878740][T17123] loop1: rw=0, sector=2590, nr_sectors = 2 limit=64
[  950.888525][T17129] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3051'.
[  950.994636][T17123] Buffer I/O error on dev loop1, logical block 1295, async page read
[  951.208829][   T29] audit: type=1800 audit(1737633568.273:91): pid=17123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3052" name="file2" dev="loop1" ino=6 res=0 errno=0
[  951.681087][T17148] blktrace: Concurrent blktraces are not allowed on sg0
[  954.399031][T17168] loop1: detected capacity change from 0 to 1024
[  955.262337][T17184] loop4: detected capacity change from 0 to 64
[  956.901427][T17201] blktrace: Concurrent blktraces are not allowed on sg0
[  959.534153][T17240] blktrace: Concurrent blktraces are not allowed on sg0
[  960.654930][ T5839] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  960.913484][ T5839] usb 3-1: Using ep0 maxpacket: 8
[  960.935152][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  961.041187][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  961.086406][T16700] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  961.143724][ T5839] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  961.208986][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  961.259695][ T5839] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  962.240017][ T5839] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  962.249791][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  962.257901][T16700] usb 5-1: Using ep0 maxpacket: 16
[  962.265239][T16700] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  962.664108][T16700] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  962.697006][T16700] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  962.748967][ T5839] usb 3-1: config 0 descriptor??
[  962.764836][T17244] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  962.784110][T16700] usb 5-1: config 0 interface 0 has no altsetting 0
[  962.823563][T16700] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  963.089021][T16700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  963.098529][T16700] usb 5-1: Product: syz
[  963.103348][T16700] usb 5-1: Manufacturer: syz
[  963.109839][T16700] usb 5-1: SerialNumber: syz
[  963.119760][T16700] usb 5-1: config 0 descriptor??
[  963.138780][T15984] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[  963.146181][ T5839] usb 3-1: USB disconnect, device number 10
[  964.543270][T17288] tty tty27: ldisc open failed (-12), clearing slot 26
[  965.147976][T16700] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18
[  965.184084][ T5184] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  965.206040][T17294] nvme_fabrics: missing parameter 'transport=%s'
[  965.212452][T17294] nvme_fabrics: missing parameter 'nqn=%s'
[  965.257830][ T5184] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  966.340306][ T5184] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  966.359752][T17295] team0 (unregistering): Port device team_slave_0 removed
[  966.370484][T17295] team0 (unregistering): Port device team_slave_1 removed
[  966.579534][ T5184] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  966.624642][    T8] usb 5-1: USB disconnect, device number 11
[  966.691354][ T5849] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[  966.760349][T17325] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3087'.
[  966.982187][T16700] kernel read not supported for file /dsp (pid: 16700 comm: kworker/1:5)
[  967.001871][T17329] blktrace: Concurrent blktraces are not allowed on sg0
[  970.162997][ T5886] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  970.813011][ T5886] usb 5-1: Using ep0 maxpacket: 8
[  970.874021][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  970.906429][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  971.036497][ T5886] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  971.114544][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  971.250692][ T5886] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  971.260988][ T5886] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  971.270725][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  971.316329][ T5886] usb 5-1: config 0 descriptor??
[  971.485633][T17368] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  972.102568][T17399] lo speed is unknown, defaulting to 1000
[  972.116098][T17399] virt_wifi0 speed is unknown, defaulting to 1000
[  973.474879][T15984] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[  973.500252][ T5839] usb 5-1: USB disconnect, device number 12
[  973.579511][T17414] loop3: detected capacity change from 0 to 8
[  973.660773][T17417] loop4: detected capacity change from 0 to 1024
[  973.685286][T17414] SQUASHFS error: xz decompression failed, data probably corrupt
[  973.715282][T17414] SQUASHFS error: Failed to read block 0x108: -5
[  973.734157][T17414] SQUASHFS error: Unable to read metadata cache entry [106]
[  973.741509][T17414] SQUASHFS error: Unable to read inode 0x101f
[  976.704037][T17464] loop4: detected capacity change from 0 to 8
[  976.847012][T17464] SQUASHFS error: xz decompression failed, data probably corrupt
[  976.923498][T17464] SQUASHFS error: Failed to read block 0x108: -5
[  977.137225][T17464] SQUASHFS error: Unable to read metadata cache entry [106]
[  977.223329][T15510] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  977.303044][T17464] SQUASHFS error: Unable to read inode 0x101f
[  977.483861][T15510] usb 4-1: Using ep0 maxpacket: 8
[  977.514311][T15510] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  977.723477][T15510] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  977.775758][T15510] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  978.701516][T15510] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  978.762013][T15510] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  978.883230][T15510] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  978.905048][T15510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  978.946928][T15510] usb 4-1: config 0 descriptor??
[  978.956325][T17476] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  979.308103][T17518] loop2: detected capacity change from 0 to 8
[  979.929801][T15984] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[  979.929836][    T8] usb 4-1: USB disconnect, device number 12
[  979.953368][T17518] SQUASHFS error: xz decompression failed, data probably corrupt
[  979.961300][T17518] SQUASHFS error: Failed to read block 0x108: -5
[  979.970369][T17518] SQUASHFS error: Unable to read metadata cache entry [106]
[  979.978044][T17518] SQUASHFS error: Unable to read inode 0x101f
[  980.273350][T17548] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3122'.
[  981.716758][T17558] xt_hashlimit: max too large, truncated to 1048576
[  981.857754][T17562] loop4: detected capacity change from 0 to 8
[  982.073037][T17571] fuse: Bad value for 'fd'
[  982.433924][T17562] SQUASHFS error: xz decompression failed, data probably corrupt
[  982.473079][T17562] SQUASHFS error: Failed to read block 0x108: -5
[  982.545806][T17562] SQUASHFS error: Unable to read metadata cache entry [106]
[  982.569649][T17562] SQUASHFS error: Unable to read inode 0x101f
[  985.327064][T17629] loop1: detected capacity change from 0 to 512
[  985.556176][T17637] 9pnet: p9_errstr2errno: server reported unknown error niband/rdm
[  986.626873][T17651] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3146'.
[  987.219931][T17653] loop2: detected capacity change from 0 to 8
[  987.404682][T17662] loop5: detected capacity change from 0 to 8
[  987.437103][T17653] SQUASHFS error: xz decompression failed, data probably corrupt
[  987.561768][T17653] SQUASHFS error: Failed to read block 0x108: -5
[  987.726315][T17653] SQUASHFS error: Unable to read metadata cache entry [106]
[  987.863990][T17662] SQUASHFS error: xz decompression failed, data probably corrupt
[  987.905761][T17653] SQUASHFS error: Unable to read inode 0x101f
[  987.910852][T17662] SQUASHFS error: Failed to read block 0x108: -5
[  987.952635][T17662] SQUASHFS error: Unable to read metadata cache entry [106]
[  987.960197][T17662] SQUASHFS error: Unable to read inode 0x101f
[  988.823105][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  988.913314][T17687] loop5: detected capacity change from 0 to 1024
[  989.405025][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  989.513048][    T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  989.522185][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.603400][    T9] usb 2-1: config 0 descriptor??
[  989.635749][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  990.104587][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[  990.134137][T17713] netlink: 'syz.2.3166': attribute type 1 has an invalid length.
[  990.276368][    T9] pwc: recv_control_msg error -32 req 02 val 2700
[  990.291418][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[  990.308425][    T9] pwc: recv_control_msg error -32 req 04 val 1000
[  990.317152][    T9] pwc: recv_control_msg error -32 req 04 val 1300
[  990.343885][    T9] pwc: recv_control_msg error -32 req 04 val 1400
[  990.384451][    T9] pwc: recv_control_msg error -32 req 02 val 2000
[  990.402453][    T9] pwc: recv_control_msg error -32 req 02 val 2100
[  990.416995][    T9] pwc: recv_control_msg error -32 req 04 val 1500
[  990.443790][    T9] pwc: recv_control_msg error -32 req 02 val 2500
[  990.461365][    T9] pwc: recv_control_msg error -32 req 02 val 2400
[  990.484675][    T9] pwc: recv_control_msg error -32 req 02 val 2600
[  990.515936][    T9] pwc: recv_control_msg error -32 req 02 val 2900
[  990.536293][    T9] pwc: recv_control_msg error -32 req 02 val 2800
[  990.563096][    T9] pwc: recv_control_msg error -32 req 04 val 1100
[  990.576792][    T9] pwc: Registered as video103.
[  990.606644][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19
[  991.273928][    T8] usb 2-1: USB disconnect, device number 10
[  991.643728][T17744] loop2: detected capacity change from 0 to 8
[  992.271446][T17744] SQUASHFS error: xz decompression failed, data probably corrupt
[  992.306925][T17744] SQUASHFS error: Failed to read block 0x108: -5
[  992.329602][T17744] SQUASHFS error: Unable to read metadata cache entry [106]
[  992.359541][T17744] SQUASHFS error: Unable to read inode 0x101f
[  992.747678][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  992.784819][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  992.882447][T17759] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3170'.
[  994.016165][T17785] loop2: detected capacity change from 0 to 128
[  994.110687][T17785] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  994.207395][T17785] ext4 filesystem being mounted at /563/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  994.395778][T17803] loop4: detected capacity change from 0 to 32768
[  994.412899][T17803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3186 (17803)
[  994.586737][T17803] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  994.623117][T17803] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  994.643026][T17803] BTRFS info (device loop4): using free-space-tree
[  994.968765][T12447] BTRFS warning (device loop4): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0
[  995.000245][ T5827] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  995.028521][T17803] BTRFS error (device loop4): failed to read chunk root
[  995.039319][T17803] BTRFS error (device loop4): open_ctree failed: -5
[  995.401806][T17788] loop5: detected capacity change from 0 to 32768
[  995.480973][T17788] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3185 (17788)
[  995.572506][T17788] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  995.641044][T17788] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  995.664509][T17832] loop4: detected capacity change from 0 to 4096
[  995.793717][T17788] BTRFS info (device loop5): rebuilding free space tree
[  995.833462][T17788] BTRFS info (device loop5): disabling free space tree
[  995.923077][T17788] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  995.932794][T17788] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  995.942178][T17829] ntfs3(loop4): failed to convert "046c" to maccroatian
[  996.165085][ T5839] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[  996.350794][ T5839] usb 4-1: No LPM exit latency info found, disabling LPM.
[  996.423585][ T5839] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt
[  996.602457][ T5839] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  996.703328][ T5823] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  996.726372][ T5839] usb 4-1: string descriptor 0 read error: -22
[  996.732670][ T5839] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  996.743918][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.798806][T17871] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  997.366828][T17896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3199'.
[  997.545957][T17898] loop5: detected capacity change from 0 to 16
[  997.769888][T17898] erofs: DAX unsupported by block device. Turning off DAX.
[  997.778391][T17898] erofs (device loop5): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  997.789907][T17898] erofs (device loop5): mounted with root inode @ nid 36.
[  998.080504][    T8] usb 4-1: USB disconnect, device number 13
[  998.275967][T17894] netlink: 'syz.2.3202': attribute type 1 has an invalid length.
[  999.015611][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3210'.
