last executing test programs:

14.943338966s ago: executing program 2 (id=798):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)

13.369530439s ago: executing program 2 (id=801):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f000000"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000300), &(0x7f0000000400)=""/154}, 0x20)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
close(r2)

12.454884802s ago: executing program 4 (id=805):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x8c, 0x0, 0x1}, 0x6)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x5, 0x0, 0x2, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x803fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x20007}], 0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11.955270029s ago: executing program 4 (id=810):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001000000000000ec000007000000", @ANYRES32=r1, @ANYBLOB="000096000a000200aaaaaaaaaa0c0000060005"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

10.882690064s ago: executing program 1 (id=813):
syz_open_dev$video4linux(&(0x7f0000000000), 0x3fe, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000080), 0x34, 0x0)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x4b5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4000080)
mount$cgroup(0x0, 0x0, 0x0, 0x2010042, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x17, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r3, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='nilfs2\x00', 0x2000010, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

10.724230217s ago: executing program 4 (id=814):
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
close(r0)
r1 = inotify_init1(0x80000)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

10.578226309s ago: executing program 0 (id=816):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0xfffffffd, 0x2}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0x400, 0x2000, 0x1})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4)
io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0)
r5 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000040), 0x4)
setsockopt$inet6_int(r1, 0x29, 0x57, &(0x7f0000000400)=0x6, 0x4)
openat$cgroup_devices(r5, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

9.616569422s ago: executing program 3 (id=817):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x1, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x6, 0x0, 0x1}, {0x0, 0x1}, {0x0, 0x8}, {}, {0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x9, 0x5}], 0x20})

9.323453777s ago: executing program 4 (id=818):
r0 = inotify_init()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e)
userfaultfd(0x1)
r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0)
sendfile(r4, r4, 0x0, 0x40008)
fcntl$addseals(r0, 0x409, 0x2)
r5 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r5, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendto$inet(r5, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6)
pipe2(&(0x7f0000000100), 0x0)

9.170517339s ago: executing program 1 (id=819):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0)

8.550676698s ago: executing program 3 (id=820):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
sync()
open_tree(0xffffffffffffff9c, 0x0, 0xc0800)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
mbind(&(0x7f0000000000/0x1000)=nil, 0xffffffffffffe000, 0x0, &(0x7f0000000000), 0x1b2, 0x0)
syz_emit_ethernet(0x85, &(0x7f0000000440)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4f, 0x3a, 0x0, @local, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x1, @empty, @local, [@srh], "f800c6597b47717e71bb69620888177bd19333ab2a54d1"}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000009000000000600150002000000140016000200"/55], 0x38}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

8.401741s ago: executing program 0 (id=821):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x8c, 0x0, 0x1}, 0x6)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x5, 0x0, 0x2, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x803fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x20007}], 0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.082963365s ago: executing program 1 (id=822):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4008011)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [<r8=>0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, 0x0, 0x48000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r10, 0x0, 0xd}, 0x18)
unshare(0x6020400)
r11 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x7, 0x0, 0xa0)

7.996831206s ago: executing program 3 (id=823):
socket(0x840000000002, 0x3, 0xff)
open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1c00)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
prlimit64(0x0, 0x425ea057ada49652, &(0x7f0000000140)={0x4231, 0x24b0}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x21, 0xffffffff, 0x50339398, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6}}, 0x50)
lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x4}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="9b1501000000a9aee900002c0012800e00010069703665727370616e0000001800028004"], 0x4c}}, 0x0)

7.994947216s ago: executing program 2 (id=824):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc0003"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000)

5.273382574s ago: executing program 0 (id=825):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, 0x0, &(0x7f0000000400)=""/154}, 0x20)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00000800000000000000000000000000bb"], 0x104}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r4)

5.128595797s ago: executing program 2 (id=826):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$media(0x0, 0x34, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
io_submit(0x0, 0x0, &(0x7f0000002340))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r4, 0xfffffffc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)

4.353720237s ago: executing program 3 (id=827):
r0 = socket$kcm(0xa, 0x2, 0x73)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xa80}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b"], 0x6b}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48)
close_range(r5, 0xffffffffffffffff, 0x0)

3.802892006s ago: executing program 0 (id=828):
syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000340), &(0x7f0000000080))
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0)

3.667317287s ago: executing program 1 (id=829):
syz_open_dev$video4linux(&(0x7f0000000000), 0x3fe, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000080), 0x34, 0x0)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x4b5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4000080)
mount$cgroup(0x0, 0x0, 0x0, 0x2010042, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x17, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r3, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='nilfs2\x00', 0x2000010, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

2.703924691s ago: executing program 3 (id=830):
creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc)
r0 = syz_open_dev$vim2m(0x0, 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000380)=0xff, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4)
listen(r5, 0x4000)
close(r5)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r8=>0x0})
chroot(&(0x7f0000000040)='./file0\x00')
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x300, {0x7, 0x0, 0x0, r8, 0x1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2.593162083s ago: executing program 0 (id=831):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
close(r6)
close_range(r5, 0xffffffffffffffff, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x60}}, 0x0)

1.586099857s ago: executing program 3 (id=832):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.489134288s ago: executing program 1 (id=833):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
sync()
open_tree(0xffffffffffffff9c, 0x0, 0xc0800)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
mbind(&(0x7f0000000000/0x1000)=nil, 0xffffffffffffe000, 0x0, &(0x7f0000000000), 0x1b2, 0x0)
syz_emit_ethernet(0x85, &(0x7f0000000440)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4f, 0x3a, 0x0, @local, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x1, @empty, @local, [@srh], "f800c6597b47717e71bb69620888177bd19333ab2a54d1"}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000009000000000600150002000000140016000200"/55], 0x38}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

1.39947297s ago: executing program 0 (id=834):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f000000"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000300), &(0x7f0000000400)=""/154}, 0x20)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
close(r2)

1.163244943s ago: executing program 4 (id=835):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000180)={0x0, 0x2})
r1 = socket(0x3, 0x3, 0x80002)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x100, 0x5d, 0x2, 0x8004}]}, 0x10)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00')
preadv(r4, 0x0, 0x0, 0xa2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)="180c4552", 0x4)
write$binfmt_misc(r5, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fcb6cc92620d96497900001ea863a500000000000000000000000000000004000001000000258f00000000000000000000000800000000ccb000", "2409e8dbe108598948224afc24a73f1d875397b5b22d0000b420a1a93c7040f45f81440a51fd61567259992861ac000000000000000400", "90be8b1c551265406c7f306003d8a0f4bd00", [0x18]}})
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='veno\x00', 0x5)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x32)
sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x11, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000003c0), 0x4, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = syz_open_dev$sndpcmp(&(0x7f0000000380), 0x1, 0x8000)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x4161, 0x0)
close(r7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r9 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2)
ioctl$VIDIOC_DV_TIMINGS_CAP(r9, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x8, 0x3, 0x1, 0x9, 0x97, 0x2, 0x1c, 0x4}})
close(r6)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1)

1.157500403s ago: executing program 2 (id=836):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x6, 0x3409, 0x956c}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x0, 0x10, 0x5}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x60)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x701, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x1080a422012f758f})
syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080))
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, &(0x7f0000001040)=""/4096, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

1.000955566s ago: executing program 1 (id=837):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
r6 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1000000, 0x8010002})
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r7 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000fc"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000974281408205050083e50102030109021b0002000000000904000000eca19d000904"], 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000480)={0x40, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, 0x0)
socket(0x40000000015, 0x5, 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/242, 0xf2}], 0x1)

40.444329ms ago: executing program 2 (id=838):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, 0x0, &(0x7f0000000400)=""/154}, 0x20)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00000800000000000000000000000000bb"], 0x104}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r4)

0s ago: executing program 4 (id=839):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2048)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x40, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}})

kernel console output (not intermixed with test programs):

