last executing test programs:

2m19.925277124s ago: executing program 1 (id=8):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x24000801, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14)

2m18.040757211s ago: executing program 1 (id=12):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000bc0)={[{@user_xattr}, {@nojournal_checksum}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000002f80)="$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")
mkdir(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0)
close(0x3)

2m15.891111424s ago: executing program 1 (id=16):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x101, 0x1000}})
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x10b, 0x8100, 0x100}})

2m13.927385853s ago: executing program 1 (id=20):
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

2m13.54711003s ago: executing program 1 (id=24):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000200)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

2m12.284671046s ago: executing program 0 (id=28):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020)

2m12.240037326s ago: executing program 1 (id=29):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)

2m12.04566731s ago: executing program 32 (id=29):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)

2m12.02201078s ago: executing program 0 (id=31):
r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "e8a8ffcfac3f57571b576173d6069cdc0dbe0ef17800486f5c60"}}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)

2m8.487579331s ago: executing program 0 (id=39):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0)

2m5.44698865s ago: executing program 0 (id=48):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x563, &(0x7f00000007c0)="$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")
recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setresuid(0x0, 0xee00, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0)
getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=<r3=>0x0)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x24, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7ffe, 0x7, 0x2000, 0x8, r3, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3])
setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1)

2m4.46532852s ago: executing program 0 (id=52):
syz_open_procfs(0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, r3, 0x200, &(0x7f00000001c0)={0x0})

2m2.585387867s ago: executing program 0 (id=59):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r1, 0x6000000)
copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x100, 0x9, 0x0)

2m2.372423011s ago: executing program 33 (id=59):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r1, 0x6000000)
copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x100, 0x9, 0x0)

1m51.77310689s ago: executing program 5 (id=95):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x2000000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x98, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x440}], 0x0, 0x0, 0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x1600)

1m51.515512846s ago: executing program 5 (id=97):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)="6db50725c08c11bbd2f097b245b4d706b776a9cf888bccd256c6b1a652da6b1254508f0a2d41949416f99928db60b4280aad0c3f014ff4654ffea04c8853cd", 0x3f}], 0x1}], 0x1, 0x0)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}])

1m50.31161648s ago: executing program 5 (id=101):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc})

1m49.590316524s ago: executing program 5 (id=104):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x7}}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x105042, 0x1db)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)="a6", 0x1, 0x8000c61)

1m48.477367126s ago: executing program 5 (id=108):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x7)
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x4]}, 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r4, 0x4, 0x2800)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x7ffff004)

1m47.79302025s ago: executing program 5 (id=110):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)="6db50725c08c11bbd2f097b245b4d706b776a9cf888bccd256c6b1a652da6b1254508f0a2d41949416f99928db60b4280aad0c3f014ff4654ffea04c8853cd", 0x3f}], 0x1}], 0x1, 0x0)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}])

1m47.546576315s ago: executing program 34 (id=110):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)="6db50725c08c11bbd2f097b245b4d706b776a9cf888bccd256c6b1a652da6b1254508f0a2d41949416f99928db60b4280aad0c3f014ff4654ffea04c8853cd", 0x3f}], 0x1}], 0x1, 0x0)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}])

1m14.308800081s ago: executing program 3 (id=240):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
syz_emit_ethernet(0x32, &(0x7f0000000680)={@random="25b80000180c", @random="2895c2ede15e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0xfffd, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xff, 0x100}}}}}}}, 0x0)

1m13.993077037s ago: executing program 3 (id=244):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x40, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0xf7, 0xac, 0x3}}, @val={0x25, 0x3, {0x1, 0x70, 0x8}}, @void, @val={0x3c, 0x4, {0x0, 0x8, 0x1, 0x1}}, @void, @void, @void, @val={0x76, 0x6, {0xe, 0x9, 0x2c, 0x2}}}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa, 0x3, "9deacdee2053"}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x0)

1m13.84542887s ago: executing program 3 (id=248):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r1, 0x5, 0x70bd2c, 0x25d7dbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4880}, 0x8060040)

1m13.746261993s ago: executing program 3 (id=251):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x3)
sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="772898", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000013c0)="fd4fccdcedb9e6c4881ecbf656b7fd6762288124551e1b368dbc1d984b8e3649871c4d8bf1e541a86d46b536e9a6ef91f18f2e08055e75dceea8ec14e06bcab7b73fbffd8034f6a2a7a9257ccc72f58fb3c36f1852f28ae2f6882eb9b92bdb57ce763e0194baaa3867f317bfc055956540983e634c01415e5be97073f199686e99dd2fc0ebb46445831f2f2fe0f18a817d8ff69b52db0f3d43b63c2ca8a0a5bb4719a2e3bcc3acd38d6c0d1511e259215265a7c8a76468dca9cb0c2820d3f54b907fc4d003bb3c73107c04e6c74e62fd6dedf7d5458c5e", 0xd7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001140)="163654dcac7c1f49d309a21915efd070f07a242c388fc9786b891b2199b474e9e42340298262fb6f770584fe855042b7415fc4bf905fd88848af75b84966da2761520882bb6bb7e20a9a9abaea52f5b29f74cf649b6f12edcd4d794e89f2476a0c5447fc22fda77bca37dac8486fcbc2ccf58cca1113af2f12cae7fd8fffc94aa46b1f49fabe7d1bcac4d3842f2ccca4223f791c3ee433638e9568c8a626b7ea7ca6c196b7c5742d67d23884bf9037420013b75ec9ab46d3397ddc92f5a5631a645e90a2f67e96", 0xffffffdd}, {&(0x7f0000000640)="ac1be72df5f1fd1c905e8d276a1ca7104b17cc82d69e5072bc2336db0088d77d3a783edbc687a9f00a9456e5f653e99b2990b87b37684ef3e4655ca3b84a31d24c16a6abde5b6bee796d0251d2b1b5f42b03ae193d91e454f71aa6406b8daad7f450a5b1cfa1e565ec3cc950182ad3", 0x6f}], 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x118}}], 0x3, 0x0)

1m12.623988664s ago: executing program 3 (id=258):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000200)="8a8af825496e4015c906c1d8dfb53d9ab7560f646954f74060e1361deb3774b8877b44829102f80a1281a6f5a585301337ee68a475aa22de740163741f7041d1357c0e3b540c6d9203be9d75f3aa1ad6e440098e010490ac5fc8b4d087253a4d582d8de609226c6d259f94a22a055783a482cae749a9c780da548b3715e39dd91ea9676c249add697253cf4ecaaa5e6b5f", 0x91, 0x40, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

1m12.461060268s ago: executing program 3 (id=261):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x14, &(0x7f00000001c0)="020000000980", 0x6)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

57.388523206s ago: executing program 35 (id=261):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x14, &(0x7f00000001c0)="020000000980", 0x6)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

16.104261151s ago: executing program 7 (id=595):
r0 = socket$kcm(0x2, 0xa, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x7, 0x39, 0x8, 0x6}}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x844)

15.993408553s ago: executing program 7 (id=596):
r0 = socket$kcm(0x10, 0x2, 0x0)
landlock_create_ruleset(&(0x7f0000000000)={0x2, 0x1, 0x1}, 0x18, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x66}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)

15.368008096s ago: executing program 7 (id=600):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbf, 0x7c, 0x56, 0x10, 0xc45, 0x6282, 0x30ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x0, 0x85, 0x26, 0x95}}]}}]}}, 0x0)

13.13552524s ago: executing program 7 (id=611):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10c, &(0x7f0000000440)={[{}, {0x101, 0x4e00, "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"}]})

9.727198597s ago: executing program 7 (id=624):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)

8.286737826s ago: executing program 7 (id=630):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r1, 0x0, 0x31, 0x0, &(0x7f0000000080))
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2, 0x8000}, 0x9, 0x0, &(0x7f0000000040)={{0x51, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x40}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x7, 0xfffffffd, 0x100000}})
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500020000000800124000000000050005000a000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x12, r2, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r2, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f00000002c0))
syz_usb_control_io$printer(r0, 0x0, 0x0)

4.626227098s ago: executing program 6 (id=650):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x18, 0x0, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

4.51651117s ago: executing program 4 (id=652):
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2)
write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2)

4.496715101s ago: executing program 6 (id=653):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
poll(0x0, 0x0, 0x100)
recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0)

4.357418963s ago: executing program 4 (id=654):
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x10000)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="001883000000515e03"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, 0x0, 0x0, 0x0})

3.329000934s ago: executing program 4 (id=657):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0)
lsetxattr(0x0, &(0x7f00000001c0)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x1)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$P9_RLERRORu(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

3.241494125s ago: executing program 6 (id=658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xa2322928dba42f72})
r1 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/1, 0x1}], 0x1, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

2.168903357s ago: executing program 2 (id=659):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000))
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup(r1)
r3 = fcntl$dupfd(r0, 0x0, r1)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000380)={0x1, 0x3})

1.965096921s ago: executing program 2 (id=660):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
prctl$PR_SET_VMA(0x403, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

1.745502915s ago: executing program 6 (id=662):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vlan0\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)

1.745410945s ago: executing program 2 (id=663):
r0 = syz_clone(0x880000, 0x0, 0xfffffffffffffc3d, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
wait4(r0, 0x0, 0xa, 0x0)
ptrace(0x4208, r0)

