last executing test programs:

8.018880834s ago: executing program 2 (id=636):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x300}}, [@tmpl={0x44, 0x5, [{{@in=@multicast2, 0x0, 0x33}, 0x2, @in6=@dev}]}]}, 0xfc}}, 0x0)

7.907977287s ago: executing program 0 (id=637):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0xf0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x0)

7.283302062s ago: executing program 2 (id=639):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x84, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x84}, 0x1, 0x600000006000000}, 0x0)

6.919658057s ago: executing program 0 (id=641):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1008800, &(0x7f0000000100)=ANY=[], 0x1, 0x1f1, &(0x7f0000000600)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
ftruncate(r1, 0xc17a)
sync()
symlinkat(&(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000280)=<r3=>0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
stat(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000800)=@nat={'nat\x00', 0x19, 0x3, 0xc6a, [0x20020100, 0x0, 0x0, 0x2002029e, 0x200202ce], 0x0, &(0x7f0000000140), &(0x7f0000020100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x62, 0x5, 'ipvlan1\x00', 'geneve1\x00', 'team_slave_1\x00', 'geneve1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, [0x0, 0xff], @broadcast, [], 0xfe, 0x136, 0x16e, [@owner={{'owner\x00', 0x0, 0x18}, {{r2, r3, r4, r5, 0x3, 0x7}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00'}}}], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@random="e4bf08a5e913", 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x5, 0x8, 0xa01, 'veth0_virt_wifi\x00', 'dvmrp1\x00', 'veth1_to_bond\x00', 'wg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @multicast, [0x0, 0x101, 0xff, 0x0, 0x0, 0xff], 0x886, 0x886, 0x8be, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x0, 0x7ff, 0x0, 0x6}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x6, 0x3}, {0x84ae, 0x2}, {0x8, 0x3}, {0x2, 0x2}, {0xc000, 0x2}, {0xfffffffe, 0x2}, {0x1, 0x1}, {0x10, 0x3}, {0x8ed3, 0x2}, {0x1000000, 0x1}, {0x747, 0x2}], [{0x6, 0x10000}, {0xb, 0x7}, {0xff, 0x8}, {0x9f82, 0x8}, {0x6, 0x3}, {0x1, 0x3}, {0x450}, {0x7, 0x8}, {0xf, 0x80}, {0x0, 0x401}, {0x5, 0x2}], 0xa, 0x3}, {[{0xffffffff}, {0x7}, {0x396, 0x1}, {0x4da, 0x1}, {0x5, 0x3}, {0x6, 0x2}, {0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x2}, {0x0, 0x2}], [{0x4, 0x2}, {0x9}, {0x7}, {0x8000, 0x80}, {0x7fffffff, 0x1}, {0xff, 0x4}, {0x401}, {0xffff, 0xe}, {0x7fff, 0x4}, {0xe0d40fc, 0x9}, {0x200, 0x7}], 0x3, 0x1}, {[{0x1000, 0x3}, {0x7d13, 0x2}, {0x1, 0x1}, {0x0, 0x3}, {0x8001, 0x2}, {0x8}, {0x37, 0x1}, {0xffffff59, 0x1}, {0x3, 0x1}, {0xffffffff}, {0x7}], [{0x7, 0x5}, {0xffffffff, 0xffffffff}, {0xd6, 0xd}, {0x6, 0x2}, {0xfffffff8, 0x1ff}, {0x0, 0x7}, {0x7fff, 0x8}, {0x3, 0x3ff}, {0x46}, {0x4, 0x143d}, {0x9, 0x7fff}], 0x8, 0x5}, {[{0x4, 0x2}, {0xa, 0x3}, {0x6, 0x2}, {0x4, 0x1}, {0x0, 0x3}, {0xfffffffc}, {0xf, 0x1}, {0x5}, {0x1, 0x2}, {0x0, 0x2}, {0xd4f}], [{0x4, 0x9}, {0xa, 0x5}, {0x1ea2, 0x1}, {0x9, 0x8000}, {0x0, 0x8}, {0x8001, 0xfffffffa}, {0xffffffff, 0x2}, {0x100400, 0x7}, {0x10001, 0x4b8}, {0x7fffffff, 0x7fff}, {0x4, 0x7}], 0xb, 0x4}, {[{0xb, 0x2}, {0x0, 0x2}, {0x8, 0x3}, {0x80000000}, {0x8c8, 0x3}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0x2}, {0x9, 0x1}, {0x2, 0x1}, {0x40, 0x1}], [{0x6, 0x5c4}, {0x2, 0x2}, {0x3, 0xff}, {0x6, 0x4}, {0x6, 0x5}, {0xffffffd4, 0x7}, {0xfff, 0xd8}, {0x4e12, 0x10}, {0x401, 0x5b}, {0x3, 0x800}, {0x200, 0x2}], 0x4, 0x8}, {[{0x5}, {0x182, 0x1}, {0xff}, {0x6}, {0xfedb}, {0x3}, {0x4}, {0x9}, {0x8001, 0x1}, {0x81, 0x3}, {0x4, 0x1}], [{0xb, 0x100000}, {0xd51, 0x10}, {0x8000, 0xc}, {0x100, 0x85}, {0x2, 0x6}, {0x51a, 0xfffffc00}, {0x3cf, 0x6e9}, {0x88, 0x6}, {0x2, 0x43}, {0x80000000, 0xfff}, {0xb, 0x746e}], 0x7, 0x3}, {[{0x1, 0x2}, {0x30, 0x1}, {0x7f, 0x2}, {0xffffffc0, 0x1}, {0x2, 0x2}, {0xbd, 0x1}, {0x200, 0x2}, {0xf74, 0x2}, {0x100}, {0x3, 0x3}, {0x6, 0x3}], [{0x8, 0x7fffffff}, {0x8001, 0x5}, {0x2, 0x6}, {0x9, 0x5}, {0xfffffffc, 0xff}, {0xffffffff, 0x9}, {0x2}, {0x4, 0x7}, {0x7, 0x71ef3c91}, {0x10000}, {0x4, 0x3ff}], 0x7, 0x1}, {[{0x800, 0x3}, {0x4, 0x1}, {0x3}, {0x1, 0x2}, {0xbdd8}, {0x7, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x9, 0x2}, {0x0, 0x1}, {0xef5, 0x3}], [{0x2, 0x8000}, {0x67d7, 0x4df}, {0x1, 0x1}, {0x4, 0xbc62}, {0x0, 0x1}, {0x800, 0x400}, {0x800, 0x3}, {0x2a, 0x9}, {0x80000001, 0x3}, {0x81, 0x5}, {0x1, 0x7}], 0x7, 0x2}, {[{0x0, 0x2}, {0xf, 0x3}, {0x4, 0x1}, {0x80000001}, {0xa, 0x1}, {0x5, 0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x6}, {0xffffffff, 0x2}, {0x6, 0x2}], [{0x1, 0x2}, {0x2, 0x7}, {0x8, 0xfffff001}, {0x3a}, {0x15ae, 0x2}, {0x6, 0x5}, {0x6, 0x5}, {0xba5, 0x8}, {0x1, 0x2}, {0xde, 0x6}, {0x400, 0xa}], 0x4, 0x1}, {[{0x10, 0x2}, {0xfff}, {0x5}, {0x1}, {0x850}, {0x80000000, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x73a, 0x1}, {0x903, 0x1}, {0x9, 0x2}], [{0x80, 0x5}, {0x101, 0x8}, {0x9}, {0x485, 0x4}, {0x549a, 0x7}, {0x3, 0x5c5a}, {0x10001, 0x39d}, {0x6a, 0x38d7}, {0x5, 0x80000000}, {0xdd, 0xf59}, {0x8001, 0xffff}], 0x9, 0xa}, {[{0x7fffffff, 0x2}, {0xff}, {0x200, 0x1}, {0x9, 0x1}, {0x0, 0x2}, {0x3}, {0xea4, 0x2}, {0x6, 0x3}, {0x3, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x2, 0x7}, {0x2, 0x4}, {0x3ff}, {0x10001, 0x1}, {0x200, 0x4}, {0x7ff, 0x2}, {0x5, 0x9}, {0x2, 0x3ff}, {0x40, 0x4}, {0xb, 0x7fffffff}, {0xfffffff8, 0x7}], 0xb, 0x7}]}}}], [], @snat={'snat\x00', 0x10, {{@random="63ca7a67becc", 0xfffffffffffffffd}}}}, {0x11, 0x2, 0x806, 'macvtap0\x00', 'geneve1\x00', 'veth1_virt_wifi\x00', 'geneve0\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff], 0xde, 0x14e, 0x17e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'team_slave_0\x00', 'pimreg0\x00', 0x20, 0x3, 0x4, 0xff, 0xf, 0x6, {0xfffffffffffffffe}, {0x3cc}}}}], [@snat={'snat\x00', 0x10, {{@multicast, 0xffffffffffffffec}}}, @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}]}, 0xce2)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3200451, &(0x7f0000000040)={[{@nodiscard}, {@nodiscard}, {@errors_continue}, {}, {@nodiscard}, {@order_strict}, {@nodiscard}, {@order_relaxed}, {@nodiscard}, {@snapshot={'cp', 0x3d, 0x1}}], [], 0x2c}, 0x3, 0xee2, &(0x7f0000001e80)="$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")