e_0 entered promiscuous mode
[   85.247646][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.255023][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.263018][ T4274] device bridge_slave_0 entered promiscuous mode
[   85.290474][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.297892][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.306265][ T4277] device bridge_slave_1 entered promiscuous mode
[   85.315451][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.324791][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.331973][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.340006][ T4274] device bridge_slave_1 entered promiscuous mode
[   85.347713][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.355718][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.364225][ T4267] device bridge_slave_0 entered promiscuous mode
[   85.393480][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.410408][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.417850][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.426365][ T4267] device bridge_slave_1 entered promiscuous mode
[   85.444517][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.451743][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.460699][ T4265] device bridge_slave_0 entered promiscuous mode
[   85.504351][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.511568][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.520404][ T4265] device bridge_slave_1 entered promiscuous mode
[   85.529472][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.552114][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.564707][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.588906][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.601237][ T4279] team0: Port device team_slave_0 added
[   85.609120][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.620370][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.656478][ T4279] team0: Port device team_slave_1 added
[   85.691575][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.718797][ T4277] team0: Port device team_slave_0 added
[   85.735586][ T4267] team0: Port device team_slave_0 added
[   85.743684][ T4274] team0: Port device team_slave_0 added
[   85.751934][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.771603][ T4277] team0: Port device team_slave_1 added
[   85.779518][ T4267] team0: Port device team_slave_1 added
[   85.796332][ T4274] team0: Port device team_slave_1 added
[   85.821319][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.828471][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.854705][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.884133][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.891174][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.917402][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.947209][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.954758][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.981258][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.999279][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.006379][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.032579][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.044599][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.051578][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.077635][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.102123][ T4265] team0: Port device team_slave_0 added
[   86.111075][ T4265] team0: Port device team_slave_1 added
[   86.118177][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.125273][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.151519][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.167487][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.174582][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.200597][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.244019][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.251019][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.277386][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.324294][ T4267] device hsr_slave_0 entered promiscuous mode
[   86.331470][ T4267] device hsr_slave_1 entered promiscuous mode
[   86.351209][ T4279] device hsr_slave_0 entered promiscuous mode
[   86.358575][ T4279] device hsr_slave_1 entered promiscuous mode
[   86.366032][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.374279][ T4279] Cannot create hsr debugfs directory
[   86.380356][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.388316][ T4275] Bluetooth: hci0: command 0x0409 tx timeout
[   86.388332][   T48] Bluetooth: hci3: command 0x0409 tx timeout
[   86.395137][ T4275] Bluetooth: hci1: command 0x0409 tx timeout
[   86.400691][   T48] Bluetooth: hci2: command 0x0409 tx timeout
[   86.413005][ T4269] Bluetooth: hci4: command 0x0409 tx timeout
[   86.415335][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.446762][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.460656][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.468141][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.494427][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.523060][ T4277] device hsr_slave_0 entered promiscuous mode
[   86.530073][ T4277] device hsr_slave_1 entered promiscuous mode
[   86.537775][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.545504][ T4277] Cannot create hsr debugfs directory
[   86.606515][ T4274] device hsr_slave_0 entered promiscuous mode
[   86.613400][ T4274] device hsr_slave_1 entered promiscuous mode
[   86.620311][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.628606][ T4274] Cannot create hsr debugfs directory
[   86.658998][ T4265] device hsr_slave_0 entered promiscuous mode
[   86.666258][ T4265] device hsr_slave_1 entered promiscuous mode
[   86.673143][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.681231][ T4265] Cannot create hsr debugfs directory
[   87.042425][ T4279] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.054763][ T4279] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.065556][ T4279] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.075396][ T4279] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.132752][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.149556][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.162867][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.172425][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.284837][ T4267] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.305492][ T4267] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.315509][ T4267] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.336661][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.357567][ T4267] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.399951][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   87.409023][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.452370][ T4279] 8021q: adding VLAN 0 to HW filter on device team0
[   87.480103][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.489811][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.500081][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.510314][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.517739][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.527459][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.550629][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.561859][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.573480][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.583375][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.590552][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.608120][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.626196][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.647914][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.659686][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.697380][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.724531][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   87.732595][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.747322][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.757376][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   87.767360][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   87.779622][ T4277] 8021q: adding VLAN 0 to HW filter on device team0
[   87.787628][ T4265] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   87.797639][ T4265] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   87.808303][ T4265] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   87.821489][ T4265] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   87.843114][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.852631][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.865002][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.872127][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.880947][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.916121][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.926228][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   87.937406][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.949506][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.959088][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.966293][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.002474][ T4279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   88.013269][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.037459][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.051701][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.061147][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.072972][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.081841][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.091377][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   88.102930][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   88.136711][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   88.179961][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.191564][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.203246][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   88.221950][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   88.238959][ T4267] 8021q: adding VLAN 0 to HW filter on device team0
[   88.267332][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.284298][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   88.292370][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   88.306131][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   88.330092][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.342811][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.386934][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   88.400915][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   88.424949][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.432101][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.464477][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   88.470164][ T4275] Bluetooth: hci2: command 0x041b tx timeout
[   88.472651][ T4269] Bluetooth: hci1: command 0x041b tx timeout
[   88.478673][ T4273] Bluetooth: hci3: command 0x041b tx timeout
[   88.478731][ T4273] Bluetooth: hci0: command 0x041b tx timeout
[   88.485688][   T48] Bluetooth: hci4: command 0x041b tx timeout
[   88.500403][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   88.512818][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.520085][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.541253][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.558440][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.569920][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   88.584443][ T4274] 8021q: adding VLAN 0 to HW filter on device team0
[   88.601022][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.645012][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   88.672789][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.681616][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   88.690407][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.699580][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.708662][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   88.718601][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   88.728820][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   88.772927][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   88.788101][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   88.799100][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   88.808877][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.818307][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.828482][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   88.837792][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   88.847264][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.854601][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.862862][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.872443][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.893424][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   88.931208][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.947056][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   88.957499][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   88.968472][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   88.978682][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.985879][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.999792][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   89.015075][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.034579][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   89.056643][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   89.075194][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   89.082804][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   89.115703][ T4265] 8021q: adding VLAN 0 to HW filter on device team0
[   89.124430][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   89.133374][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   89.215585][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   89.245942][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   89.267466][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   89.299661][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   89.320066][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   89.345703][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.352910][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.390544][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   89.401439][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.422178][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   89.433292][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   89.468881][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   89.493142][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   89.503092][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   89.512640][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   89.522154][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   89.572706][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   89.588244][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   89.604752][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   89.624011][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.631172][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.639627][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   89.672228][ T4279] device veth0_vlan entered promiscuous mode
[   89.695619][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.702835][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   89.715926][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   89.723618][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   89.739786][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   89.751543][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.772200][ T4279] device veth1_vlan entered promiscuous mode