1.736333965s ago: executing program 8 (id=664):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0/file0\x00', 0x144)
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000a280)="1695367704d10dd832678e4e2d01860484a69eaac410e2d6cf3b3d3925f9a3cb602592377170dffdc4de86f163e390e21d07459b0f058cfc248c4bcbe896f3c68006f3c2cbe07c55b87170871c1d364d740faeb750c8c8acb76aca18bc0c018ed341b55b0ef80cefe95b85756aac978a0e0b5ce59cae6657643e7ada0c1336bab310888351664553c2faa6dd39054e19e23cc7c4b4d33546407f880194aa0761f2a9360c4ba26de342328b92db81ae84fc9c1e9eefb4b7ec3f58a6d5d23b907327b14480a37f3c84305729a91c28807f8809b997235bfa2d4b6f45ee9568bb4a416df34f4140c5e272bfc068ea61a48b365490ccb02772a906dad457f5d2dd1a57cc1209e8897c8115049d7e4e3c756a7f5ad0c004ef66c8bf91f600910e73b4aa5f516bab5cd62ad93642960ab32b7fdaeacb1a9587a389a529c231f8a47a65fb6d27ba6a0eeb46660cd75dbf47df89e9f578eafa6992a12d9d7de56d69fd0e30b15caabd13c28d63921597466292f8c4e87f23d53d52e6e8f1c9295af0743c8c671a49273074ba44dbce9e9b1136a93dbc19d2b8e60cda5f50eba2d814822a68a0fd4ff5e6a25dd5346f96b26b5e1563ebb97829a76fd8c2aa467499fdced91b05b193b68316494f11f5ce97ed8e13d474b03c6f6eda4eff54b0ec362fda53003e6e2a3868a5d57e2426aed5adccdac8e162c6cc20361dd4709889b79b2810ba42f531fdd3746562a00da65b4211fb7d8f482a3610748d3b80d2942d8432471f98c6e9036cb57f3913b31dd8baddd6d85b44e8463b838fcfb6979628c5fa3dbd30688e10b9ede257ebc7b96d4092f38d11b9e6a4d10490a9df1387b3743cf51e206c7dbc0741c408bbebaae7f36d81b5ce5b21bb9fe992c8a0cb3a91ea2df21e571ff094b53b17c46fe22c0cead29144d203294eb42c984790a6b6348ed8b7b0317ee5b2353cc54bcfd808bf0f61f73917584e17bd9259c8a04d2ba3b4f931571947c77035975933471fb1203088dce478eb4e411ddb7b88caeb02e1cda741245df701a2b5c29c48a631eaf18549bd90c70222fd6dafe5550726bb58dd0fbf84ffeeae683a0379505f03740a652025add8e0e4e6b5bfb4bd0876dfe1ecb639acc110eba97294a4e4642aefbcad04ba50d830e945fd9900ee7e02488694041f43cbaa86280c1df64e8f1f81f7cd5130914efd19b58262f3bd2c43bd8b4a5beac09f1ba27020521994465e62c329debb50efe0716d22cf0056febc7cb95aa818e10639077e91cac3c80b37d6eebc6907dde971b578383ee04086a0dad18750ceff6b8d6d373afa93a51fee65fe1318c1ac291b784e45d66962c8b54571bc1e92a996c11561d94af6ecdd37948d35adbd1ad63c1c05c31c7f4afd707aa1956d1444fec1137fb6d81f56566887131777e5fe3e2fafe8af8f21ed34480afe74afb25d8d16f8089fcb851ac49dd826b7f273aa3d771856d712c62397d49c72d93e3c2a5e6b9767fcff0fc5b3d70dcd70ff8bad5dfd7f5a84c194f99450601f970104f9be026852ead21824152dd8f6536fcd01a69177a65f2af266e619d61d20de0c738680fbec29e7c594cad29f009d46d87908c951b2e4ad8d9a67db8be6f570fe5416d9e4dd22a108140a1c95369731807325ee7f4201209a795fa1609ce8fa27384677816f651a96cc08400e1b647bdddfb851313e3ccaa472b9a6a1da3a0936e119a6d7808f09de244d739c39df3ed36004b77cb54b6b1396b718c87fba28cb1439c7d1d140dae1ee2c2a7d647427b1e7472710c7ac4f1fb0fc0c9d15ecce28167d23e2e42474dbf1c63c0819606be9c9b6dc2eb59bf9932568ef408c20e9498cf105e84eee30460d4348f4cdfab623b416adadb4427887d9b1b6b8db75b224e8a55fa0351d21093b2b7e42e6685491cbfce100d602d0281f4bd086b50612f3ccf055fab1aad97a52695a233c3d458be4536b66b0acdda5ce0aaab48bb7d7f39a8af473c4478991f1c4569839eab0c1d684001ee1772290871653a2293bb7754c1eac178c60f86e2a98e1992dee198c76365f2d04d159d7c210c6cc58764e3b7dfb5bc15190555febd01c69cab8f55926c28a13fa4f9060dde1ca2df7e1f71fd99a0c350d7f0e341ece8e0685e9c205b486ef400910211b688f07fb05b542261c74b45f4ac23ff53e9e620ab12dad7b5131f67128bb8ed6a4a70caec437f2157f8bcb3d080091e5715dfc7d7539dd0320c90d0aab6a6d7a447ebeea893a0efa2176292c648c62cedd4138c9d0535ab0621855484fc43e0e3e84357db6951bb21fe2f4e99fa188ebecbc23f73ea879bd304408acd1c470fd112606ccfd7b7970e950ebd363afbba359a51877248a42845097094ff785dc82264225752f3aefa980d9ed5309b48f47a5b5ef49f69808b91bde955277b6525f55436ffeba0bfa8c13f6314c57ec97eea295afc66a9f4ec844474c0da6ff1ef0c6c65c035f3bb74a70ffa668359b58a46af97600c428626b45c81a4e372e198894c02e2bee8010fb4c2c075ea623a6ee24a99e225f809322df6ea6f39b1566b1aee5403d45ba648f94f70976013199b3241744458d030a5319360780897413289d89267c389e04f23de79adf4b864c5ca76efc225eb1ecf6424887f0d8b3ac13cbe9df4eb69f7b702e85fb396dc4a030d57a8c4edd227ee568fb11a9859935ad53dcfdb01727f106af352c569a020b7e405a1ad4c6b39e2e8796fe9f16db3794550f5ef3ecd6af2b2ab0383e6c198f17ada5840bde84ccbaa661d9c456d9ddaf92763ba450098cd5a971d847fd5030a4c9b066ab3b0096dfdf7e5ce2f8349165f94c493b7e4192e85239bb11552f910fb41c5e96ee10fc8dce711e88e0572ce0bbbd9c9f3b7c9dae89f1dfa6af309c4321755a5b19070c8731ac590c30fffb69feeb75f699aebb101d3a30f784f1745182cb4f0bf63a148b521f0a03c691927694ee453b278523e3ed256c150098a932f62c90ac65faa4b9782c27a3ef6ca2b5ecae6a01d8a1d7096bf6a7d1b317a9eab22ef4907c631bcca224f723f5fb9a44d7e1295186cf37fd71343919aa167fa70a505a73e9f52a11cfbd40d8c1087d4ffdfe45a40ed5aebfa4b0c3622c78a914d68dd92f46478711437ff88803ab28cd9ce2223aa0fa37eb9d9a4a7866dec4ca6bb66e794ccac6bd19b11daa0b6d4d42cbcf7d6426b5718030ca51bf92b3d8ea0b11c46ec5c0c6e3805c88b39731b2b751d9928ed1ddba7c66bcc5273d709fd295aa0792384435b98c1f44575c028ff2869074156713931f7e62f8b0f8c7ee9dfeaeb2e096e77600586a47d6f6a2e13a17dfceae46ad84858bf8873f9f1e35fc700aef0a648af168ab0774a3441a203ef325577f2c76f5f0e5808acdc7965bc65e8ad1ca816bc3b67711ea42e619c957d0f26b394be1f3b0c4ac9af8558eaebf5c1c27b6549022513479b4c28dbe3f1c3131cc9211eee768f96a9c8b5e0e6425bef921a355faccf0072ba19b16d88b75feb5dc8fcfc1b7b5973eb9654ca3dcfd482831ff5d1fe09fe7ae43cf129c8c17a6686685a13ed076f34608b7ac16eb8e9de6a44418c4e3f8162e6a679bc9482df96a04b14575ebf093b99bf5cc26495f5dd6e571129d9760de3f801b001a1f3248d14f579bc519de2b656641a88da758a2ed3baf15fdf2739ddb44f0e5892de7ea48e9302129d0c939137b9d0687b296577675bcbf433a53f6a9816797cbfef1ba0caa2b8602387b5a8bae24d3e15d42b34d81708738fd269c3e8cbacdc3ff5ab1d4816a783d7be0f0a8086e345a6b4c231ffd61745f6c45cfceaf6089e70542aea1574e3c78740f77a08eb55b37f03549c1dd318cb5a76094210e8cf800c350d328fbf9442d0437e7affd54b3bfc33da3f24558f3ea8e59da8e61ae60e7e7b4de7179b8cf941d51d420c8eee69143966800dc4f7bcb50a033331fcac02a65e88de28ab219c68388a9da9196e044dd1ebbd3994bf8cc862f6f8b419fa1f4f4e5427f10866b498935fa28b8e6f9c5e48be8b74b9c2262823390480f71aff6cf72281f526265877d223eef9ad7a4be7438f9afb6aff0e80c5125c2c612ceb83f0470ea04479979c0a10fbbd0bed7379e949cc19fe36fbcbcc59a9fe30a2662d3e4d22862e8841b587b8995ef8482bc60fe0863b41752ef3dd44a387eff101595822bf1ce440ff9e5f73e560e4f7fbfe4754d9dabbcd92de02017eb43d3cf7c75e45ba04009a782a68ce11eefd52253c721daa5f37c6408e37b48d1f2e36d7c1793300f2c9039e69a52057486b63c0fa644d00528ce48f2e551ca88e356ac25ae74c73492ed3e6233490acfbe7ed8244f23e2af86e0ade6b78bb34a75a86f6cbadbd39762680cb0821d6d28f18d427df13d0e747f6da54be970e43ef8ca8285dc8bf44e3cecdbf2d8757a9800bb889b846d58cc636a2648809451a95736a0ecec6ea3fe61fb24dcd8a00ac0b8933918189cda555b17e431d99ee190d6d0d9f769e665ec193ba8889ae72a01e18b98cebb75d20ed778e5778ef657ce85d40eafa44b46f293d64023b877e8c5d58587c3abecf9a1ad8d874a4cdba0bfbea61b7eb19e81f7c932be12a83bacc51017b42dbe2931dc11c742a5a942cb6ed9bd9922ad78f55b0f6cbae0e8d4235140263ed8c83ab22e71a0f0a62b6920b5d5109e415254e527546546bd025cf1583e3e8d9d5bf735a4651fa2e5c3c86a185bb77e9b75224cdda8cb0eb21d9e3bb19e286832aa5dce19f055539a0a5caccfd752742a31d0af882c4f02c29cbd90ac2cdf5cc61c448cd09eb7b82b930ca99962c0e5ed84124fe37f7d30aad0296ee340377a7e0aa7413c495ac8ab0b482c4c5f59872efd5a1ceadbc7606e67d3c79a77d095bd82519db0893b9d2bbc2b2f3a7391826840e49424703c006399cde5f2a52a9383e89dfbfca284be4d75dd3aafd8a43dc6c71bd7fde9460647eb5c97707e96ddb9124d6020da38ee7ad743db8fd0377a8711905194c496e39a2132d7bbf35b79f920b6dcaa73625bf8b5320da250513cd45bf42c8072809ad59d69c02f0554cf82b79ff291e42d9227de1948352b0dba0281b69876ae0ca24972a5e75aee7e0a46bd4fc83f5a0dd3f22d666f2d950ca580c6da6dfaaa293beded10d1328613611b6e01d5d8567541e81466467302d8050a3ae4791fbddc1aec749edb68173be5341166c1d5c42d63e7368473e48bafa43459de3fa3a5550a4ac979711dd9a2d6796b0bcf9b5881124ade4b12bf64fa55724976a0da9d642e76a036c430f5fb2c06d599b0f78e978580f8eb763d2846177ff18b9b5cf8c76197ed809ef24212bc5563a1713214ce78e0e6cced6e41578d46a07839795c83c189610244bc1b680535fce39f290da90d719078015d90020b1d4567a97081b48514709df8e327d814e8c15496d90efacae6b13e297ed520d280203896bbc3a23f3b638adf594de03a782bb292a93ef0b14b8b3e13c01787a0b7bfb3abd8ab15eebbc651b7b054d3e56ebb7808de9b9bd067560ec6a6432455b37054292a3d9d32434506bf84b2907560017089de3f60c2deb4dfb7371f96d65a575d446aa1d2df81867135120df4e24e9227f72ff9f8f015a7754948704ecd084a1a93fbeb5a44af086ef73e9fc1c072b7d5473e92558fc2824acf27f1dbe9b019247d3074bf4256a966ceb674a2c4222632c8e4b6c0736de019ccfe4cca40b9b07f8c4df9753cdfb4ad66643ed71510983e29c2b5f9ae7db4913cb74d9dd0461a900810650d0da73f766aa6882385f3bb40644bf43f01faf2aa4cd187659edb0498527f201442b64349afa814b3dae5ce815971f3b11d177e3e1aaf90c7674c097d475640218ad27e63f9071c9081c06d9b5d1f3a070da3eed4f4080190a74063e7f97b5f35706dd1173dcbfa13a70d5362e50d57d0c5105c8d3beb926d93f61699e737ebe1a935839c3aa5b629dc93aa209d9e7774c40de7f59fca1eb274a8280022a15934e5dd2579a8cf5cd16a3b0a1ff3ea712c4258164fe2fa17a4cbfa5630f4041bad4204605eb2e762d610fa17dafa415ed8a678da1d4b5a6618d71d0066d66e3ac10b3ce65137a5a02344abc57f1be4ce0cbf1a2ac66dcb5e94495e863819c627e4704fb479c232b27aa4a5dfca8896a7eb8e0592b6b392ec9fa2767f569d5c1356d7ef7a909d8ee344ba017c75ca664d98f5288230b7f1ffa2fa7a5d07fab5f4b53b7f19c3fb361795fd632fa8a654004d931b4b7fc0890927aec727160cded3c01b7e40e6b81ce015796895f9c007762a1c22acfb9513eccd93c845e91ea8b0960b299b3ce788cbcce5bea9a94325289d2c3573975c512d56e19c4655f849b3652f8b5f9fa6f49e03202f2031debe3c299c3ceceb1febf4b285da9033493088a36f885ed6d3958b8d05cc6be00f3465de8bf6e41796d17e393067585b459b143d592cea102f584e48676a45f896cf662bd6b3b2309aa7f46d2b8ec6597a063f12bcc88922050c8c1e070134ce77ab1cb7a7f29983a0b30d9b2abeca5cfbfc55e941376c616c2834b1c1c9a9473b531c86c3b708478ee95923fe6a8108c2c4dc8a78a9d5e995f6c815b292b986cab0afa233ef10567a49d4e8dc17f438b90b620df4d291b52549ac8e1b69078b62011ed4bb0e288db740817ff07d01e779e11cb8e0606b5ca3aac6c7b262499f5a115acdad8a67b6eb77503318ef3bf0008347b270aa986d9e79e2af174f38a4743250c1091e6053a7a785464483161aad3ef3ad976e5329b71afe9bbfd93d7541a1014db4cc159ac266021e841c665217fa150e130f921ebd4cfb5accdb87f5f9bc0fd94b402289db4d0ac3f0906a689aef044c09fc2c5a00f7795ea935aeb943eb32826bd2176c1d1cb058195e3229d293595ebc07514c6b038a1d964199c59e59d4fc621c54b7bbd3410ccec22f7fb6751527c2aa0940ed2f0c9dcfc4e99ced91d09ba4a37042b5f48b127439cad24df2951ff1e769d3892dc4788dbbe27cce60f7f0138789444712e84e059ac0a4e87557f6c3369fc61b9a843c816df3cb4ec77a11e16390234da24dc0420f6a44554fc7954cc74d63ec030d4d964898e14500d0dacdbb2959f7a8a191773f66448348f36c3f4904187088bcfeafda7dd721236810d04469e93ca4e7926305c25b1ef1380d775008fd238e33e8dd2dc5a9783f97414487a7ef70eba3dcf71331803fad223f65aadfc87d79512bf311c14926d619a089f5e84c46f4a9ff393969f8eacc8fa20acaa9eb01a8aab625853e415d3871e555a11ee71ee93cba85ee9cde60b3962e294c2c840f0a1ba87714bac54f1ca0ebda74daa3e8e19d382b951d64a22da48c632ec5754f42129214a807427e69a93c128b6b0a8697c9ee375818dd79244a38287fe8f66c7cc3aa18aee2fbf804fc1aadcc7d2daf75be82a60276b6902a51f2bbb64c261915b80053fb9635f405f1fa855d1ec8adc0ebe9648b8151eda70ec5ad5f704fa2a337bcfb7ecbc845a11cae7a68d6bc58f107ac7bb0c2f6b83edc48703ba00c94036b9af4ada51d6d78bfe697df06f47573c14cd7191ec52dc0f208ecdcf54669529bba2c2fb7a6b38f6f2b5ec5fe876f03c096ae092b6f881a84b00edd1e9f67449069d876afaa99eb1a446f20656b5104c72ed28bd8553c724785f4e8bfdc33194409960de4969b708ce26e4cd608d21ace0c38e27d54b55369a9e807cfda9a6240466dd94f6150d4b0105f7b9ae392009b2cf146d1dad5d7c8664463d7d60d11b45f30d01db7364e21ac557d37a4c9ad88926c472e98710d2cbfc4b70d6a5dbb128d46909e634761c6f6952bf9021aa5282c391dcee3278a25e3e2ee31a7f6713979a546084fb2e598214c36a3b7618bf23c57bb23b33e9c98dfe5192ef257dc2d891a6f7c11be334fbdab015eedafe1c4aea95ff1fa6d340d0cade542f3f782c1589470fa64c6fd9ac0c31536ecee0ae312f992733beea6fcaf7562dd6e0f2c016f712ce14d93f02a54f577c75b444fd7f46e9bd2cd9cd1f89195781d88f984eca45c97355095d3b48b0d9bd730c7d6f63b1dc78d2344bdb0f18c4e1554822345c11efa2ba32bcef4f29ed05315cf44617a80d7d1392de077bbda08669c8c3cb6c0b12f872f1247bc1d07634bf5bf4acc3a4ecdae7e6acd7c4af9820147afe55500a7270d7eb511f907339e5af54cfaf33e2364f54091ebee2a245ba048452d383cd441604c4dd1c6376e4df8b83ebf6070d2be248174fc1dc0a1352c103325360aeb3ab71cb73bb646ac6247dd68155fd48b90250c3b0f250a74f827780367e117a94094e5005e2f926accaef0b3e36c25e315c1e80cd4c3481f3465d99025c7de91c45bb8dd0a5577174c1f366017d87d2033239a8b6f399a9095845b5fafe9cca113b93f455bb790709b6c93fcbbd0c4bd7b5d621088dca06802e241836291226ad56d40b3b4e90eb68bd5845742baf4cb4a69b4bdb07f02d0bd6fbb5a5fad3af030816b254725e6db4073b7a0536b884c8985c3a159cdb105c73f7e0e03546248336449eff6afeb96cf8ad3617df18ee2247bc2d11ebbe10e0379f5578c41611872c5461541fb4da5be3f3348e0592982a61c352315370a9b452306c9f31f9040ef755ad096a8733dd9daf6bdbcb7a3521ad2282ae4fa7bfdb9cda5997ba3a6652af46c6d0205bb356dfb411e2b931b357723bb70254211819b74a461ed5c126cec6573cda4f6107fc3ebc76483621e9ab5789a5575ea3a91463f76138ea0f3ec9c44e1cddb2de59bef83333d235e922b920e267453676575b38e6415bd136534b8df2360ab489fb69eefd04b66758ab5dd105be7b0635f7194f9e4b158b22b21ac97fda4e804747a9718b40a32531cd5c3fd1d3c1dd8ba5ef9c86d3c8df8c71f81da1a9756e5db4dddf70755053f7129d656a8069fe83c39ab240cf7a73f0f880ec7a791c5115ab262184839b906c238eaabf2268dfcd6560c5bcb70fea00b580ad52e7de0333e6de63ae351952e6e5dee6edf284de0a2f53e2089db13bd5eca5f98883a24eb2e1a58ae199f8db9c60a5b6b85585b2d2a17d6b5406e5668685d95c4718c375db05f7953b363c25d2ed0906eda70eb659845acd31fec9b8e4d5951d12fd50bbb969dd824a78c72622c8311a980f0f2e6a1ddc368879a1f3a07d3c0780e85a4e5d13223a3424782e3f77bf6a1ebf823f468d41b777ff61345064f1096ed653c277bab90ca5afc8ad6d25f4447236cdd82950afff27763f3fef5308f034379f4ad4955cb8cc5280d51b5427de4eba374f64dde2f1e7a6ae628aa4696160a5cf0ae9fc70e307b4eb19c0a5af2c2855710c8e117211d73a7e7f3f7f2ba55d03a4b73d816c9c3fc1edb86ec95ddcd77884a913805ad6549e7a5f776a1c2385dd6d83877727f128207cda29f83462269a7f606fa31934d06a6e0efd238d0a180c754a9d2e85609fd20c880ea0e79cbe887c442f9f682801da783529e1e45eb3e70195fa2711fa291dca43ee0672b7afc14cf87b9506a7ebe223019c856777e1783f6ae1b0ed90486b32e3b6f7ff77be834c7b6676da6c8052fa49450e3e16a6f90ee33742bbfe3dc025832e0bbc7abeb625077b8c1ea07dee89c7dc26fa42514ff9ac21e848e32309bc2862a873fb57796e05923fce42fa2833c73866e22a04497ec13acebcdff6ae1df71dd8756f1febac04f2034c1f3e1d401ddbdb7f2ef676d5c85437830d527a5fb04c9bbf0d892ee1306d2d2df37008916a3a66e70f865cd6d25de16fdb4bb4f2616204cf86a3ffdbf147223968c092a46dc2aae4aedb32fb850b85d4adb87bfada328bce4c2c70ec42affde442179fcc1d3d9f5e4a848c8ba03b0df3065d1b2d5f1b08d8c25148c51bb54e191a87ea59903084000b4b520fffda111fe831d4bdcf62423c1fcd673b020c5f2c41973dd1b9698054368081f917715e1c1592bc78dd265e051bcda5bf5877821fedfcf7790a58b328cf780f71ee71491e59194504bc800d319251607e53ba0e1ed15cd4fd5c959eaff4d3a1c7cb28c479f2776256633ef7c0f0e98688b54e8c8634cf57e27e5c1ee1e43573ae23bfbb1ff1bef6cabd33c02ff165c44f0f190426ba8391ba4f03458be3351869c5c5c9d5fa5600edbcce523525b9cd9c3bb040e34771ea277d05cb76302c72fac5edc815412dbbbc651371d70d044c4f89a68da7abd836fb3a495e212b5fd13819c41c9a240405582ae69b7c35b30935af3085d457a4d76a94c9272c5eafcecc4c92dd4f314b04b4739864e626a5bab27fa2f345f052afe3bae2ff4c442c42a1c83091bfcc23a3b5e06a511d02cefcd618a6d9761de00af192cf1aacc902cf3ba98f898c48fbc74b6710db7ac890b4f7ed7377e0fa3b4c46a131e775130a80db5014a79e674c8fc8b45495066e88201d2e320320fa4561abab617d0e67e9e879b0080a8ab404f4eb007a088990aa6a7b29afce5b8dd038ce96d43e1271315f6070e761e759c44fba1ce78730e35ca31e0bf5840cc01289c81613a07c497f288ed70a6d10d9f58fe135558b2a862bd877fcc939d7536e7dc988409290cd73da04a3b1399b0a2637f737d5f86bba4a31019546e2000a3ca57f8291cd9af28299eb93909061200c9738cca998add04e7bb0137ecc460fc3ef72872e7d13c159914fcdf577910e6c5d7a1636b13b78c5088551c614e3c75befb0f37fb89b918f4aad0126a9efd3390d6a0cab97ed0e01c7eae0e798a4142345578beb10d6b61a90b4d1fe836022def90bb8e37e07428a4592e7bf30e935951e492234a8db96f081379e7c4e18c3b6ce4ed1f97698dc1da940f14217e877bb8e0f33b392d801a01c48ec62ce2774d2e4e55e9415c063e1bfa31a8f0633443ec19c5fab977c1485147e46c06f86742278fd071de4a165dff7eddd5390a1e031d80e3d44477f6009c9fc27a7d92b865a292b0d586083f681c2d92da7e7f42eabd076fa7d61eba0c2b406c75f1cec561b1a523dd4c6f344b02ed59bd473d7d30a24144e981fc8da434931adeb841d63bb705485f8f58a180da91af64bad1379356787b37467dc9b4a0d12496e5048e7ccb40a978eebee5eaac4e9dd96faf194aa93a22333d7f68cccde147dce26c9ff18d7c8ffe0d1377c70dd1057d54473b2c2b2b3eea82fb223952c0dc3796efd0cd94afea38341ab9a83c6a9ee77f26bf8dea8510dfc964f9b9b4942c08ade50e43f06e5101f2e6b68b6a7f9cc5443c862b1198627461938daf4bd1fc7b21d6d7fd3f775f0e4a1f60434a242b049f159dbe5de145e741c5c9b4e59a7f5d7de54a6d51cd87845dde819ca74e3abf60356fbcf18bfff3b6ae1c545e243c08f9f41b86e55ed6e71be453843e0bffc5b6bdcfeefd33075ee5110627d4f05e008e54ddd62fb6979d9c2a5e4a2cb45fad7b2d77bd17508952889b30df2124cdc2fe6a749a12c9f6dbbd01226cc4ba2693b7e6a858d3c36ac6519ee70e896588a6df81b0e3be3604bbbe1a845088cf1834a04368dde8b6ee76d0492911dc09b05cf6642e0003cd8faafd398872c1a8dc3e85d3658ec8", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x40000008, {0x3, 0x3, 0x100000003, 0x800000000000, 0x2, 0x3881fffc, {0x6, 0x40, 0x8000, 0x800000000000, 0x3, 0x2, 0xa, 0x0, 0x0, 0xa000, 0x9011, r2, r3, 0x2, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)