6.723427023s ago: executing program 2 (id=642):
r0 = socket(0x15, 0x5, 0x0)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20)
getsockname$l2tp6(r0, 0x0, &(0x7f0000000100))
r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
pidfd_send_signal(r3, 0x0, 0x0, 0x4)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0)

6.357274417s ago: executing program 3 (id=644):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e3100000c0000000000000000140006"], 0x60}}, 0x0)

6.131675312s ago: executing program 1 (id=645):
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x68, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0)
fchmodat(0xffffffffffffff9c, 0x0, 0x0)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
r6 = dup3(r2, r4, 0x80000)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6, 0x4, 0x4, 0x654c, 0x8}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x9, 0x5, 0x400}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[r6], &(0x7f0000000300)=[{0x1, 0x2, 0x4, 0xb}, {0x1, 0x4, 0xa, 0x5}], 0x10, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='fsi_master_acf_send_request\x00', r7, 0x0, 0x1fade000000}, 0x18)
syz_usb_control_io(r5, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00\x00\a\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r8 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141)
syz_usb_control_io$hid(r5, 0x0, 0x0)
pwritev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="56e5", 0x2}], 0x1, 0xf739, 0x0)

6.021933337s ago: executing program 3 (id=646):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000084000000050000000000000000000000140000000000000084000000"], 0x38}, 0x0)

5.688049779s ago: executing program 2 (id=647):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
io_uring_enter(0xffffffffffffffff, 0x46f6, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000d40), 0x9, 0x61d, &(0x7f0000000700)="$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")
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)

5.154769973s ago: executing program 3 (id=648):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
close(r3)
mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}})
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f5001c0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000000000400"], 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@noblock_validity}, {@norecovery}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@discard}, {@nouid32}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
syz_emit_ethernet(0x3a, &(0x7f0000002100)=ANY=[@ANYBLOB="0180c20047f800000000000008004500002c000000000011907800000018e000000100004e20001890780400"/58], 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@discard}, {@minixdf}, {@minixdf}, {@nobh}]}, 0x1, 0x783, &(0x7f00000011c0)="$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")

4.693273409s ago: executing program 2 (id=649):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000140)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f00000005c0)=ANY=[])
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
poll(&(0x7f0000000100)=[{r3, 0x8002}], 0x1, 0xa)
connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FIGETBSZ(r4, 0x2, 0x0)
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2018002, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESHEX=r4, @ANYRES8=r0, @ANYBLOB="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"], 0x2, 0x9b, &(0x7f0000000740)="$eJzs1zGKwkAYBeCXkGabXGCLvUHusEcRS+2sFMETiTfxCN7AwtZmRBIUg6UghO+DGd6bmWLa/3jd/6ZNyi4pI6v1ZjFb9nuYpLp55r82qZOc//teHYaLy3Z+GtZXPgkAAHxE/dO99CZd9+ZZ9Uil3EfF0SEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAdN0CAAD//9d2Jp8=")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80060, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]})
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r5)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, r6, 0x30d, 0x70bd28, 0x9, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x66ac12a1298ef42f}, 0x4000040)

3.975692225s ago: executing program 0 (id=650):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4}}, './file3/file0\x00'})
fadvise64(r0, 0x3084, 0x2, 0x4)
mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file3\x00', 0xc1c0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f00000002c0)=""/130, 0x82)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r2}, 0x10)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44010000100001000000000000000000ac1414aa000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="00000000480003"], 0x144}}, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00')
r6 = socket(0xf, 0x3, 0x2)
write(r6, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
writev(r5, &(0x7f0000000000)=[{0x0, 0x2}, {&(0x7f0000000240)="80", 0x1}], 0x2)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000001000900000000060015000400000014001680100008800c00038005000100ff000000e7230ba2aae945aac5e650369c7da3390886cbe28669983dd8a026ab45a5ce9f775260292c9218d1f8f82611d69396109f6a234d545c75d6c842b83ec9849cc0c93f28e10a406023bda3506c5f8aa54e2c6ef49e4f3786c16e847477766f010aa4"], 0x38}}, 0x0)
sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r11=>0x0})
r12 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r11, @local}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r11, @ANYBLOB="00080003003a4e3c"], 0x20}}, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
landlock_restrict_self(r1, 0x0)