[  999.019963][T17930] loop5: detected capacity change from 0 to 1024
[  999.219400][T17934] loop1: detected capacity change from 0 to 32768
[  999.229783][T17934] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3206 (17934)
[  999.262748][T17931] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[  999.294675][T17934] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  999.294766][T17934] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  999.294798][T17934] BTRFS info (device loop1): using free-space-tree
[  999.769184][ T6805] BTRFS warning (device loop1): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0
[  999.769355][T17934] BTRFS error (device loop1): failed to read chunk root
[  999.884530][T17961] loop2: detected capacity change from 0 to 8
[  999.975117][T17934] BTRFS error (device loop1): open_ctree failed: -5
[  999.983562][T17961] SQUASHFS error: xz decompression failed, data probably corrupt
[  999.983592][T17961] SQUASHFS error: Failed to read block 0x108: -5
[  999.983609][T17961] SQUASHFS error: Unable to read metadata cache entry [106]
[  999.983625][T17961] SQUASHFS error: Unable to read inode 0x101f
[ 1000.011855][T11502] hfsplus: b-tree write err: -5, ino 4
[ 1000.099682][T17941] tty tty2: ldisc open failed (-12), clearing slot 1
[ 1000.509147][T17971] loop4: detected capacity change from 0 to 512
[ 1000.573927][T17971] EXT4-fs: Ignoring removed nobh option
[ 1000.666221][T17971] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1000.840651][T17971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1001.070552][   T29] audit: type=1800 audit(1737633618.143:92): pid=17971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3214" name="file1" dev="loop4" ino=15 res=0 errno=0
[ 1001.500365][T17978] sctp: failed to load transform for md5: -2
[ 1001.761943][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1001.899541][T18011] netlink: 'syz.5.3220': attribute type 1 has an invalid length.
[ 1003.259223][T18036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3224'.
[ 1003.328631][T18041] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[ 1003.673709][T18046] xt_socket: unknown flags 0xc
[ 1003.716877][T18056] loop5: detected capacity change from 0 to 8
[ 1003.873252][T18056] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1003.903875][T18061] loop3: detected capacity change from 0 to 1024
[ 1004.029362][T18056] SQUASHFS error: Failed to read block 0x108: -5
[ 1004.107785][T18056] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1004.162505][T18061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1004.167186][T18056] SQUASHFS error: Unable to read inode 0x101f
[ 1004.769812][T18061] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1004.986088][T18061] syzkaller1: entered promiscuous mode
[ 1004.998173][T18061] syzkaller1: entered allmulticast mode
[ 1005.531854][T18092] loop5: detected capacity change from 0 to 256
[ 1005.554131][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1005.597868][T18092] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[ 1006.101317][T18106] netlink: 'syz.5.3239': attribute type 1 has an invalid length.
[ 1006.441716][T18119] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[ 1006.513970][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1006.568102][T18126] loop4: detected capacity change from 0 to 1024
[ 1006.643117][T18126] hfsplus: failed to load root directory
[ 1006.683222][    T9] usb 4-1: Using ep0 maxpacket: 8
[ 1006.721011][T18137] loop4: detected capacity change from 0 to 8
[ 1006.738832][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1006.827648][T18137] squashfs: Unknown parameter 'Þ'
[ 1006.833729][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1006.890413][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1006.895136][T18141] loop1: detected capacity change from 0 to 1024
[ 1007.105762][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[ 1007.129626][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1007.161606][T18141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1007.179767][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1007.215371][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1007.230506][T18130] loop5: detected capacity change from 0 to 32768
[ 1007.238446][T18130] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3246 (18130)
[ 1007.255073][T18130] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1007.265279][T18130] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[ 1007.274079][T18130] BTRFS info (device loop5): using free-space-tree
[ 1007.328331][    T9] usb 4-1: config 0 descriptor??
[ 1007.399849][ T5896] BTRFS warning (device loop5): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0
[ 1007.449223][T18111] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1007.520461][T18130] BTRFS error (device loop5): failed to read chunk root
[ 1007.615005][ T5841] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[ 1007.713337][ T5841] EXT4-fs (loop1): Remounting filesystem read-only
[ 1007.725009][T18130] BTRFS error (device loop5): open_ctree failed: -5
[ 1008.985924][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1009.763039][T15984] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[ 1009.769639][    C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[ 1010.123861][ T5839] usb 4-1: USB disconnect, device number 14
[ 1011.309889][T18205] loop3: detected capacity change from 0 to 2048
[ 1011.502546][T18212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3257'.
[ 1012.138982][T18213] netlink: 'syz.0.3259': attribute type 1 has an invalid length.
[ 1012.328830][T18205] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1012.399716][T18215] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[ 1013.078962][T18238] cifs: Unknown parameter 'no'‘a�£Nð[G¶zob,erèèµ;%j¸¼
[ 1013.078962][T18238] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.�W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷'
[ 1013.696963][T18239] lo speed is unknown, defaulting to 1000
[ 1013.703575][T18239] virt_wifi0 speed is unknown, defaulting to 1000
[ 1015.544103][T18248] loop3: detected capacity change from 0 to 32768
[ 1015.553248][T18248] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3268 (18248)
[ 1015.753338][T16700] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1016.078470][T18248] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1016.089076][T18248] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1016.098033][T18248] BTRFS info (device loop3): using free-space-tree
[ 1016.262652][T16700] usb 6-1: Using ep0 maxpacket: 8
[ 1016.299613][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1016.321128][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1016.329784][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1016.348065][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1016.356398][ T5831] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1016.365867][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1016.388814][T16700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1016.411167][T18267] lo speed is unknown, defaulting to 1000
[ 1016.423728][T18267] virt_wifi0 speed is unknown, defaulting to 1000
[ 1016.451243][  T741] BTRFS warning (device loop3): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0
[ 1016.490597][T16700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1016.618692][T18248] BTRFS error (device loop3): failed to read chunk root
[ 1016.666340][T16700] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1016.676775][T16700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[ 1016.693049][T16700] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1016.705331][T18248] BTRFS error (device loop3): open_ctree failed: -5
[ 1016.713569][T16700] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1016.735963][T16700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1016.751923][T16700] usb 6-1: config 0 descriptor??
[ 1016.761842][T18258] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1017.294656][T18294] netlink: 'syz.0.3275': attribute type 1 has an invalid length.
[ 1017.331796][T18293] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[ 1017.884076][T18267] chnl_net:caif_netlink_parms(): no params data found
[ 1018.137976][    T9] usb 6-1: USB disconnect, device number 14
[ 1018.140194][ T5831] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[ 1018.191931][T18310] loop3: detected capacity change from 0 to 2048
[ 1018.226133][T18310] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1018.393021][ T5831] Bluetooth: hci5: command tx timeout
[ 1018.511470][T18318] loop4: detected capacity change from 0 to 512
[ 1018.538451][T18318] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1018.588449][T18318] EXT4-fs (loop4): 1 truncate cleaned up
[ 1018.599150][T18318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1019.306125][T18304] lo speed is unknown, defaulting to 1000
[ 1019.330803][T18267] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1019.357121][T18267] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1019.410921][T18267] bridge_slave_0: entered allmulticast mode
[ 1019.775016][T18267] bridge_slave_0: entered promiscuous mode
[ 1019.808142][T18316] lo speed is unknown, defaulting to 1000
[ 1019.815425][T18304] virt_wifi0 speed is unknown, defaulting to 1000
[ 1019.825985][T18267] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1019.951886][T18267] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1019.962495][T18267] bridge_slave_1: entered allmulticast mode
[ 1019.970442][T18267] bridge_slave_1: entered promiscuous mode
[ 1019.977036][T18316] virt_wifi0 speed is unknown, defaulting to 1000
[ 1020.473573][ T5831] Bluetooth: hci5: command tx timeout
[ 1021.850387][T18337] lo speed is unknown, defaulting to 1000
[ 1021.857078][T18337] virt_wifi0 speed is unknown, defaulting to 1000
[ 1021.968740][T18267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1022.035242][T18267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1022.245107][T18267] team0: Port device team_slave_0 added
[ 1022.254785][T18267] team0: Port device team_slave_1 added
[ 1022.369613][T18267] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1022.391893][T18267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1022.516470][T18358] loop5: detected capacity change from 0 to 32768
[ 1022.553050][ T5831] Bluetooth: hci5: command tx timeout
[ 1022.561667][T18267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1022.576437][T18358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3288 (18358)
[ 1022.591703][T18358] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1022.594716][T18267] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1022.601904][T18358] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[ 1022.617789][T18358] BTRFS info (device loop5): using free-space-tree
[ 1022.719992][T18267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1022.753072][T18267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1022.791509][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1022.812416][T18267] hsr_slave_0: entered promiscuous mode
[ 1022.903353][T18267] hsr_slave_1: entered promiscuous mode
[ 1022.955711][T18267] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1022.965980][T18267] Cannot create hsr debugfs directory
[ 1023.142090][ T5896] BTRFS warning (device loop5): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0
[ 1023.167240][T18358] BTRFS error (device loop5): failed to read chunk root
[ 1023.178484][T18358] BTRFS error (device loop5): open_ctree failed: -5
[ 1024.953926][ T5831] Bluetooth: hci5: command tx timeout
[ 1025.008242][T18402] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[ 1025.366612][T18411] loop4: detected capacity change from 0 to 1024
[ 1026.521194][T18267] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1026.602596][T18267] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1026.699891][T18267] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1026.840236][T18432] overlayfs: failed to resolve './file0': -2
[ 1027.042056][T18267] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1027.207556][T11502] hfsplus: b-tree write err: -5, ino 4
[ 1027.387122][T18267] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1027.592560][T18446] loop5: detected capacity change from 0 to 32768
[ 1027.602851][T18446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3299 (18446)
[ 1027.651804][T18267] 8021q: adding VLAN 0 to HW filter on device team0
[ 1027.857148][T18254] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1027.864469][T18254] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1027.943108][ T5886] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1028.112491][T18446] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1028.123010][T18446] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[ 1028.131785][T18446] BTRFS info (device loop5): using free-space-tree
[ 1028.151155][ T2896] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1028.158379][ T2896] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1028.176845][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1028.245785][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1028.429675][ T5886] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1028.447403][ T5886] usb 1-1: config 1 interface 0 has no altsetting 1
[ 1028.464139][ T5886] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1028.569744][T12447] BTRFS warning (device loop5): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0
[ 1028.767890][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1029.293327][T18446] BTRFS error (device loop5): failed to read chunk root
[ 1029.305159][ T5886] usb 1-1: Product: syz
[ 1029.310414][ T5886] usb 1-1: Manufacturer: syz
[ 1029.316158][ T5886] usb 1-1: SerialNumber: syz
[ 1029.355865][ T5886] smsusb:smsusb_probe: board id=8, interface number 0
[ 1029.363594][T18446] BTRFS error (device loop5): open_ctree failed: -5
[ 1029.694150][T18484] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[ 1030.191479][T18267] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1030.407822][T18489] loop4: detected capacity change from 0 to 32768
[ 1030.420173][T18489] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3305 (18489)
[ 1031.004829][T18489] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1031.015425][T18489] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[ 1031.029946][T18489] BTRFS info (device loop4): using free-space-tree
[ 1031.042109][T18498] loop2: detected capacity change from 0 to 32768
[ 1031.063010][T18498] BTRFS: device /dev/loop2 (7:2) using temp-fsid 34ca6cdc-4659-4249-b10f-775370aa4eab
[ 1031.072716][T18498] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3306 (18498)
[ 1031.098683][T18498] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1031.101936][ T5886] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[ 1031.109165][T18498] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[ 1031.124790][T18498] BTRFS info (device loop2): using free-space-tree