1.710486696s ago: executing program 4 (id=665):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x2}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}, @TCA_FLOW_ACT={0x4}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x7}]}}]}, 0x60}}, 0x4848)

1.573437279s ago: executing program 6 (id=666):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x7)
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x4]}, 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r3, 0x4, 0x2800)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, 0x0, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r3, r4, 0x0, 0x7ffff004)

1.556214219s ago: executing program 2 (id=667):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netfilter\x00')
r1 = fanotify_init(0x8, 0x1000)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000200)=""/162, 0xa2)

1.185482876s ago: executing program 8 (id=668):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00')
r1 = fanotify_init(0x40, 0x40000)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000740)=""/4096, 0x1000)
getdents64(r0, 0x0, 0x0)

629.491097ms ago: executing program 4 (id=669):
syz_usb_connect$uac1(0x3, 0xab, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x4e, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8bd, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x5, 0x70, 0x80, 0x1, 0x1}, @processing_unit={0x7, 0x24, 0x7, 0x5, 0x5}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x7, '^'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x2, 0x6, 0x1, 0x6, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x6, 0x5, 0xa6}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x7, 0x4, "036a03603e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x2, 0x6, {0x7, 0x25, 0x1, 0x80, 0x3f, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x80, 0x6, {0x7, 0x25, 0x1, 0x2, 0x1, 0x5}}}}}}}]}}, 0x0)

624.412457ms ago: executing program 6 (id=670):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r1, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020)

490.49799ms ago: executing program 2 (id=671):
r0 = socket(0x1, 0x5, 0x0)
close(0x3)
r1 = socket(0xa, 0x3, 0x87)
sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)={0xe000200c})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000001c0)={0x80000002})

377.416192ms ago: executing program 8 (id=672):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000000c0)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x6dc, @loopback}, 0x1c)
listen(r0, 0x5)
syz_open_procfs(0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)

377.284142ms ago: executing program 8 (id=673):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @ptr, @var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x5f, 0x2e, 0x61]}}, 0x0, 0x49}, 0x28)

305.545673ms ago: executing program 8 (id=674):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0xffffffff908811b9, 0xab2, 0x8, 0x0, 0x101, 0x0, 0x0, 0x0, 0x800}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r4=>0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
io_submit(r4, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, &(0x7f0000000180)='\x00', 0xfdfe}])
syz_open_procfs(0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x6700000000000000)

234.677195ms ago: executing program 2 (id=675):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10)

51.370068ms ago: executing program 4 (id=676):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

0s ago: executing program 8 (id=677):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="28f24f0a6db8088805d6511a688c7b8165eadae98edf49b900", 0x19}], 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x4, 0x0)

kernel console output (not intermixed with test programs):