3.328618003s ago: executing program 4 (id=651):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000f80)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) (fail_nth: 6)

3.113361022s ago: executing program 1 (id=652):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = syz_pidfd_open(r1, 0x0)
pidfd_send_signal(r2, 0x9, 0x0, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r6 = socket$inet(0x2, 0x1, 0x0)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000280)={0x5, &(0x7f00000001c0)=[{0x800, 0x7, 0xfe, 0x4434db8e}, {0x8, 0x1, 0x2, 0x9}, {0x7, 0x8, 0xe, 0xc1}, {0x2f3a, 0x8, 0x0, 0xfffffffe}, {0xbc6, 0x9, 0x4, 0x61}]}) (async, rerun: 32)
getsockopt(r6, 0x1, 0xc, 0xffffffffffffffff, &(0x7f0000000240)) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24009800) (async)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r9, 0x0, 0xffffffffffffffd2, 0x8, &(0x7f0000000380), 0x10) (async)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000040)) (async)
r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async, rerun: 64)
r12 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r12, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0xfffffffe, 0x1})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r12, 0xc06c4124, &(0x7f00000003c0))
connect$llc(r9, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 64)

2.438732413s ago: executing program 3 (id=653):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
lseek(r0, 0x0, 0x3)

2.383667311s ago: executing program 4 (id=654):
r0 = gettid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r0, 0x20, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x1, &(0x7f0000000080))
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x4e24, 0x5, @local, 0x43}, 0x1c, 0x0, 0x0, &(0x7f0000000a40)}, 0x20000004)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x2000000}, {0x6}]}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x400, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}]})
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a", @ANYRES64, @ANYRES16=0x0, @ANYBLOB="24bdc1ebbca32d9fcccca90972118ca90b5c9afdfe794eccda8fc77a16e986811709746e8694abbe30dad976418b87b70cf57c6e1c1800ef918e842c0d54706e61a6ee11eddda0af3e5dde88555587e9734c0eaab4622e1636c6462c8cc0d3cb211d8d508d98c5ed93b1c84787b3c92e006d9957dc6d733f97c3289d17a4ca0babe955d8928f08de60f3e8bc7dbf8dc6ca64d386bce35a6ed0d86253611d286d9dba8faebc8ad8ec0fcc65e7f6000000"], 0x70}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x122}}, 0x0)

2.096924586s ago: executing program 1 (id=655):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
lseek(r0, 0x0, 0x3)