[ 1031.133019][ T5886] smsusb 1-1:1.0: probe with driver smsusb failed with error -71
[ 1031.148295][ T5886] usb 1-1: USB disconnect, device number 11
[ 1031.583743][T12447] BTRFS warning (device loop4): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0
[ 1031.586352][T18535] loop3: detected capacity change from 0 to 2048
[ 1031.628944][ T6805] BTRFS warning (device loop2): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0
[ 1031.642326][T18489] BTRFS error (device loop4): failed to read chunk root
[ 1031.668744][T18489] BTRFS error (device loop4): open_ctree failed: -5
[ 1031.879242][T18498] BTRFS error (device loop2): failed to read chunk root
[ 1031.893499][T18498] BTRFS error (device loop2): open_ctree failed: -5
[ 1031.928027][T18535] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1032.470042][T18267] veth0_vlan: entered promiscuous mode
[ 1032.517037][T18267] veth1_vlan: entered promiscuous mode
[ 1032.598088][T18563] loop3: detected capacity change from 0 to 1024
[ 1032.660132][T18566] overlayfs: failed to resolve './file0': -2
[ 1032.675009][T18267] veth0_macvtap: entered promiscuous mode
[ 1032.702849][T18563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1032.736473][T18267] veth1_macvtap: entered promiscuous mode
[ 1033.324187][T18267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1033.390822][T18267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1033.405747][ T5832] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #2: comm syz-executor: corrupted in-inode xattr: bad e_name length
[ 1033.431604][T18267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1033.493048][ T5832] EXT4-fs (loop3): Remounting filesystem read-only
[ 1033.500513][T18267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1033.551763][T18267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1033.617974][T18267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1033.655010][T18267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1033.676100][T18267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1034.554193][T18267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1034.565216][T18267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1034.575346][T18267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1034.586070][T18267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1034.597240][T18267] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1034.688626][T18267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1035.039834][T18583] loop4: detected capacity change from 0 to 32768
[ 1035.061325][T18267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1035.071537][T18267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1035.194747][T18583] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3319 (18583)
[ 1035.207820][T18267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1035.210005][T18583] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1035.227950][T18583] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[ 1035.235373][T18267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1035.236696][T18583] BTRFS info (device loop4): using free-space-tree
[ 1035.285374][T18267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1035.408201][T18267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1035.419427][T18267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1035.430444][T18267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1035.441572][T18267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1035.452719][T18267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1035.474871][T18267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1035.500813][T18267] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1035.586982][T18267] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1035.596394][T18267] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1035.607983][T18267] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1035.746678][T12447] BTRFS warning (device loop4): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0
[ 1035.977668][T18267] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1036.013429][T18583] BTRFS error (device loop4): failed to read chunk root
[ 1036.058535][T18583] BTRFS error (device loop4): open_ctree failed: -5
[ 1036.200161][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1036.228981][    T8] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1036.323165][ T5886] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1036.477817][    T8] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1036.524488][    T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1036.552370][ T5886] usb 1-1: Using ep0 maxpacket: 8
[ 1036.566661][    T8] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1036.568053][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1036.608126][T12447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1036.651866][    T8] usb 6-1: config 1 interface 0 has no altsetting 1
[ 1036.658952][T12447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1036.665421][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1036.682039][    T8] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1036.708066][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.717040][ T5886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1036.744382][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1036.753155][    T8] usb 6-1: Product: syz
[ 1036.757224][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[ 1036.765110][    T8] usb 6-1: Manufacturer: syz
[ 1036.769536][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1036.785113][ T5886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1036.787406][    T8] usb 6-1: SerialNumber: syz
[ 1036.799665][ T5886] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1036.810660][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1036.835245][ T5886] usb 1-1: config 0 descriptor??
[ 1036.841043][T18621] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1036.999411][T18633] loop4: detected capacity change from 0 to 32768
[ 1037.007082][T18633] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3326 (18633)
[ 1037.038044][T18633] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1037.048398][T18633] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[ 1037.057551][T18633] BTRFS info (device loop4): using free-space-tree
[ 1037.076156][    T8] smsusb:smsusb_probe: board id=8, interface number 0
[ 1037.176079][   T11] BTRFS warning (device loop4): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0
[ 1037.199731][T18633] BTRFS error (device loop4): failed to read chunk root
[ 1037.215006][T18633] BTRFS error (device loop4): open_ctree failed: -5
[ 1037.441348][ T5831] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[ 1037.448639][ T5886] usb 1-1: USB disconnect, device number 12
[ 1037.479226][T18658] loop6: detected capacity change from 0 to 1024
[ 1037.518067][T18658] EXT4-fs: Ignoring removed orlov option
[ 1037.548716][T18658] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1037.634788][T18658] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1037.750250][T18658] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.6.3262: corrupted in-inode xattr: bad magic number in in-inode xattr
[ 1037.853180][T18658] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #14: comm syz.6.3262: attempt to clear invalid blocks 1634560256 len 1
[ 1037.932505][T15984] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1037.960383][T15984] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1037.971012][T15984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1037.981661][T15984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1037.993820][T15984] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1038.001367][T15984] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1038.069534][T18267] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1038.243896][T18676] lo speed is unknown, defaulting to 1000
[ 1038.391927][    T8] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[ 1038.471023][T18676] virt_wifi0 speed is unknown, defaulting to 1000
[ 1038.494672][    T8] smsusb 6-1:1.0: probe with driver smsusb failed with error -71
[ 1038.544122][    T8] usb 6-1: USB disconnect, device number 15
[ 1040.368236][T15984] Bluetooth: hci3: command tx timeout
[ 1041.952615][T18724] loop5: detected capacity change from 0 to 16
[ 1041.966117][T18676] chnl_net:caif_netlink_parms(): no params data found
[ 1042.289306][T18724] erofs (device loop5): mounted with root inode @ nid 36.
[ 1042.393466][T15984] Bluetooth: hci3: command tx timeout
[ 1042.521524][T18730] lo speed is unknown, defaulting to 1000
[ 1042.532979][T18730] virt_wifi0 speed is unknown, defaulting to 1000
[ 1042.917891][T18729] loop4: detected capacity change from 0 to 1024
[ 1043.594814][T18725] loop2: detected capacity change from 0 to 32768
[ 1043.606800][T18725] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3341 (18725)
[ 1043.622255][T18725] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1043.632564][T18725] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[ 1043.638079][T18729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1043.641616][T18725] BTRFS info (device loop2): using free-space-tree
[ 1043.687950][ T5835] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #2: comm syz-executor: corrupted in-inode xattr: bad e_name length
[ 1043.709669][ T5835] EXT4-fs (loop4): Remounting filesystem read-only
[ 1044.260981][T12447] BTRFS warning (device loop2): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0
[ 1044.430061][T18725] BTRFS error (device loop2): failed to read chunk root
[ 1044.442366][T18725] BTRFS error (device loop2): open_ctree failed: -5
[ 1044.469753][T18676] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1044.477367][T15984] Bluetooth: hci3: command tx timeout
[ 1045.102529][T18676] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1045.133451][   T92] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1045.140780][T18676] bridge_slave_0: entered allmulticast mode
[ 1045.171496][T18676] bridge_slave_0: entered promiscuous mode
[ 1045.278976][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1045.356686][   T92] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1045.392629][   T92] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1045.416780][   T92] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1045.462578][   T92] usb 6-1: config 1 interface 0 has no altsetting 1
[ 1045.466562][T18676] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1045.483086][   T92] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1045.510279][   T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.521754][   T92] usb 6-1: Product: syz
[ 1045.530928][   T92] usb 6-1: Manufacturer: syz
[ 1045.555757][   T92] usb 6-1: SerialNumber: syz
[ 1045.617555][T18676] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1045.627812][T18676] bridge_slave_1: entered allmulticast mode
[ 1045.635035][T18676] bridge_slave_1: entered promiscuous mode
[ 1045.636698][   T92] smsusb:smsusb_probe: board id=8, interface number 0
[ 1045.703988][T12447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.142890][T18676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1046.157181][T18676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1046.244018][T18676] team0: Port device team_slave_0 added
[ 1046.383988][T12447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.437962][T18676] team0: Port device team_slave_1 added
[ 1046.525988][T12447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.552522][T18676] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1046.560244][T15984] Bluetooth: hci3: command tx timeout
[ 1046.570909][T18676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1046.588480][T18794] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[ 1046.599290][T18676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1046.629997][T18676] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1046.659969][T18676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1046.695962][T18676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1046.727922][T18800] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1046.790475][T12447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.831517][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1046.845748][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1046.861680][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1046.879583][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1046.887481][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1046.894960][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1046.927580][   T92] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[ 1047.043883][   T92] smsusb 6-1:1.0: probe with driver smsusb failed with error -71
[ 1047.051849][T18806] loop2: detected capacity change from 0 to 1024
[ 1047.109534][T18813] loop5: detected capacity change from 0 to 256
[ 1047.116554][T18813] exfat: Bad value for 'uid'
[ 1047.121482][T18813] exfat: Bad value for 'uid'
[ 1047.157002][T18676] hsr_slave_0: entered promiscuous mode
[ 1047.165320][T18676] hsr_slave_1: entered promiscuous mode
[ 1047.232325][   T92] usb 6-1: USB disconnect, device number 16
[ 1047.243833][T18676] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1047.251541][T18676] Cannot create hsr debugfs directory
[ 1047.425518][T18806] hfsplus: failed to load root directory
[ 1047.904705][T18806] loop2: detected capacity change from 0 to 8
[ 1047.911137][T18806] squashfs: Unknown parameter 'Þ'
[ 1048.408409][T18802] lo speed is unknown, defaulting to 1000
[ 1048.476687][T18802] virt_wifi0 speed is unknown, defaulting to 1000
[ 1048.526776][T12447] bridge_slave_1: left allmulticast mode
[ 1048.532453][T12447] bridge_slave_1: left promiscuous mode
[ 1048.550730][T12447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1048.566011][T12447] bridge_slave_0: left allmulticast mode
[ 1048.571665][T12447] bridge_slave_0: left promiscuous mode
[ 1048.593099][T12447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1048.763796][T12447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1048.786948][T12447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1048.897747][T12447] bond0 (unregistering): Released all slaves
[ 1048.970377][T12447] bond1 (unregistering): Released all slaves
[ 1049.072194][T12447] bond2 (unregistering): Released all slaves
[ 1049.137264][ T5831] Bluetooth: hci4: command tx timeout
[ 1049.361622][T12447] bond3 (unregistering): Released all slaves
[ 1049.920607][T18851] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[ 1050.155460][T18855] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1050.310639][T18857] loop6: detected capacity change from 0 to 16
[ 1050.332404][T18857] erofs (device loop6): mounted with root inode @ nid 36.