load,sb=0x0000000000000001,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[   68.727289][ T4312] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   69.592024][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.793899][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.851579][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.861585][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.382224][ T4323] loop3: detected capacity change from 0 to 2048
[   71.415805][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[   71.422700][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[   71.525670][ T4323] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   71.644195][ T4329] loop1: detected capacity change from 0 to 1024
[   71.695527][ T4329] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   73.177848][ T4329] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback.
[   75.179184][ T4351] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   75.411075][    T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   75.613234][ T4358] loop1: detected capacity change from 0 to 736
[   75.681061][    T7] usb 3-1: Using ep0 maxpacket: 32
[   75.840980][    T7] usb 3-1: unable to get BOS descriptor or descriptor too short
[   75.934556][    T7] usb 3-1: config 128 has an invalid interface number: 127 but max is 3
[   75.953363][    T7] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[   75.993304][    T7] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4
[   76.024753][    T7] usb 3-1: config 128 has no interface number 0
[   76.055421][    T7] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[   76.079812][ T4366] loop0: detected capacity change from 0 to 2048
[   76.098386][    T7] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 59391, setting to 1024
[   76.130528][    T7] usb 3-1: config 128 interface 127 has no altsetting 0
[   76.255661][ T4370] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   76.663083][ T4366] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[   77.047451][ T4366] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   77.101142][    T7] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[   77.131309][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.143816][    T7] usb 3-1: Product: syz
[   77.148166][    T7] usb 3-1: Manufacturer: syz
[   77.153392][    T7] usb 3-1: SerialNumber: syz
[   77.198291][ T4347] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   77.323006][ T4379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.444441][ T4379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.541744][ T4379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.702171][    T7] usb 3-1: USB disconnect, device number 2
[   77.732363][ T4379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.841713][ T4240] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   78.702765][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   78.791878][ T4391] chnl_net:caif_netlink_parms(): no params data found
[   78.951112][ T4240] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.968709][ T4409] loop2: detected capacity change from 0 to 512
[   78.985510][ T4240] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   79.099291][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.114601][ T4409] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   79.140161][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.171620][ T4240] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   79.183691][ T4409] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.36: invalid indirect mapped block 2683928664 (level 1)
[   79.221877][ T4240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.231793][ T4391] device bridge_slave_0 entered promiscuous mode
[   79.257318][ T4240] usb 1-1: Product: syz
[   79.261638][ T4409] EXT4-fs (loop2): 1 truncate cleaned up
[   79.267766][ T4409] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,init_itable=0x0000000000000006,i_version,journal_dev=0x0000000000000005,acl,usrjquota=.grpquota,nolazytime,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback.
[   79.275224][ T4240] usb 1-1: Manufacturer: syz
[   79.308455][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.316066][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.324593][ T4391] device bridge_slave_1 entered promiscuous mode
[   79.355816][ T4240] usb 1-1: SerialNumber: syz
[   79.577315][ T4391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.601773][ T4391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.731826][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   79.853526][ T4247] Bluetooth: hci1: command 0x0409 tx timeout
[   79.942861][    T7] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   80.091985][ T4240] usb 1-1: cannot find UAC_HEADER
[   80.127608][ T4240] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[   80.236715][ T4240] usb 1-1: USB disconnect, device number 2
[   80.332528][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   80.399022][ T4427] loop3: detected capacity change from 0 to 4096
[   80.457098][ T4425] fido_id[4425]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   80.526248][ T4391] team0: Port device team_slave_0 added
[   80.696978][ T4391] team0: Port device team_slave_1 added
[   80.875622][ T4427] EXT4-fs (loop3): Test dummy encryption mode enabled
[   80.957657][ T4427] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   81.037350][ T4427] System zones: 0-5
[   81.067760][ T4427] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[   81.188366][ T4439] device syzkaller0 entered promiscuous mode
[   81.314012][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.356808][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.485281][ T4391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.560907][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.594438][ T4454] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   81.619853][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.767137][ T4391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.112107][    T7] Bluetooth: hci1: command 0x041b tx timeout
[   82.121184][ T1108] cfg80211: failed to load regulatory.db
[   82.161283][ T4427] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   82.369968][ T4427] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   82.440832][ T4240] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   83.719622][ T4488] loop2: detected capacity change from 0 to 1024
[   83.752423][ T4488] hfsplus: unable to parse mount options
[   83.972235][ T4484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.46'.
[   84.122426][    T7] Bluetooth: hci1: command 0x040f tx timeout
[   84.279437][ T4491] loop0: detected capacity change from 0 to 1024
[   84.504243][ T4491] EXT4-fs (loop0): Ignoring removed bh option
[   84.642666][ T4491] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   84.736791][ T4491] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nodioread_nolock,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[   84.812655][ T4500] loop2: detected capacity change from 0 to 1024
[   84.835310][ T4500] EXT4-fs (loop2): Ignoring removed nobh option
[   84.863018][ T4391] device hsr_slave_0 entered promiscuous mode
[   84.891793][ T4500] EXT4-fs (loop2): inline encryption not supported
[   84.897731][ T4391] device hsr_slave_1 entered promiscuous mode
[   84.898380][ T4500] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   84.952863][ T4391] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.976865][ T4391] Cannot create hsr debugfs directory
[   85.053542][ T4500] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,jqfmt=vfsold,journal_dev=0x0000000000000800,nobh,inlinecrypt,grpquota,dioread_nolock,,errors=continue. Quota mode: writeback.
[   85.108102][ T4186] EXT4-fs error (device loop0): ext4_lookup:1858: inode #14: comm syz-executor: iget: bad extended attribute block 17179869184
[   85.138799][ T4186] EXT4-fs error (device loop0): ext4_lookup:1858: inode #14: comm syz-executor: iget: bad extended attribute block 17179869184
[   85.205761][ T4500] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:427: inode #2: comm syz.2.50: No space for directory leaf checksum. Please run e2fsck -D.
[   85.226458][ T4500] EXT4-fs error (device loop2): ext4_ind_map_blocks:604: inode #15: comm syz.2.50: Can't allocate blocks for non-extent mapped inodes with bigalloc
[   85.247748][ T4510] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82
[   85.255219][ T4499] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.50: Corrupt inode bitmap - block_group = 0, inode_bitmap = 4
[   85.320189][ T4499] EXT4-fs error (device loop2) in ext4_free_inode:362: Filesystem failed CRC
[   85.479032][ T4391] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   85.554228][ T4391] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   85.628453][ T4391] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   86.792602][ T4240] Bluetooth: hci1: command 0x0419 tx timeout
[   87.021048][ T4391] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   87.405350][ T4379] device hsr_slave_0 left promiscuous mode
[   87.417017][ T4551] loop3: detected capacity change from 0 to 1024
[   87.451958][ T4379] device hsr_slave_1 left promiscuous mode
[   87.480028][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.497877][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.555738][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.583516][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.612417][ T4379] device bridge_slave_1 left promiscuous mode
[   87.619831][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.667252][ T4559] attempt to access beyond end of device
[   87.667252][ T4559] loop3: rw=0, want=5780, limit=1024
[   87.695170][ T4379] device bridge_slave_0 left promiscuous mode
[   87.720052][ T4559] attempt to access beyond end of device
[   87.720052][ T4559] loop3: rw=0, want=5780, limit=1024
[   87.729178][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.745938][ T4559] Buffer I/O error on dev loop3, logical block 2889, async page read
[   87.761783][   T26] audit: type=1800 audit(1757303316.588:2): pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.65" name="file1" dev="loop3" ino=20 res=0 errno=0
[   87.805827][ T4379] device veth1_macvtap left promiscuous mode
[   87.819549][ T4379] device veth0_macvtap left promiscuous mode
[   87.833697][ T4379] device veth1_vlan left promiscuous mode
[   87.840454][ T4379] device veth0_vlan left promiscuous mode
[   87.882356][ T4561] loop2: detected capacity change from 0 to 512
[   87.945654][ T4561] EXT4-fs (loop2): orphan cleanup on readonly fs
[   87.959643][ T4561] Quota error (device loop2): v2_read_file_info: Free block number too big (0 >= 0).
[   87.971387][ T4561] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   87.992683][ T4561] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   88.013704][ T4561] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.58: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   88.060711][ T4561] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.58: couldn't read orphan inode 13 (err -117)
[   88.089753][ T4561] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   88.345462][ T4379] team0 (unregistering): Port device team_slave_1 removed
[   88.388025][ T4379] team0 (unregistering): Port device team_slave_0 removed
[   88.444261][ T4379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.508772][ T4379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.664243][ T4379] bond0 (unregistering): Released all slaves
[   88.783043][ T4391] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.808216][ T4558] netlink: 'syz.4.67': attribute type 7 has an invalid length.
[   88.881724][ T4570] device syzkaller0 entered promiscuous mode
[   88.926164][ T4391] 8021q: adding VLAN 0 to HW filter on device team0
[   88.941765][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.956596][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   89.012194][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   89.036886][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   89.049692][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.057068][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.068609][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   89.091759][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   89.101996][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.109181][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.119680][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   89.158760][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   89.188211][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.199136][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   89.212869][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   89.223228][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   89.233112][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   89.244232][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   89.253616][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   89.276892][ T4391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.303416][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   89.387969][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   89.399996][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   89.417309][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   89.632934][ T4593] loop2: detected capacity change from 0 to 512
[   89.650945][ T4196] Bluetooth: hci2: command 0x0409 tx timeout
[   89.778752][ T4593] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.72: casefold flag without casefold feature
[   89.871271][ T4593] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.72: couldn't read orphan inode 15 (err -117)
[   90.146314][ T4593] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   90.541653][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   90.555519][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   90.616877][ T4391] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.718254][ T4555] chnl_net:caif_netlink_parms(): no params data found
[   90.814940][ T4618] loop2: detected capacity change from 0 to 128
[   90.841034][ T4250] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   90.909016][ T4618] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   90.987932][ T4618] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   91.720981][ T1108] Bluetooth: hci2: command 0x041b tx timeout
[   91.981800][ T4555] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.010976][ T4250] usb 4-1: Using ep0 maxpacket: 16
[   92.055835][ T4555] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.139652][ T4555] device bridge_slave_0 entered promiscuous mode
[   92.161051][ T4250] usb 4-1: config 0 has an invalid interface descriptor of length 7, skipping
[   92.182333][ T4250] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.227859][ T4250] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   92.248120][ T4635] device syzkaller0 entered promiscuous mode
[   92.267537][ T4555] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.291728][ T4555] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.319169][ T4555] device bridge_slave_1 entered promiscuous mode
[   92.461144][ T4250] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   92.486815][ T4250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.496024][ T4250] usb 4-1: Product: syz
[   92.500505][ T4250] usb 4-1: Manufacturer: syz
[   92.501216][ T4555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.505736][ T4250] usb 4-1: SerialNumber: syz
[   92.526455][ T4250] r8152-cfgselector 4-1: config 0 descriptor??
[   92.549796][ T4555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.629107][ T4555] team0: Port device team_slave_0 added
[   92.659656][ T4555] team0: Port device team_slave_1 added
[   92.739271][ T4555] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.788935][ T4555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.816368][ T4555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.878123][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   92.890690][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   92.987106][ T4555] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.997345][ T4555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.025249][ T4555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.069762][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.090441][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.159149][ T4391] device veth0_vlan entered promiscuous mode
[   93.189006][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.222246][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.265901][ T4555] device hsr_slave_0 entered promiscuous mode
[   93.284067][ T4555] device hsr_slave_1 entered promiscuous mode
[   93.310141][ T4555] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.338001][ T4555] Cannot create hsr debugfs directory
[   93.355738][ T4391] device veth1_vlan entered promiscuous mode
[   93.375596][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   93.926507][ T4671] ODEBUG: Out of memory. ODEBUG disabled
[   93.962453][    T7] Bluetooth: hci2: command 0x040f tx timeout
[   94.011065][ T4250] r8152-cfgselector 4-1: Unknown version 0x0000
[   94.029559][ T4250] r8152-cfgselector 4-1: USB disconnect, device number 2
[   94.164506][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   94.191207][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   94.245334][ T4391] device veth0_macvtap entered promiscuous mode
[   94.338563][ T4391] device veth1_macvtap entered promiscuous mode
[   94.403497][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   94.420093][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   94.446262][ T4680] loop2: detected capacity change from 0 to 1024
[   94.462349][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.490845][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.529109][ T4680] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   94.537684][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.537706][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.537717][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.537762][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.537773][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.537787][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.550178][ T4391] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.622652][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.633521][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.644394][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.655010][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.665066][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.675789][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.686247][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.697285][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.711175][ T4391] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.720334][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   94.730079][ T4680] EXT4-fs (loop2): orphan cleanup on readonly fs
[   94.744117][ T4680] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.89: Freeing blocks not in datazone - block = 0, count = 4096
[   94.745310][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   94.759995][ T4680] EXT4-fs (loop2): 1 orphan inode deleted
[   94.772794][ T4680] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   94.805543][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.817902][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.897754][ T4391] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.927531][ T4391] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.950960][ T4391] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.959875][ T4391] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.296735][ T4555] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   95.333447][ T4555] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   95.387812][ T1224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.410902][ T1224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.435868][ T4555] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   95.463510][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   95.484461][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.484532][ T4555] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   95.516852][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.592131][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   95.959081][ T4555] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.989852][ T4555] 8021q: adding VLAN 0 to HW filter on device team0
[   96.011756][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   96.036673][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   96.046256][    T7] Bluetooth: hci2: command 0x0419 tx timeout
[   96.120638][ T4715] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[   96.382531][ T4715] loop5: detected capacity change from 0 to 2048
[   97.128888][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   97.341402][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   97.356804][ T4176]  loop5: p1 < > p4
[   97.373630][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.380932][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.531619][ T4176] loop5: p4 size 8388608 extends beyond EOD, truncated
[   97.544903][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   97.585073][ T4715]  loop5: p1 < > p4