2.072147273s ago: executing program 0 (id=656):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0x118)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x20, 0x3c, 0x107, 0x0, 0x0, {0x3}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@generic="4ce72751"]}]}, 0x20}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @random="89ab9b4c72ca", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7927f3", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x8}], {{0x0, 0x400, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4004af07, &(0x7f0000000000))
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$eJzs3Am4TmX3MPC17vveHDI8Sea97rV5kuEmSUJJMiRJEpI5IUmSJEkcMiUhCRlPkjlkTicd8zxkTjp5JUkSkinc33VUn7f3fft6p//n/b9n/a5rX+deZ++1nrXPup7z7L2v65xvuwyt1rB65XrMDP8M/esCf/6SCAAJADAAALIDQAAAZXKUyZG2P5PGxH/qRcT/kPrTr3YH4mqS+advMv/0Teafvsn80zeZf/om80/fZP7pm8xfiHRtZt5rZUu/mzz//19O/SvJ8vmfLuDv7ZD5/7fR/9DRMv/0Teafvsn80zeZf/pz5RYsuKp9iKtP3v/pm8xfiHTt3/5Mef3Zq/1MW7Z/YBNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIf4/OOuvMADw6/pq9yWEEEIIIYQQQoh/H//+1e5ACCGEEEIIIYQQ//MQFGgwEEAGyAgJkAkywzWQBbJCNsgOMbgWcsB1kBOuh1yQG/JAXsgH+aEAhEBggSGCglAI4nADFIYboQgUhWJQHByUgJJwE5SCm6E03AJl4FYoC7dBOSh/+TXT3AmV4C6oDHdDFagK1aA63AM14F6oCfdBLbgfasMDUAcehLrwENSD+tAAHoaG8Ag0gsbQBJpCM2gOLf4gPyn738p/EbrDS9ADekIi9ILe8DL0gb7QD/rDAHgFBsKrMAheg8EwBIbC6zAM3oDh8CaMgJEwCt6C0TAGxsI4GA8TIAnehonwDkyCdx/JClNgKkyD6TADZsJ7MAtmwxx4H+bCPJgPSZkWwiJYDB/AEvgQkuEjWAofQwosg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK3wC22A77ICdsAt2wx74FPbCZ7APPodU/OIfzD/z23zoioCAChUaNJgBM2ACJmBmzIxZMAtmw2wYwxjmwByYE3NiLsyFeTAPJmI+LIAFkJCQkbEgFsQ4xrEwFsYiWASLYTF06LAklsRSeNF7XxrLYBksi2WxHJbH8ng73o4VsSJWwkpYGStjFayC1bAa3oP34L1YE2tiLayFtbE21sE6WBfrYj2shw2wATbEhtgIG2ETbILNsBm2wBbYEltiK2yFbbANtsW22A7bYXtsjx2wA3bEjtgJO2Fn7IxdsAt2xRfwBXwRX8SX8CXsiVVUL+yNvbEP9sF+2B/74ys4EF/FV/E1HIxDcCi+jq/jGzgcT+MIHImjcBRWVGNwLI5DVhMwCZMwI0zESTgJJ+MUnILTcDrOwJk4E2fhbJyN7+NcnIfzcAEuwEW4GBfjEvwQkzEZl+IZTMFluBxX4EpchStxDa7FNbgeN+B63ISbcAtuwU/wE9yO23En7sTduBs/xU/xM/wMB2MqpuJ+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8gSfxBJ7CU3gaz+BZADiP5/ECXsBLeCntza/SGGVUBpVBJagElVllVllUFpVNZVMxFVM5VA6VU+VUuVQulUflUflUPlVAFVCkSLGKVEFVUMVVXBVWhVURVUQVU8WUU06VVCVVKVVKlValVRl1qyqrblPlVHnV2t2ublcVVRtXSd2lKqvKqoqqqqqp6qq6qqFqqJqqpqqlaqnaqraqox5UdVUv7If1VdpkGqoh2EgNxSaqqWqmmqs38FHVUg3HVqq1aqMeVyNxBLZTLV179ZTqoMZiR/WMGofPqs5qAnZRz6uu6gXVTb2ouqtWrofqqSZjL9VbTcM+qq/qp/qrWVhVpU2smnpNvZhxiBqqXleL8A01XL2pRqiRapR6S41WY9RYNU6NVxNUknpbTVTvqEnqXTVZTVFT1TQ1Xc1QM9V7apaareao99VcNU+DWqAWqkVqsfpALVEfqmT1kVqqPlYpaplarlaolWqVWq3WqLVqnVqvNqiNapParLaoreoTtU1tVzvUTrVL7VZ71Kdqr/pM7VOfq1T1hdqv/qQOqC/VQfWVOqS+VofVN+qI+lYdVd+pY+p7dVydUCfVD+qU+lGdVmfUWXVOnVc/qQvqorqkvAKNWmmtjQ50Bp1RJ+hMOrO+RmfRWXU2nV3H9LU6h75O59TX61w6t85j8up8Or8uoENN2mrWkS6oC+m4vkEX1jfqIrqoLqaLa6dL6JL6Jl1K36xL61t0GX2rLqtv0+V0eV3Bg75DV9R36kr6Ll1Z362r6Kq6mq6u79E19L26pr5P19L369r6AV1HP6jr6od0PV1fN9AP64b6Ed1IN9ZNdFPdTDfXLfSjuqV+TLfSrXUb/bhuq5/Q7fSTur1+SnfQT+uO+hndST+rO+vndBf9vO6qX9Dd9EV9SXvdQ/fUibqX7q1f1n10X91P99cD9Ct6oH5VD9Kv6cF6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6tx+ixepweryfoJP22nqjf0ZP0u3qynqKn6ml6up6h+/1Sac7fkf/O38gfdPnVt+it+hO9TW/XO/ROvUvv1nv0Hr1X79X79D6dqlP1fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qp/TP+hT+kd9Wp/RZ/Q5fV6f1xd++RmAQaOMNsYEJoPJaBJMJpPZXGOymKwmm8luYuZak8NcZ3Ka600uk9vkMXlNPpPfFDChIWMNm8gUNIVM3NxgCpsbTRFT1BQzxY0zJUxJc9O/nP9H/bUwLUxL09K0Mq1MG9PGtDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTRfTxXQ1XU030810N91ND9PDJJpE09u8bPqYvqaf6W8GmFfMQDPQDDKDzGAz2Aw1Q80wM8wMN8PNCDPCjDKjzGgz2ow1Y814M94k+exmoploJplJZrKZbKYOyG6mm+lmpplpZplZZo6ZY+aauWa+mW8WmoVmsVlslpglJtkkm6VmqUkxy8wys8KsMKvMKrPGrDHrzDqzwWwwm8wmk2K2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX0m1aSa/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOW/OmwvmgrlkLqVd9gUqUIEJTJAhyBAkBAlB5iBzkCXIEmQLsgWxIBbkCHIEOYPrg1xB7iBPkDfIF+QPCgRhQIENOIiCgkGhIB7cEBQObgyKBEWDYkHxwAUlgpLBTUGp4OagdHBLUCa4NSgb3BaUC8oHFYLbgzuCisGdQaXgrqBycHdQJagaVAuqB/cENYJ7g5rBfUGt4P6gdvBAUCd4MKgbPBTUC+oHDYKHg4bBI0GjoHHQJGgaNAuaBy3+rfW9P537Mdcj7Bkmhr3C3uHLYZ+wb9gv7B8OCF8JB4avhoPC18LB4ZBwaPh6OCx8IxwevhmOCEeGo8K3wtHhmHBsOC4cH04Ik8K3w4nhO+Gk8N1wcjglnBpMC6eHM8KZ4XvhrHB2OCd8P5wbzgvnhwvCheGiEH++JIbk8KNwafhxmBIuC5eHK8KV4apwdbgmXBuuC9eHG8KN4aYyA38+NNwWbg93hDvDXeHucE/4abg3/CzcF34epoZfhPvDP4UHwi/Dg+FX4aHw6/Bw+E14JPw2PBp+Fx4Lvw+PhyfCk+EP4anwx/B0eCY8G54Lz4c/hRfCi+Gl0Kdd3Kd9vJMhQxkoAyVQAmWmzJSFslA2ykYxilEOykE5KSflolyUh/JQPspHBagApWFiKkgFKU5xKkyFqQgVoWJUjBw5KkklqRSVotJUmspQGSpLZakclaMKVIHuoDvoTrqT7qK76G66m6pSVapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9akANqCE1pEbUiJpQE2pGzagFtaCW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaVu1I26U3fqQT0okRKpN/WmPtSH+lE/GkADaCANpEE0iAbTYBpKQ2kYDaPhNJxG0EgaRW/RaBpDY2kcjacJlERJNJEm0iSaRJNpMk2lqTSdptNMmkmzaBbNoTk0l+bSfJpPC2khLabFtISWUDIl01JaSimUQstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22gb7aAdtIt20R7aQ3tpL+2jfZRKqbSf9tMBOkAH6SAdokN0mA7TETpCR+koHaNjdJyO00k6SafoFJ2m03SWztJ5+oku0EW6RJ4SbCab2V5js9isNpvNbv8yzmPz2nw2vy1gQ5vL5v5NTNbaIraoLWaLW2dL2JL2pr+Ky9nytoK93d5hK9o7bSVbzmaCP49r2HttTXufrWXvt9XtPb+Ja9sHbB37iK1rG9t6tqltYJvbhvYR28g2tk1sU9vMNrdt7RO2nX3StrdPJXSwT/95bNPiJfZDu9aus+vtBrvXfmbP2nP2iP3Wnrc/2R62px1gX7ED7at2kH3NDrZDfhsD2FH2LTvajrFj7Tg73k74q3iqnWan2xl2pn3PzrKz/ypebD+wc22ynW8X2IV20eU4radk+5Fdaj+2KXaZXW5X2JV2lV1t1/zfXlfYTXaz3WL32E/tNrvd7rA77S67+3Kcdh777Oc21X5hD9tv7AH7pT1oj9pD9uvLcdr5HbXf2WP2e3vcnrAn7Q/2lP3RnrZnLp9/2rn/YC/aS9ZbYGTFmg0HnIEzcgJn4sx8DWfhrJyNs3OMr+UcfB3n5Os5F+fmPJyX83F+LsAhE1tmjrggF+I438CF+UYuwkW5GBdnxyW4JN/EpfhmLs23cBm+lcvybVyOy3MFvp3v4Ip8J1fiu7gy381VuCpX4+p8D9fge7km38e1+H6uzQ9wHX6Q6/JDXI/rcwN+mBvyI9yIG3MTbsrNuDm34Ee5JT/Grbg1t+HHuS0/we34SW7PT3EHfpo78jPciZ/lzvwcd+HnuSu/wN34Re7OL3EP7smJ3It788vch/tyP+7PA/gVHsiv8iB+jQfzEB7Kr/MwfoOH85s8gkfyKH6LR/MYHsvjeDxP4CR+myfyOzyJ3+XJPIWn8jSezjN4Jr/Hs3g2z+H3eS7P4/m8gBfyIl7MH/AS/pCT+SNeyh9zCi/j5byCV/IqXs1reC2v4/W8gTfyJt7MW3grf8LbeDvv4J28i3fzHv6U9/JnvI8/51T+gvfzn/gAf8kH+Ss+xF/zYf6Gj/C3fJS/42P8PR/nE3ySf+BT/COf5jN8ls/xef6JL/BFvsSeIcJIRToyURBliDJGCVGmKHN0TZQlyhpli7JHsejaKEd0XZQzuj7KFeWO8kR5o3xR/qhAFEYU2YijKCoYFYri0Q1R4ejGqEhUNCoWFY9cVCIqGd0UlYpujkpHt0RlolujstFtUbmofFQhuj26I6oY3RlViu6KKkd3R1WiqlG1qHp0T1QjujeqGd0X1Yruj0pHD0R1ogejutFDUb2oftQgejhqGD0SNYoaR02iplGzqHnUIno0ahk9FrWKWkdtosejttETUbvoyah99FTUIXr6yv6iwc+fpn+xPzHqFelfnpDdpxfGF8UXxz+IL4l/GE+OfxRfGv84nhJfFl8eXxFfGV8VXx1fE18bXxdfH98Q3xjfFN8c3xL3vnpGcJh2IwzGBS6Dy+gSXCaX2V3jsrisLpvL7mLuWpfDXedyuutdLpfb5XF5XT6X3xVwoSNnHbvIFXSFXNzd4Aq7G10RV9QVc8WdcyVcSdfctXAtXEv3mGvlWrs27nH3uHvCPeGeTPilcdfRPeM6uWddZ/ece84977q6F1w396Lr7l5yPVxPl+gSXW/X2/VxfVw/188NcAPcQDfQDXKD3GA32A11Q90wN8wNd8PdCDfCjXKj3Gg32o11Y914N94luSQ30U10k9wkN9lNdlPdVDfdTXcz3Uw3y81yc9wcN9fNdfPdfLfQLXSL3WK3xC1xyS7ZLXVLXYpLccvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XOpLtXtd/vdAXfAHXRfuUPua3fYfeOOuG/dUfedO+a+d8fdCXfSeX3K/ehOuzPurDvnzruf3AV30V1y3iXF3o5NjL0TmxR7NzY5NiU2NTYtNj02IzYz9l5sVmx2bE7s/djc2LzY/NiC2MLYotji2AexJbEPY8mxj2JLYx/HUmLLYstjK2IrY6ti3uffFvmCvpCP+xt8YX+jL+KL+mK+uHe+hC/pb/Kl/M2+tL/Fl/G3+rL+Nl/Ol/cVfGPfxDf1zXxz38I/6lv6x3wr39q38Y/7tv4J384/6dv7p3wH/7Tv6J/xnfyzvrN/znfxz8/7Zcq+u3/J9/A9faLv5Xv7l30f39f38/39AP+KH+hf9YP8a36wH+KH+tf9MP+GH+7f9CP8SD/Kv+VH+zF+rB/nx/sJPsm/7Sf6d/wk/66f7Kf4qX6an+5n+Jn+PT/Lz/Zz/Pt+rp/n5/sFfqFf5Bf7D/wS/6FP9h/5pf5jn+KX+eV+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qP/Hb/Ha/w+/0u/xuv8d/6vf6z/w+/7lP9V/4/f5P/oD/0h/0X/lD/mt/2H/jj/hv/VH/nT/mv/fH/Ql/0v/gT/kf/Wl/xp/15/x5/5O/4C/6S/I3a0IIIYQQfxf9B/t7/Y3vqV+2NL0BIOv2vIf+subGXD+v+6q9HWIA8FTPLvV/3erXT0xM/OXYFA1BoQUAELuSnwGuxMugDTwB7aE1lPqb/fVVFS5f9/2/6sdvBcgMkOnXnLTbo1/jK/Vv/p36jT/g362/7Of6CwCKFLqSk1b41/hK/dK/U39329+vf7n/TF8mAbT6s5wscCW+Ur8kPAZPQ/vfHCmEEEIIIYQQQvysrzrf9Q/uPy/fn+czv837Nf6j+/M/UOlf7V8IIYQQQgghhBB/7NkXuj35aPv2rTv9Ny8y/me08R+wQAD4D2hDFv/5i6v9m0kIIYQQQgjx73blov9qdyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRf//x/CFN/98FX+xyFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIq+3/BAAA//+0FVXr")
timerfd_create(0x1, 0x80800)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000480)={0xed, 0x0, 0x5})
truncate(&(0x7f0000000200)='./file1\x00', 0x7)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r3, 0x84, 0x84, 0x0, &(0x7f0000001200))
syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000a80)='./file2\x00', 0xe0018, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r3], 0x1, 0xa75, &(0x7f0000000ac0)="$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")
r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0xcc)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}})