[ 1050.699719][T18847] lo speed is unknown, defaulting to 1000
[ 1050.822230][T18847] virt_wifi0 speed is unknown, defaulting to 1000
[ 1050.960199][T18676] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1051.011980][T18676] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1051.062614][T18676] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1051.078137][T18676] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1051.097828][T18802] chnl_net:caif_netlink_parms(): no params data found
[ 1051.196720][ T5831] Bluetooth: hci4: command tx timeout
[ 1051.871643][T12447] hsr_slave_0: left promiscuous mode
[ 1051.884028][T12447] hsr_slave_1: left promiscuous mode
[ 1051.890953][T12447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1051.899286][T12447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1051.907542][T12447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1051.915246][T12447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1051.930160][T12447] veth1_macvtap: left promiscuous mode
[ 1051.937208][T12447] veth0_macvtap: left promiscuous mode
[ 1051.942876][T12447] veth1_vlan: left promiscuous mode
[ 1052.025425][T12447] veth0_vlan: left promiscuous mode
[ 1053.275666][ T5831] Bluetooth: hci4: command tx timeout
[ 1053.922699][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.577536][T18911] blktrace: Concurrent blktraces are not allowed on sg0
[ 1055.353201][ T5831] Bluetooth: hci4: command tx timeout
[ 1055.751666][T18909] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3380'.
[ 1055.761904][T18909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3380'.
[ 1055.766377][T18916] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1057.561970][T18802] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1057.573395][T18802] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1057.580953][T18802] bridge_slave_0: entered allmulticast mode
[ 1057.589296][T18802] bridge_slave_0: entered promiscuous mode
[ 1057.602793][T18802] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1057.622562][T18802] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1057.631108][T18802] bridge_slave_1: entered allmulticast mode
[ 1057.641457][T18802] bridge_slave_1: entered promiscuous mode
[ 1057.802151][T18802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1057.821556][T18802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1058.606406][T18802] team0: Port device team_slave_0 added
[ 1058.772505][T18802] team0: Port device team_slave_1 added
[ 1059.236266][T18802] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1059.256097][T18802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1059.284350][T18802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1059.339156][T18965] blktrace: Concurrent blktraces are not allowed on sg0
[ 1059.618070][T18802] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1059.757797][T18802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1059.807075][T18802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1059.831845][T18969] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1059.936817][T18676] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1060.756664][T12447] IPVS: stop unused estimator thread 0...
[ 1060.869382][T18802] hsr_slave_0: entered promiscuous mode
[ 1060.937895][T18802] hsr_slave_1: entered promiscuous mode
[ 1061.323453][T18802] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1061.364352][T18802] Cannot create hsr debugfs directory
[ 1061.516911][T18985] loop5: detected capacity change from 0 to 64
[ 1061.542126][T18676] 8021q: adding VLAN 0 to HW filter on device team0
[ 1061.674241][T18676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1061.696451][T18676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1061.890448][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1061.897600][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1061.907642][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1061.914781][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1062.146383][T18802] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1062.173412][T18802] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1062.189236][T18802] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1062.300547][T18802] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1062.347943][T19002] loop2: detected capacity change from 0 to 16
[ 1062.368147][T19002] erofs (device loop2): mounted with root inode @ nid 36.
[ 1062.375878][T18676] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1063.167102][T19012] loop6: detected capacity change from 0 to 1024
[ 1063.191420][T19012] hfsplus: failed to load root directory
[ 1063.234818][T19012] loop6: detected capacity change from 0 to 8
[ 1063.254715][T19012] squashfs: Unknown parameter 'Þ'
[ 1063.265706][T18802] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1063.282534][T18802] 8021q: adding VLAN 0 to HW filter on device team0
[ 1063.367865][T18802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1063.945641][T19021] blktrace: Concurrent blktraces are not allowed on sg0
[ 1064.360377][T18802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1064.414580][T19024] loop6: detected capacity change from 0 to 8
[ 1064.505617][ T7645] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1064.512772][ T7645] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1064.648227][T19024] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1064.681464][T19024] SQUASHFS error: Failed to read block 0x108: -5
[ 1064.703809][ T7645] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1064.710903][ T7645] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1064.973385][T19024] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1065.003091][T19024] SQUASHFS error: Unable to read inode 0x101f
[ 1066.338480][T18676] veth0_vlan: entered promiscuous mode
[ 1066.596926][T18676] veth1_vlan: entered promiscuous mode
[ 1066.789183][T18676] veth0_macvtap: entered promiscuous mode
[ 1066.835334][T18676] veth1_macvtap: entered promiscuous mode
[ 1066.878482][T19047] loop5: detected capacity change from 0 to 16
[ 1066.914986][T18676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1066.930282][T19047] erofs (device loop5): mounted with root inode @ nid 36.
[ 1066.967448][T18676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1067.007982][T18676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1067.030025][T18676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1067.699602][T18676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1067.710529][T18676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1067.985193][T18676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1068.016129][T18676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1068.688529][T19061] 9pnet_fd: Insufficient options for proto=fd
[ 1068.983647][T18676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1068.994545][T18676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.004448][T18676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1069.022985][T18676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.064998][T18676] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1069.081856][T18802] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1069.156415][T19065] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3416'.
[ 1069.335390][T18676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1069.366909][T18676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.377123][T18676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1069.387893][T18676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.398071][T18676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1069.423258][T18676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.447022][T18676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1069.642988][T18676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.670515][T18676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1069.687921][T19071] loop6: detected capacity change from 0 to 16
[ 1069.713052][T18676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.722903][T18676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1069.731774][T19071] erofs (device loop6): mounted with root inode @ nid 36.
[ 1069.733525][T18676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.734532][T18676] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1070.670878][T18676] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.680612][T18676] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.689872][T18676] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.698884][T18676] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1072.150950][ T6805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1073.111190][ T6805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1073.621377][T19112] loop5: detected capacity change from 0 to 256
[ 1073.628179][T19112] exfat: Bad value for 'uid'
[ 1073.632791][T19112] exfat: Bad value for 'uid'
[ 1074.452775][T11502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1074.497494][T11502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1074.574091][T18802] veth0_vlan: entered promiscuous mode
[ 1074.755764][T18802] veth1_vlan: entered promiscuous mode
[ 1074.864062][T19127] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3430'.
[ 1075.279050][T18802] veth0_macvtap: entered promiscuous mode
[ 1075.434672][T18802] veth1_macvtap: entered promiscuous mode
[ 1075.490000][ T5839] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1075.491458][T19134] netlink: 'syz.7.3327': attribute type 1 has an invalid length.
[ 1075.727151][ T5839] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1075.789871][T18802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1075.818501][ T5839] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1075.844931][T18802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1075.855121][ T5839] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1075.879122][T18802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1075.894465][ T5839] usb 1-1: config 1 interface 0 has no altsetting 1
[ 1075.901594][T18802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.276806][T18802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1076.287406][T18802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.301398][T18802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1076.317128][T18802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.334335][ T5839] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1076.349344][T18802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1076.370021][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1076.391751][T18802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.415295][ T5839] usb 1-1: Product: syz
[ 1076.419481][ T5839] usb 1-1: Manufacturer: syz
[ 1076.419875][T18802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1076.438764][T18802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.442998][ T5839] usb 1-1: SerialNumber: syz
[ 1076.449012][T18802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1076.464069][T18802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.482373][T18802] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1076.488810][ T5839] smsusb:smsusb_probe: board id=8, interface number 0
[ 1076.550837][T18802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1076.563519][T18802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.574176][T18802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1076.584977][T18802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.595179][T18802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1076.640203][T18802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.727514][ T5839] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[ 1076.743046][ T5839] smsusb 1-1:1.0: probe with driver smsusb failed with error -71
[ 1076.758559][ T5839] usb 1-1: USB disconnect, device number 13
[ 1076.770279][T18802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1076.898671][T18802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1077.319668][T18802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1077.355273][T18802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1077.365204][T18802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1077.375646][T18802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1078.023368][T19158] loop2: detected capacity change from 0 to 1024
[ 1078.027436][T18802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1078.040228][T18802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1078.051150][T18802] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1078.061089][T18802] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1078.075104][T18802] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1078.094525][T18802] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1078.106449][T18802] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1078.146566][T19158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1078.178222][T19158] ext4 filesystem being mounted at /618/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1078.455034][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3442'.
[ 1078.749100][T19158] syzkaller1: entered promiscuous mode
[ 1078.763102][T19158] syzkaller1: entered allmulticast mode
[ 1078.789476][T19175] loop5: detected capacity change from 0 to 1024
[ 1078.824098][T19175] hfsplus: failed to load root directory
[ 1079.316976][  T741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1079.359193][T19175] loop5: detected capacity change from 0 to 8
[ 1079.398489][T19185] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3445'.
[ 1079.448903][T19175] squashfs: Unknown parameter 'Þ'
[ 1080.303900][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1080.320669][  T741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1080.831746][T19191] blktrace: Concurrent blktraces are not allowed on sg0
[ 1081.172563][ T5896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1081.181747][ T5896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1083.026652][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3454'.
[ 1083.206232][T19219] netlink: 'syz.2.3448': attribute type 1 has an invalid length.
[ 1085.373598][T19244] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3461'.
[ 1086.513202][T11149] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1086.735586][T11149] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1086.761374][T11149] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1086.809287][T11149] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1086.895355][T15984] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1086.902751][T15984] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1086.912815][T19257] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3464'.
[ 1086.922375][T19257] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3464'.
[ 1086.931851][T15984] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1086.939607][T15984] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1086.948393][T15984] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1087.803158][T19267] blktrace: Concurrent blktraces are not allowed on sg0
[ 1087.894058][T15984] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1088.461507][T11149] usb 1-1: config 1 interface 0 has no altsetting 1
[ 1088.487420][T11149] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1088.534108][T11149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1088.543009][T11149] usb 1-1: Product: syz
[ 1088.547198][T11149] usb 1-1: Manufacturer: syz
[ 1088.551890][T11149] usb 1-1: SerialNumber: syz
[ 1088.650897][T11149] smsusb:smsusb_probe: board id=8, interface number 0
[ 1088.848204][T19260] lo speed is unknown, defaulting to 1000
[ 1088.870279][T19260] virt_wifi0 speed is unknown, defaulting to 1000
[ 1089.268674][T19278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3468'.
[ 1089.783932][T19286] loop6: detected capacity change from 0 to 16
[ 1089.821787][T19286] erofs (device loop6): mounted with root inode @ nid 36.
[ 1089.922199][T11149] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[ 1090.037753][T11149] smsusb 1-1:1.0: probe with driver smsusb failed with error -71
[ 1090.068304][T11149] usb 1-1: USB disconnect, device number 14
[ 1090.583222][T15984] Bluetooth: hci6: command tx timeout
[ 1090.610227][T19260] chnl_net:caif_netlink_parms(): no params data found
[ 1091.557767][T19260] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1091.637392][T19260] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1092.009746][T19260] bridge_slave_0: entered allmulticast mode
[ 1092.137169][T19260] bridge_slave_0: entered promiscuous mode
[ 1092.169105][T19260] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1092.246303][T19316] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3475'.