[   97.591987][ T4715] loop5: p4 size 8388608 extends beyond EOD, truncated
[   97.719824][ T3562]  loop5: p1 < > p4
[   97.737991][ T3562] loop5: p4 size 8388608 extends beyond EOD, truncated
[   97.895885][ T4555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   97.921065][ T4555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   97.939516][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   97.979862][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   98.008140][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.015459][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.127990][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[   98.139735][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   98.143969][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   98.198175][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   98.285500][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   98.299076][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   98.320204][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[   98.347043][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   98.380399][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   98.397046][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   98.416051][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[   98.435960][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   98.463569][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   98.506995][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   98.547562][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   98.587712][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   98.646353][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   98.679883][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   99.279296][ T4755] loop5: detected capacity change from 0 to 512
[   99.312605][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   99.398694][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   99.455872][ T4555] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.575586][ T4755] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   99.686551][ T4755] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   99.951023][    T7] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  100.048322][ T4379] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.071101][ T4773] loop5: detected capacity change from 0 to 512
[  100.149898][ T4773] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  100.177935][ T4379] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.191272][ T4773] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  100.340145][ T4379] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.351113][    T7] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  100.360522][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.376939][ T4773] EXT4-fs (loop5): 1 truncate cleaned up
[  100.405948][ T4773] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000007,init_itable,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none.
[  100.434825][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  100.474803][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  100.503232][   T26] audit: type=1800 audit(1757303329.328:3): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.104" name="bus" dev="loop5" ino=18 res=0 errno=0
[  100.572337][    T7] usb 3-1: config 0 descriptor??
[  100.572911][ T4786] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.104: corrupted in-inode xattr
[  100.597828][ T4379] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.627215][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  100.637685][ T4786] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1760: inode #15: comm syz.5.104: unable to update i_inline_off
[  100.658616][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  100.661016][ T4773] loop_set_status: loop5 () has still dirty pages (nrpages=4)
[  100.682795][ T4555] device veth0_vlan entered promiscuous mode
[  100.702129][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  100.718642][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  100.742477][ T4786] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  100.780073][ T4555] device veth1_vlan entered promiscuous mode
[  100.869429][ T4786] syz.5.104 (4786) used greatest stack depth: 20488 bytes left
[  100.897054][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  100.925232][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  100.981310][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  101.022751][ T4391] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256)
[  101.037518][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  101.058002][ T4555] device veth0_macvtap entered promiscuous mode
[  101.081492][ T4391] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256)
[  101.113592][ T4555] device veth1_macvtap entered promiscuous mode
[  101.269265][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.281447][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.292763][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.304145][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.317507][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.328721][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.338931][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.350040][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.360625][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.372527][ T4250] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  101.378716][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.392179][ T4555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.403610][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.415751][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.426297][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.437039][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.447274][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.458033][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.468036][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.480353][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.492116][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.503785][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.515058][ T4555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.533515][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  101.545434][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  101.557714][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  101.568488][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  101.589506][ T4555] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.605844][ T4555] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.621449][ T4555] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.630608][ T4555] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.744238][ T4250] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  101.762778][ T4250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.796034][ T4250] usb 4-1: config 0 descriptor??
[  101.823065][ T4494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.850440][ T4494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.864887][ T4250] cp210x 4-1:0.0: cp210x converter detected
[  101.895014][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  101.926753][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.945587][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.137148][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  102.931240][ T4250] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  103.011203][ T4250] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[  103.039534][ T4250] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  103.071900][ T4250] usb 4-1: cp210x converter now attached to ttyUSB0
[  103.119113][ T4250] usb 4-1: USB disconnect, device number 3
[  103.126045][ T4379] device hsr_slave_0 left promiscuous mode
[  103.158041][ T4379] device hsr_slave_1 left promiscuous mode
[  103.179016][ T4250] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  103.203717][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.232192][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.250492][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.261111][    T7] pegasus 3-1:0.0: setup Pegasus II specific registers
[  103.264754][ T4250] cp210x 4-1:0.0: device disconnected
[  103.280666][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.294499][ T4379] device bridge_slave_1 left promiscuous mode
[  103.318249][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.339106][ T4379] device bridge_slave_0 left promiscuous mode
[  103.360673][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.410672][ T4379] device veth1_macvtap left promiscuous mode
[  103.432060][ T4379] device veth0_macvtap left promiscuous mode
[  103.438578][ T4379] device veth1_vlan left promiscuous mode
[  103.468488][ T4379] device veth0_vlan left promiscuous mode
[  103.561165][    T7] pegasus 3-1:0.0: can't locate MII phy, using default
[  103.655112][ T4844] loop2: detected capacity change from 0 to 764
[  103.684067][ T4844] rock: directory entry would overflow storage
[  104.040880][ T4844] rock: sig=0x5245, size=8, remaining=5
[  104.856808][ T4865] xt_NFQUEUE: number of total queues is 0
[  105.385874][ T4379] team0 (unregistering): Port device team_slave_1 removed
[  105.443846][ T4379] team0 (unregistering): Port device team_slave_0 removed
[  105.500871][ T4379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.613746][ T4379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.642737][ T4300] Bluetooth: hci1: command 0x0409 tx timeout
[  106.711440][ T4884] loop2: detected capacity change from 0 to 512
[  106.756820][ T4884] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.129: casefold flag without casefold feature
[  106.778100][ T4379] bond0 (unregistering): Released all slaves
[  106.781456][ T4884] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.129: couldn't read orphan inode 15 (err -117)
[  106.805157][ T4884] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  106.849004][    T7] pegasus 3-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, 0e:77:86:22:9f:5b
[  106.889411][ T4857] device syzkaller0 entered promiscuous mode
[  106.917857][    T7] usb 3-1: USB disconnect, device number 4
[  106.977475][ T4250] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  107.611230][ T4250] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  107.634230][ T4250] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  107.675888][ T4250] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  108.071636][ T4250] usb 4-1: config 220 has no interface number 2
[  108.079219][ T4250] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  108.115531][ T4250] usb 4-1: config 220 interface 0 has no altsetting 0
[  108.135369][ T4250] usb 4-1: config 220 interface 76 has no altsetting 0
[  109.384771][    T7] Bluetooth: hci1: command 0x041b tx timeout
[  109.392485][ T4250] usb 4-1: config 220 interface 1 has no altsetting 0
[  109.450993][ T4250] usb 4-1: string descriptor 0 read error: -71
[  109.461466][ T4250] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  109.490986][ T4836] chnl_net:caif_netlink_parms(): no params data found
[  109.501249][ T4250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.550991][ T4250] usb 4-1: can't set config #220, error -71
[  109.561970][ T4250] usb 4-1: USB disconnect, device number 4
[  109.713704][ T4918] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  110.659595][ T4935] loop2: detected capacity change from 0 to 512
[  110.682001][ T4836] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.689148][ T4836] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.739082][ T4836] device bridge_slave_0 entered promiscuous mode
[  110.768612][ T4836] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.794103][ T4836] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.819665][ T4836] device bridge_slave_1 entered promiscuous mode
[  110.837093][ T4935] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  110.878386][ T4935] EXT4-fs (loop2): orphan cleanup on readonly fs
[  110.975963][ T4935] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5
[  110.998191][ T4935] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  111.007343][ T4933] loop3: detected capacity change from 0 to 8192
[  111.019224][ T4935] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.141: Failed to acquire dquot type 1
[  111.024270][ T4836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.072475][ T4935] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.141: bg 0: block 40: padding at end of block bitmap is not set
[  111.123996][ T4836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.165123][ T4935] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem
[  111.210673][ T4935] EXT4-fs (loop2): 1 truncate cleaned up
[  111.215747][ T4933] FAT-fs (loop3): error, clusters badly computed (2 != 1)
[  111.234578][ T4836] team0: Port device team_slave_0 added
[  111.252149][ T4935] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  111.273409][ T4836] team0: Port device team_slave_1 added
[  111.291196][ T4933] FAT-fs (loop3): Filesystem has been set read-only
[  111.426477][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.441633][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.480908][ T1108] Bluetooth: hci1: command 0x040f tx timeout
[  111.751143][ T4836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.930756][    C0] sched: RT throttling activated
[  113.532025][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.811416][ T4240] Bluetooth: hci1: command 0x0419 tx timeout
[  113.849548][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.388232][ T4972] Invalid option length (8279) for dns_resolver key
[  114.626680][ T4836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.788838][ T4980] capability: warning: `syz.6.134' uses deprecated v2 capabilities in a way that may be insecure
[  114.829942][ T4836] device hsr_slave_0 entered promiscuous mode
[  114.873260][ T4836] device hsr_slave_1 entered promiscuous mode
[  114.930914][ T4836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.938726][ T4836] Cannot create hsr debugfs directory
[  115.240995][ T4196] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  116.318231][ T4196] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  116.339615][ T4196] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.441679][ T4196] usb 7-1: config 0 descriptor??
[  116.492271][ T4196] cp210x 7-1:0.0: cp210x converter detected
[  116.507202][ T4836] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  116.555103][ T4836] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  116.610939][ T4836] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  116.638875][ T4836] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  116.921058][ T4196] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  117.000960][ T4196] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: 0
[  117.009708][ T4836] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.018736][ T4196] cp210x 7-1:0.0: GPIO initialisation failed: -5
[  117.056423][ T4196] usb 7-1: cp210x converter now attached to ttyUSB0
[  117.087688][ T4836] 8021q: adding VLAN 0 to HW filter on device team0
[  117.121010][ T4250] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  117.149289][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  117.181253][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  117.205198][ T4240] usb 7-1: USB disconnect, device number 2
[  117.246709][ T4240] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  117.282233][ T4240] cp210x 7-1:0.0: device disconnected
[  117.291710][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  117.324051][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  117.381332][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.388451][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.431222][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  117.473129][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  117.491204][ T4250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  117.491301][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.509632][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.522940][ T4250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.545829][ T4250] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  117.580230][ T4250] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  117.611280][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  117.635608][ T4250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.654716][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  117.704664][ T4250] usb 3-1: config 0 descriptor??
[  117.747966][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  117.790068][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  117.834862][ T5034] loop3: detected capacity change from 0 to 2048
[  117.844704][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  117.854000][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  117.865739][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  117.894843][ T5034] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.924780][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  117.945603][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  117.973187][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  118.005817][ T4836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  118.056002][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  118.091339][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  118.128683][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  118.218222][ T4250] cherry 0003:046A:0023.0002: unknown main item tag 0x0
[  120.489455][ T4250] cherry 0003:046A:0023.0002: hidraw0: USB HID vff.fa Device [HID 046a:0023] on usb-dummy_hcd.2-1/input0
[  120.537136][ T4250] usb 3-1: USB disconnect, device number 5
[  120.652921][ T5057] fido_id[5057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  120.830268][ T5066] loop2: detected capacity change from 0 to 512
[  120.940326][ T5066] EXT4-fs (loop2): Mount option "nodelalloc" incompatible with ext3
[  121.000271][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  121.014317][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  121.192886][ T4836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.922478][ T4379] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.522663][ T5088] loop2: detected capacity change from 0 to 128
[  122.641833][ T5088] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,errors=remount-ro,barrier=0x0000000000000003,nolazytime,. Quota mode: none.
[  122.712320][ T5088] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  122.871939][ T4836] device veth0_vlan entered promiscuous mode
[  122.941268][ T5088] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 20: comm syz.2.168: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  122.976121][ T4836] device veth1_vlan entered promiscuous mode
[  123.062474][ T5088] EXT4-fs (loop2): Remounting filesystem read-only
[  123.090266][ T4836] device veth0_macvtap entered promiscuous mode
[  123.097023][ T5088] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem
[  123.157785][ T5088] EXT4-fs (loop2): Remounting filesystem read-only
[  123.207256][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.231962][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  123.409234][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  123.464824][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  123.479624][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  123.498438][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  123.520424][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  123.559174][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  123.621402][ T4379] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.663541][ T4836] device veth1_macvtap entered promiscuous mode
[  124.281152][ T5111] Invalid option length (6023) for dns_resolver key
[  124.871574][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  124.880224][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  124.895037][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  124.980660][ T4379] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.034712][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.083370][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.102578][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.144585][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.167619][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.206285][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.217085][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.228846][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.239348][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.251305][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.266661][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.301858][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  125.329150][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  125.393593][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.420713][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.458559][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.476936][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.500586][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.525068][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.536284][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.576335][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.604205][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.619884][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.692888][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.820614][ T4379] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.904508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.918682][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.941844][ T4836] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.959849][ T4836] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.981813][ T4836] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.000961][ T4836] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.198486][ T5148] Invalid option length (447) for dns_resolver key