1.676684031s ago: executing program 4 (id=657):
syz_mount_image$udf(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5c6, &(0x7f00000006c0)="$eJzs3U1sHGcZB/DnHXuddZqPTRqSgoJYvhQURGQ7oY3lqsjEbIVkiFTHFfSAauJNWNUfkZ1USVSVHjmB1BviwqVSBQKVI5xKOXDhxrHqCakgISFz4kbQjGe9a8chVjcbx8nvJ8X77jvPzLwzkSz93/lwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR3/zW5Mho2u1RAAAAAP303ZmXRsbkfwAAAHisXXL9HwAAAAAAAAD2uhRZ3I4Up15aSweK7+uq062lGzdnpxrbrzacijUHivr8X3V07Oy5rz/73Pn25/9f/0H7dFycuTRZv7C8eG2lubranK/PLrUuL883d7yFXtff6nRxAuqLr92Yv3JltT525uymxTdrH+976nht4vz49EC7dnaq0ZjpqhmsfOK938UdHgAAAE+2ocji85Hiox//Nh2MiCx6z8L3mTvot+Go5fm7OIjZqUZxIAutuaXr+cLUDsK1zZl4qJ2RH0IW78kvI47mYx2S6AEAANi5SmTxQqR45aO1dCgiBto5+KvFiwHvv4HaQxjkNvJxnoyIeuyBzA4AAAC7bF9k8ddI8e/f1+Jwnpnb+X8k4vndHhwAAADwQAxGFouR4tQLa6lW3A8QEadnpxr16Zfr3166stxVm1J5RX2vPx/wMLk3AQAAgEdANbI4WFzxX0tHdnswAAAAQF8MRxbnIkXlF68X75WL4r30hyfGh8Ze7X7D3In7bCevPRPr76bbyTP5lfa7BvN1swd7TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADx5qimLH0SKn/+uWnyvR8Rg3nj/zp3dHhsAAADwgKQsViLFT/+1llJE3Kx9vO+p47WJ8+PTAwMxEHnff++sK+ovzlyarF9YXry20lxdbc7XZ5dal5fnmzvdXXW6tXTj5uxUo5/HdG/DfR7/cPXC8rVbK62rP7q+7fL91ckfrl5fmbu8/eIYjnpE1t1zuhjw7FSjGPRCa26pWLX4zwIAAIAdqqQs3o8UX/jbe53cWUt5e3D9SydovvN8J5tW05alxbzBoWLeYL19eGK8Mnaqu71tZD1dBOo84DZmuroHK3eX1sr9DvZ81AAAAAAAAADweEkpi9cjxZ/efqa4rp5if9x1D3pZdyhS/OyVk2VdNhS1iPZl+lrxs3qltdAcyWvfjhTHvt+ujaK2WtY+3akdzWur+XYvba4dLmuPdWrH8toXI8WHL25f+6lO7dm89lakePfdert2f157sKw93qk9c3l5Yb5vJxgAAAAeAZWUxQeR4tf/qKd2li/zcnmb/cBG7TtvdO73f2vrhu5xz3+v9//XuvreKuchqpHiSx88U8w9FPMVte3nKyYjxV8unizr1ucKhsrlR4qfnfmKlyPFH5c31+4ra492akd3fGIBAADgEZLn/5OR4id//sNgOxuX+b9M4Nvn/89sfQi/T/n/SFdfvs/VW7dfm1tYaK5oaGhobDR6/10IAACPuzz/vxkpvtP4cON6d5n/D6x/6+T//7zZyf8TWzfUp/x/tKtvonzfYGUwonp98VrlRER19dbtr7UW5642rzaXxkaePTf63NnRc+crQ+2L+51Wz+cKAAAA9qo8/89Eit/881cbz+fv5Pr//q0b6lP+f7qrL99n56Jfz4cOAAAAT4w8/49Hiu997r2N9+htzv9df//vjc5z9l/54vrnxuxAn/L/sa6+Wrnfu+YeAAAAAAAAAAAAAAAAAAAAYI+rpCxORYov/30wHSz7dvL+v/mtG+rT8//Hu/rm4+H8/b+eTyoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBEyiKLVqT47Im19I2849WIA92fAAAAwJ73vwAAAP//W+8j6g==")