[   89.804673][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   89.819106][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   89.831661][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   89.848544][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   89.862273][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   89.873586][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   89.887066][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   89.896495][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   89.904379][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   89.917058][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.944481][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   89.952537][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   89.961533][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   89.974275][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   89.983090][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.000105][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   90.009200][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   90.037439][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   90.062183][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   90.072697][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   90.082415][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   90.092794][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.102186][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   90.110092][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   90.130369][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.140488][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.159094][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.175385][ T4279] device veth0_macvtap entered promiscuous mode
[   90.184859][ T4277] device veth0_vlan entered promiscuous mode
[   90.206129][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   90.225589][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.242988][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.257847][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.266778][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.276117][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.284330][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.306524][ T4267] device veth0_vlan entered promiscuous mode
[   90.316959][ T4279] device veth1_macvtap entered promiscuous mode
[   90.340632][ T4277] device veth1_vlan entered promiscuous mode
[   90.357965][ T4267] device veth1_vlan entered promiscuous mode
[   90.406302][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.426242][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   90.437504][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   90.446371][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   90.456727][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   90.471994][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   90.489145][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   90.498859][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   90.510511][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   90.524184][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   90.544906][   T48] Bluetooth: hci0: command 0x040f tx timeout
[   90.551016][   T48] Bluetooth: hci2: command 0x040f tx timeout
[   90.554158][ T4269] Bluetooth: hci4: command 0x040f tx timeout
[   90.563116][ T4269] Bluetooth: hci1: command 0x040f tx timeout
[   90.564854][   T48] Bluetooth: hci3: command 0x040f tx timeout
[   90.579724][ T4277] device veth0_macvtap entered promiscuous mode
[   90.601789][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.617170][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   90.629842][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   90.640921][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.650407][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   90.659599][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   90.668616][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   90.678495][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   90.715650][ T4277] device veth1_macvtap entered promiscuous mode
[   90.732830][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.743612][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.752581][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.762038][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.773507][ T4267] device veth0_macvtap entered promiscuous mode
[   90.789693][ T4274] device veth0_vlan entered promiscuous mode
[   90.807839][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.818651][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.830552][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.841634][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   90.850782][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   90.860231][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.870449][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.879461][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   90.888759][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   90.897841][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.906318][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.918590][ T4267] device veth1_macvtap entered promiscuous mode
[   90.937389][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.951253][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.965216][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.972681][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   90.980342][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   90.988159][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   90.997041][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   91.017923][ T4274] device veth1_vlan entered promiscuous mode
[   91.029009][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.038432][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.047986][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.058497][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.083190][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.106379][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.119773][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.131736][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.142486][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.155968][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.202720][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   91.215522][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   91.242737][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.260304][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.272162][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.283693][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.301483][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.342609][ T4274] device veth0_macvtap entered promiscuous mode
[   91.352391][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   91.363216][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   91.372618][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   91.382318][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   91.391476][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   91.409413][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.418359][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.427612][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.438263][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.459447][ T4274] device veth1_macvtap entered promiscuous mode
[   91.464748][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.474611][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.558145][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   91.578858][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   91.643505][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.671507][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.683799][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.694521][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.704455][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.715052][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.727918][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.752123][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   91.762400][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   91.783615][ T4376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.792973][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.804763][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.815333][ T4376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.829758][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.851954][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.862864][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.879655][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.890601][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.908258][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.931066][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.948966][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   91.959282][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   91.968548][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   91.977486][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   92.003589][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.017101][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.027660][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.037363][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.072880][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.082235][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.107960][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.123439][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   92.137747][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.152285][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   92.222730][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   92.249866][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   92.315415][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.323547][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.348964][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   92.373266][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   92.403488][ T4265] device veth0_vlan entered promiscuous mode
[   92.437521][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   92.459598][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   92.489734][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   92.524670][ T4265] device veth1_vlan entered promiscuous mode
[   92.543454][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.572847][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.624286][   T48] Bluetooth: hci3: command 0x0419 tx timeout
[   92.630425][   T48] Bluetooth: hci1: command 0x0419 tx timeout
[   92.638008][ T4273] Bluetooth: hci2: command 0x0419 tx timeout
[   92.638028][ T4269] Bluetooth: hci4: command 0x0419 tx timeout
[   92.644116][ T4273] Bluetooth: hci0: command 0x0419 tx timeout
[   92.729290][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   92.738054][  T126] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   92.769702][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   92.779548][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   92.823092][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.837749][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.848543][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   92.859761][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   92.870122][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   92.881776][ T4265] device veth0_macvtap entered promiscuous mode
[   92.898074][ T4265] device veth1_macvtap entered promiscuous mode
[   92.904525][ T4383] loop0: detected capacity change from 0 to 32768
[   92.921555][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   92.937534][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   92.959228][  T126] usb 3-1: config 0 has no interfaces?
[   92.985615][  T126] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[   92.999647][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.014246][  T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.022403][  T126] usb 3-1: Product: syz
[   93.027263][  T126] usb 3-1: Manufacturer: syz
[   93.031122][ T4383] XFS (loop0): Mounting V5 Filesystem
[   93.031896][  T126] usb 3-1: SerialNumber: syz
[   93.044112][  T126] usb 3-1: config 0 descriptor??
[   93.077386][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.102272][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.121446][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.131874][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.150714][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.161320][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.172537][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.229957][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.280120][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   93.281040][ T4383] XFS (loop0): Tail block (0x40) overwrite detected. Updated to 0x80
[   93.300954][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   93.322227][ T4383] XFS (loop0): Starting recovery (logdev: internal)
[   93.352333][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.365031][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.375607][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.379283][ T4383] XFS (loop0): Ending recovery (logdev: internal)
[   93.396833][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.429327][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.436677][  T951] cfg80211: failed to load regulatory.db
[   93.447589][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.464833][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.491347][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.542312][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.576403][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   93.597657][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   93.635489][ T4326] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 
[   93.653321][ T4326] XFS (loop0): Unmount and run xfs_repair
[   93.661630][ T4265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.668143][ T4326] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   93.690220][ T4326] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[   93.698719][ T4265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.701026][ T4326] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 40  ...............@
[   93.727240][ T4265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.743536][ T4265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.755780][ T4326] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d 06 0b c7 35 7f e4  ...*;yE..m...5..
[   93.775418][ T4326] 00000030: 00 00 00 00 23 eb 6e b5 00 00 00 00 00 00 00 01  ....#.n.........
[   93.795652][ T4326] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[   93.813941][ T4326] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[   93.838437][ T4326] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[   93.878544][ T4326] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[   93.913939][ T4383] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x14 len 4 error 74
[   93.930691][ T4311] usb 3-1: USB disconnect, device number 2
[   94.045783][   T14] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 
[   94.084733][ T4383] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1784/0x1e50 (fs/xfs/libxfs/xfs_defer.c:580).  Shutting down filesystem.
[   94.103913][ T4383] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   94.107309][   T14] XFS (loop0): Unmount and run xfs_repair
[   94.134452][   T14] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   94.153804][   T14] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[   94.175288][   T14] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 40  ...............@