[  127.062126][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.072765][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.178501][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  127.229521][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.249058][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.297167][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  127.897270][   T26] audit: type=1326 audit(1757303356.668:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5179 comm="syz.7.111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4867e1cbe9 code=0x0
[  128.543560][ T5195] loop2: detected capacity change from 0 to 128
[  128.948929][ T5210] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  129.383820][ T5218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.958269][ T5195] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  129.973733][ T5195] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  130.162448][ T5218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.793595][ T5218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.144587][ T5218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.877504][ T4379] device hsr_slave_0 left promiscuous mode
[  131.899435][ T4379] device hsr_slave_1 left promiscuous mode
[  131.921933][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.929756][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.941696][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.960080][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.976112][ T4379] device bridge_slave_1 left promiscuous mode
[  131.983109][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.994121][ T4379] device bridge_slave_0 left promiscuous mode
[  132.000516][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.016668][ T4379] device veth1_macvtap left promiscuous mode
[  132.022804][ T4379] device veth0_macvtap left promiscuous mode
[  132.029766][ T4379] device veth1_vlan left promiscuous mode
[  132.035917][ T4379] device veth0_vlan left promiscuous mode
[  132.239387][ T4379] team0 (unregistering): Port device team_slave_1 removed
[  132.256766][ T4379] team0 (unregistering): Port device team_slave_0 removed
[  132.269336][ T4379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.288637][ T4379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.354261][ T4379] bond0 (unregistering): Released all slaves
[  132.437005][ T5269] device syzkaller0 entered promiscuous mode
[  132.458286][ T5218] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.506977][ T5218] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.538741][ T5218] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.552671][ T5218] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.833412][ T5285] binder_alloc: 5284: binder_alloc_buf, no vma
[  132.845826][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  132.863039][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  133.720409][ T5300] netlink: 'syz.4.224': attribute type 12 has an invalid length.
[  133.749937][ T5300] netlink: 'syz.4.224': attribute type 29 has an invalid length.
[  133.786774][ T5300] netlink: 148 bytes leftover after parsing attributes in process `syz.4.224'.
[  133.816519][ T5300] netlink: 'syz.4.224': attribute type 2 has an invalid length.
[  133.844759][ T5300] netlink: 'syz.4.224': attribute type 1 has an invalid length.
[  133.882265][ T5300] netlink: 11 bytes leftover after parsing attributes in process `syz.4.224'.
[  134.011568][ T5313] Zero length message leads to an empty skb
[  134.184170][ T5328] binder_alloc: 5326: binder_alloc_buf, no vma
[  134.251576][ T5336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.232'.
[  134.434025][ T5333] device syzkaller0 entered promiscuous mode
[  135.366949][ T5357] syz.4.242 uses obsolete (PF_INET,SOCK_PACKET)
[  135.669168][ T5373] binder_alloc: 5372: binder_alloc_buf, no vma
[  137.174329][ T5402] device syzkaller0 entered promiscuous mode
[  139.342513][ T4247] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  139.793448][ T4247] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  139.876363][ T4247] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.035686][ T4247] usb 7-1: config 0 descriptor??
[  140.099349][ T5500] netlink: 52 bytes leftover after parsing attributes in process `syz.4.286'.
[  140.132166][ T4247] cp210x 7-1:0.0: cp210x converter detected
[  140.395029][ T5514] loop2: detected capacity change from 0 to 128
[  140.478064][ T5514] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  140.526891][ T5514] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  140.580998][ T4247] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  140.650920][ T4247] cp210x 7-1:0.0: GPIO initialisation failed: -524
[  140.670993][ T4247] usb 7-1: cp210x converter now attached to ttyUSB0
[  140.860527][ T4247] usb 7-1: USB disconnect, device number 3
[  140.889184][ T4247] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  141.001472][ T4247] cp210x 7-1:0.0: device disconnected
[  142.172408][ T5555] binder: BINDER_SET_CONTEXT_MGR already set
[  142.219000][ T5555] binder: 5554:5555 ioctl 4018620d 2000000002c0 returned -16
[  142.380537][ T5565] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 2, id = 0
[  142.423890][ T5568] loop7: detected capacity change from 0 to 128
[  142.529812][ T5568] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  142.602028][ T5568] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  143.643690][ T5593] device syzkaller1 entered promiscuous mode
[  143.788317][ T5600] loop7: detected capacity change from 0 to 7
[  143.841566][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.852696][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  143.881207][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.892194][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  143.929256][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.940248][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  143.961845][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.972809][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  143.983176][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.994119][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  144.009779][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.020760][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  144.033168][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.044140][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  144.059334][ T4176] ldm_validate_partition_table(): Disk read failed.
[  144.066505][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.077524][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  144.100913][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.111899][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  144.171295][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.180897][ T4196] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  144.182242][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  144.222127][ T4176] Dev loop7: unable to read RDB block 0
[  144.238547][ T4176]  loop7: unable to read partition table
[  144.253582][ T4176] loop7: partition table beyond EOD, truncated
[  144.288234][ T5600] ldm_validate_partition_table(): Disk read failed.
[  144.305102][ T5600] Dev loop7: unable to read RDB block 0
[  144.325228][ T5600]  loop7: unable to read partition table
[  144.339693][ T5600] loop7: partition table beyond EOD, truncated
[  144.369560][ T5600] loop_reread_partitions: partition scan of loop7 () failed (rc=-5)
[  144.390299][ T5612] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd
[  144.551034][ T4196] usb 8-1: config index 0 descriptor too short (expected 46945, got 27)
[  144.570332][ T4196] usb 8-1: config 51 has too many interfaces: 173, using maximum allowed: 32
[  144.606668][ T4196] usb 8-1: config 51 has an invalid descriptor of length 0, skipping remainder of the config
[  144.627819][ T4196] usb 8-1: config 51 has 0 interfaces, different from the descriptor's value: 173
[  144.677364][ T4196] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  144.707738][ T4196] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.998338][ T4300] usb 8-1: USB disconnect, device number 2
[  146.348887][ T5647] binder: BINDER_SET_CONTEXT_MGR already set
[  146.391150][ T5647] binder: 5646:5647 ioctl 4018620d 2000000002c0 returned -16
[  146.592973][ T5656] Invalid option length (1383) for dns_resolver key
[  147.518316][ T5679] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  147.525402][ T5679] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  147.632741][ T5679] vhci_hcd vhci_hcd.0: Device attached
[  147.697891][ T4250] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  147.892623][ T4227] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  147.900846][ T4240] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[  148.371044][ T4227] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  148.409984][ T4227] usb 7-1: config 0 has no interface number 0
[  148.430197][ T4227] usb 7-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2
[  148.490936][ T4227] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.578712][ T4227] usb 7-1: config 0 descriptor??
[  148.664472][ T4227] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.105/input/input6
[  148.681116][ T4250] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  148.761122][ T4250] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  148.770054][ T4250] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  148.810852][ T4250] usb 3-1: config 0 interface 0 has no altsetting 0
[  148.880979][ T3547] bcm5974 7-1:0.105: could not read from device
[  148.883570][ T5680] usb 45-1: recv xbuf, 0
[  148.892499][ T4250] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  148.913031][ T4250] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  148.918183][ T1279] vhci_hcd: stop threads
[  148.950878][ T4250] usb 3-1: config 0 interface 0 has no altsetting 0
[  148.959173][ T1279] vhci_hcd: release socket
[  148.980920][ T4227] usb 7-1: USB disconnect, device number 4
[  148.989043][ T3547] bcm5974 7-1:0.105: could not read from device
[  149.002829][ T3547] bcm5974 7-1:0.105: could not read from device
[  149.010573][ T1279] vhci_hcd: disconnect device
[  149.041013][ T4250] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  149.049962][ T4250] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  149.077108][ T4240] usb 45-1: device descriptor read/64, error -71
[  149.087511][ T4250] usb 3-1: config 0 interface 0 has no altsetting 0
[  149.190992][ T4250] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  149.230607][ T4250] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  149.284677][ T4250] usb 3-1: config 0 interface 0 has no altsetting 0
[  149.300983][ T4240] vhci_hcd: vhci_device speed not set
[  149.411295][ T4250] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  149.436864][ T4250] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  149.498797][ T4250] usb 3-1: config 0 interface 0 has no altsetting 0
[  149.591066][ T4250] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  149.600158][ T4250] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  149.660839][ T4250] usb 3-1: config 0 interface 0 has no altsetting 0
[  149.740869][ T4250] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  149.749922][ T4250] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  149.878309][ T4250] usb 3-1: config 0 interface 0 has no altsetting 0
[  150.092866][ T4250] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  150.160984][ T4291] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  150.216023][ T4250] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  150.528801][ T4250] usb 3-1: config 0 interface 0 has no altsetting 0
[  150.560880][ T4291] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  150.602389][ T4300] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  150.611834][ T4300] Bluetooth: hci1: Injecting HCI hardware error event
[  150.620093][ T4191] Bluetooth: hci1: hardware error 0x00
[  150.632945][ T4291] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.699515][ T4291] usb 7-1: config 0 descriptor??
[  150.710838][ T4250] usb 3-1: string descriptor 0 read error: -71
[  150.718612][ T4250] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  150.753880][ T4250] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  150.765967][ T5730] netlink: 'syz.4.341': attribute type 10 has an invalid length.
[  150.782192][ T4291] cp210x 7-1:0.0: cp210x converter detected
[  150.806151][ T4250] usb 3-1: config 0 descriptor??
[  150.823795][ T5730] netlink: 40 bytes leftover after parsing attributes in process `syz.4.341'.
[  150.831095][ T4250] usb 3-1: can't set config #0, error -71
[  150.847163][ T4250] usb 3-1: USB disconnect, device number 6
[  150.859967][ T5730] device virt_wifi0 entered promiscuous mode
[  150.895811][ T5730] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  151.210915][ T4291] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  151.220962][ T4250] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  151.260226][ T4291] cp210x 7-1:0.0: GPIO initialisation failed: -524
[  151.278824][ T4291] usb 7-1: cp210x converter now attached to ttyUSB0
[  151.353657][ T5746] Invalid option length (2823) for dns_resolver key
[  151.811868][ T4291] usb 7-1: USB disconnect, device number 5
[  151.831253][ T4291] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  151.839607][ T4291] cp210x 7-1:0.0: device disconnected
[  152.041117][ T4250] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  152.050227][ T4250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.135175][ T4250] usb 3-1: config 0 descriptor??
[  152.390971][ T4250] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  152.475915][    C0] Unknown status report in ack skb
[  153.144735][ T5781] chnl_net:caif_netlink_parms(): no params data found
[  153.418446][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.461013][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.469411][ T5781] device bridge_slave_0 entered promiscuous mode
[  153.510825][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.528282][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.552170][ T5781] device bridge_slave_1 entered promiscuous mode
[  153.651114][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.674617][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.784931][ T5814] Invalid option length (2991) for dns_resolver key
[  153.939198][ T5781] team0: Port device team_slave_0 added
[  154.018389][ T5781] team0: Port device team_slave_1 added
[  154.214824][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.300769][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.390992][ T4250] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  154.401207][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.427228][ T4250] asix: probe of 3-1:0.0 failed with error -71
[  154.470248][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.477650][ T4250] usb 3-1: USB disconnect, device number 7
[  154.490812][ T4196] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  154.499588][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.531235][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.601033][ T4227] Bluetooth: hci5: command 0x0409 tx timeout
[  154.746476][ T5781] device hsr_slave_0 entered promiscuous mode
[  154.774970][ T5781] device hsr_slave_1 entered promiscuous mode
[  154.791073][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  154.805978][ T5781] Cannot create hsr debugfs directory
[  154.881110][ T4196] usb 8-1: config 0 has an invalid interface number: 2 but max is 0
[  154.901978][ T4196] usb 8-1: config 0 has no interface number 0
[  154.931803][ T4196] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.988077][ T4196] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.020247][ T4196] usb 8-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  155.050965][ T4196] usb 8-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00
[  155.060314][ T4196] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.107126][ T4196] usb 8-1: config 0 descriptor??
[  155.345849][ T5781] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  155.360882][ T4250] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  155.404940][ T5781] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  155.422635][ T5781] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  155.444324][ T5781] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  155.609961][ T4196] hid-generic 0003:28BD:0934.0003: hidraw0: USB HID v0.00 Device [HID 28bd:0934] on usb-dummy_hcd.7-1/input2
[  155.673253][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.704415][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  155.741062][ T4250] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  155.741474][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  155.758206][ T4250] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.791065][ T4300] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  155.803020][ T5781] 8021q: adding VLAN 0 to HW filter on device team0
[  155.821471][ T4250] usb 7-1: config 0 descriptor??
[  155.834770][ T1111] usb 8-1: USB disconnect, device number 3
[  155.855576][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  155.876093][ T4250] cp210x 7-1:0.0: cp210x converter detected
[  155.892253][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  155.919088][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.926267][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.944353][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.953414][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.962633][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.977469][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.984665][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.003384][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  156.053186][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  156.060840][ T4300] usb 3-1: Using ep0 maxpacket: 32
[  156.081731][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  156.098740][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  156.117968][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  156.153511][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  156.179122][ T5781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  156.191141][ T4300] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  156.196756][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  156.220906][ T4300] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  156.241131][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  156.249372][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  156.270813][ T4300] usb 3-1: config 0 interface 0 has no altsetting 0
[  156.311850][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  156.316462][ T4250] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  156.321601][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  156.359144][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  156.390639][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  156.391061][ T4250] cp210x 7-1:0.0: GPIO initialisation failed: -524
[  156.432131][ T4300] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  156.445138][ T4300] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  156.460156][ T4250] usb 7-1: cp210x converter now attached to ttyUSB0
[  156.474123][ T4300] usb 3-1: Product: syz
[  156.478384][ T4300] usb 3-1: Manufacturer: syz
[  156.502968][ T4300] usb 3-1: SerialNumber: syz
[  156.533287][ T4300] usb 3-1: config 0 descriptor??
[  156.606206][ T4250] usb 7-1: USB disconnect, device number 6
[  156.622774][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  156.649012][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  156.658612][ T4250] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  156.686194][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.691103][ T4300] Bluetooth: hci5: command 0x041b tx timeout
[  156.710076][ T4250] cp210x 7-1:0.0: device disconnected
[  157.887259][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'.
[  157.898945][ T4196] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  158.042776][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  158.066830][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  158.090851][ T4196] usb 8-1: device descriptor read/64, error -71
[  158.108189][ T4227] usb 3-1: USB disconnect, device number 8
[  158.121335][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  158.129935][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  158.194107][ T5781] device veth0_vlan entered promiscuous mode