1.4397175s ago: executing program 1 (id=658):
syz_mount_image$efs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0xfffffffffffffe00, &(0x7f0000000340), 0x1, 0x293, &(0x7f0000000380)="$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")

1.229716135s ago: executing program 3 (id=659):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000002900010000000006000000000400008045000c"], 0x5c}], 0x1}, 0x0)

1.160603845s ago: executing program 0 (id=660):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./file2\x00', 0x10, &(0x7f00000002c0)=ANY=[], 0x1, 0xab5, &(0x7f0000000340)="$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")
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x1042}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8042}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800090, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f00000021c0)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000100), 0xed)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0)

794.122272ms ago: executing program 4 (id=661):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2041}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}}}, 0x10)
sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000b00)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @local}}]}, 0x110)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001600010a000000009ccd62ae8da2ce8660"], 0x78}}, 0x0)

738.380797ms ago: executing program 1 (id=662):
r0 = socket$inet(0x2, 0x3, 0xda)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x9000, 0x0, 0x90, [], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000fffff9000100"/144]}, 0x108)

385.463365ms ago: executing program 3 (id=663):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
close(r3)
mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}})
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f5001c0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000000000400"], 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@noblock_validity}, {@norecovery}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@discard}, {@nouid32}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
syz_emit_ethernet(0x3a, &(0x7f0000002100)=ANY=[@ANYBLOB="0180c20047f800000000000008004500002c000000000011907800000018e000000100004e20001890780400"/58], 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@discard}, {@minixdf}, {@minixdf}, {@nobh}]}, 0x1, 0x783, &(0x7f00000011c0)="$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")

315.732971ms ago: executing program 4 (id=664):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, 0x0, 0x30, 0x12, @val=@uprobe_multi={&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)=[0x4], 0x0, 0x4, 0x200000e8}}, 0x40)
r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x4ef, 0x80002)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800)
r3 = epoll_create1(0x80000)
r4 = dup3(r1, r2, 0x80000)
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000080)={0x1})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0x18})