[   94.199723][   T14] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d 06 0b c7 35 7f e4  ...*;yE..m...5..
[   94.247383][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.266289][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.280122][   T14] 00000030: 00 00 00 00 23 eb 6e b5 00 00 00 00 00 00 00 01  ....#.n.........
[   94.302893][   T14] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[   94.312627][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   94.323053][   T14] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[   94.340301][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.346671][   T14] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[   94.357855][   T14] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[   94.359360][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.394447][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   94.449705][ T4279] XFS (loop0): Unmounting Filesystem
[   94.682037][ T4420] loop4: detected capacity change from 0 to 128
[   94.787786][ T4420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   94.865758][  T951] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   94.894082][ T4420] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   94.981296][ T4426] loop0: detected capacity change from 0 to 128
[   95.056255][ T4426] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   95.088968][ T4426] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   95.125371][  T951] usb 3-1: Using ep0 maxpacket: 16
[   95.151067][  T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[   95.230685][  T951] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[   95.277836][ T4434] loop1: detected capacity change from 0 to 512
[   95.284312][  T951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.292348][  T951] usb 3-1: Product: syz
[   95.314630][ T4434] =======================================================
[   95.314630][ T4434] WARNING: The mand mount option has been deprecated and
[   95.314630][ T4434]          and is ignored by this kernel. Remove the mand
[   95.314630][ T4434]          option from the mount to silence this warning.
[   95.314630][ T4434] =======================================================
[   95.374077][  T951] usb 3-1: Manufacturer: syz
[   95.378757][  T951] usb 3-1: SerialNumber: syz
[   95.397320][  T951] usb 3-1: config 0 descriptor??
[   95.418667][  T951] hub 3-1:0.0: bad descriptor, ignoring hub
[   95.449030][  T951] hub: probe of 3-1:0.0 failed with error -5
[   95.476697][ T4434] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   95.559394][ T4434] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   95.607687][ T4279] EXT4-fs (loop0): unmounting filesystem.
[   95.638389][ T4434] EXT4-fs (loop1): 1 truncate cleaned up
[   95.686601][ T4334] usb 3-1: USB disconnect, device number 3
[   95.699376][ T4434] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   96.039422][ T4438] udevd[4438]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   96.176043][   T27] audit: type=1804 audit(1751685548.598:2): pid=4443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.12" name="/newroot/4/bus/bus" dev="loop1" ino=18 res=1 errno=0
[   96.213904][   T27] audit: type=1800 audit(1751685548.618:3): pid=4443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12" name="bus" dev="loop1" ino=18 res=0 errno=0
[   96.397696][ T4267] EXT4-fs (loop1): unmounting filesystem.
[   96.432032][ T4446] loop2: detected capacity change from 0 to 1024
[   96.540843][ T4448] loop1: detected capacity change from 0 to 64
[   96.567725][ T4446] ext4: Unknown parameter 'subj_role'
[   96.825610][ T4265] EXT4-fs (loop4): unmounting filesystem.
[   97.449865][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   97.514094][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   97.522511][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   97.756752][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   97.824095][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   97.832561][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   97.859527][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   97.961606][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   97.970571][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   98.116299][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   98.180553][ T4453] syz.3.17 (4453) used greatest stack depth: 20016 bytes left
[   98.648838][ T4472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'.
[   99.705298][ T4488] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   99.826177][ T4485] Zero length message leads to an empty skb
[  100.445095][ T4499] loop4: detected capacity change from 0 to 128
[  100.536222][ T4499] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  100.563998][ T4499] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  100.613598][ T4504] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4)
[  100.643175][ T4504] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  100.649811][ T4504] comedi comedi3: 8255: I/O port conflict (0x100000,4)
[  101.522636][ T4516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33'.
[  103.111029][ T4527] virtio-fs: tag <./file0> not found
[  103.469430][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  104.210342][ T4532] netlink: 44 bytes leftover after parsing attributes in process `syz.4.37'.
[  105.170042][ T4539] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  105.367082][ T4441] Set syz1 is full, maxelem 65536 reached
[  107.282802][ T4576] netlink: 44 bytes leftover after parsing attributes in process `syz.3.49'.
[  107.493838][ T4577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'.
[  107.522891][ T4553] loop0: detected capacity change from 0 to 32768
[  107.662449][ T4553] XFS (loop0): Mounting V5 Filesystem
[  108.007938][ T4553] XFS (loop0): Ending clean mount
[  108.046310][ T4553] XFS (loop0): Quotacheck needed: Please wait.
[  108.094696][ T4594] IPv6: addrconf: prefix option has invalid lifetime
[  108.613019][ T4553] XFS (loop0): Quotacheck: Done.
[  108.718532][ T4279] XFS (loop0): Unmounting Filesystem
[  109.392482][ T4610] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22)
[  109.419806][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.601671][ T4607] device bridge_slave_0 left promiscuous mode
[  109.676283][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.820661][ T4319] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  110.658749][ T4319] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.689876][ T4319] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  110.733535][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.782889][ T4319] usb 2-1: config 0 descriptor??
[  110.827036][ T4319] pwc: Askey VC010 type 2 USB webcam detected.
[  110.917102][  T951] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  111.118524][  T951] usb 4-1: Using ep0 maxpacket: 8
[  111.174707][  T951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.220728][ T4319] pwc: recv_control_msg error -32 req 02 val 2b00
[  111.242475][ T4319] pwc: recv_control_msg error -71 req 02 val 2700
[  111.262185][  T951] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  111.305130][ T4319] pwc: recv_control_msg error -71 req 02 val 2c00
[  111.347638][  T951] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  111.373210][ T4319] pwc: recv_control_msg error -71 req 04 val 1000
[  111.418385][  T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.429935][ T4319] pwc: recv_control_msg error -71 req 04 val 1300
[  111.441233][ T4319] pwc: recv_control_msg error -71 req 04 val 1400
[  111.463065][  T951] usb 4-1: config 0 descriptor??
[  111.487681][ T4319] pwc: recv_control_msg error -71 req 02 val 2000
[  111.541239][ T4319] pwc: recv_control_msg error -71 req 02 val 2100
[  111.721668][ T4319] pwc: recv_control_msg error -71 req 04 val 1500
[  111.728710][ T4621] syz.3.63 uses obsolete (PF_INET,SOCK_PACKET)
[  111.865871][ T4631] netlink: 44 bytes leftover after parsing attributes in process `syz.4.65'.
[  112.015349][ T4319] pwc: recv_control_msg error -71 req 02 val 2500
[  112.037912][ T4319] pwc: recv_control_msg error -71 req 02 val 2400
[  112.054996][ T4319] pwc: recv_control_msg error -71 req 02 val 2600
[  112.069585][ T4319] pwc: recv_control_msg error -71 req 02 val 2900
[  112.084147][ T4319] pwc: recv_control_msg error -71 req 02 val 2800
[  112.164349][ T4319] pwc: recv_control_msg error -71 req 04 val 1100
[  112.203905][ T4319] pwc: recv_control_msg error -71 req 04 val 1200
[  112.302934][ T4319] pwc: Registered as video103.
[  112.342166][ T4319] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7
[  112.459633][ T4319] usb 2-1: USB disconnect, device number 2
[  112.873330][ T4640] loop1: detected capacity change from 0 to 128
[  112.960962][ T4640] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  112.974688][ T4640] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  113.612843][ T4647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.72'.
[  114.396008][ T4334] usb 4-1: USB disconnect, device number 2
[  115.393505][ T4654] syz.2.75 (4654) used greatest stack depth: 19848 bytes left
[  115.619281][ T4662] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  115.794386][ T4319] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  115.820175][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  116.018206][ T4319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.056215][ T4319] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  116.100788][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.124730][ T4319] usb 4-1: config 0 descriptor??
[  116.148408][ T4319] pwc: Askey VC010 type 2 USB webcam detected.
[  116.198820][ T4675] loop2: detected capacity change from 0 to 2048
[  116.302713][ T4675] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  116.339267][ T4675] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.556911][ T4319] pwc: recv_control_msg error -32 req 02 val 2b00
[  116.584110][ T4319] pwc: recv_control_msg error -71 req 02 val 2700
[  116.596889][ T4319] pwc: recv_control_msg error -71 req 02 val 2c00
[  116.620396][ T4319] pwc: recv_control_msg error -71 req 04 val 1000
[  116.640963][ T4319] pwc: recv_control_msg error -71 req 04 val 1300
[  116.660907][ T4319] pwc: recv_control_msg error -71 req 04 val 1400
[  116.681139][ T4319] pwc: recv_control_msg error -71 req 02 val 2000
[  116.697387][ T4319] pwc: recv_control_msg error -71 req 02 val 2100
[  116.732710][ T4319] pwc: recv_control_msg error -71 req 04 val 1500
[  116.755128][ T4319] pwc: recv_control_msg error -71 req 02 val 2500
[  116.776072][ T4319] pwc: recv_control_msg error -71 req 02 val 2400
[  116.793680][ T4319] pwc: recv_control_msg error -71 req 02 val 2600
[  116.813449][ T4319] pwc: recv_control_msg error -71 req 02 val 2900
[  116.839513][ T4319] pwc: recv_control_msg error -71 req 02 val 2800
[  116.858330][ T4319] pwc: recv_control_msg error -71 req 04 val 1100
[  116.878262][ T4319] pwc: recv_control_msg error -71 req 04 val 1200
[  116.899993][ T4319] pwc: Registered as video103.
[  116.922446][ T4319] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9
[  116.989623][ T4319] usb 4-1: USB disconnect, device number 3
[  117.122598][ T4671] loop1: detected capacity change from 0 to 32768
[  117.297401][ T4671] XFS (loop1): Mounting V5 Filesystem
[  118.009197][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  118.094928][ T4671] XFS (loop1): Tail block (0x40) overwrite detected. Updated to 0x80
[  118.180363][ T4671] XFS (loop1): Starting recovery (logdev: internal)
[  118.220662][ T4671] XFS (loop1): Ending recovery (logdev: internal)
[  118.322270][ T4700] loop4: detected capacity change from 0 to 128
[  118.331470][ T4698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.83'.
[  118.451078][ T4267] XFS (loop1): Unmounting Filesystem
[  118.509756][ T4700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  118.577648][ T4700] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  118.855215][ T4708] netlink: 44 bytes leftover after parsing attributes in process `syz.2.87'.
[  118.974568][ T4710] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10
[  119.782768][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  121.374476][ T4714] loop3: detected capacity change from 0 to 40427
[  121.435006][ T4714] F2FS-fs (loop3): Unrecognized mount option "jvfmt=vfsv1" or missing value
[  121.601744][ T4733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.97'.
[  122.930524][ T4750] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11
[  123.006012][ T4311] kernel read not supported for file /file0 (pid: 4311 comm: kworker/0:4)
[  123.455926][ T4759] netlink: 44 bytes leftover after parsing attributes in process `syz.1.102'.
[  124.027055][ T4768] loop3: detected capacity change from 0 to 128
[  124.064874][ T4768] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  124.106530][ T4768] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  124.138480][    C0] vkms_vblank_simulate: vblank timer overrun
[  125.103391][ T4786] comedi comedi0: pcmmio: I/O port conflict (0xee,32)
[  125.473813][   T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  125.719741][   T22] usb 2-1: device descriptor read/64, error -71
[  125.781505][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  126.044013][   T22] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  126.203963][   T22] usb 2-1: device descriptor read/64, error -71
[  126.544345][   T22] usb usb2-port1: attempt power cycle
[  126.983950][   T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  127.026814][   T22] usb 2-1: device descriptor read/8, error -71
[  127.303921][   T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  127.364632][   T22] usb 2-1: device descriptor read/8, error -71
[  127.486130][   T22] usb usb2-port1: unable to enumerate USB device
[  127.722091][ T4812] comedi comedi1: pcl816: a I/O base address must be specified
[  128.246927][ T4818] Illegal XDP return value 4294967274 on prog  (id 19) dev N/A, expect packet loss!
[  128.353866][ T4804] loop4: detected capacity change from 0 to 32768
[  128.668981][ T4804] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root
[  128.668981][ T4804] 
[  129.351597][ T4804] ERROR: (device loop4): remounting filesystem as read-only
[  129.669587][ T4831] 9pnet_fd: Insufficient options for proto=fd
[  130.325930][ T4836] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  130.873043][ T4847] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  131.403984][   T22] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  131.561298][ T4855] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12
[  131.617872][   T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  131.648216][   T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  131.693000][   T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64
[  131.841843][   T22] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  131.866704][   T22] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  131.882526][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  131.902423][   T22] usb 2-1: SerialNumber: syz
[  131.956896][ T4849] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  132.207430][ T4849] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  133.053654][   T22] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  134.387859][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  134.394896][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  134.503097][ T4880] loop4: detected capacity change from 0 to 16
[  134.741404][ T4880] erofs: (device loop4): mounted with root inode @ nid 36.
[  134.877293][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 87 @ nid 36
[  135.131526][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36
[  135.269342][ T4880] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  135.727410][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 83 @ nid 36
[  135.885056][ T4880] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  135.953918][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 82 @ nid 36
[  136.024827][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.142'.