[  158.203209][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  158.232308][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  158.253995][ T5953] netlink: 132 bytes leftover after parsing attributes in process `syz.2.390'.
[  158.281978][ T5781] device veth1_vlan entered promiscuous mode
[  158.345857][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  158.364540][ T4196] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  158.383844][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  158.408694][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  158.462212][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  158.473885][ T5781] device veth0_macvtap entered promiscuous mode
[  158.493369][ T5781] device veth1_macvtap entered promiscuous mode
[  158.560557][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.581051][ T4196] usb 8-1: device descriptor read/64, error -71
[  158.598195][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.638770][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.656971][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.668161][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.681867][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.692375][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.703404][ T4227] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  158.705941][ T4196] usb usb8-port1: attempt power cycle
[  158.711040][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.728786][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.739614][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.752012][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.760995][ T4300] Bluetooth: hci5: command 0x040f tx timeout
[  158.767093][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  158.776899][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  158.786053][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  158.795285][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  158.817622][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.828985][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.847741][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.860845][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.879227][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.890672][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.901233][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.912068][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.930787][ T4227] usb 3-1: device descriptor read/64, error -71
[  158.943246][ T4250] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  158.947474][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.970414][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.992200][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.001963][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  159.023258][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  159.044581][ T5781] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.062358][ T5781] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.079420][ T5781] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.093863][ T5781] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.141006][ T4196] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  159.191157][ T4250] usb 7-1: Using ep0 maxpacket: 32
[  159.231140][ T4227] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[  159.232945][ T1224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.249410][ T4196] usb 8-1: device descriptor read/8, error -71
[  159.271081][ T1224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.302727][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  159.311055][ T4250] usb 7-1: config 0 has an invalid interface number: 191 but max is 0
[  159.330873][ T4250] usb 7-1: config 0 has no interface number 0
[  159.358302][ T1224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.402310][ T1224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.441629][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  159.450963][ T4227] usb 3-1: device descriptor read/64, error -71
[  159.492157][ T4250] usb 7-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67
[  159.521149][ T4196] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  159.529018][ T4250] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.558210][ T4250] usb 7-1: Product: syz
[  159.572480][ T4250] usb 7-1: Manufacturer: syz
[  159.577299][ T4250] usb 7-1: SerialNumber: syz
[  159.591245][ T4227] usb usb3-port1: attempt power cycle
[  159.604647][ T4250] usb 7-1: config 0 descriptor??
[  159.611018][ T4196] usb 8-1: device descriptor read/8, error -71
[  159.662390][ T4250] spcp8x5 7-1:0.191: SPCP8x5 converter detected
[  159.684408][ T4250] usb 7-1: SPCP8x5 converter now attached to ttyUSB0
[  159.738516][ T4196] usb usb8-port1: unable to enumerate USB device
[  159.896132][ T4196] usb 7-1: USB disconnect, device number 7
[  159.939478][ T4196] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  159.970535][ T4196] spcp8x5 7-1:0.191: device disconnected
[  160.020823][ T4227] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[  160.132169][ T4227] usb 3-1: device descriptor read/8, error -71
[  160.420843][ T4227] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[  160.551130][ T4227] usb 3-1: device descriptor read/8, error -71
[  160.664991][ T6024] tmpfs: Unknown parameter 'quota'
[  160.671113][ T4227] usb usb3-port1: unable to enumerate USB device
[  160.842261][ T4227] Bluetooth: hci5: command 0x0419 tx timeout
[  160.921101][ T1108] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  161.170825][ T1108] usb 7-1: Using ep0 maxpacket: 32
[  161.305948][ T1108] usb 7-1: config 0 has an invalid interface number: 247 but max is 0
[  161.321166][ T1108] usb 7-1: config 0 has no interface number 0
[  161.370924][ T4250] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  161.484522][ T1108] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  161.496858][ T1108] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  161.515573][ T1108] usb 7-1: Product: syz
[  161.525441][ T1108] usb 7-1: Manufacturer: syz
[  161.547732][ T1108] usb 7-1: config 0 descriptor??
[  161.701006][    T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  161.731100][ T4247] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  161.741181][ T4250] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  161.744036][ T4247] Bluetooth: hci0: Injecting HCI hardware error event
[  161.757916][ T4250] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.774349][ T4191] Bluetooth: hci0: hardware error 0x00
[  161.814501][ T4250] usb 8-1: config 0 descriptor??
[  161.829599][ T1108] usb 7-1: USB disconnect, device number 8
[  161.892005][ T4250] cp210x 8-1:0.0: cp210x converter detected
[  161.951032][    T7] usb 3-1: Using ep0 maxpacket: 32
[  162.094053][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.121005][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.151812][    T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  162.180868][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.196435][ T6063] xt_l2tp: invalid flags combination: 8
[  162.219127][    T7] usb 3-1: config 0 descriptor??
[  162.245645][    C0] Unknown status report in ack skb
[  162.272032][    T7] hub 3-1:0.0: USB hub found
[  162.331068][ T4250] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  162.388890][ T4250] cp210x 8-1:0.0: GPIO initialisation failed: -524
[  162.421229][ T4250] usb 8-1: cp210x converter now attached to ttyUSB0
[  162.481042][    T7] hub 3-1:0.0: 1 port detected
[  162.591856][ T4250] usb 8-1: USB disconnect, device number 8
[  162.630009][ T4250] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  162.664208][ T4250] cp210x 8-1:0.0: device disconnected
[  162.960884][ T4241] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  163.330899][ T4241] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  163.331033][ T4247] hub 3-1:0.0: activate --> -90
[  163.456141][ T4241] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  163.753588][ T4241] usb 9-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  163.954119][ T4241] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.041336][ T4241] usb 9-1: config 0 descriptor??
[  164.121357][ T6084] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  164.391064][    T7] usb 3-1-port1: cannot disable (err = -71)
[  164.441035][ T4250] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  164.501300][ T4247] usb 3-1: USB disconnect, device number 13
[  164.605371][ T4241] kye 0003:0458:5019.0004: unknown main item tag 0x0
[  164.612850][ T4241] kye 0003:0458:5019.0004: unknown main item tag 0x0
[  164.619729][ T4241] kye 0003:0458:5019.0004: unknown main item tag 0x0
[  164.627291][ T4241] kye 0003:0458:5019.0004: unknown main item tag 0x0
[  164.634637][ T4241] kye 0003:0458:5019.0004: unknown main item tag 0x0
[  164.650158][ T4241] kye 0003:0458:5019.0004: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.8-1/input0
[  164.663401][ T4241] kye 0003:0458:5019.0004: tablet-enabling feature report not found
[  164.673000][ T4241] kye 0003:0458:5019.0004: tablet enabling failed
[  164.811076][ T4250] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  164.811346][ T4247] usb 9-1: USB disconnect, device number 2
[  164.828110][ T4250] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  164.879067][ T4250] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  164.919552][ T4250] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.981213][ T6112] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  165.585581][ T6156] loop8: detected capacity change from 0 to 128
[  165.629566][ T4198] Bluetooth: hci0: unexpected event for opcode 0x0c38
[  165.797276][ T6156] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  165.808600][ T6156] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  165.819467][ T6173] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851475146 (30811801168 ns) > initial count (9194465944 ns). Using initial count to start timer.
[  166.051583][ T6175] Disabled LAPIC found during irq injection
[  166.525929][    T7] usb 7-1: USB disconnect, device number 9
[  166.877370][ T6191] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  167.440979][    T7] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  167.587763][ T6226] loop7: detected capacity change from 0 to 128
[  167.691523][    T7] usb 7-1: Using ep0 maxpacket: 16
[  167.765520][ T6226] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  167.828621][ T6226] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  167.861236][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.880820][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.901327][    T7] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  168.110935][    T7] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  168.120285][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.133405][    T7] usb 7-1: config 0 descriptor??
[  168.581128][ T4241] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  168.951274][ T4241] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  168.963044][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  168.974525][ T4241] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.986396][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  169.009821][ T4241] usb 9-1: config 0 descriptor??
[  169.018563][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  169.038817][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  169.046598][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  169.054138][ T4241] cp210x 9-1:0.0: cp210x converter detected
[  169.069316][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  169.087274][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  169.109783][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  169.138037][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  169.157938][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  169.188518][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  169.208607][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  169.230504][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  169.245330][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  169.257371][    T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  169.289266][    T7] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0005/input/input7
[  169.339511][    T7] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  169.430590][    T7] usb 7-1: USB disconnect, device number 10
[  169.490857][ T4241] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  169.541397][ T4241] cp210x 9-1:0.0: GPIO initialisation failed: -524
[  169.559438][ T4241] usb 9-1: cp210x converter now attached to ttyUSB0
[  169.665448][ T6263] fido_id[6263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  169.715383][ T6271] overlayfs: failed to clone upperpath
[  169.744474][ T4241] usb 9-1: USB disconnect, device number 3
[  169.785214][ T4241] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  169.816036][ T4241] cp210x 9-1:0.0: device disconnected
[  169.957682][ T1108] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  170.021970][ T6280] block device autoloading is deprecated and will be removed.
[  171.001112][ T1108] usb 3-1: Using ep0 maxpacket: 32
[  171.122621][ T6304] tipc: Started in network mode
[  171.127874][ T6304] tipc: Node identity 4, cluster identity 4711
[  171.134346][ T6304] tipc: Node number set to 4
[  171.201265][ T1108] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  171.261334][ T1108] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  171.356950][ T1108] usb 3-1: config 0 interface 0 has no altsetting 0
[  171.561073][ T1108] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e
[  171.577646][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.612403][ T1108] usb 3-1: Product: syz
[  171.632039][ T1108] usb 3-1: Manufacturer: syz
[  171.660813][ T1108] usb 3-1: SerialNumber: syz
[  171.686965][ T1108] usb 3-1: config 0 descriptor??
[  173.541799][ T4241] usb 3-1: USB disconnect, device number 14
[  174.157872][ T5418] Set syz1 is full, maxelem 65536 reached
[  174.776959][ T6393] Invalid option length (447) for dns_resolver key
[  175.328721][  T156] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.766191][  T156] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.258684][  T156] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.437905][  T156] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.131606][ T4247] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  177.830832][ T4247] usb 7-1: Using ep0 maxpacket: 32
[  177.961147][ T4247] usb 7-1: config 0 interface 0 has no altsetting 0
[  177.975192][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'.
[  177.999514][ T6465] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  178.181063][ T4247] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  178.190163][ T4247] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.201077][ T6476] overlayfs: failed to clone lowerpath
[  178.221001][ T4247] usb 7-1: Product: syz
[  178.229929][ T4247] usb 7-1: Manufacturer: syz
[  178.234983][ T4247] usb 7-1: SerialNumber: syz
[  178.242126][ T4247] usb 7-1: config 0 descriptor??
[  178.254389][ T6478] overlayfs: failed to clone upperpath
[  178.797750][  T156] device hsr_slave_0 left promiscuous mode
[  178.810357][  T156] device hsr_slave_1 left promiscuous mode
[  179.058083][  T156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.154873][  T156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.305394][  T156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.425731][  T156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.472375][  T156] device bridge_slave_1 left promiscuous mode
[  179.504285][  T156] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.537985][  T156] device bridge_slave_0 left promiscuous mode
[  179.547778][  T156] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.613855][ T4318] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  179.632006][  T156] device veth1_macvtap left promiscuous mode
[  179.639274][  T156] device veth0_macvtap left promiscuous mode
[  179.658781][  T156] device veth1_vlan left promiscuous mode
[  179.669095][  T156] device veth0_vlan left promiscuous mode
[  179.870944][ T4318] usb 3-1: Using ep0 maxpacket: 8
[  180.037270][ T4247] usb 7-1: USB disconnect, device number 11
[  180.231243][ T4318] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  180.345801][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.546672][ T4318] usb 3-1: Product: syz
[  180.581403][ T4318] usb 3-1: Manufacturer: syz
[  180.605865][ T4318] usb 3-1: SerialNumber: syz
[  180.634543][ T4318] usb 3-1: config 0 descriptor??
[  180.684284][ T4318] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  180.985523][  T156] team0 (unregistering): Port device team_slave_1 removed
[  181.006932][  T156] team0 (unregistering): Port device team_slave_0 removed
[  181.029269][  T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.055425][  T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.158636][ T4247] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  181.182577][  T156] bond0 (unregistering): Released all slaves
[  181.418062][ T4247] usb 7-1: Using ep0 maxpacket: 16
[  181.561370][ T4247] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.572586][ T4247] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.743677][ T4247] usb 7-1: config 0 interface 0 has no altsetting 0
[  181.750860][ T4247] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  181.760969][ T4247] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.773380][ T4247] usb 7-1: config 0 descriptor??
[  181.877929][ T6559] Invalid option length (4855) for dns_resolver key
[  182.674926][ T4247] cougar 0003:060B:500A.0006: usage count exceeds max: fixing up report descriptor
[  182.711362][ T4247] cougar 0003:060B:500A.0006: unexpected long global item
[  182.718949][ T4247] cougar 0003:060B:500A.0006: parse failed
[  182.778352][ T6577] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  183.579357][ T4247] cougar: probe of 0003:060B:500A.0006 failed with error -22
[  183.596691][ T4247] usb 7-1: USB disconnect, device number 12
[  183.661071][ T4318] gspca_sonixj: reg_r err -71
[  183.731131][ T4318] sonixj: probe of 3-1:0.0 failed with error -71
[  183.763279][ T4318] usb 3-1: USB disconnect, device number 15
[  183.915314][ T6588] device syzkaller0 entered promiscuous mode
[  183.946749][ T4196] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  184.070873][ T4247] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  184.314436][ T4196] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.344062][ T4196] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.377266][ T4196] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00
[  184.407772][ T4196] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.453077][ T4196] usb 8-1: config 0 descriptor??
[  184.514379][ T4247] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.544369][ T4247] usb 7-1: config 0 interface 0 has no altsetting 0
[  184.721121][ T4318] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  184.741493][ T4247] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  184.761070][ T4247] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.780201][ T4247] usb 7-1: Product: syz
[  184.792289][ T4247] usb 7-1: Manufacturer: syz
[  184.797099][ T4247] usb 7-1: SerialNumber: syz
[  184.839263][ T4247] usb 7-1: config 0 descriptor??
[  184.916880][ T4247] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  184.934042][ T4196] cypress 0003:04B4:DE64.0007: unknown main item tag 0x0
[  184.950280][ T4247] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  184.959603][ T4196] cypress 0003:04B4:DE64.0007: unknown main item tag 0x0
[  184.959649][ T4196] cypress 0003:04B4:DE64.0007: unknown main item tag 0x0
[  184.959726][ T4196] cypress 0003:04B4:DE64.0007: unknown main item tag 0x0
[  184.987346][ T4196] cypress 0003:04B4:DE64.0007: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.7-1/input0
[  185.040919][ T4318] usb 3-1: Using ep0 maxpacket: 16
[  185.121910][ T4247] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  185.148115][ T4247] usb 7-1: media controller created
[  185.171113][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  185.180050][ T4196] usb 8-1: USB disconnect, device number 9
[  185.228646][ T6623] fido_id[6623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  185.241834][ T4247] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  186.315380][ T4318] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  186.331959][ T4247] DVB: Unable to find symbol tda10046_attach()
[  186.338959][ T4247] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  186.348200][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.356532][ T4247] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  186.367376][ T4318] usb 3-1: Product: syz
[  186.371763][ T4318] usb 3-1: Manufacturer: syz
[  186.376383][ T4318] usb 3-1: SerialNumber: syz
[  186.384691][ T4318] usb 3-1: config 0 descriptor??
[  186.394724][ T4300] Bluetooth: hci4: command 0x0406 tx timeout
[  186.401050][ T4247] dvb_usb_m920x: probe of 7-1:0.0 failed with error -71
[  186.416847][ T4247] usb 7-1: USB disconnect, device number 13
[  187.432556][ T4241] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  187.641324][ T6675] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  187.670932][ T4241] usb 9-1: Using ep0 maxpacket: 16