315.264609ms ago: executing program 1 (id=665):
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
r1 = socket(0x6, 0x800, 0x9)
getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r3 = syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x8b, 0x2a7, &(0x7f0000000180)="$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")
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000013c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x400}]}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=@deltaction={0x100, 0x31, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x100}}, 0x40804)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000580)={<r4=>0x0, 0x4000684, 0x0, [0x2, 0xc, 0xa55c, 0x80000001, 0x7], [0x45de0021, 0x9, 0x9, 0x4, 0x2, 0x5, 0x1000, 0x1, 0x8, 0x7, 0xff, 0x2, 0x6, 0x5, 0xffffffffffffffa2, 0x8, 0x7, 0x2, 0x3, 0x7, 0x1, 0x40, 0x7, 0xff, 0x5, 0x1, 0x1000, 0x4, 0x0, 0x0, 0xffffffff, 0x2, 0x8, 0x9, 0x5, 0x18, 0xfc9, 0x401, 0x6, 0x7fffffff, 0x7, 0x2, 0x4, 0x3, 0x6c09, 0x9, 0xfff, 0x0, 0x6, 0x9000000000000, 0x7, 0xb, 0x8000000000000001, 0x42f6, 0x7, 0x2, 0x5f, 0xdc, 0x5, 0x5, 0x3, 0x8, 0x100000000, 0x7, 0x6, 0x7fff80000, 0x0, 0xffffffffffffffff, 0x5, 0xab, 0x0, 0x38, 0x4, 0x5, 0x4, 0x6, 0x8, 0x8, 0x8001, 0x224c5185, 0x8000000000000000, 0x8, 0x6, 0x4, 0x0, 0x7, 0x5, 0x9, 0xffff, 0xae, 0x23b71ea2, 0x6, 0xfffffffffffffff8, 0x6, 0x80000000000000, 0xfffffffffffffff9, 0x8, 0x7ff, 0x7, 0x5bc, 0x9, 0x65, 0x5, 0x2, 0x200, 0x9, 0x4, 0x8, 0x6, 0x0, 0x200, 0x7fffffff, 0x3, 0x5, 0x0, 0x9, 0x311e6117, 0x3, 0x300000, 0x9, 0x7]})
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000009c0)={r4})
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1ff, "02812d", 0x0, 0x2})
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000))
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e725f626cffffffffffffffff"])
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000280), 0x1670e68)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x118)
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r6, &(0x7f0000000000)='./file0\x00')
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
pwritev2(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000440)="890a83e1d8e29570d2ba7d699f48426312055b0a85d36c4432807843fd231b5e1747e90819115abf50d41b24f025b1b19ce1bede8e1079bdff78e2f0965b7bf6ddee6eb5064df1c5090088be71c6db0e597dce013c57db66ff20143151d4184b807dc6ca37b27f5bd992e5b7a14850aa206510f0ec214b422ab890193a3dcbfd41a77657564f6fb8b8f868698789bcb8fe6ada4ca8c3393ce56d691d9391e3a904e7d52713ac3db0e961ff81a20b4748d6c82e7a2322fb243d30c04f78d1ca3b83f73fdf376534178cca658e6b96be4bb91860ba134036d218a5f97b9372bc1448038761b691b59f2848f2a07c", 0xed}, {&(0x7f0000000dc0)="864eb41c6f9fdcaeeb09a732cf1835061d27afd85555138882809bb0071c0b48", 0x20}, {&(0x7f0000000e00)="2de49eb1a88245c171369e20368c66dee1f56c7f1fc24d27cd2781e7751cea5b0361b43fdf6a5401db9995b206b2071bab17e6861002089f2c522a1650ab2a20d53e2c1aae21ba6d36793779dedf3e09ed55a024cbd601be0969514ccc0218907807bdd813bde2225dff010003d3263731901fb746365edca1510b5195e00190a45c36d647ba6d567cfb34bded5420eb56360e7f464f6738c4ca0117abe8aba612826b5c41690cf882c57cfc3ec1f3eb9d045fa73d65a307fe4ffcbd67", 0xbd}, {&(0x7f0000001040)="00b738b60d343750667bfd0674b02eebad12ff1467e0dc7c4f7ee8a3e5a15dd2e157b63622d4b98bfc7461481d02297f14847cc67fd8e780a8f03fda48e44867f674abc91d4f305d1b6ec4cc642fa8506224ab27c7a8e2f8023b104be01d6036d86184535b6b29ce63b2ab94b2f4ff941ca941269da79494828a8c664233b7acb26b8dbc30a36e5ee8be8e17a05b2f0cf9b7d39dec689f230c7fbc9a8be43b488fc1c2e4564c4f45bb2c84af6413eb20a989617d28e8d9061383b0b39ce59204c64109ddb6bf194e72fc", 0xca}, {&(0x7f0000000ec0)="834fb696f24dfcdf47422cc842d642166a232127ad12747e6763998999e24c9728af75dec501c735d44ec499cb16", 0x2e}, {&(0x7f0000001140)="d1e4d8be50a2d2f5f5bc413b1bfafe0e6757214f26f16f059ca1d8ef38b504df8a7a93714c3cfad54afa0fe06292a8cc7784e58d95662084d33b2e08bcaa1ee631a4a2377fa003b09837f979ba7a5d3f24289f5ca8c255e8b4bec8b22d0f867d8f6263a25b7d406ca25e8b75f82494e3a5c1ec6917247ca35ec94ab556cc1b00a81c04bc86f012a74ec6639bc0938369e29001087e153eb13f1e6504cad6d3a8195cf198", 0xa4}, {&(0x7f0000000f00)="322a1159ab9ff327f2c21c3dfb40e1a6a4731c6c3c14facb4e6fef815ec940", 0x1f}, {&(0x7f0000001200)="b5a0a836b765a4003e1cacc719dfbe5f45a19c131dae59a424f5c30cfc1e9ab578a6ffbbb42154741077c8d2de4a80256c03dbe5af4fb0b8287c9c9e158517f7acc39bcb1afb42db0275f87696d830d1970e4d8db0da009f0cb358266dabdc5c199c0cad260a25cae0b1a1f0928c620d0ec411f80d7b5473890751ead7d02d7c5600aa04fb6b12d1cfa802debc06a6b79787f636216c5e0a24dfd813b6f78d381a3ac5b8a1bfb4683d7463b7c35e1ce9f1dc7419ddc5f2b68618a2a039f8362f5a3eacfe74ce447fbda0818205c9f927f7b6a2750877ccd1d904add19b646e0e5b8d2ad12e067bf97b", 0xe9}], 0x8, 0x9, 0xe, 0x6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100"/12, @ANYRES32=r10, @ANYBLOB="1800508004000500080008802bfe01000500020000000000"], 0x34}}, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='ip6gre0\x00', 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5)
socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet6(0xa, 0x6, 0x3a)
connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

96.44545ms ago: executing program 0 (id=666):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@fwd={0x4}, @const={0x0, 0x0, 0x0, 0xa, 0x4}, @restrict={0x1, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0]}}, &(0x7f0000000200)=""/110, 0x3f, 0x6e, 0x1, 0x4, 0x0, @void, @value}, 0x28)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x2000000000000272, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1b408413}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)={0xec, r2, 0x804, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc6a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xef4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x90}, 0x4) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000004c0)=r1}, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'L'}]}]}}}]}]}], {0x14}}, 0xf0}}, 0x0) (async)
syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a00fe8000000000000000000000000000bbfe80000000000000000000000000002302009078000005006050835900000000fc0100f4ff0000000000000000000000fe880000000000000000000000000101"], 0x0)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="13636842de998a000000", @ANYRES16=r5, @ANYBLOB="00012dbd7000fddbdf250800000008000400ac1e000114000200ff0200000000000000000000000000012600070073797374656d5f753a6f626a6563745f723a63726f6e5f73706f6f6c5f743a733000000014000200fc000000000000000000000000000001050001000000000014000200fc0100"/130], 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x48090)
syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0)

90.32829ms ago: executing program 4 (id=667):
r0 = gettid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r0, 0x20, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x1, &(0x7f0000000080))
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x4e24, 0x5, @local, 0x43}, 0x1c, 0x0, 0x0, &(0x7f0000000a40)}, 0x20000004)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x2000000}, {0x6}]}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x400, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}]})
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a", @ANYRES64, @ANYRES16=0x0, @ANYBLOB="24bdc1ebbca32d9fcccca90972118ca90b5c9afdfe794eccda8fc77a16e986811709746e8694abbe30dad976418b87b70cf57c6e1c1800ef918e842c0d54706e61a6ee11eddda0af3e5dde88555587e9734c0eaab4622e1636c6462c8cc0d3cb211d8d508d98c5ed93b1c84787b3c92e006d9957dc6d733f97c3289d17a4ca0babe955d8928f08de60f3e8bc7dbf8dc6ca64d386bce35a6ed0d86253611d286d9dba8faebc8ad8ec0fcc65e7f6000000"], 0x70}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x122}}, 0x0)

0s ago: executing program 2 (id=668):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000084000000050000000000000000000000140000000000000084000000"], 0x38}, 0x0)

kernel console output (not intermixed with test programs):