[  136.030741][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 79 @ nid 36
[  136.048233][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36
[  136.333856][ T4880] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  136.393992][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36
[  136.403928][ T4880] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  136.413327][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 75 @ nid 36
[  136.653847][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36
[  136.824071][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36
[  136.833206][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 71 @ nid 36
[  136.903886][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36
[  136.949352][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36
[  136.991315][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 61 @ nid 36
[  136.995883][ T4908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.144'.
[  137.013498][ T4880] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  137.052303][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 59 @ nid 36
[  137.098530][ T4880] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  137.142539][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36
[  137.179777][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 56 @ nid 36
[  137.212819][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36
[  137.240539][ T4880] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  137.241925][   T22] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  137.270830][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36
[  137.314425][   T22] usb 2-1: USB disconnect, device number 7
[  137.320974][ T4880] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  137.365195][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36
[  137.413349][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36
[  137.444050][ T4880] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  137.556470][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36
[  137.567602][ T4880] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  137.578283][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36
[  137.587635][ T4880] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  137.623817][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36
[  137.693991][ T4880] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  137.703382][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36
[  137.873968][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36
[  139.312738][ T4917] sched: RT throttling activated
[  139.351140][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36
[  139.514420][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36
[  139.580142][ T4923] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  139.587156][ T4880] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  139.628751][ T4923] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  139.647894][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36
[  139.675615][ T4923] comedi comedi3: 8255: I/O port conflict (0x10,4)
[  139.715190][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36
[  139.724749][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36
[  139.734106][ T4880] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36
[  139.744829][ T4880] syz.4.139: attempt to access beyond end of device
[  139.744829][ T4880] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16
[  139.758586][ T4880] syz.4.139: attempt to access beyond end of device
[  139.758586][ T4880] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  139.773223][ T4880] syz.4.139: attempt to access beyond end of device
[  139.773223][ T4880] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  139.787710][ T4880] syz.4.139: attempt to access beyond end of device
[  139.787710][ T4880] loop4: rw=524288, sector=32, nr_sectors = 64 limit=16
[  139.796371][ T4923] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  139.801798][ T4880] syz.4.139: attempt to access beyond end of device
[  139.801798][ T4880] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16
[  139.821281][ T4880] syz.4.139: attempt to access beyond end of device
[  139.821281][ T4880] loop4: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  139.839578][ T4886] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  139.854772][ T4923] comedi comedi3: 8255: I/O port conflict (0x10,4)
[  139.888535][ T4886] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851]
[  139.929732][ T4886] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[  141.134913][ T4319] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  141.323950][ T4319] usb 5-1: Using ep0 maxpacket: 32
[  141.334750][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.558353][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.589262][ T4319] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  141.617533][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.636445][ T4910] netlink: 'syz.2.145': attribute type 16 has an invalid length.
[  141.638787][ T4319] usb 5-1: config 0 descriptor??
[  141.762864][ T4910] loop2: detected capacity change from 0 to 2048
[  141.966243][ T4910] UDF-fs: warning (device loop2): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[  142.159111][ T4910] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[  142.397960][ T4319] usbhid 5-1:0.0: can't add hid device: -32
[  142.434002][ T4319] usbhid: probe of 5-1:0.0 failed with error -32
[  142.438975][ T4960] loop3: detected capacity change from 0 to 64
[  142.473005][ T4319] usb 5-1: USB disconnect, device number 2
[  143.386926][ T4970] netlink: 44 bytes leftover after parsing attributes in process `syz.3.157'.
[  144.017823][ T4971] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  145.318978][ T4978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.485951][ T4972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.193029][ T4991] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13
[  147.014104][ T5002] Bluetooth: hci5: Frame reassembly failed (-84)
[  147.545683][   T11] Bluetooth: hci5: Frame reassembly failed (-84)
[  147.554954][ T4360] Bluetooth: hci5: Frame reassembly failed (-84)
[  147.570853][ T4360] Bluetooth: hci5: Frame reassembly failed (-84)
[  147.608986][ T5002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'.
[  147.617974][ T5002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'.
[  149.088225][ T4927] Set syz1 is full, maxelem 65536 reached
[  149.333172][ T5011] loop1: detected capacity change from 0 to 128
[  149.537327][ T4986] syz.3.162 (4986): drop_caches: 2
[  149.583853][ T4269] Bluetooth: hci5: command 0x1003 tx timeout
[  149.583881][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  149.593479][ T5011] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  149.620574][ T5011] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  149.988026][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  150.214227][ T5025] loop1: detected capacity change from 0 to 64
[  150.293646][ T5015] loop4: detected capacity change from 0 to 32768
[  150.381571][ T5015] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.171 (5015)
[  150.724224][ T5015] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  150.803289][ T5015] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  150.824943][ T5029] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14
[  150.835905][ T5015] BTRFS info (device loop4): using free space tree
[  151.374058][ T5015] BTRFS info (device loop4): enabling ssd optimizations
[  151.807232][ T5059] netlink: 44 bytes leftover after parsing attributes in process `syz.3.179'.
[  152.584348][   T27] audit: type=1800 audit(1751685604.998:4): pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.171" name="file1" dev="loop4" ino=261 res=0 errno=0
[  152.706319][   T27] audit: type=1800 audit(1751685605.128:5): pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.171" name="bus" dev="loop4" ino=263 res=0 errno=0
[  153.052143][   T27] audit: type=1804 audit(1751685605.468:6): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.171" name="/newroot/29/file0/file1" dev="loop4" ino=261 res=1 errno=0
[  153.639394][ T4265] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  153.713833][   T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  153.923850][   T22] usb 1-1: Using ep0 maxpacket: 32
[  153.931319][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.980593][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.074515][   T22] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  154.120169][ T5077] loop3: detected capacity change from 0 to 128
[  154.131895][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.360628][   T22] usb 1-1: config 0 descriptor??
[  155.042045][ T5077] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  155.084776][ T5077] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  155.508884][   T22] ft260 0003:0403:6030.0001: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  155.662549][   T22] ft260 0003:0403:6030.0001: failed to retrieve chip version
[  155.736693][   T22] ft260: probe of 0003:0403:6030.0001 failed with error -32
[  155.983298][ T5101] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15
[  156.732070][ T4311] usb 1-1: USB disconnect, device number 2
[  157.567027][ T5120] IPv6: addrconf: prefix option has invalid lifetime
[  157.788614][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  158.764958][ T5139] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16
[  159.206722][ T5150] loop3: detected capacity change from 0 to 1
[  159.264184][ T4893] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  159.463855][ T4893] usb 3-1: Using ep0 maxpacket: 32
[  159.488161][ T4893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.726667][ T4893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.738342][ T4893] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  159.760949][ T4893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.903360][ T4893] usb 3-1: config 0 descriptor??
[  160.610678][ T4893] ft260 0003:0403:6030.0002: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0
[  160.803463][ T4893] ft260 0003:0403:6030.0002: failed to retrieve chip version
[  160.821724][ T5170] IPv6: addrconf: prefix option has invalid lifetime
[  160.979167][ T5171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.210'.
[  160.985162][ T4893] ft260: probe of 0003:0403:6030.0002 failed with error -32
[  161.309988][ T5180] loop4: detected capacity change from 0 to 128
[  162.025436][ T4337] usb 3-1: USB disconnect, device number 4
[  162.336663][ T5190] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17
[  162.660355][ T5194] loop1: detected capacity change from 0 to 64
[  163.189398][ T5206] IPv6: addrconf: prefix option has invalid lifetime
[  164.543805][ T5082] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  164.753815][ T5082] usb 2-1: Using ep0 maxpacket: 8
[  164.762012][ T5082] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.891756][ T5082] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  164.915901][ T5082] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  165.786578][ T5082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.802757][ T5082] usb 2-1: config 0 descriptor??
[  165.841339][ T5223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.986917][ T5223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.131947][ T4334] usb 2-1: USB disconnect, device number 8
[  167.191299][ T5247] loop3: detected capacity change from 0 to 64
[  167.731977][ T5259] netlink: 44 bytes leftover after parsing attributes in process `syz.2.237'.
[  171.097222][ T5287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.176964][ T5290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.297032][ T5296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.552916][  T951] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  171.765868][  T951] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  171.809921][  T951] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  171.831305][ T5308] netlink: 92 bytes leftover after parsing attributes in process `syz.0.249'.
[  171.858749][  T951] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64
[  171.871878][  T951] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  171.915793][  T951] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  171.925825][ T5308] device netdevsim0 entered promiscuous mode
[  171.946765][  T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  171.990946][  T951] usb 3-1: SerialNumber: syz
[  172.010343][ T5293] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  172.017903][ T5293] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  172.034795][  T951] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  172.769050][ T5317] Bluetooth: hci5: Frame reassembly failed (-84)
[  172.781584][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'.
[  172.790760][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'.
[  173.029288][   T75] Bluetooth: hci5: Frame reassembly failed (-84)
[  175.133138][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  175.139910][ T4269] Bluetooth: hci5: command 0x1003 tx timeout
[  176.829021][ T5333] NILFS (nullb0): couldn't find nilfs on the device
[  177.105311][  T951] cdc_acm 3-1:1.0: ttyACM0: USB ACM device
[  177.505734][ T5355] IPv6: addrconf: prefix option has invalid lifetime
[  177.551784][ T5075] usb 3-1: USB disconnect, device number 5
[  177.953426][ T5362] IPv6: addrconf: prefix option has invalid lifetime
[  178.744028][ T4368] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  178.984521][ T5372] delete_channel: no stack
[  179.023934][ T4368] usb 3-1: Using ep0 maxpacket: 16
[  179.066243][ T4368] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  179.835315][ T5380] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18
[  179.915446][ T4368] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.926230][ T4368] usb 3-1: config 0 has no interface number 0
[  179.946807][ T4368] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  179.956303][ T4368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.966633][ T4368] usb 3-1: Product: syz
[  179.971069][ T4368] usb 3-1: Manufacturer: syz
[  179.993470][ T4368] usb 3-1: SerialNumber: syz
[  180.012390][ T4368] usb 3-1: config 0 descriptor??
[  180.226834][ T4368] usb 3-1: Found UVC 0.00 device syz (046d:08d3)
[  180.233558][ T4368] usb 3-1: No valid video chain found.
[  182.666406][  T951] usb 3-1: USB disconnect, device number 6
[  182.896798][ T5405] IPv6: addrconf: prefix option has invalid lifetime
[  183.026984][ T5410] loop1: detected capacity change from 0 to 128
[  183.204587][ T5410] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  183.288128][ T5410] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  183.832360][ T5410] overlayfs: failed to resolve './file2': -2
[  184.462179][ T5427] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19
[  187.138674][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  187.203786][ T5439] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  187.308917][ T5447] NILFS (nullb0): couldn't find nilfs on the device
[  187.329366][ T5448] loop3: detected capacity change from 0 to 1
[  187.393856][ T5439] usb 4-1: Using ep0 maxpacket: 16
[  187.417146][ T5439] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.463167][ T5439] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  187.503173][ T5439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.538915][ T5439] usb 4-1: Product: syz
[  187.564305][ T5439] usb 4-1: Manufacturer: syz
[  187.569085][ T5439] usb 4-1: SerialNumber: syz
[  187.607004][ T5439] usb 4-1: config 0 descriptor??
[  187.641672][ T5439] hub 4-1:0.0: bad descriptor, ignoring hub
[  187.643127][ T5460] 9pnet_fd: Insufficient options for proto=fd
[  187.656871][ T5439] hub: probe of 4-1:0.0 failed with error -5
[  187.787725][ T5439] snd-usb-audio: probe of 4-1:0.0 failed with error -2
[  187.829476][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  187.876020][ T5439] usb 4-1: USB disconnect, device number 4