[ 1092.633653][T15984] Bluetooth: hci6: command tx timeout
[ 1092.672759][T19260] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1092.680777][T19260] bridge_slave_1: entered allmulticast mode
[ 1092.789446][T19260] bridge_slave_1: entered promiscuous mode
[ 1093.763213][ T5825] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1094.005594][ T5825] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1094.084754][ T5825] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1094.110834][T19260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1094.126731][ T5825] usb 8-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1094.157185][ T5825] usb 8-1: config 1 interface 0 has no altsetting 1
[ 1094.445004][ T5825] usb 8-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1094.466895][ T5825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1094.481196][ T5825] usb 8-1: Product: syz
[ 1094.492476][T19260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1094.511674][ T5825] usb 8-1: Manufacturer: syz
[ 1094.538734][ T5825] usb 8-1: SerialNumber: syz
[ 1094.578960][ T5825] smsusb:smsusb_probe: board id=8, interface number 0
[ 1094.636278][T19260] team0: Port device team_slave_0 added
[ 1094.655262][T19260] team0: Port device team_slave_1 added
[ 1094.805817][T15984] Bluetooth: hci6: command tx timeout
[ 1095.841373][T19260] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1095.859140][T19260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1095.907849][T19260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1095.975267][T19260] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1095.997598][T19260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1096.161043][T19260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1096.888262][T15984] Bluetooth: hci6: command tx timeout
[ 1096.917195][ T5825] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[ 1096.917232][ T5825] smsusb 8-1:1.0: probe with driver smsusb failed with error -71
[ 1096.920491][ T5825] usb 8-1: USB disconnect, device number 2
[ 1097.176354][T15510] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1097.598557][T19373] fuse: Unknown parameter '0x0000000000000003'
[ 1097.655019][T19260] hsr_slave_0: entered promiscuous mode
[ 1097.729702][T19260] hsr_slave_1: entered promiscuous mode
[ 1097.737043][T19260] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1097.755985][T19260] Cannot create hsr debugfs directory
[ 1097.764083][T15510] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1097.927404][T15510] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1097.936737][T15510] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1097.953251][T15510] usb 7-1: config 1 interface 0 has no altsetting 1
[ 1097.965783][T15510] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1098.028311][T19386] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3489'.
[ 1098.556978][T15510] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1098.682896][T15510] usb 7-1: Product: syz
[ 1098.707023][T15510] usb 7-1: Manufacturer: syz
[ 1098.712139][T15510] usb 7-1: SerialNumber: syz
[ 1098.958017][T15510] smsusb:smsusb_probe: board id=8, interface number 0
[ 1099.028285][T15510] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[ 1099.046074][T15510] smsusb 7-1:1.0: probe with driver smsusb failed with error -71
[ 1099.281255][T15510] usb 7-1: USB disconnect, device number 2
[ 1099.288615][T19260] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.625911][T19409] blktrace: Concurrent blktraces are not allowed on sg0
[ 1103.104479][T19260] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.184317][T19417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3499'.
[ 1104.325901][T19260] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.439667][ T5839] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1104.765297][ T5839] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1104.784722][ T5839] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1104.799772][ T5839] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1104.816138][ T5839] usb 1-1: config 1 interface 0 has no altsetting 1
[ 1104.838959][ T5839] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1104.843111][T19435] fuse: Unknown parameter '0x0000000000000003'
[ 1104.883355][T19260] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1104.953109][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.961166][ T5839] usb 1-1: Product: syz
[ 1105.007153][ T5839] usb 1-1: Manufacturer: syz
[ 1105.033092][ T5839] usb 1-1: SerialNumber: syz
[ 1105.199425][ T5839] smsusb:smsusb_probe: board id=8, interface number 0
[ 1105.277556][T19445] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3504'.
[ 1105.837114][T19260] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1105.871764][T19260] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1106.405326][T19260] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1106.511880][ T5839] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[ 1106.530381][T19260] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1106.563058][ T5839] smsusb 1-1:1.0: probe with driver smsusb failed with error -71
[ 1106.587955][ T5839] usb 1-1: USB disconnect, device number 15
[ 1108.234171][T19260] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1108.330434][T19260] 8021q: adding VLAN 0 to HW filter on device team0
[ 1108.395212][T11502] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1108.402395][T11502] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1108.433241][ T5825] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1108.456423][T18254] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1108.463718][T18254] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1108.685396][ T5825] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1108.704345][ T5825] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1108.721784][ T5825] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1109.291524][ T5825] usb 7-1: config 1 interface 0 has no altsetting 1
[ 1109.331585][ T5825] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1109.385169][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1109.463579][T19480] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3512'.
[ 1109.470396][ T5825] usb 7-1: Product: syz
[ 1109.484985][ T5825] usb 7-1: Manufacturer: syz
[ 1109.489597][ T5825] usb 7-1: SerialNumber: syz
[ 1109.536064][ T5825] smsusb:smsusb_probe: board id=8, interface number 0
[ 1110.033004][T19492] blktrace: Concurrent blktraces are not allowed on sg0
[ 1110.807395][ T5825] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[ 1110.815828][ T5825] smsusb 7-1:1.0: probe with driver smsusb failed with error -71
[ 1110.825933][ T5825] usb 7-1: USB disconnect, device number 3
[ 1110.862085][T19496] fuse: Unknown parameter '0x0000000000000003'
[ 1112.415585][T19521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3520'.
[ 1112.588714][T19260] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1113.363164][T19022] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1114.812601][T19022] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1115.357631][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.451048][T19022] usb 1-1: unable to read config index 0 descriptor/all
[ 1115.473067][T19022] usb 1-1: can't read configurations, error -71
[ 1115.565539][T19260] veth0_vlan: entered promiscuous mode
[ 1115.584270][T19554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3526'.
[ 1115.759399][T19260] veth1_vlan: entered promiscuous mode
[ 1115.830666][T19563] blktrace: Concurrent blktraces are not allowed on sg0
[ 1116.365507][T19567] fuse: Unknown parameter '0x0000000000000003'
[ 1116.381196][T19260] veth0_macvtap: entered promiscuous mode
[ 1116.823453][T19022] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1116.991968][T19022] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1117.024261][T19260] veth1_macvtap: entered promiscuous mode
[ 1117.087392][T19022] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1117.262641][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1117.262647][T19022] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1117.262681][T19022] usb 1-1: config 1 interface 0 has no altsetting 1
[ 1117.799856][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.810227][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1117.821598][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.831933][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1117.843152][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.851803][T19584] loop6: detected capacity change from 0 to 8
[ 1117.883967][T19584] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1117.897652][T19584] SQUASHFS error: Failed to read block 0x108: -5
[ 1117.898659][T19022] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1117.908338][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1117.929020][T19022] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1117.947108][T19584] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1117.951469][T19022] usb 1-1: Product: syz
[ 1117.963043][T19584] SQUASHFS error: Unable to read inode 0x101f
[ 1117.963397][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.991857][T19022] usb 1-1: Manufacturer: syz
[ 1118.022001][T19022] usb 1-1: SerialNumber: syz
[ 1118.188558][T19022] smsusb:smsusb_probe: board id=8, interface number 0
[ 1118.363063][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.431981][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.447056][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.473416][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.500134][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.522379][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.558138][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.588081][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.625612][T19260] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1118.766494][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.781565][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.793914][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.837993][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.875350][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.907663][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.951560][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1119.003613][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.057028][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1119.107315][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.119793][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1119.135233][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.148391][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1119.161787][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.177295][T19260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1119.238067][T19260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.895059][T19022] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[ 1119.902060][T19022] smsusb 1-1:1.0: probe with driver smsusb failed with error -71
[ 1119.973897][T19260] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1120.037268][T19022] usb 1-1: USB disconnect, device number 17
[ 1120.106378][T19260] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1120.159978][T19260] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1120.169636][T19260] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1120.181978][T19260] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1120.267689][T19591] loop7: detected capacity change from 0 to 32768
[ 1120.296417][T19591] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3534 (19591)
[ 1120.936186][T19591] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1120.963776][T19591] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[ 1120.988398][T19591] BTRFS info (device loop7): using free-space-tree
[ 1121.193769][T19591] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[ 1121.194041][T19591] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[ 1121.246603][T19591] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[ 1121.580722][T19591] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[ 1121.729408][ T7645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1121.733398][T19591] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[ 1121.795445][T19591] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[ 1121.820919][T19642] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3541'.
[ 1122.265626][ T7645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1122.346631][T19591] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[ 1122.347334][T19591] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[ 1122.416638][T19591] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[ 1122.492240][T19591] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[ 1122.618722][T19591] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 1122.660474][T19656] fuse: Unknown parameter '0x0000000000000003'
[ 1122.660955][T19591] BTRFS error (device loop7): open_ctree failed: -12
[ 1122.743608][T19663] blktrace: Concurrent blktraces are not allowed on sg0
[ 1123.100790][T18254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1123.178152][T18254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1123.466928][T19675] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3547'.
[ 1123.857662][T19691] loop5: detected capacity change from 0 to 8
[ 1123.990252][T19691] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1124.191912][T19691] SQUASHFS error: Failed to read block 0x108: -5
[ 1124.221193][T19691] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1124.268210][T19691] SQUASHFS error: Unable to read inode 0x101f
[ 1125.318948][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1125.385290][T19716] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3554'.
[ 1125.821971][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1125.829544][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1125.838260][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1125.846073][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1125.853867][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1126.141716][T19714] lo speed is unknown, defaulting to 1000
[ 1126.195200][T19714] virt_wifi0 speed is unknown, defaulting to 1000
[ 1127.453756][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1127.692783][T19745] blktrace: Concurrent blktraces are not allowed on sg0
[ 1127.997309][ T5831] Bluetooth: hci1: command tx timeout
[ 1128.095376][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1128.178791][T19723] loop5: detected capacity change from 0 to 32768
[ 1128.220518][T19723] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3558 (19723)
[ 1128.253796][T19723] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1128.267349][T19723] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[ 1128.283178][T19723] BTRFS info (device loop5): using free-space-tree
[ 1128.470854][ T6805] BTRFS warning (device loop5): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0
[ 1128.521030][T19723] BTRFS error (device loop5): failed to read chunk root
[ 1128.578979][T19772] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3563'.
[ 1128.589454][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1128.619752][T19723] BTRFS error (device loop5): open_ctree failed: -5
[ 1128.722744][T19714] chnl_net:caif_netlink_parms(): no params data found
[ 1129.634688][T19803] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3568'.
[ 1130.078178][ T5831] Bluetooth: hci1: command tx timeout
[ 1130.184029][T19808] loop6: detected capacity change from 0 to 8
[ 1130.198606][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1130.386635][T19808] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1130.405385][T19808] SQUASHFS error: Failed to read block 0x108: -5
[ 1131.423215][T19808] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1131.430626][T19808] SQUASHFS error: Unable to read inode 0x101f
[ 1132.376710][ T5831] Bluetooth: hci1: command tx timeout
[ 1133.273568][T19833] blktrace: Concurrent blktraces are not allowed on sg0
[ 1133.591825][T19714] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1133.669095][T19714] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1134.393625][ T5831] Bluetooth: hci1: command tx timeout
[ 1134.753432][T19714] bridge_slave_0: entered allmulticast mode
[ 1134.760581][T19714] bridge_slave_0: entered promiscuous mode
[ 1134.792848][T19714] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1134.806816][T19843] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3577'.
[ 1134.816406][T19714] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1134.840845][T19714] bridge_slave_1: entered allmulticast mode
[ 1134.864505][T19714] bridge_slave_1: entered promiscuous mode
[ 1135.022637][T19714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1135.060716][T19714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1136.051893][T19861] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3583'.