[  187.684268][ T6675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.790990][ T4241] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.818614][ T4241] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  187.848344][ T4241] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.875506][ T4318] usb 3-1: USB disconnect, device number 16
[  187.898179][ T4241] usb 9-1: config 0 descriptor??
[  188.284437][ T6700] Option '                                                                                                     n' to dns_resolver key: bad/missing value
[  189.119387][ T4241] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0
[  189.725951][ T4241] usb 9-1: USB disconnect, device number 4
[  189.864499][ T6719] netlink: 1 bytes leftover after parsing attributes in process `syz.4.569'.
[  191.006967][ T6744] loop7: detected capacity change from 0 to 1024
[  191.072671][ T6744] hfsplus: unable to parse mount options
[  191.530869][ T4300] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  191.850919][ T4300] usb 3-1: Using ep0 maxpacket: 32
[  191.987359][ T4300] usb 3-1: config 0 has an invalid interface number: 172 but max is 0
[  192.020751][ T4300] usb 3-1: config 0 has no interface number 0
[  192.090916][ T4300] usb 3-1: config 0 interface 172 altsetting 0 has an invalid endpoint with address 0x55, skipping
[  192.272111][ T6785] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.297233][ T6780] tipc: Resetting bearer <eth:syzkaller0>
[  192.397032][ T6780] tipc: Disabling bearer <eth:syzkaller0>
[  192.501151][ T4300] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  192.516022][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.524540][ T4300] usb 3-1: Product: syz
[  192.529069][ T4300] usb 3-1: Manufacturer: syz
[  192.533800][ T4300] usb 3-1: SerialNumber: syz
[  192.969065][ T6793] Invalid option length (3063) for dns_resolver key
[  193.069844][ T4300] usb 3-1: config 0 descriptor??
[  193.113468][ T4300] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  193.196058][ T6805] device syzkaller1 entered promiscuous mode
[  193.499487][ T6817] netlink: 'syz.7.596': attribute type 10 has an invalid length.
[  193.509980][ T6817] netlink: 55 bytes leftover after parsing attributes in process `syz.7.596'.
[  193.580842][ T4175] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  193.840810][ T4175] usb 7-1: Using ep0 maxpacket: 16
[  193.977867][ T4175] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  194.003103][ T4300] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[  194.027061][ T4175] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  194.084537][ T4175] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  194.089119][ T6830] loop8: detected capacity change from 0 to 4096
[  194.217357][ T4300] usb 3-1: USB disconnect, device number 17
[  194.228072][ T6830] EXT4-fs (loop8): mounted filesystem without journal. Opts: noquota,errors=remount-ro,. Quota mode: writeback.
[  194.283212][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.289637][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  194.331687][ T4175] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  194.340939][ T4175] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.349716][ T4175] usb 7-1: Product: syz
[  194.354125][ T4175] usb 7-1: Manufacturer: syz
[  194.358919][ T4175] usb 7-1: SerialNumber: syz
[  194.402721][ T6830] EXT4-fs error (device loop8): ext4_do_update_inode:5204: inode #15: comm syz.8.598: corrupted inode contents
[  194.420910][ T4241] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  194.493800][ T6830] EXT4-fs (loop8): Remounting filesystem read-only
[  194.516323][ T6830] EXT4-fs error (device loop8): ext4_dirty_inode:6040: inode #15: comm syz.8.598: mark_inode_dirty error
[  194.551301][ T6830] EXT4-fs (loop8): Remounting filesystem read-only
[  194.573058][ T6830] EXT4-fs error (device loop8): ext4_do_update_inode:5204: inode #15: comm syz.8.598: corrupted inode contents
[  194.621063][ T6830] EXT4-fs (loop8): Remounting filesystem read-only
[  194.627651][ T6830] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #15: comm syz.8.598: mark_inode_dirty error
[  194.673325][ T4241] usb 8-1: Using ep0 maxpacket: 16
[  194.681065][ T6830] EXT4-fs (loop8): Remounting filesystem read-only
[  194.687726][ T6830] EXT4-fs error (device loop8): ext4_do_update_inode:5204: inode #15: comm syz.8.598: corrupted inode contents
[  194.723971][ T6830] EXT4-fs (loop8): Remounting filesystem read-only
[  194.750952][ T6830] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #15: comm syz.8.598: mark_inode_dirty error
[  194.800864][ T4241] usb 8-1: config 0 has an invalid interface number: 174 but max is 0
[  194.815664][ T4241] usb 8-1: config 0 has no interface number 0
[  194.821047][ T6830] EXT4-fs (loop8): Remounting filesystem read-only
[  194.828467][ T6830] EXT4-fs error (device loop8): ext4_do_update_inode:5204: inode #15: comm syz.8.598: corrupted inode contents
[  194.883720][ T6830] EXT4-fs (loop8): Remounting filesystem read-only
[  194.890888][ T6830] EXT4-fs error (device loop8): ext4_truncate:4273: inode #15: comm syz.8.598: mark_inode_dirty error
[  194.992077][ T6830] EXT4-fs (loop8): Remounting filesystem read-only
[  194.998666][ T6830] EXT4-fs error (device loop8) in ext4_setattr:5608: Corrupt filesystem
[  195.009007][ T4241] usb 8-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=30.ae
[  195.024736][ T4241] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.061709][ T4175] usb 7-1: 0:2 : does not exist
[  195.078728][ T4241] usb 8-1: Product: syz
[  195.083379][ T6830] EXT4-fs (loop8): Remounting filesystem read-only
[  195.094888][ T4175] usb 7-1: USB disconnect, device number 14
[  195.110585][ T4241] usb 8-1: Manufacturer: syz
[  195.121907][ T6845] EXT4-fs error (device loop8): ext4_do_update_inode:5204: inode #15: comm syz.8.598: corrupted inode contents
[  195.126184][ T4241] usb 8-1: SerialNumber: syz
[  195.262842][ T6845] EXT4-fs (loop8): Remounting filesystem read-only
[  195.409154][ T4241] usb 8-1: config 0 descriptor??
[  195.652213][ T4241] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282
[  195.751423][ T4250] Bluetooth: hci2: command 0x0406 tx timeout
[  195.790812][ T4241] gspca_sn9c20x: Write register 1000 failed -71
[  195.797196][ T4241] gspca_sn9c20x: Device initialization failed
[  195.869792][ T4241] gspca_sn9c20x: probe of 8-1:0.174 failed with error -71
[  195.942153][ T4241] usb 8-1: USB disconnect, device number 10
[  195.970869][ T4300] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  196.006766][ T6830] EXT4-fs warning (device loop8): ext4_empty_dir:3156: inode #12: comm syz.8.598: directory missing '..'
[  196.206165][ T5781] EXT4-fs warning (device loop8): ext4_evict_inode:285: couldn't mark inode dirty (err -117)
[  196.370770][ T4291] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  196.430616][ T6888] loop8: detected capacity change from 0 to 4096
[  196.481183][ T6888] EXT4-fs (loop8): Test dummy encryption mode enabled
[  196.527425][ T6888] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  196.540863][ T4300] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  196.549951][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.578758][ T6888] System zones: 0-5
[  196.593862][ T6888] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  196.630266][ T4300] usb 3-1: Product: syz
[  196.655541][ T4300] usb 3-1: Manufacturer: syz
[  196.668695][ T4300] usb 3-1: SerialNumber: syz
[  196.690976][ T4175] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  196.708539][ T4300] usb 3-1: config 0 descriptor??
[  196.914668][ T4291] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  196.934828][ T4291] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.948876][ T4291] usb 7-1: Product: syz
[  196.964198][ T4291] usb 7-1: Manufacturer: syz
[  196.977532][ T4291] usb 7-1: SerialNumber: syz
[  196.994789][ T4175] usb 8-1: Using ep0 maxpacket: 16
[  197.011391][ T4300] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  197.131036][ T4175] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.160777][ T4175] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  197.190842][ T4175] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  197.215306][ T4175] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  197.236466][ T4175] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.361043][ T4175] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  197.390562][ T4175] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  197.419962][ T4175] usb 8-1: Manufacturer: syz
[  197.450785][ T4175] usb 8-1: config 0 descriptor??
[  197.991377][ T4300] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32
[  198.206969][ T4300] usb 3-1: USB disconnect, device number 18
[  198.370311][ T4291] (unnamed net_device) (uninitialized): Assigned a random MAC address: 66:dd:d7:18:62:27
[  198.385388][ T4291] rtl8150 7-1:1.0: eth17: rtl8150 is detected
[  198.400998][ T4175] rc_core: IR keymap rc-hauppauge not found
[  198.407647][ T4175] Registered IR keymap rc-empty
[  198.445549][ T4175] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  198.501037][ T4175] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  198.542305][ T4175] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  198.610232][ T4175] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input9
[  198.689016][ T4175] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  198.709580][ T6947] comedi comedi3: board detection failed
[  198.743121][ T4175] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  198.927704][ T4175] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  199.011728][ T4175] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  199.036943][ T6954] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  199.285504][ T6954] loop2: detected capacity change from 0 to 2048
[  199.724779][ T4250] usb 7-1: USB disconnect, device number 15
[  199.794944][ T6957] loop8: detected capacity change from 0 to 1024
[  199.892435][ T4175] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  199.903062][ T4176]  loop2: p1 < > p4
[  199.908112][ T4176] loop2: p4 size 8388608 extends beyond EOD, truncated
[  199.930819][ T4175] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  199.948177][ T6957] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  199.962352][ T6957] EXT4-fs (loop8): orphan cleanup on readonly fs
[  199.972176][ T6954]  loop2: p1 < > p4
[  199.978424][ T6954] loop2: p4 size 8388608 extends beyond EOD, truncated
[  200.050586][ T6963] syz.7.624 sent an empty control message without MSG_MORE.
[  200.072478][ T4175] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  200.078604][ T6957] EXT4-fs error (device loop8): ext4_free_blocks:6218: comm syz.8.623: Freeing blocks not in datazone - block = 0, count = 4096
[  200.120939][ T4175] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  200.132302][ T6957] EXT4-fs (loop8): 1 orphan inode deleted
[  200.138167][ T6957] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  200.171808][ T4175] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  200.201715][ T4175] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  200.402750][ T4175] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  200.430513][ T4790] udevd[4790]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  200.496652][ T6976] Invalid option length (1359) for dns_resolver key
[  200.830030][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  201.192230][ T4175] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  201.205622][ T4175] usb 8-1: USB disconnect, device number 11
[  201.213456][ T4790] udevd[4790]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  201.215308][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  202.091171][ T4175] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  202.098948][ T4318] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  202.180989][ T4300] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  202.364829][ T4175] usb 8-1: Using ep0 maxpacket: 16
[  202.443873][    C1] Unknown status report in ack skb
[  202.460907][ T4300] usb 9-1: Using ep0 maxpacket: 32
[  202.491190][ T4175] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  202.510422][ T4175] usb 8-1: config 0 has no interface number 0
[  202.531204][ T4318] usb 7-1: not running at top speed; connect to a high speed hub
[  202.588106][ T7029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.640'.
[  202.599186][ T4300] usb 9-1: config 0 has an invalid interface number: 35 but max is 0
[  202.614278][ T4300] usb 9-1: config 0 has no interface number 0
[  202.630105][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'.
[  202.650791][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'.
[  202.891109][ T4175] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  203.684632][ T4175] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.693455][ T4175] usb 8-1: Product: syz
[  203.701279][ T4175] usb 8-1: Manufacturer: syz
[  203.705910][ T4175] usb 8-1: SerialNumber: syz
[  203.713742][ T4175] usb 8-1: config 0 descriptor??
[  203.741127][ T4300] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  203.750517][ T4318] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  203.767800][ T4318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.778467][ T4175] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  203.785667][ T4300] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.802378][ T4300] usb 9-1: Product: syz
[  203.810185][ T4318] usb 7-1: Product: syz
[  203.820145][ T4300] usb 9-1: Manufacturer: syz
[  203.825219][ T4318] usb 7-1: Manufacturer: syz
[  203.829837][ T4318] usb 7-1: SerialNumber: syz
[  203.840745][ T4300] usb 9-1: SerialNumber: syz
[  203.853808][ T4300] usb 9-1: config 0 descriptor??
[  203.903096][ T4300] radio-si470x 9-1:0.35: could not find interrupt in endpoint
[  203.920867][ T4300] radio-si470x: probe of 9-1:0.35 failed with error -5
[  204.111822][ T4300] radio-raremono 9-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  204.241160][ T4175] gspca_spca1528: reg_w err -71
[  204.261062][ T4318] cdc_ncm 7-1:1.0: bind() failure
[  204.269899][ T4318] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  204.277279][ T4175] spca1528: probe of 8-1:0.1 failed with error -71
[  204.284441][ T4247] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  204.302445][ T4175] usb 8-1: USB disconnect, device number 12
[  204.313472][ T4318] cdc_ncm 7-1:1.1: bind() failure
[  204.340917][ T4300] radio-raremono 9-1:0.35: raremono_cmd_main failed (-71)
[  204.357272][ T4318] usb 7-1: USB disconnect, device number 16
[  204.375452][ T4300] radio-raremono 9-1:0.35: V4L2 device registered as radio48
[  204.417307][ T4300] usb 9-1: USB disconnect, device number 5
[  204.444613][ T4300] radio-raremono 9-1:0.35: Thanko's Raremono disconnected
[  204.687469][ T4247] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  204.726878][ T4247] usb 3-1: config 0 interface 0 has no altsetting 0
[  204.971668][ T4247] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  204.990810][ T4247] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  205.007030][ T4247] usb 3-1: Product: syz
[  205.033431][ T4247] usb 3-1: Manufacturer: syz
[  205.038645][ T4247] usb 3-1: SerialNumber: syz
[  205.052690][ T4247] usb 3-1: config 0 descriptor??
[  205.114105][ T4247] usb 3-1: selecting invalid altsetting 0
[  205.184352][ T7093] device syzkaller0 entered promiscuous mode
[  206.106154][ T7055] usb 3-1: selecting invalid altsetting 0
[  206.132531][ T7055] usb 3-1: 0:0: usb_set_interface failed (-22)
[  206.138759][ T7055] usb 3-1: selecting invalid altsetting 0
[  206.149901][ T7055] usb 3-1: 0:0: usb_set_interface failed (-22)
[  206.158855][ T7055] usb 3-1: selecting invalid altsetting 0
[  206.166503][ T7055] usb 3-1: 0:0: usb_set_interface failed (-22)
[  206.180559][ T4247] usb 3-1: USB disconnect, device number 19
[  206.491171][ T7107] 9pnet: p9_errstr2errno: server reported unknown error verlay.metacopy
[  206.624812][ T7116] print_req_error: 30 callbacks suppressed
[  206.625227][ T7116] blk_update_request: I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  206.643501][ T7116] hfsplus: unable to find HFS+ superblock
[  207.650122][ T7130] mmap: syz.8.661 (7130) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  208.074841][ T7155] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  209.642020][ T4198] ------------[ cut here ]------------
[  209.648150][ T4198] WARNING: CPU: 1 PID: 4198 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450
[  209.658176][ T4198] Modules linked in:
[  209.662282][ T4198] CPU: 1 PID: 4198 Comm: kworker/u5:5 Not tainted syzkaller #0
[  209.670121][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  209.680955][ T4198] Workqueue: hci2 hci_conn_timeout
[  209.686146][ T4198] RIP: 0010:hci_conn_timeout+0x24f/0x450
[  209.692005][ T4198] Code: 69 8d e8 04 b0 f0 f8 48 8b 35 35 0d 9e 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 85 81 f8 e8 b1 49 ac f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd
[  209.713159][ T4198] RSP: 0018:ffffc90002f8fc08 EFLAGS: 00010293
[  209.719440][ T4198] RAX: ffffffff88cb80ff RBX: ffff88807bae8138 RCX: ffff888078ce9dc0
[  209.727831][ T4198] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  209.736036][ T4198] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100f75d003
[  209.745731][ T4198] R10: ffffed100f75d003 R11: 1ffff1100f75d002 R12: dffffc0000000000
[  209.753933][ T4198] R13: dffffc0000000000 R14: ffff88807bae8000 R15: ffff88807bae8010
[  209.762023][ T4198] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  209.785476][ T4198] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  209.792429][ T4198] CR2: 00007f8e1126e420 CR3: 000000002a6cb000 CR4: 00000000003506e0
[  209.800632][ T4198] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  209.809332][ T4198] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  209.818005][ T4198] Call Trace:
[  209.821363][ T4198]  <TASK>
[  209.824403][ T4198]  process_one_work+0x863/0x1000
[  209.829564][ T4198]  ? worker_detach_from_pool+0x240/0x240
[  209.835271][ T4198]  ? lockdep_hardirqs_off+0x70/0x100
[  209.842534][ T4198]  ? _raw_spin_lock_irq+0xab/0xe0
[  209.847816][ T4198]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  209.853466][ T4198]  ? wq_worker_running+0x97/0x170
[  209.858518][ T4198]  worker_thread+0xaa8/0x12a0
[  209.863316][ T4198]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  209.869319][ T4198]  ? lockdep_hardirqs_on+0x94/0x140
[  209.874603][ T4198]  ? lockdep_hardirqs_on+0x94/0x140
[  209.879821][ T4198]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  209.886950][ T4198]  kthread+0x436/0x520
[  209.891266][ T4198]  ? rcu_lock_release+0x20/0x20
[  209.896222][ T4198]  ? kthread_blkcg+0xd0/0xd0
[  209.901041][ T4198]  ret_from_fork+0x1f/0x30
[  209.905567][ T4198]  </TASK>
[  209.908690][ T4198] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  209.915994][ T4198] CPU: 1 PID: 4198 Comm: kworker/u5:5 Not tainted syzkaller #0
[  209.923647][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  209.933854][ T4198] Workqueue: hci2 hci_conn_timeout
[  209.938992][ T4198] Call Trace:
[  209.942287][ T4198]  <TASK>
[  209.945317][ T4198]  dump_stack_lvl+0x168/0x230
[  209.950021][ T4198]  ? show_regs_print_info+0x20/0x20
[  209.955328][ T4198]  ? load_image+0x3b0/0x3b0
[  209.959871][ T4198]  panic+0x2c9/0x7f0
[  209.963796][ T4198]  ? bpf_jit_dump+0xd0/0xd0
[  209.968419][ T4198]  ? ret_from_fork+0x1f/0x30
[  209.973078][ T4198]  ? hci_conn_timeout+0x24f/0x450
[  209.978122][ T4198]  __warn+0x248/0x2b0
[  209.982126][ T4198]  ? hci_conn_timeout+0x24f/0x450
[  209.987186][ T4198]  report_bug+0x1b7/0x2e0
[  209.991538][ T4198]  handle_bug+0x3a/0x70
[  209.995799][ T4198]  exc_invalid_op+0x16/0x40
[  210.000518][ T4198]  asm_exc_invalid_op+0x16/0x20
[  210.005382][ T4198] RIP: 0010:hci_conn_timeout+0x24f/0x450
[  210.011043][ T4198] Code: 69 8d e8 04 b0 f0 f8 48 8b 35 35 0d 9e 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 85 81 f8 e8 b1 49 ac f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd
[  210.030680][ T4198] RSP: 0018:ffffc90002f8fc08 EFLAGS: 00010293
[  210.036883][ T4198] RAX: ffffffff88cb80ff RBX: ffff88807bae8138 RCX: ffff888078ce9dc0
[  210.044959][ T4198] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  210.053130][ T4198] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100f75d003
[  210.061121][ T4198] R10: ffffed100f75d003 R11: 1ffff1100f75d002 R12: dffffc0000000000
[  210.069199][ T4198] R13: dffffc0000000000 R14: ffff88807bae8000 R15: ffff88807bae8010
[  210.077727][ T4198]  ? hci_conn_timeout+0x24f/0x450
[  210.082822][ T4198]  ? hci_conn_timeout+0x24f/0x450
[  210.087874][ T4198]  process_one_work+0x863/0x1000
[  210.092871][ T4198]  ? worker_detach_from_pool+0x240/0x240
[  210.098610][ T4198]  ? lockdep_hardirqs_off+0x70/0x100
[  210.103917][ T4198]  ? _raw_spin_lock_irq+0xab/0xe0
[  210.109140][ T4198]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  210.114534][ T4198]  ? wq_worker_running+0x97/0x170
[  210.119577][ T4198]  worker_thread+0xaa8/0x12a0
[  210.124294][ T4198]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  210.130207][ T4198]  ? lockdep_hardirqs_on+0x94/0x140
[  210.135428][ T4198]  ? lockdep_hardirqs_on+0x94/0x140
[  210.140911][ T4198]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  210.146862][ T4198]  kthread+0x436/0x520
[  210.150961][ T4198]  ? rcu_lock_release+0x20/0x20
[  210.155832][ T4198]  ? kthread_blkcg+0xd0/0xd0
[  210.160448][ T4198]  ret_from_fork+0x1f/0x30
[  210.164906][ T4198]  </TASK>
[  210.168350][ T4198] Kernel Offset: disabled
[  210.172886][ T4198] Rebooting in 86400 seconds..