[  189.523879][   T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  190.025591][   T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.550834][   T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  191.580286][ T5482] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20
[  191.641995][   T26] usb 4-1: config 1 has no interface number 0
[  191.754737][   T26] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.293835][   T26] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  192.306402][ T4889] Bluetooth: (null): Invalid header checksum
[  192.323022][ T4889] Bluetooth: (null): Invalid header checksum
[  192.329561][   T26] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping
[  192.376293][ T4889] Bluetooth: (null): Invalid header checksum
[  192.382626][   T26] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  192.410042][ T5493] loop0: detected capacity change from 0 to 128
[  192.451086][   T26] usb 4-1: string descriptor 0 read error: -71
[  192.477632][   T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  192.492149][   T11] Bluetooth: (null): Invalid header checksum
[  192.522559][ T5493] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  192.547736][ T5493] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  192.550961][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.594082][   T41] Bluetooth: (null): Invalid header checksum
[  192.716495][ T5493] overlayfs: failed to resolve './file2': -2
[  192.825057][   T26] usb 4-1: can't set config #1, error -71
[  192.873635][   T26] usb 4-1: USB disconnect, device number 5
[  193.284056][   T26] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  193.480603][   T26] usb 4-1: no configurations
[  193.506240][   T26] usb 4-1: can't read configurations, error -22
[  193.704027][   T26] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  193.840414][ T5507] loop3: detected capacity change from 0 to 1
[  193.914582][   T26] usb 4-1: no configurations
[  193.919299][   T26] usb 4-1: can't read configurations, error -22
[  194.186978][   T26] usb usb4-port1: attempt power cycle
[  194.494039][ T5506] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  194.626139][   T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  194.668496][   T26] usb 4-1: no configurations
[  194.673175][   T26] usb 4-1: can't read configurations, error -22
[  194.683833][ T5506] usb 2-1: Using ep0 maxpacket: 8
[  194.694668][ T5506] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.705206][ T4318] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  194.719267][ T5506] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  194.730254][ T5506] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  194.744288][ T5506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.756724][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  194.758911][ T5506] usb 2-1: config 0 descriptor??
[  194.863922][   T26] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  194.894102][ T4318] usb 3-1: Using ep0 maxpacket: 16
[  194.997880][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.028181][ T4318] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  195.039815][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.050763][ T4318] usb 3-1: Product: syz
[  195.057649][   T26] usb 4-1: no configurations
[  195.062628][   T26] usb 4-1: can't read configurations, error -22
[  195.069987][ T4318] usb 3-1: Manufacturer: syz
[  195.077109][   T26] usb usb4-port1: unable to enumerate USB device
[  195.087270][ T4318] usb 3-1: SerialNumber: syz
[  195.318506][ T4318] usb 3-1: config 0 descriptor??
[  195.398887][ T4318] hub 3-1:0.0: bad descriptor, ignoring hub
[  195.405340][ T4318] hub: probe of 3-1:0.0 failed with error -5
[  195.529366][ T4318] snd-usb-audio: probe of 3-1:0.0 failed with error -2
[  195.573154][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  195.595122][ T5527] 9pnet_fd: Insufficient options for proto=fd
[  195.608001][ T4318] usb 3-1: USB disconnect, device number 7
[  195.826446][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  195.833222][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  196.687352][ T5074] usb 2-1: USB disconnect, device number 9
[  196.787921][ T5537] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21
[  197.013228][ T5545] IPv6: addrconf: prefix option has invalid lifetime
[  197.100943][ T5546] NILFS (nullb0): couldn't find nilfs on the device
[  197.191204][ T5553] loop1: detected capacity change from 0 to 128
[  197.236442][ T5554] loop3: detected capacity change from 0 to 1
[  197.312389][ T5553] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  197.339232][ T5553] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  197.534284][ T5553] overlayfs: failed to resolve './file2': -2
[  199.343797][  T951] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  199.393898][   T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  199.535219][  T951] usb 1-1: no configurations
[  199.539899][  T951] usb 1-1: can't read configurations, error -22
[  199.583858][   T26] usb 3-1: Using ep0 maxpacket: 16
[  199.594780][   T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.611331][   T26] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  199.621107][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.630878][   T26] usb 3-1: Product: syz
[  199.635577][   T26] usb 3-1: Manufacturer: syz
[  199.640452][   T26] usb 3-1: SerialNumber: syz
[  199.666906][   T26] usb 3-1: config 0 descriptor??
[  199.684912][   T26] hub 3-1:0.0: bad descriptor, ignoring hub
[  199.691194][   T26] hub: probe of 3-1:0.0 failed with error -5
[  199.703946][  T951] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  199.765567][   T26] snd-usb-audio: probe of 3-1:0.0 failed with error -2
[  199.787746][ T4437] udevd[4437]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  199.904364][  T951] usb 1-1: no configurations
[  199.909305][  T951] usb 1-1: can't read configurations, error -22
[  199.921898][  T951] usb usb1-port1: attempt power cycle
[  199.972577][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  200.027545][   T26] usb 3-1: USB disconnect, device number 8
[  200.128431][ T5576] 9pnet_fd: Insufficient options for proto=fd
[  200.223490][ T5578] capability: warning: `syz.3.322' uses 32-bit capabilities (legacy support in use)
[  200.353856][  T951] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  200.395044][  T951] usb 1-1: no configurations
[  200.399866][  T951] usb 1-1: can't read configurations, error -22
[  200.553882][  T951] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  200.695256][  T951] usb 1-1: no configurations
[  200.703395][  T951] usb 1-1: can't read configurations, error -22
[  200.749542][  T951] usb usb1-port1: unable to enumerate USB device
[  201.484830][ T5591] loop1: detected capacity change from 0 to 64
[  201.503225][ T5590] IPv6: addrconf: prefix option has invalid lifetime
[  201.767373][ T5596] loop3: detected capacity change from 0 to 1
[  203.227684][ T5610] [U] 
[  207.463331][ T5628] 9pnet_fd: Insufficient options for proto=fd
[  207.687918][ T5634] loop2: detected capacity change from 0 to 64
[  207.746613][ T5635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.339'.
[  208.143855][ T4283] Bluetooth: hci2: command 0x0406 tx timeout
[  208.515044][   T48] Bluetooth: hci3: command 0x0406 tx timeout
[  208.515123][ T4269] Bluetooth: hci1: command 0x0406 tx timeout
[  208.528060][ T4283] Bluetooth: hci0: command 0x0406 tx timeout
[  209.001836][ T5645] virtio-fs: tag <./file0> not found
[  211.714856][ T5666] delete_channel: no stack
[  215.894764][ T4318] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  216.447340][ T4318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.483767][ T4318] usb 4-1: config 0 has no interfaces?
[  216.489354][ T4318] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  216.529061][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.396623][ T5695] [U] 
[  218.950828][ T4318] usb 4-1: config 0 descriptor??
[  219.468123][ T4318] usb 4-1: can't set config #0, error -71
[  219.490238][ T4318] usb 4-1: USB disconnect, device number 10
[  220.567960][ T5725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.368'.
[  221.091708][ T5734] virtio-fs: tag <./file0> not found
[  222.702746][ T5748] IPv6: addrconf: prefix option has invalid lifetime
[  223.231323][ T5757] netlink: 44 bytes leftover after parsing attributes in process `syz.0.375'.
[  226.216458][ T4337] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  226.856783][ T4337] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  226.873832][ T4337] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  226.889443][ T4337] usb 2-1: config 220 has no interface number 2
[  226.896011][ T4337] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  226.913891][ T4337] usb 2-1: config 220 interface 0 has no altsetting 0
[  226.928494][ T4337] usb 2-1: config 220 interface 76 has no altsetting 0
[  226.935593][ T4337] usb 2-1: config 220 interface 1 has no altsetting 0
[  226.947069][ T4337] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  226.956551][ T4337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.964702][ T4337] usb 2-1: Product: syz
[  226.973938][ T4337] usb 2-1: Manufacturer: syz
[  226.978562][ T4337] usb 2-1: SerialNumber: syz
[  227.210561][ T4337] usb 2-1: selecting invalid altsetting 0
[  227.234953][ T4337] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  227.254503][ T4337] usb 2-1: No valid video chain found.
[  227.327661][ T4337] usb 2-1: selecting invalid altsetting 0
[  227.360704][ T4337] usbtest: probe of 2-1:220.1 failed with error -22
[  227.430514][ T4337] usb 2-1: USB disconnect, device number 10
[  227.850695][ T5802] netlink: 44 bytes leftover after parsing attributes in process `syz.4.387'.
[  231.765684][ T5829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.398'.
[  232.900820][ T5840] netlink: 44 bytes leftover after parsing attributes in process `syz.3.400'.
[  234.006463][ T5838] fuse: Bad value for 'fd'
[  234.013125][ T5838] 9pnet_fd: Insufficient options for proto=fd
[  237.401124][ T5873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.411'.
[  238.113892][ T5746] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  238.849917][ T5890] netlink: 44 bytes leftover after parsing attributes in process `syz.0.413'.
[  239.603905][ T5746] usb 2-1: Using ep0 maxpacket: 32
[  239.621327][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.633458][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.644110][ T5746] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  239.653324][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.729214][ T5746] usb 2-1: config 0 descriptor??
[  240.325876][ T5746] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0
[  240.516687][ T5746] ft260 0003:0403:6030.0003: failed to retrieve chip version
[  240.606652][ T5746] ft260: probe of 0003:0403:6030.0003 failed with error -5
[  242.152585][ T5078] usb 2-1: USB disconnect, device number 11
[  242.974406][ T5919] loop3: detected capacity change from 0 to 1
[  243.901018][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.424'.
[  245.078970][ T5946] netlink: 44 bytes leftover after parsing attributes in process `syz.1.427'.
[  245.894812][ T5950] IPv6: addrconf: prefix option has invalid lifetime
[  248.092837][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.438'.
[  250.831139][ T5980] loop3: detected capacity change from 0 to 1
[  251.332228][ T5988] netlink: 44 bytes leftover after parsing attributes in process `syz.2.443'.
[  252.585798][ T5078] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  253.113762][ T5078] usb 4-1: Using ep0 maxpacket: 16
[  253.129747][ T5078] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  253.161030][ T5078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.184518][ T5078] usb 4-1: Product: syz
[  253.192784][ T5078] usb 4-1: Manufacturer: syz
[  253.275512][ T6012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.683329][ T5078] usb 4-1: SerialNumber: syz
[  253.699913][ T5078] usb 4-1: config 0 descriptor??
[  253.735136][ T5078] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  253.922994][ T5078] gspca_sn9c2028: read1 error -32
[  253.930836][ T5078] gspca_sn9c2028: read1 error -71
[  253.961311][ T5078] gspca_sn9c2028: read1 error -71
[  253.983294][ T5078] sn9c2028: probe of 4-1:0.0 failed with error -71
[  254.015293][ T5078] usb 4-1: USB disconnect, device number 11
[  255.703456][ T6024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.451'.
[  255.786900][ T6028] loop3: detected capacity change from 0 to 64
[  256.254926][ T6035] netlink: 44 bytes leftover after parsing attributes in process `syz.4.455'.
[  257.152133][ T6040] loop3: detected capacity change from 0 to 1
[  257.266741][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  257.273139][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  257.597850][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'.
[  257.640030][ T6048] device vlan2 entered promiscuous mode
[  257.653336][ T6048] device batadv0 entered promiscuous mode
[  258.087973][ T6058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.918698][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.466'.
[  262.363900][ T6084] netlink: 44 bytes leftover after parsing attributes in process `syz.0.467'.
[  264.470498][ T6107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.744224][ T6100] delete_channel: no stack
[  265.951474][ T6122] NILFS (nullb0): couldn't find nilfs on the device
[  266.299932][ T6128] netlink: 44 bytes leftover after parsing attributes in process `syz.3.479'.
[  267.093986][ T6132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'.
[  267.786098][ T6138] IPv6: addrconf: prefix option has invalid lifetime
[  268.302001][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'.
[  268.311099][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'.
[  268.504166][ T4889] Bluetooth: hci5: Frame reassembly failed (-84)
[  268.870347][ T6143] loop3: detected capacity change from 0 to 1
[  268.878063][ T4889] Bluetooth: hci5: Frame reassembly failed (-84)
[  271.287787][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  271.294939][ T4283] Bluetooth: hci5: command 0x1003 tx timeout
[  272.055988][ T6169] netlink: 44 bytes leftover after parsing attributes in process `syz.0.491'.
[  272.576828][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.492'.
[  273.063115][ T6180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.495'.
[  273.176575][ T6182] loop3: detected capacity change from 0 to 1
[  274.531406][ T6203] virtio-fs: tag <./file0> not found
[  274.810773][ T6208] loop3: detected capacity change from 0 to 128
[  274.903119][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'.
[  274.912578][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'.
[  275.025116][ T4493] Bluetooth: hci5: Frame reassembly failed (-84)
[  275.631884][ T4493] Bluetooth: hci5: Frame reassembly failed (-84)
[  275.641264][ T6208] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  275.821196][ T6208] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  276.177376][ T6208] overlayfs: missing 'lowerdir'
[  276.654851][ T6221] netlink: 44 bytes leftover after parsing attributes in process `syz.1.505'.
[  277.025407][   T48] Bluetooth: hci5: command 0x1003 tx timeout
[  277.032119][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  277.658249][ T6223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.506'.
[  277.968257][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  278.977156][ T6236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  279.018484][ T6240] loop3: detected capacity change from 0 to 1
[  280.912534][ T6258] netlink: 44 bytes leftover after parsing attributes in process `syz.4.516'.
[  282.012244][ T6270] loop4: detected capacity change from 0 to 128
[  282.054027][ T6270] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  282.063600][ T6270] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  282.115964][ T6270] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  282.125295][ T6270] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  282.284341][ T6274] IPv6: addrconf: prefix option has invalid lifetime