[ 1136.129045][   T35] bridge_slave_1: left allmulticast mode
[ 1136.277439][   T35] bridge_slave_1: left promiscuous mode
[ 1136.328243][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1136.434108][T19865] loop5: detected capacity change from 0 to 8
[ 1136.475382][   T35] bridge_slave_0: left allmulticast mode
[ 1136.513224][   T35] bridge_slave_0: left promiscuous mode
[ 1136.519195][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1136.576207][T19865] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1136.628124][T19865] SQUASHFS error: Failed to read block 0x108: -5
[ 1136.642576][T19865] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1136.703133][T19865] SQUASHFS error: Unable to read inode 0x101f
[ 1136.952772][T19714] team0: Port device team_slave_0 added
[ 1136.962221][T19714] team0: Port device team_slave_1 added
[ 1137.261357][   T35] bond3 (unregistering): (slave gretap2): Releasing backup interface
[ 1137.291399][T19867] loop7: detected capacity change from 0 to 32768
[ 1137.303053][T19867] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3586 (19867)
[ 1137.344370][T19882] loop5: detected capacity change from 0 to 8
[ 1137.388267][T19867] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1137.414725][T19867] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[ 1137.424391][T19867] BTRFS info (device loop7): using free-space-tree
[ 1137.436738][T19882] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1137.464737][T12447] BTRFS warning (device loop7): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xeece6410 level 0
[ 1137.486634][T19882] SQUASHFS error: Failed to read block 0x108: -5
[ 1137.514920][T19882] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1137.523600][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1137.555084][T19882] SQUASHFS error: Unable to read inode 0x101f
[ 1137.573634][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1137.603362][T19867] BTRFS error (device loop7): failed to read chunk root
[ 1137.639745][   T35] bond0 (unregistering): Released all slaves
[ 1137.659647][   T35] bond1 (unregistering): Released all slaves
[ 1137.678235][T19867] BTRFS error (device loop7): open_ctree failed: -5
[ 1137.695108][   T35] bond2 (unregistering): Released all slaves
[ 1138.328795][   T35] bond3 (unregistering): Released all slaves
[ 1138.426361][   T35] bond4 (unregistering): Released all slaves
[ 1138.478285][   T35] bond5 (unregistering): Released all slaves
[ 1138.925811][T19714] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1138.968781][T19714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1139.023025][T19714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1139.053765][T19714] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1139.067206][T19714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1139.126519][T19914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3594'.
[ 1139.151836][T19714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1140.054419][T19940] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3598'.
[ 1141.208809][T19947] loop5: detected capacity change from 0 to 8
[ 1141.218305][T19714] hsr_slave_0: entered promiscuous mode
[ 1141.314556][T19714] hsr_slave_1: entered promiscuous mode
[ 1141.329992][T19947] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1141.334945][T19714] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1141.366880][T19714] Cannot create hsr debugfs directory
[ 1141.374055][T19947] SQUASHFS error: Failed to read block 0x108: -5
[ 1141.380423][T19947] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1141.440696][T19947] SQUASHFS error: Unable to read inode 0x101f
[ 1141.540424][   T35] hsr_slave_0: left promiscuous mode
[ 1141.553256][T19956] loop6: detected capacity change from 0 to 1024
[ 1141.580202][   T35] hsr_slave_1: left promiscuous mode
[ 1141.586568][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1141.632491][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1141.724831][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1141.736166][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1141.774570][   T35] veth1_macvtap: left promiscuous mode
[ 1141.800325][   T35] veth0_macvtap: left promiscuous mode
[ 1141.826776][   T35] veth1_vlan: left promiscuous mode
[ 1141.853439][   T35] veth0_vlan: left promiscuous mode
[ 1143.366771][ T5831] Bluetooth: hci5: command 0x0406 tx timeout
[ 1144.363454][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1144.439061][T19991] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3610'.
[ 1144.753981][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1144.841943][T19990] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3612'.
[ 1144.919442][T19989] loop5: detected capacity change from 0 to 8
[ 1144.980011][T19989] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1144.996572][T19989] SQUASHFS error: Failed to read block 0x108: -5
[ 1145.003317][T19989] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1145.010672][T19989] SQUASHFS error: Unable to read inode 0x101f
[ 1146.856876][T20029] loop8: detected capacity change from 0 to 1024
[ 1148.854024][T19714] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1148.922384][   T35] IPVS: stop unused estimator thread 0...
[ 1148.924597][T19714] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1149.126760][T19714] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1149.180604][T19714] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1149.289574][T20057] loop5: detected capacity change from 0 to 8
[ 1149.419412][T20057] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1149.473144][T20057] SQUASHFS error: Failed to read block 0x108: -5
[ 1149.479642][T20057] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1149.585036][T20066] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3627'.
[ 1149.768289][T20057] SQUASHFS error: Unable to read inode 0x101f
[ 1150.081723][T19714] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1150.172458][T19714] 8021q: adding VLAN 0 to HW filter on device team0
[ 1150.263806][T18254] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1150.271116][T18254] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1150.300052][T18254] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1150.307254][T18254] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1152.776553][T19714] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1153.251812][T20115] loop6: detected capacity change from 0 to 8
[ 1153.595937][T19714] veth0_vlan: entered promiscuous mode
[ 1153.675234][T19714] veth1_vlan: entered promiscuous mode
[ 1153.682394][T20115] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1153.813503][T19714] veth0_macvtap: entered promiscuous mode
[ 1153.823408][T19714] veth1_macvtap: entered promiscuous mode
[ 1153.838427][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1153.841200][T20115] SQUASHFS error: Failed to read block 0x108: -5
[ 1153.848962][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.848984][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1153.907515][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.923972][T20115] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1153.963591][T20115] SQUASHFS error: Unable to read inode 0x101f
[ 1153.983213][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.028102][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.235149][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.294404][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.413050][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.463098][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.472516][T20134] loop5: detected capacity change from 0 to 1024
[ 1154.513613][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.534716][T20137] loop8: detected capacity change from 0 to 8
[ 1154.539975][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.625391][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.751226][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.773060][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1155.376752][T20137] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1155.384688][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1155.394987][T20137] SQUASHFS error: Failed to read block 0x108: -5
[ 1155.401391][T20137] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1155.411755][T19714] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1155.431284][T20137] SQUASHFS error: Unable to read inode 0x101f
[ 1155.450054][T20145] loop7: detected capacity change from 0 to 64
[ 1155.557437][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1155.693036][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1155.703594][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1155.732474][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1155.755431][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1155.796953][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1155.831778][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1155.858333][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1155.872696][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1155.883685][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1155.927610][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1155.955718][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1155.971077][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1155.989566][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1156.001839][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1156.028105][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1156.041765][T19714] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1156.055834][T19714] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1156.093233][T19714] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1156.127341][T19714] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1156.183139][T19714] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1157.756830][T11502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1157.873211][T11502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1157.968067][ T7645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1158.002401][ T7645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1158.075894][T20154] loop8: detected capacity change from 0 to 32768
[ 1158.157467][T20154] jfs_mount: dbMount failed w/rc = -22
[ 1158.167297][T20154] Mount JFS Failure: -22
[ 1158.180738][T20154] jfs_mount failed w/return code = -22
[ 1158.480513][T20172] loop6: detected capacity change from 0 to 32768
[ 1158.506940][T20198] loop8: detected capacity change from 0 to 8
[ 1158.563344][T20199] loop7: detected capacity change from 0 to 2048
[ 1158.611113][T20198] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1158.652331][T20198] SQUASHFS error: Failed to read block 0x108: -5
[ 1158.659622][T20199] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1158.674041][   T29] audit: type=1800 audit(1737633775.733:93): pid=20172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3650" name="bus" dev="loop6" ino=7 res=0 errno=0
[ 1158.734492][T20198] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1158.742037][T20198] SQUASHFS error: Unable to read inode 0x101f
[ 1158.905503][   T29] audit: type=1800 audit(1737633775.913:94): pid=20199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3657" name="bus" dev="loop7" ino=18 res=0 errno=0
[ 1159.473394][   T29] audit: type=1800 audit(1737633775.913:95): pid=20199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3657" name="bus" dev="loop7" ino=18 res=0 errno=0
[ 1159.582177][T18676] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1159.644743][T15984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1159.653107][T15984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1159.660692][T15984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1159.669156][T15984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1159.676733][T15984] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1159.685538][T15984] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1159.788834][T20213] lo speed is unknown, defaulting to 1000
[ 1159.842114][T20213] virt_wifi0 speed is unknown, defaulting to 1000
[ 1159.852536][T20219] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3655'.
[ 1160.245775][T20238] loop7: detected capacity change from 0 to 64
[ 1160.772199][T20213] chnl_net:caif_netlink_parms(): no params data found
[ 1161.295152][T20213] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1161.302312][T20213] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1161.346483][T20213] bridge_slave_0: entered allmulticast mode
[ 1161.347620][T20218] loop6: detected capacity change from 0 to 32768
[ 1161.383701][T20213] bridge_slave_0: entered promiscuous mode
[ 1161.396554][T20256] loop8: detected capacity change from 0 to 4096
[ 1161.402772][T20213] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1161.427465][T20213] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1161.429416][T20218] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3661 (20218)
[ 1161.472042][T20256] ntfs3: Unknown parameter 'iocharset)iso8859-6'
[ 1161.483870][T20213] bridge_slave_1: entered allmulticast mode
[ 1161.490888][T20213] bridge_slave_1: entered promiscuous mode
[ 1161.513010][ T5825] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1161.530510][T20218] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1161.566801][T20213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1161.583573][T20218] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm
[ 1161.604959][T20213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1161.626996][T20218] BTRFS info (device loop6): using free-space-tree
[ 1161.683622][ T5825] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1161.740182][ T5825] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1161.753206][ T5831] Bluetooth: hci2: command tx timeout
[ 1162.206692][ T5825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1162.257720][ T5825] usb 8-1: config 0 descriptor??
[ 1162.352607][ T5825] pwc: Askey VC010 type 2 USB webcam detected.
[ 1162.375150][T20213] team0: Port device team_slave_0 added
[ 1162.435049][T20213] team0: Port device team_slave_1 added
[ 1162.826354][ T5825] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1162.843954][ T5825] pwc: recv_control_msg error -32 req 02 val 2700
[ 1162.869315][ T5825] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1162.886858][ T5825] pwc: recv_control_msg error -32 req 04 val 1000
[ 1162.917634][ T5825] pwc: recv_control_msg error -32 req 04 val 1300
[ 1162.930937][ T5825] pwc: recv_control_msg error -32 req 04 val 1400
[ 1162.932483][T20213] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1162.943585][ T5825] pwc: recv_control_msg error -32 req 02 val 2000
[ 1162.954207][ T5825] pwc: recv_control_msg error -32 req 02 val 2100
[ 1162.955881][T18267] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1162.972058][ T5825] pwc: recv_control_msg error -32 req 04 val 1500
[ 1162.982595][T20301] loop8: detected capacity change from 0 to 8
[ 1162.990988][ T5825] pwc: recv_control_msg error -32 req 02 val 2500
[ 1163.003444][T20213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1163.035589][ T5825] pwc: recv_control_msg error -32 req 02 val 2400
[ 1163.055330][ T5825] pwc: recv_control_msg error -32 req 02 val 2600
[ 1163.072110][ T5825] pwc: recv_control_msg error -32 req 02 val 2900
[ 1163.090685][ T5825] pwc: recv_control_msg error -32 req 02 val 2800
[ 1163.116335][T20213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1163.116904][T20301] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1163.163894][T20213] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1163.183140][T20301] SQUASHFS error: Failed to read block 0x108: -5
[ 1163.204457][T20301] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1163.213079][T20213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1163.242473][T20301] SQUASHFS error: Unable to read inode 0x101f
[ 1163.263510][T20262] loop2: detected capacity change from 0 to 40427
[ 1163.299324][ T5825] pwc: recv_control_msg error -71 req 04 val 1200
[ 1163.312181][ T5825] pwc: Registered as video103.
[ 1163.313960][T20262] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1163.321750][T20213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1163.347667][ T5825] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input20
[ 1163.368774][T20262] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1163.513207][ T5831] Bluetooth: hci3: command 0x0406 tx timeout
[ 1163.523648][ T5825] usb 8-1: USB disconnect, device number 3
[ 1163.802305][T20262] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1163.843154][T15984] Bluetooth: hci2: command tx timeout
[ 1164.032192][T20262] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1164.042775][T20262] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1164.268392][T20213] hsr_slave_0: entered promiscuous mode
[ 1164.667408][T20213] hsr_slave_1: entered promiscuous mode
[ 1164.674787][T20213] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1164.682636][T20213] Cannot create hsr debugfs directory
[ 1164.846298][T20340] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3680'.
[ 1164.918430][T20340] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1164.927262][T20340] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1164.936097][T20340] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1164.944826][T20340] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1165.146183][T20213] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1165.266510][T20349] loop8: detected capacity change from 0 to 8192
[ 1165.317896][T20213] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1165.618057][T20213] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1165.665198][T20349] loop8: detected capacity change from 0 to 32768
[ 1165.672323][T20349] btrfs: Unknown parameter 'euid'
[ 1165.913726][T15984] Bluetooth: hci2: command tx timeout
[ 1166.389151][T20371] sctp: failed to load transform for md5: -2
[ 1166.578772][T20213] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1166.578939][T20364] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3682'.
[ 1166.974441][T20213] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1166.997255][T20392] loop2: detected capacity change from 0 to 8
[ 1167.025303][T20213] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1167.093942][T20213] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1167.106057][T20358] loop5: detected capacity change from 0 to 32768
[ 1167.118478][T20392] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1167.120199][T20213] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1167.151102][T20358] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3685 (20358)
[ 1167.172733][T20392] SQUASHFS error: Failed to read block 0x108: -5
[ 1167.208619][T20392] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1167.231107][T20392] SQUASHFS error: Unable to read inode 0x101f
[ 1167.256651][T20358] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1167.305185][T20358] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[ 1167.336378][T20358] BTRFS info (device loop5): using free-space-tree
[ 1167.652021][T20213] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1168.059866][T20429] Invalid source name
[ 1168.064014][T20429] UBIFS error (pid: 20429): cannot open "./file0", error -22
[ 1168.457206][ T5831] Bluetooth: hci2: command tx timeout
[ 1168.826952][T20213] 8021q: adding VLAN 0 to HW filter on device team0
[ 1170.462642][T20439] loop7: detected capacity change from 0 to 16
[ 1170.522849][T20439] erofs (device loop7): mounted with root inode @ nid 36.
[ 1170.602842][T18254] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1170.610074][T18254] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1170.649930][T18254] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1170.657084][T18254] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1170.883594][T19260] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1171.238508][T20213] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1171.437938][T20213] veth0_vlan: entered promiscuous mode
[ 1171.479911][T20467] loop5: detected capacity change from 0 to 1024
[ 1171.505614][T20213] veth1_vlan: entered promiscuous mode
[ 1171.581628][T20467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1171.629790][T20213] veth0_macvtap: entered promiscuous mode
[ 1171.653183][T20213] veth1_macvtap: entered promiscuous mode
[ 1171.681416][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1171.702031][T20467] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1171.759301][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1171.800373][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1171.860923][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1171.902862][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1171.948424][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1171.979029][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1172.009544][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1172.041291][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1172.081247][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1172.114215][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1172.149179][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1172.185702][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1172.212275][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1172.240248][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1172.272959][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1172.293045][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1172.323058][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1172.344449][T20213] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1172.434148][T19260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1172.458722][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1172.521717][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1172.557470][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1172.639147][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1172.690079][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1172.755848][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1172.821349][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1172.843865][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1172.881775][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1172.951981][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1172.984068][T20511] netlink: 'syz.5.3701': attribute type 1 has an invalid length.
[ 1173.027065][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1173.081367][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1173.141195][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1173.202990][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1173.263281][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1173.385177][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1173.411306][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1173.459455][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1173.512647][T20213] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1173.591089][T20213] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1173.760319][T20213] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1174.780130][T20213] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1175.110186][T20213] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1175.624619][ T7645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1175.699674][ T7645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1175.812049][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1175.871476][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1176.235972][T20554] team0: Port device team_slave_1 removed
[ 1176.734848][T20572] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3709'.
[ 1176.830549][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1179.828797][T20628] hub 2-0:1.0: USB hub found
[ 1179.843710][T20628] hub 2-0:1.0: 1 port detected
[ 1180.388012][T20631] netlink: 'syz.0.3727': attribute type 1 has an invalid length.
[ 1180.860614][T20639] loop7: detected capacity change from 0 to 256
[ 1181.841300][T20659] netlink: 'syz.8.3734': attribute type 21 has an invalid length.
[ 1181.849652][T20659] netlink: 164 bytes leftover after parsing attributes in process `syz.8.3734'.
[ 1182.488153][T20667] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3729'.
[ 1186.884861][T20731] Device name cannot be null; rc = [-22]
[ 1188.562314][T20775] xt_hashlimit: size too large, truncated to 1048576
[ 1189.580311][T20806] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3762'.
[ 1189.673146][ T5888] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1189.855333][ T5888] usb 8-1: Using ep0 maxpacket: 16
[ 1189.884850][ T5888] usb 8-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1189.926489][ T5888] usb 8-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1189.987893][ T5888] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1190.023022][ T5888] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00
[ 1190.074904][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1190.126409][ T5888] usb 8-1: config 0 descriptor??
[ 1190.269641][T20828] loop6: detected capacity change from 0 to 64
[ 1190.715421][ T5888] hid-corsair-void 0003:1B1C:1B25.0008: unknown main item tag 0x0
[ 1190.732967][ T5888] hid-corsair-void 0003:1B1C:1B25.0008: unknown main item tag 0x0
[ 1190.740801][ T5888] hid-corsair-void 0003:1B1C:1B25.0008: unknown main item tag 0x0
[ 1190.749032][ T5888] hid-corsair-void 0003:1B1C:1B25.0008: unknown main item tag 0x0
[ 1190.757877][ T5888] hid-corsair-void 0003:1B1C:1B25.0008: unknown main item tag 0x0
[ 1191.093977][ T5888] hid-corsair-void 0003:1B1C:1B25.0008: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.7-1/input0
[ 1191.293356][ T5888] usb 8-1: USB disconnect, device number 4
[ 1191.342352][ T5888] ------------[ cut here ]------------
[ 1191.348022][ T5888] ODEBUG: free active (active state 0) object: ffff8880430419a8 object type: timer_list hint: corsair_void_status_work_handler+0x0/0x190
[ 1191.393170][ T5839] hid-corsair-void 0003:1B1C:1B25.0008: failed to request battery (reason: -19)
[ 1191.444472][ T5888] WARNING: CPU: 1 PID: 5888 at lib/debugobjects.c:615 debug_print_object+0x17a/0x1f0
[ 1191.454129][ T5888] Modules linked in:
[ 1191.458050][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: kworker/1:6 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0
[ 1191.468650][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1191.478787][ T5888] Workqueue: usb_hub_wq hub_event
[ 1191.483944][ T5888] RIP: 0010:debug_print_object+0x17a/0x1f0
[ 1191.489800][ T5888] Code: e8 3b 10 38 fd 4c 8b 0b 48 c7 c7 80 1e 60 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 fb 3c 92 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 a8 9f 4d 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41
[ 1191.510264][ T5888] RSP: 0018:ffffc90002df6eb8 EFLAGS: 00010286
[ 1191.516791][ T5888] RAX: cc5ce322267d5c00 RBX: ffffffff8c0ca540 RCX: 0000000000100000
[ 1191.524980][ T5888] RDX: ffffc9001bcb0000 RSI: 000000000000db09 RDI: 000000000000db0a
[ 1191.533050][ T5888] RBP: ffffffff8c602000 R08: ffffffff81603132 R09: 1ffff920005bed70
[ 1191.541057][ T5888] R10: dffffc0000000000 R11: fffff520005bed71 R12: 0000000000000000
[ 1191.549138][ T5888] R13: ffffffff8c601f18 R14: dffffc0000000000 R15: ffff8880430419a8