[  282.358820][ T6277] virtio-fs: tag <./file0> not found
[  283.007849][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  283.036133][   T48] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  283.045782][   T48] Bluetooth: hci4: Injecting HCI hardware error event
[  283.054333][ T4273] Bluetooth: hci4: hardware error 0x00
[  283.186731][ T6284] loop3: detected capacity change from 0 to 1
[  285.103941][ T4273] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  286.027562][   T27] audit: type=1326 audit(1751685737.818:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.2.529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6987f8e929 code=0x0
[  287.609850][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'.
[  288.415445][ T6321] binder: 6319:6321 ioctl 4018620d 0 returned -22
[  288.469040][ T6324] loop3: detected capacity change from 0 to 1
[  290.962713][ T6348] loop3: detected capacity change from 0 to 64
[  291.350007][ T6356] [U] 
[  293.581345][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'.
[  294.726245][ T6369] binder: 6368:6369 ioctl 4018620d 0 returned -22
[  296.079004][ T5074] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  296.423978][ T5074] usb 4-1: Using ep0 maxpacket: 16
[  296.432889][ T5074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  296.444651][ T5074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  296.559003][ T5074] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  296.582817][ T5074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.602578][ T5074] usb 4-1: Product: syz
[  296.708361][ T5074] usb 4-1: Manufacturer: syz
[  296.720045][ T5074] usb 4-1: SerialNumber: syz
[  296.822725][ T5074] usb 4-1: config 0 descriptor??
[  297.142176][ T5074] hub 4-1:0.0: bad descriptor, ignoring hub
[  297.156501][ T6384] loop2: detected capacity change from 0 to 128
[  297.158547][ T5074] hub: probe of 4-1:0.0 failed with error -5
[  297.222672][ T6384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  297.277186][ T5074] snd-usb-audio: probe of 4-1:0.0 failed with error -12
[  297.298181][ T6384] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  297.397519][ T6384] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  297.433149][ T4438] udevd[4438]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  297.448762][ T6384] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  297.549572][ T5439] usb 4-1: USB disconnect, device number 12
[  298.688089][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'.
[  298.719983][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'.
[  298.725443][ T6406] binder: 6404:6406 ioctl c0306201 0 returned -14
[  300.960296][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  301.403759][ T4318] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  301.413617][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'.
[  301.480164][ T6443] 8021q: VLANs not supported on caif0
[  301.625205][ T4318] usb 1-1: Using ep0 maxpacket: 8
[  301.632712][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  301.714306][ T4318] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  301.805236][ T4318] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  301.817773][ T6448] binder: BINDER_SET_CONTEXT_MGR already set
[  301.872427][ T6448] binder: 6447:6448 ioctl 4018620d 200000000040 returned -16
[  301.904417][ T6448] binder: 6447:6448 ioctl c0306201 0 returned -14
[  301.969508][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.986611][ T6450] loop2: detected capacity change from 0 to 128
[  301.995133][ T4318] usb 1-1: config 0 descriptor??
[  302.084900][ T6450] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  302.123955][ T6450] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  302.594936][ T6450] overlayfs: missing 'lowerdir'
[  303.681367][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'.
[  305.014402][ T6470] loop1: detected capacity change from 0 to 128
[  305.067397][ T6470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  305.189160][ T6470] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  305.816967][ T6470] overlayfs: missing 'lowerdir'
[  305.844568][ T4334] usb 1-1: USB disconnect, device number 7
[  306.092105][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  306.798945][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'.
[  306.815968][ T6485] 8021q: VLANs not supported on caif0
[  306.835461][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'.
[  307.413459][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  307.420981][ T6497] IPVS: Scheduler module ip_vs_sip not found
[  307.429950][ T6501] IPVS: length: 8 != 1690580952
[  308.053905][ T5439] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  308.272087][ T5439] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  308.284792][ T5439] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  308.302753][ T5439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.356968][ T5439] usb 4-1: config 0 descriptor??
[  308.429376][ T5439] pwc: Askey VC010 type 2 USB webcam detected.
[  308.799899][ T5439] pwc: recv_control_msg error -32 req 02 val 2b00
[  308.812076][ T5439] pwc: recv_control_msg error -32 req 02 val 2700
[  308.827885][ T5439] pwc: recv_control_msg error -71 req 02 val 2c00
[  308.838225][ T6515] loop1: detected capacity change from 0 to 128
[  308.845322][ T5439] pwc: recv_control_msg error -71 req 04 val 1000
[  308.867381][ T5439] pwc: recv_control_msg error -71 req 04 val 1300
[  308.887220][ T5439] pwc: recv_control_msg error -71 req 04 val 1400
[  308.895468][ T6515] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  308.912160][ T6515] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  308.956584][ T5439] pwc: recv_control_msg error -71 req 02 val 2000
[  308.973134][ T5439] pwc: recv_control_msg error -71 req 02 val 2100
[  308.985746][ T5439] pwc: recv_control_msg error -71 req 04 val 1500
[  308.998393][ T5439] pwc: recv_control_msg error -71 req 02 val 2500
[  309.007753][ T5439] pwc: recv_control_msg error -71 req 02 val 2400
[  309.009570][ T6515] overlayfs: missing 'lowerdir'
[  309.021966][ T5439] pwc: recv_control_msg error -71 req 02 val 2600
[  309.041729][ T5439] pwc: recv_control_msg error -71 req 02 val 2900
[  309.063117][ T5439] pwc: recv_control_msg error -71 req 02 val 2800
[  309.083547][ T5439] pwc: recv_control_msg error -71 req 04 val 1100
[  309.101238][ T5439] pwc: recv_control_msg error -71 req 04 val 1200
[  309.118220][ T5439] pwc: Registered as video103.
[  309.132295][ T5439] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22
[  309.161098][ T5439] usb 4-1: USB disconnect, device number 13
[  309.433924][ T6522] 9pnet_fd: Insufficient options for proto=fd
[  309.836468][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'.
[  309.886796][ T6526] 8021q: VLANs not supported on caif0
[  310.203768][ T4333] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  310.966384][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  311.104061][ T4333] usb 5-1: Using ep0 maxpacket: 32
[  311.111598][ T4333] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  311.140622][ T4333] usb 5-1: config 0 has no interface number 0
[  311.158765][ T4333] usb 5-1: config 0 interface 184 has no altsetting 0
[  311.195576][ T4333] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  311.218255][ T4333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.243851][ T4333] usb 5-1: Product: syz
[  311.260857][ T4333] usb 5-1: Manufacturer: syz
[  311.270986][ T4333] usb 5-1: SerialNumber: syz
[  311.282987][ T4333] usb 5-1: config 0 descriptor??
[  311.309820][ T4333] smsc75xx v1.0.0
[  311.346796][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'.
[  312.645850][ T4333] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  312.669404][ T4333] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  312.683924][ T4333] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  312.730085][ T4333] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  312.746382][ T4333] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  312.787556][ T4333] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  312.820648][ T4333] smsc75xx: probe of 5-1:0.184 failed with error -71
[  312.856090][ T4333] usb 5-1: USB disconnect, device number 3
[  315.774956][ T6599] 9pnet_fd: Insufficient options for proto=fd
[  317.529703][ T6617] NILFS (nullb0): couldn't find nilfs on the device
[  318.706218][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  318.712607][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  320.030287][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.637'.
[  322.786459][ T6660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  323.736300][ T6679] NILFS (nullb0): couldn't find nilfs on the device
[  323.869808][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'.
[  328.144477][ T6712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.399904][ T6719] fuse: Unknown parameter 'grou00000000000000000000'
[  330.238561][   T41] Bluetooth: (null): Invalid header checksum
[  330.246872][   T41] Bluetooth: (null): Invalid header checksum
[  330.253057][   T41] Bluetooth: (null): Invalid header checksum
[  330.259503][   T41] Bluetooth: (null): Invalid header checksum
[  330.276753][   T41] Bluetooth: (null): Invalid header checksum
[  330.289851][   T41] Bluetooth: (null): Invalid header checksum
[  330.296827][   T41] Bluetooth: (null): Invalid header checksum
[  330.355023][ T4413] Bluetooth: (null): Invalid header checksum
[  330.600391][ T4413] Bluetooth: (null): Invalid header checksum
[  330.660361][ T4413] Bluetooth: (null): Invalid header checksum
[  330.721160][ T4413] Bluetooth: (null): Invalid header checksum
[  330.849952][ T4413] Bluetooth: (null): Invalid header checksum
[  334.529778][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.676'.
[  335.462758][ T6775] netlink: 44 bytes leftover after parsing attributes in process `syz.1.679'.
[  336.117360][ T6777] loop0: detected capacity change from 0 to 64
[  338.403915][ T6803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.689'.
[  340.921876][ T6819] 9pnet_fd: Insufficient options for proto=fd
[  342.947941][ T6833] netlink: 92 bytes leftover after parsing attributes in process `syz.4.698'.
[  342.980619][ T6833] device netdevsim0 entered promiscuous mode
[  344.551709][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.700'.
[  345.500265][ T6849] loop4: detected capacity change from 0 to 64
[  345.879490][ T6853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.403845][ T4655] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  346.583729][ T4655] usb 3-1: Using ep0 maxpacket: 32
[  346.597524][ T4655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.617114][ T4655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.628938][ T4655] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  346.639806][ T4655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.662733][ T4655] usb 3-1: config 0 descriptor??
[  347.107491][ T4655] ft260 0003:0403:6030.0004: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0
[  347.282406][ T4655] ft260 0003:0403:6030.0004: chip code: 6424 8183
[  347.482954][ T4655] ft260 0003:0403:6030.0004: failed to retrieve system status
[  347.507920][ T4655] ft260: probe of 0003:0403:6030.0004 failed with error -5
[  349.652961][ T5075] usb 3-1: USB disconnect, device number 9
[  349.957675][ T6884] Bluetooth: hci5: Frame reassembly failed (-84)
[  349.966030][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'.
[  349.975390][ T6884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.712'.
[  350.043804][ T4475] Bluetooth: hci5: Frame reassembly failed (-84)
[  350.928189][ T6886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.713'.
[  352.065381][   T48] Bluetooth: hci5: command 0x1003 tx timeout
[  352.065455][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  353.047850][ T6889] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  353.261017][ T6908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.363733][ T4318] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  353.637255][ T4318] usb 3-1: Using ep0 maxpacket: 16
[  353.679918][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  354.245852][ T4318] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  354.248262][ T6918] netlink: 120 bytes leftover after parsing attributes in process `syz.1.721'.
[  354.255296][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.278768][ T4318] usb 3-1: Product: syz
[  354.283768][ T4318] usb 3-1: Manufacturer: syz
[  354.288551][ T4318] usb 3-1: SerialNumber: syz
[  354.332587][ T4318] usb 3-1: config 0 descriptor??
[  354.979035][ T6923] IPVS: length: 8 != 1690580952
[  355.148443][ T6929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.725'.
[  355.849741][ T6939] NILFS (nullb0): couldn't find nilfs on the device
[  357.684771][ T6952] netlink: 44 bytes leftover after parsing attributes in process `syz.3.729'.
[  357.937281][ T6951] Bluetooth: hci5: Frame reassembly failed (-84)
[  357.944406][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'.
[  357.953339][ T6951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.730'.
[  358.353536][    T9] Bluetooth: hci5: Frame reassembly failed (-84)
[  358.414312][ T4337] usb 3-1: USB disconnect, device number 10
[  358.526720][ T6954] fuse: Unknown parameter 'group_id00000000000000000000'
[  359.530759][ T6960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  360.145249][   T48] Bluetooth: hci5: command 0x1003 tx timeout
[  360.151850][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  360.917871][ T6977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.738'.
[  362.499495][ T6990] fuse: Unknown parameter 'group_id00000000000000000000'
[  362.927194][ T6995] loop1: detected capacity change from 0 to 128
[  363.038253][ T6996] Bluetooth: hci5: Frame reassembly failed (-84)
[  363.046785][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.745'.
[  363.055792][ T6996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.745'.
[  363.179441][    T9] Bluetooth: hci5: Frame reassembly failed (-84)
[  363.664576][ T6995] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  363.702142][ T6995] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  364.433963][ T7006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.183868][   T48] Bluetooth: hci5: command 0x1003 tx timeout
[  365.184198][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  365.270368][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  365.338639][ T7015] IPVS: length: 8 != 1690580952
[  365.764080][ T7023] netlink: 20 bytes leftover after parsing attributes in process `syz.1.750'.
[  366.301712][ T7027] NILFS (nullb0): couldn't find nilfs on the device
[  366.381091][ T7029] fuse: Bad value for 'user_id'
[  366.655368][ T7033] overlayfs: failed to resolve './file1': -2
[  366.997643][ T7042] loop2: detected capacity change from 0 to 128
[  367.112675][ T7042] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  367.159018][ T7042] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  367.191503][    C1] vkms_vblank_simulate: vblank timer overrun
[  367.897420][ T7048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.882134][ T7053] syz.4.763 (7053) used greatest stack depth: 16448 bytes left
[  369.724990][ T7063] Bluetooth: hci5: Frame reassembly failed (-84)
[  369.732435][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'.
[  369.741342][ T7063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.764'.
[  369.892648][    T9] Bluetooth: hci5: Frame reassembly failed (-84)
[  369.988571][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  370.077496][ T5229] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  370.278187][ T7066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.766'.
[  370.674027][ T5229] usb 4-1: Using ep0 maxpacket: 8
[  370.684221][ T5229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.738973][ T5229] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  370.750095][ T5229] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  370.806159][ T7069] fuse: Bad value for 'user_id'