[ 1191.557185][ T5888] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 1191.566351][ T5888] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1191.573008][ T5888] CR2: 00007ff053a0f800 CR3: 000000000e738000 CR4: 0000000000350ef0
[ 1191.581050][ T5888] Call Trace:
[ 1191.584426][ T5888]  <TASK>
[ 1191.587378][ T5888]  ? __warn+0x165/0x4d0
[ 1191.591573][ T5888]  ? debug_print_object+0x17a/0x1f0
[ 1191.597004][ T5888]  ? report_bug+0x2b3/0x500
[ 1191.601557][ T5888]  ? debug_print_object+0x17a/0x1f0
[ 1191.607348][ T5888]  ? handle_bug+0x60/0x90
[ 1191.612181][ T5888]  ? exc_invalid_op+0x1a/0x50
[ 1191.616952][ T5888]  ? asm_exc_invalid_op+0x1a/0x20
[ 1191.622015][ T5888]  ? __warn_printk+0x292/0x360
[ 1191.626926][ T5888]  ? debug_print_object+0x17a/0x1f0
[ 1191.632198][ T5888]  ? __pfx_corsair_void_status_work_handler+0x10/0x10
[ 1191.639067][ T5888]  ? __pfx_corsair_void_status_work_handler+0x10/0x10
[ 1191.645984][ T5888]  debug_check_no_obj_freed+0x45b/0x580
[ 1191.651689][ T5888]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[ 1191.657882][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1191.663621][ T5888]  ? rcu_is_watching+0x15/0xb0
[ 1191.668436][ T5888]  ? devres_release_group+0x328/0x350
[ 1191.674079][ T5888]  ? devres_release_group+0x328/0x350
[ 1191.679527][ T5888]  kfree+0x115/0x430
[ 1191.683671][ T5888]  devres_release_group+0x328/0x350
[ 1191.688910][ T5888]  ? __pfx_devres_release_group+0x10/0x10
[ 1191.694727][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1191.700502][ T5888]  ? kernfs_put+0x315/0x370
[ 1191.705221][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1191.711409][ T5888]  ? sysfs_remove_group+0x242/0x2c0
[ 1191.717214][ T5888]  ? __pfx_corsair_void_remove+0x10/0x10
[ 1191.722895][ T5888]  hid_device_remove+0x250/0x370
[ 1191.727916][ T5888]  ? __pfx_hid_device_remove+0x10/0x10
[ 1191.733481][ T5888]  device_release_driver_internal+0x4ab/0x7c0
[ 1191.739621][ T5888]  bus_remove_device+0x34f/0x420
[ 1191.744683][ T5888]  device_del+0x57a/0x9b0
[ 1191.749100][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1191.754867][ T5888]  ? __pfx_device_del+0x10/0x10
[ 1191.759774][ T5888]  ? _raw_spin_lock_irq+0xdf/0x120
[ 1191.765005][ T5888]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1191.771394][ T5888]  hid_destroy_device+0x6a/0x1b0
[ 1191.776426][ T5888]  usbhid_disconnect+0x9e/0xc0
[ 1191.781267][ T5888]  usb_unbind_interface+0x25d/0x940
[ 1191.786583][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1191.792263][ T5888]  ? __pfx_usb_unbind_interface+0x10/0x10
[ 1191.798093][ T5888]  device_release_driver_internal+0x505/0x7c0
[ 1191.804396][ T5888]  bus_remove_device+0x34f/0x420
[ 1191.809856][ T5888]  device_del+0x57a/0x9b0
[ 1191.814719][ T5888]  ? kobject_put+0x272/0x480
[ 1191.819356][ T5888]  ? __pfx_device_del+0x10/0x10
[ 1191.824315][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1191.830025][ T5888]  ? kobject_put+0x44d/0x480
[ 1191.834760][ T5888]  usb_disable_device+0x3bf/0x850
[ 1191.839852][ T5888]  usb_disconnect+0x340/0x950
[ 1191.844648][ T5888]  hub_event+0x1ebc/0x5150
[ 1191.849148][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1191.854880][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1191.860561][ T5888]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1191.865910][ T5888]  ? __pfx_hub_event+0x10/0x10
[ 1191.870811][ T5888]  ? __pfx_lock_acquire+0x10/0x10
[ 1191.875952][ T5888]  ? debug_object_deactivate+0x2d5/0x390
[ 1191.881693][ T5888]  ? __lock_acquire+0x1890/0x2100
[ 1191.886826][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1191.892512][ T5888]  ? __pfx_debug_object_deactivate+0x10/0x10
[ 1191.898626][ T5888]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1191.905079][ T5888]  ? rcu_is_watching+0x15/0xb0
[ 1191.909899][ T5888]  ? process_scheduled_works+0x976/0x1840
[ 1191.916228][ T5888]  process_scheduled_works+0xa68/0x1840
[ 1191.921837][ T5888]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1191.928349][ T5888]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[ 1191.934103][ T5888]  ? assign_work+0x364/0x3d0
[ 1191.938725][ T5888]  worker_thread+0x870/0xd30
[ 1191.943378][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1191.949068][ T5888]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1191.955055][ T5888]  ? __kthread_parkme+0x169/0x1d0
[ 1191.960115][ T5888]  ? __pfx_worker_thread+0x10/0x10
[ 1191.965299][ T5888]  kthread+0x7ab/0x920
[ 1191.969413][ T5888]  ? __pfx_worker_thread+0x10/0x10
[ 1191.974596][ T5888]  ? __pfx_kthread+0x10/0x10
[ 1191.979251][ T5888]  ? __pfx_kthread+0x10/0x10
[ 1191.983950][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1191.989810][ T5888]  ? rcu_is_watching+0x15/0xb0
[ 1191.994800][ T5888]  ? __pfx_kthread+0x10/0x10
[ 1191.999563][ T5888]  ? __pfx_kthread+0x10/0x10
[ 1192.004261][ T5888]  ret_from_fork+0x4d/0x80
[ 1192.008712][ T5888]  ? __pfx_kthread+0x10/0x10
[ 1192.013818][ T5888]  ret_from_fork_asm+0x1a/0x30
[ 1192.018634][ T5888]  </TASK>
[ 1192.021770][ T5888] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1192.029125][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: kworker/1:6 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0
[ 1192.039593][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1192.049688][ T5888] Workqueue: usb_hub_wq hub_event
[ 1192.054804][ T5888] Call Trace:
[ 1192.058088][ T5888]  <TASK>
[ 1192.061019][ T5888]  dump_stack_lvl+0x241/0x360
[ 1192.065730][ T5888]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1192.070945][ T5888]  ? __pfx__printk+0x10/0x10
[ 1192.075557][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1192.081202][ T5888]  ? vscnprintf+0x5d/0x90
[ 1192.085549][ T5888]  panic+0x349/0x880
[ 1192.089465][ T5888]  ? __warn+0x174/0x4d0
[ 1192.093636][ T5888]  ? __pfx_panic+0x10/0x10
[ 1192.098069][ T5888]  ? ret_from_fork_asm+0x1a/0x30
[ 1192.103020][ T5888]  __warn+0x344/0x4d0
[ 1192.107017][ T5888]  ? debug_print_object+0x17a/0x1f0
[ 1192.112237][ T5888]  report_bug+0x2b3/0x500
[ 1192.116600][ T5888]  ? debug_print_object+0x17a/0x1f0
[ 1192.121838][ T5888]  handle_bug+0x60/0x90
[ 1192.126013][ T5888]  exc_invalid_op+0x1a/0x50
[ 1192.130526][ T5888]  asm_exc_invalid_op+0x1a/0x20
[ 1192.135397][ T5888] RIP: 0010:debug_print_object+0x17a/0x1f0
[ 1192.141224][ T5888] Code: e8 3b 10 38 fd 4c 8b 0b 48 c7 c7 80 1e 60 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 fb 3c 92 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 a8 9f 4d 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41
[ 1192.160860][ T5888] RSP: 0018:ffffc90002df6eb8 EFLAGS: 00010286
[ 1192.166958][ T5888] RAX: cc5ce322267d5c00 RBX: ffffffff8c0ca540 RCX: 0000000000100000
[ 1192.174942][ T5888] RDX: ffffc9001bcb0000 RSI: 000000000000db09 RDI: 000000000000db0a
[ 1192.182917][ T5888] RBP: ffffffff8c602000 R08: ffffffff81603132 R09: 1ffff920005bed70
[ 1192.190899][ T5888] R10: dffffc0000000000 R11: fffff520005bed71 R12: 0000000000000000
[ 1192.198888][ T5888] R13: ffffffff8c601f18 R14: dffffc0000000000 R15: ffff8880430419a8
[ 1192.206975][ T5888]  ? __warn_printk+0x292/0x360
[ 1192.211770][ T5888]  ? __pfx_corsair_void_status_work_handler+0x10/0x10
[ 1192.218566][ T5888]  ? __pfx_corsair_void_status_work_handler+0x10/0x10
[ 1192.225356][ T5888]  debug_check_no_obj_freed+0x45b/0x580
[ 1192.230937][ T5888]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[ 1192.237035][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1192.242683][ T5888]  ? rcu_is_watching+0x15/0xb0
[ 1192.247467][ T5888]  ? devres_release_group+0x328/0x350
[ 1192.252850][ T5888]  ? devres_release_group+0x328/0x350
[ 1192.258231][ T5888]  kfree+0x115/0x430
[ 1192.262146][ T5888]  devres_release_group+0x328/0x350
[ 1192.267364][ T5888]  ? __pfx_devres_release_group+0x10/0x10
[ 1192.273102][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1192.278751][ T5888]  ? kernfs_put+0x315/0x370
[ 1192.283266][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1192.288911][ T5888]  ? sysfs_remove_group+0x242/0x2c0
[ 1192.294123][ T5888]  ? __pfx_corsair_void_remove+0x10/0x10
[ 1192.299762][ T5888]  hid_device_remove+0x250/0x370
[ 1192.304723][ T5888]  ? __pfx_hid_device_remove+0x10/0x10
[ 1192.310194][ T5888]  device_release_driver_internal+0x4ab/0x7c0
[ 1192.316286][ T5888]  bus_remove_device+0x34f/0x420
[ 1192.321242][ T5888]  device_del+0x57a/0x9b0
[ 1192.325595][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1192.331246][ T5888]  ? __pfx_device_del+0x10/0x10
[ 1192.336113][ T5888]  ? _raw_spin_lock_irq+0xdf/0x120
[ 1192.341238][ T5888]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1192.347589][ T5888]  hid_destroy_device+0x6a/0x1b0
[ 1192.352549][ T5888]  usbhid_disconnect+0x9e/0xc0
[ 1192.357333][ T5888]  usb_unbind_interface+0x25d/0x940
[ 1192.362553][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1192.368210][ T5888]  ? __pfx_usb_unbind_interface+0x10/0x10
[ 1192.373946][ T5888]  device_release_driver_internal+0x505/0x7c0
[ 1192.380040][ T5888]  bus_remove_device+0x34f/0x420
[ 1192.385001][ T5888]  device_del+0x57a/0x9b0
[ 1192.389346][ T5888]  ? kobject_put+0x272/0x480
[ 1192.393946][ T5888]  ? __pfx_device_del+0x10/0x10
[ 1192.398811][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1192.404460][ T5888]  ? kobject_put+0x44d/0x480
[ 1192.409059][ T5888]  usb_disable_device+0x3bf/0x850
[ 1192.414099][ T5888]  usb_disconnect+0x340/0x950
[ 1192.418803][ T5888]  hub_event+0x1ebc/0x5150
[ 1192.423235][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1192.428887][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1192.434531][ T5888]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1192.439754][ T5888]  ? __pfx_hub_event+0x10/0x10
[ 1192.444531][ T5888]  ? __pfx_lock_acquire+0x10/0x10
[ 1192.449574][ T5888]  ? debug_object_deactivate+0x2d5/0x390
[ 1192.455229][ T5888]  ? __lock_acquire+0x1890/0x2100
[ 1192.460263][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1192.465910][ T5888]  ? __pfx_debug_object_deactivate+0x10/0x10
[ 1192.471909][ T5888]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1192.478265][ T5888]  ? rcu_is_watching+0x15/0xb0
[ 1192.483058][ T5888]  ? process_scheduled_works+0x976/0x1840
[ 1192.488784][ T5888]  process_scheduled_works+0xa68/0x1840
[ 1192.494349][ T5888]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1192.500425][ T5888]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[ 1192.505992][ T5888]  ? assign_work+0x364/0x3d0
[ 1192.510629][ T5888]  worker_thread+0x870/0xd30
[ 1192.515256][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1192.520908][ T5888]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1192.526829][ T5888]  ? __kthread_parkme+0x169/0x1d0
[ 1192.531879][ T5888]  ? __pfx_worker_thread+0x10/0x10
[ 1192.537020][ T5888]  kthread+0x7ab/0x920
[ 1192.541121][ T5888]  ? __pfx_worker_thread+0x10/0x10
[ 1192.546254][ T5888]  ? __pfx_kthread+0x10/0x10
[ 1192.550868][ T5888]  ? __pfx_kthread+0x10/0x10
[ 1192.555488][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1192.561145][ T5888]  ? rcu_is_watching+0x15/0xb0
[ 1192.566025][ T5888]  ? __pfx_kthread+0x10/0x10
[ 1192.570635][ T5888]  ? __pfx_kthread+0x10/0x10
[ 1192.575261][ T5888]  ret_from_fork+0x4d/0x80
[ 1192.579792][ T5888]  ? __pfx_kthread+0x10/0x10
[ 1192.584407][ T5888]  ret_from_fork_asm+0x1a/0x30
[ 1192.589193][ T5888]  </TASK>
[ 1192.592456][ T5888] Kernel Offset: disabled
[ 1192.596862][ T5888] Rebooting in 86400 seconds..