[  370.842053][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.899079][ T5229] usb 4-1: config 0 descriptor??
[  371.834002][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  371.879465][ T7076] loop3: detected capacity change from 0 to 1
[  372.214525][ T5078] usb 4-1: USB disconnect, device number 14
[  372.865922][ T7089] fuse: Unknown parameter 'grou00000000000000000000'
[  372.875047][ T7089] 9pnet_fd: Insufficient options for proto=fd
[  373.587471][ T4337] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  374.263652][ T4337] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  374.278882][ T7108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.779'.
[  374.656357][ T4337] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  374.762181][ T4337] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  374.842102][ T7110] fuse: Bad value for 'user_id'
[  374.856816][ T4337] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  374.910300][ T4337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.938227][ T4337] usb 1-1: Product: syz
[  374.942473][ T4337] usb 1-1: Manufacturer: syz
[  374.968761][ T4337] usb 1-1: SerialNumber: syz
[  375.006297][ T4337] hub 1-1:1.0: bad descriptor, ignoring hub
[  375.843745][ T4337] hub: probe of 1-1:1.0 failed with error -5
[  375.925205][ T4337] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  376.278914][ T7121] Bluetooth: hci5: Frame reassembly failed (-84)
[  376.287483][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'.
[  376.296485][ T7121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.783'.
[  376.841662][    T9] Bluetooth: hci5: Frame reassembly failed (-84)
[  376.854540][    T9] Bluetooth: hci5: Frame reassembly failed (-84)
[  376.863982][ T4893] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  376.960687][ T7130] loop3: detected capacity change from 0 to 1
[  377.073793][ T4893] usb 4-1: Using ep0 maxpacket: 8
[  377.081278][ T4893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  377.091904][ T4893] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  377.101272][ T4893] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  377.111266][ T4893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.127887][ T4893] usb 4-1: config 0 descriptor??
[  377.353990][ T7101] usb 1-1: reset high-speed USB device number 8 using dummy_hcd
[  377.816483][ T4893] usb 1-1: USB disconnect, device number 8
[  377.852017][ T4893] usblp0: removed
[  378.784478][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  379.270129][ T5229] usb 4-1: USB disconnect, device number 15
[  379.343040][ T7156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.793'.
[  380.147239][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  380.155981][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  381.051490][ T7176] loop2: detected capacity change from 0 to 512
[  381.065515][ T7176] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  381.082177][ T7176] UDF-fs: Scanning with blocksize 512 failed
[  381.098254][ T7176] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  381.109345][ T7176] UDF-fs: Scanning with blocksize 1024 failed
[  381.131905][ T7176] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  381.153111][ T7176] UDF-fs: Scanning with blocksize 2048 failed
[  381.178010][ T7173] NILFS (nullb0): couldn't find nilfs on the device
[  381.192433][ T7176] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  381.258544][ T7176] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  382.655614][ T7186] fuse: Unknown parameter 'group_i00000000000000000000'
[  382.754562][ T7186] 9pnet_fd: Insufficient options for proto=fd
[  384.431269][ T7221] netlink: 44 bytes leftover after parsing attributes in process `syz.1.808'.
[  385.276446][ T7226] NILFS (nullb0): couldn't find nilfs on the device
[  391.019299][ T7267] netlink: 44 bytes leftover after parsing attributes in process `syz.3.823'.
[  391.674819][ T7269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.825'.
[  393.316984][ T7277] NILFS (nullb0): couldn't find nilfs on the device
[  394.873869][ T4311] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  394.910485][ T7302] loop3: detected capacity change from 0 to 1
[  395.108047][ T4311] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  395.199513][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.281197][ T4311] usb 4-1: config 0 descriptor??
[  396.099096][ T7316] fuse: Unknown parameter 'group_id00000000000000000000'
[  396.133191][ T5082] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  396.171241][ T7319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.838'.
[  396.930067][ T4311] ------------[ cut here ]------------
[  396.935810][ T4311] WARNING: CPU: 0 PID: 4311 at drivers/net/wireless/ath/ath6kl/bmi.c:90 ath6kl_bmi_get_target_info+0x494/0x5d0
[  396.947822][ T4311] Modules linked in:
[  396.951749][ T4311] CPU: 0 PID: 4311 Comm: kworker/0:4 Not tainted 6.1.142-syzkaller #0
[  396.959999][ T4311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  396.970342][ T4311] Workqueue: usb_hub_wq hub_event
[  396.975471][ T4311] RIP: 0010:ath6kl_bmi_get_target_info+0x494/0x5d0
[  396.982001][ T4311] Code: 04 20 84 c0 0f 85 36 01 00 00 48 8b 44 24 10 8b 30 48 c7 c7 40 be 21 8b 44 89 ea e8 26 6a 53 04 e9 e1 fd ff ff e8 1c 28 c2 fb <0f> 0b 41 bd ea ff ff ff e9 cf fd ff ff e8 0a 28 c2 fb 45 31 ed e9
[  397.001718][ T4311] RSP: 0018:ffffc90004706c40 EFLAGS: 00010287
[  397.008064][ T4311] RAX: ffffffff85beaf64 RBX: 1ffff920008e0d90 RCX: 0000000000100000
[  397.016201][ T4311] RDX: ffffc9001a92b000 RSI: 000000000000ff6b RDI: 000000000000ff6c
[  397.024323][ T4311] RBP: ffffc90004706d10 R08: dffffc0000000000 R09: fffffbfff215c256
[  397.032350][ T4311] R10: fffffbfff215c256 R11: 1ffffffff215c255 R12: dffffc0000000000
[  397.040521][ T4311] R13: 0000000000000000 R14: ffff888053720e80 R15: 1ffff1100a6e41d6
[  397.048635][ T4311] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  397.057731][ T4311] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  397.061395][ T7316] 9pnet_fd: Insufficient options for proto=fd
[  397.064435][ T4311] CR2: 000000110c3672c8 CR3: 000000001e2c5000 CR4: 00000000003506f0
[  397.064461][ T4311] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  397.064477][ T4311] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  397.064506][ T4311] Call Trace:
[  397.064531][ T4311]  <TASK>
[  397.101332][ T4311]  ? ath6kl_usb_post_recv_transfers+0x497/0x6f0
[  397.107818][ T4311]  ? ath6kl_bmi_done+0x190/0x190
[  397.112824][ T4311]  ? ath6kl_bmi_init+0x67/0xe0
[  397.117779][ T4311]  ? __kmalloc+0xe1/0x240
[  397.122172][ T4311]  ath6kl_core_init+0x1fe/0x10c0
[  397.127276][ T4311]  ? lockdep_softirqs_off+0x420/0x420
[  397.133074][ T4311]  ? ath6kl_core_rx_complete+0x70/0x70
[  397.138733][ T4311]  ? ath6kl_core_create+0x7d6/0x980
[  397.144090][ T4311]  ath6kl_usb_probe+0x144a/0x1540
[  397.149150][ T4311]  ? _raw_spin_unlock+0x40/0x40
[  397.154160][ T4311]  usb_probe_interface+0x5a0/0xaf0
[  397.159316][ T4311]  ? usb_register_driver+0x3d0/0x3d0
[  397.164689][ T4311]  really_probe+0x2aa/0xc70
[  397.169221][ T4311]  ? pm_runtime_barrier+0x147/0x1c0
[  397.174768][ T4311]  __driver_probe_device+0x18c/0x330
[  397.180136][ T4311]  driver_probe_device+0x4f/0x420
[  397.185251][ T4311]  __device_attach_driver+0x2c6/0x510
[  397.190641][ T4311]  ? coredump_store+0x90/0x90
[  397.195409][ T4311]  bus_for_each_drv+0x175/0x200
[  397.200283][ T4311]  ? _raw_spin_unlock+0x40/0x40
[  397.205231][ T4311]  ? subsys_find_device_by_id+0x350/0x350
[  397.210982][ T4311]  __device_attach+0x29b/0x460
[  397.215823][ T4311]  ? device_attach+0x20/0x20
[  397.220434][ T4311]  ? kobject_uevent_env+0x35f/0x8a0
[  397.225719][ T4311]  bus_probe_device+0xbc/0x1e0
[  397.230515][ T4311]  ? device_add+0x97c/0xfb0
[  397.235194][ T4311]  device_add+0xa00/0xfb0
[  397.239579][ T4311]  usb_set_configuration+0x1991/0x1fd0
[  397.245152][ T4311]  usb_generic_driver_probe+0x89/0x150
[  397.250733][ T4311]  usb_probe_device+0x139/0x270
[  397.255731][ T4311]  ? usb_register_device_driver+0x230/0x230
[  397.261651][ T4311]  really_probe+0x2aa/0xc70
[  397.266310][ T4311]  ? pm_runtime_barrier+0x147/0x1c0
[  397.271550][ T4311]  __driver_probe_device+0x18c/0x330
[  397.277193][ T4311]  driver_probe_device+0x4f/0x420
[  397.282246][ T4311]  __device_attach_driver+0x2c6/0x510
[  397.287709][ T4311]  ? coredump_store+0x90/0x90
[  397.292578][ T4311]  bus_for_each_drv+0x175/0x200
[  397.297517][ T4311]  ? _raw_spin_unlock+0x40/0x40
[  397.302388][ T4311]  ? subsys_find_device_by_id+0x350/0x350
[  397.308204][ T4311]  __device_attach+0x29b/0x460
[  397.313012][ T4311]  ? device_attach+0x20/0x20
[  397.317719][ T4311]  ? __kmem_cache_free+0xb6/0x1f0
[  397.322775][ T4311]  ? kobject_uevent_env+0x35f/0x8a0
[  397.328177][ T4311]  bus_probe_device+0xbc/0x1e0
[  397.332967][ T4311]  ? device_add+0x97c/0xfb0
[  397.337589][ T4311]  device_add+0xa00/0xfb0
[  397.342057][ T4311]  usb_new_device+0xd4d/0x1620
[  397.347042][ T4311]  ? lock_chain_count+0x20/0x20
[  397.351920][ T4311]  ? usb_disconnect+0x8a0/0x8a0
[  397.356972][ T4311]  ? _raw_spin_unlock_irq+0x1f/0x40
[  397.362195][ T4311]  ? lockdep_hardirqs_on+0x94/0x140
[  397.367515][ T4311]  hub_event+0x2b02/0x5210
[  397.371995][ T4311]  ? led_work+0x6e0/0x6e0
[  397.376533][ T4311]  ? read_lock_is_recursive+0x10/0x10
[  397.382105][ T4311]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  397.388107][ T4311]  ? _raw_spin_unlock+0x40/0x40
[  397.392981][ T4311]  ? _raw_spin_unlock_irq+0x1f/0x40
[  397.398281][ T4311]  ? process_one_work+0x7a1/0x1160
[  397.403414][ T4311]  process_one_work+0x898/0x1160
[  397.408467][ T4311]  ? worker_detach_from_pool+0x240/0x240
[  397.414217][ T4311]  ? _raw_spin_lock_irq+0xab/0xe0
[  397.419294][ T4311]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  397.424929][ T4311]  ? kthread_data+0x4b/0xc0
[  397.430111][ T4311]  worker_thread+0xaa2/0x1250
[  397.435069][ T4311]  ? __kthread_parkme+0x162/0x1c0
[  397.440148][ T4311]  kthread+0x29d/0x330
[  397.444309][ T4311]  ? worker_clr_flags+0x1a0/0x1a0
[  397.449356][ T4311]  ? kthread_blkcg+0xd0/0xd0
[  397.454098][ T4311]  ret_from_fork+0x1f/0x30
[  397.458551][ T4311]  </TASK>
[  397.461578][ T4311] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  397.468861][ T4311] CPU: 0 PID: 4311 Comm: kworker/0:4 Not tainted 6.1.142-syzkaller #0
[  397.477201][ T4311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  397.487288][ T4311] Workqueue: usb_hub_wq hub_event
[  397.492332][ T4311] Call Trace:
[  397.495617][ T4311]  <TASK>
[  397.498564][ T4311]  dump_stack_lvl+0x168/0x22e
[  397.503265][ T4311]  ? memcpy+0x3c/0x60
[  397.507262][ T4311]  ? show_regs_print_info+0x12/0x12
[  397.512473][ T4311]  ? load_image+0x3b0/0x3b0
[  397.517024][ T4311]  panic+0x2c9/0x710
[  397.520956][ T4311]  ? bpf_jit_dump+0xd0/0xd0
[  397.525495][ T4311]  ? ret_from_fork+0x1f/0x30
[  397.530136][ T4311]  __warn+0x2f8/0x4f0
[  397.534233][ T4311]  ? ath6kl_bmi_get_target_info+0x494/0x5d0
[  397.540599][ T4311]  ? ath6kl_bmi_get_target_info+0x494/0x5d0
[  397.546509][ T4311]  report_bug+0x2ba/0x4f0
[  397.550856][ T4311]  ? ath6kl_bmi_get_target_info+0x494/0x5d0
[  397.556785][ T4311]  handle_bug+0x3a/0x70
[  397.560989][ T4311]  exc_invalid_op+0x16/0x40
[  397.565525][ T4311]  asm_exc_invalid_op+0x16/0x20
[  397.570386][ T4311] RIP: 0010:ath6kl_bmi_get_target_info+0x494/0x5d0
[  397.576915][ T4311] Code: 04 20 84 c0 0f 85 36 01 00 00 48 8b 44 24 10 8b 30 48 c7 c7 40 be 21 8b 44 89 ea e8 26 6a 53 04 e9 e1 fd ff ff e8 1c 28 c2 fb <0f> 0b 41 bd ea ff ff ff e9 cf fd ff ff e8 0a 28 c2 fb 45 31 ed e9
[  397.596541][ T4311] RSP: 0018:ffffc90004706c40 EFLAGS: 00010287
[  397.602617][ T4311] RAX: ffffffff85beaf64 RBX: 1ffff920008e0d90 RCX: 0000000000100000
[  397.610596][ T4311] RDX: ffffc9001a92b000 RSI: 000000000000ff6b RDI: 000000000000ff6c
[  397.618604][ T4311] RBP: ffffc90004706d10 R08: dffffc0000000000 R09: fffffbfff215c256
[  397.626605][ T4311] R10: fffffbfff215c256 R11: 1ffffffff215c255 R12: dffffc0000000000
[  397.634621][ T4311] R13: 0000000000000000 R14: ffff888053720e80 R15: 1ffff1100a6e41d6
[  397.642631][ T4311]  ? ath6kl_bmi_get_target_info+0x494/0x5d0
[  397.648573][ T4311]  ? ath6kl_usb_post_recv_transfers+0x497/0x6f0
[  397.654846][ T4311]  ? ath6kl_bmi_done+0x190/0x190
[  397.659798][ T4311]  ? ath6kl_bmi_init+0x67/0xe0
[  397.664575][ T4311]  ? __kmalloc+0xe1/0x240
[  397.668916][ T4311]  ath6kl_core_init+0x1fe/0x10c0
[  397.673866][ T4311]  ? lockdep_softirqs_off+0x420/0x420
[  397.679253][ T4311]  ? ath6kl_core_rx_complete+0x70/0x70
[  397.684742][ T4311]  ? ath6kl_core_create+0x7d6/0x980
[  397.689975][ T4311]  ath6kl_usb_probe+0x144a/0x1540
[  397.695034][ T4311]  ? _raw_spin_unlock+0x40/0x40
[  397.699902][ T4311]  usb_probe_interface+0x5a0/0xaf0
[  397.705039][ T4311]  ? usb_register_driver+0x3d0/0x3d0
[  397.710334][ T4311]  really_probe+0x2aa/0xc70
[  397.714851][ T4311]  ? pm_runtime_barrier+0x147/0x1c0
[  397.720156][ T4311]  __driver_probe_device+0x18c/0x330
[  397.725712][ T4311]  driver_probe_device+0x4f/0x420
[  397.730770][ T4311]  __device_attach_driver+0x2c6/0x510
[  397.736196][ T4311]  ? coredump_store+0x90/0x90
[  397.740910][ T4311]  bus_for_each_drv+0x175/0x200
[  397.745865][ T4311]  ? _raw_spin_unlock+0x40/0x40
[  397.750720][ T4311]  ? subsys_find_device_by_id+0x350/0x350
[  397.756461][ T4311]  __device_attach+0x29b/0x460
[  397.761231][ T4311]  ? device_attach+0x20/0x20
[  397.765833][ T4311]  ? kobject_uevent_env+0x35f/0x8a0
[  397.771051][ T4311]  bus_probe_device+0xbc/0x1e0
[  397.775836][ T4311]  ? device_add+0x97c/0xfb0
[  397.780351][ T4311]  device_add+0xa00/0xfb0
[  397.784727][ T4311]  usb_set_configuration+0x1991/0x1fd0
[  397.790218][ T4311]  usb_generic_driver_probe+0x89/0x150
[  397.795694][ T4311]  usb_probe_device+0x139/0x270
[  397.800557][ T4311]  ? usb_register_device_driver+0x230/0x230
[  397.806460][ T4311]  really_probe+0x2aa/0xc70
[  397.810982][ T4311]  ? pm_runtime_barrier+0x147/0x1c0
[  397.816304][ T4311]  __driver_probe_device+0x18c/0x330
[  397.821701][ T4311]  driver_probe_device+0x4f/0x420
[  397.826742][ T4311]  __device_attach_driver+0x2c6/0x510
[  397.832135][ T4311]  ? coredump_store+0x90/0x90
[  397.836843][ T4311]  bus_for_each_drv+0x175/0x200
[  397.841744][ T4311]  ? _raw_spin_unlock+0x40/0x40
[  397.846710][ T4311]  ? subsys_find_device_by_id+0x350/0x350
[  397.852458][ T4311]  __device_attach+0x29b/0x460
[  397.857234][ T4311]  ? device_attach+0x20/0x20
[  397.861826][ T4311]  ? __kmem_cache_free+0xb6/0x1f0
[  397.866866][ T4311]  ? kobject_uevent_env+0x35f/0x8a0
[  397.872087][ T4311]  bus_probe_device+0xbc/0x1e0
[  397.876879][ T4311]  ? device_add+0x97c/0xfb0
[  397.881392][ T4311]  device_add+0xa00/0xfb0
[  397.885760][ T4311]  usb_new_device+0xd4d/0x1620
[  397.890647][ T4311]  ? lock_chain_count+0x20/0x20
[  397.895530][ T4311]  ? usb_disconnect+0x8a0/0x8a0
[  397.900405][ T4311]  ? _raw_spin_unlock_irq+0x1f/0x40
[  397.905610][ T4311]  ? lockdep_hardirqs_on+0x94/0x140
[  397.910822][ T4311]  hub_event+0x2b02/0x5210
[  397.915292][ T4311]  ? led_work+0x6e0/0x6e0
[  397.919641][ T4311]  ? read_lock_is_recursive+0x10/0x10
[  397.925042][ T4311]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  397.930953][ T4311]  ? _raw_spin_unlock+0x40/0x40
[  397.935834][ T4311]  ? _raw_spin_unlock_irq+0x1f/0x40
[  397.941283][ T4311]  ? process_one_work+0x7a1/0x1160
[  397.946413][ T4311]  process_one_work+0x898/0x1160
[  397.951373][ T4311]  ? worker_detach_from_pool+0x240/0x240
[  397.957021][ T4311]  ? _raw_spin_lock_irq+0xab/0xe0
[  397.962046][ T4311]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  397.967426][ T4311]  ? kthread_data+0x4b/0xc0
[  397.971948][ T4311]  worker_thread+0xaa2/0x1250
[  397.976641][ T4311]  ? __kthread_parkme+0x162/0x1c0
[  397.981677][ T4311]  kthread+0x29d/0x330
[  397.985756][ T4311]  ? worker_clr_flags+0x1a0/0x1a0
[  397.990784][ T4311]  ? kthread_blkcg+0xd0/0xd0
[  397.995391][ T4311]  ret_from_fork+0x1f/0x30
[  397.999830][ T4311]  </TASK>
[  398.003185][ T4311] Kernel Offset: disabled
[  398.007600][ T4311] Rebooting in 86400 seconds..