.019290][ T6639]  __sock_sendmsg+0x30f/0x380
[  598.024415][ T6639]  ____sys_sendmsg+0x877/0xb60
[  598.029620][ T6639]  ___sys_sendmsg+0x28d/0x3c0
[  598.034744][ T6639]  ? kmsan_get_metadata+0x13e/0x1c0
[  598.040333][ T6639]  ? __rcu_read_unlock+0x7b/0xe0
[  598.045693][ T6639]  ? __fget_files+0x4f5/0x5c0
[  598.050840][ T6639]  ? kmsan_get_metadata+0x13e/0x1c0
[  598.056437][ T6639]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  598.062664][ T6639]  __x64_sys_sendmsg+0x300/0x4a0
[  598.068030][ T6639]  ? perf_mmap+0x960/0x28d0
[  598.072990][ T6639]  x64_sys_call+0x2da0/0x3ba0
[  598.078106][ T6639]  do_syscall_64+0xcd/0x1e0
[  598.083038][ T6639]  ? clear_bhb_loop+0x25/0x80
[  598.088141][ T6639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.094523][ T6639] RIP: 0033:0x7f16d517dff9
[  598.099272][ T6639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  598.119322][ T6639] RSP: 002b:00007f16d5f10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  598.128373][ T6639] RAX: ffffffffffffffda RBX: 00007f16d5336058 RCX: 00007f16d517dff9
[  598.136727][ T6639] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000007
[  598.145031][ T6639] RBP: 00007f16d5f10090 R08: 0000000000000000 R09: 0000000000000000
[  598.153351][ T6639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  598.161742][ T6639] R13: 0000000000000000 R14: 00007f16d5336058 R15: 00007fff2de47c48
[  598.170198][ T6639]  </TASK>
[  598.297613][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  598.304945][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  598.421626][ T6644] Cannot find add_set index 0 as target
[  599.030282][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.326'.
[  599.218990][ T5275] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  599.439774][ T5275] usb 2-1: Using ep0 maxpacket: 8
[  599.490772][ T5275] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  599.502401][ T5275] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024
[  599.513993][ T5275] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  599.524500][ T5275] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  599.534676][ T5275] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  599.649648][ T6493] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  599.693114][ T5275] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  599.704225][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.712934][ T5275] usb 2-1: Product: syz
[  599.717475][ T5275] usb 2-1: Manufacturer: syz
[  599.722619][ T5275] usb 2-1: SerialNumber: syz
[  599.817067][ T6493] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  599.930809][ T6493] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  600.060113][ T6493] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  600.129855][ T5275] cdc_ncm 2-1:1.0: bind() failure
[  600.212980][ T5275] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  600.220431][ T5275] cdc_ncm 2-1:1.1: bind() failure
[  600.398941][ T5275] usb 2-1: USB disconnect, device number 9
[  600.513448][ T6519] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  600.532374][ T6656] loop2: detected capacity change from 0 to 1024
[  600.600580][ T6656] EXT4-fs: Ignoring removed nomblk_io_submit option
[  600.671027][ T6656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  600.710711][ T6519] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  600.738901][ T6519] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  600.770551][ T6519] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  602.094796][ T5202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.468519][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0
[  602.888785][ T6493] 8021q: adding VLAN 0 to HW filter on device team0
[  602.993654][ T6673] loop4: detected capacity change from 0 to 2048
[  603.061342][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.069223][ T5227] bridge0: port 1(bridge_slave_0) entered forwarding state
[  603.383834][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.391710][ T5227] bridge0: port 2(bridge_slave_1) entered forwarding state
[  603.471719][ T6519] 8021q: adding VLAN 0 to HW filter on device bond0
[  603.532138][ T6673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  603.712049][ T6669] loop1: detected capacity change from 0 to 32768
[  603.851965][ T6669] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  603.907715][ T6519] 8021q: adding VLAN 0 to HW filter on device team0
[  603.939547][ T6680] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  604.034067][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.042152][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state
[  604.118495][ T6680] overlayfs: failed to resolve './file2': -2
[  604.152619][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.160637][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state
[  604.375609][ T5209] ocfs2: Unmounting device (7,1) on (node local)
[  604.893246][ T6691] Cannot find add_set index 0 as target
[  605.866266][ T6211] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.145816][ T6493] 8021q: adding VLAN 0 to HW filter on device batadv0
[  606.504291][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'.
[  606.989366][ T6493] veth0_vlan: entered promiscuous mode
[  607.177862][ T6519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  607.237968][ T6715] syzkaller1: entered promiscuous mode
[  607.246850][ T6715] syzkaller1: entered allmulticast mode
[  607.277047][ T6493] veth1_vlan: entered promiscuous mode
[  607.924669][ T6493] veth0_macvtap: entered promiscuous mode
[  608.063445][ T6493] veth1_macvtap: entered promiscuous mode
[  608.111886][ T6519] veth0_vlan: entered promiscuous mode
[  608.326159][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  608.337167][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.347511][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  608.358377][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.374235][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  608.386844][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.398996][ T5260] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  608.403521][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_0
[  608.440701][ T6519] veth1_vlan: entered promiscuous mode
[  608.552036][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  608.563163][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.578939][ T5273] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  608.586932][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  608.603123][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.614122][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  608.625062][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.641405][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_1
[  608.641814][ T5260] usb 5-1: not running at top speed; connect to a high speed hub
[  608.740733][ T6705] loop1: detected capacity change from 0 to 4096
[  608.768416][ T5273] usb 3-1: Using ep0 maxpacket: 8
[  608.781592][ T6705] ntfs3: loop1: ino=0, Correct links count -> 1.
[  608.822154][ T5260] usb 5-1: config 1 interface 0 altsetting 126 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  608.839980][ T5260] usb 5-1: config 1 interface 0 altsetting 126 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  608.853638][ T5260] usb 5-1: config 1 interface 0 has no altsetting 0
[  608.865209][ T5273] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  608.878653][ T5273] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024
[  608.891207][ T5273] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  608.901805][ T5273] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  608.911928][ T5273] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  608.970291][ T6705] ntfs3: loop1: MFT: r=0, expect seq=1 instead of 0!
[  608.981773][ T6705] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  609.012430][ T6493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  609.021765][ T6493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  609.031102][ T6493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  609.040377][ T6493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  609.050813][ T5260] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  609.060494][ T5260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.070045][ T5260] usb 5-1: Product: syz
[  609.074519][ T5260] usb 5-1: Manufacturer: syz
[  609.081524][ T5260] usb 5-1: SerialNumber: syz
[  609.101449][ T6705] ntfs3: loop1: Failed to load $MFT (-22).
[  609.178859][ T6519] veth0_macvtap: entered promiscuous mode
[  609.211925][ T5273] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  609.221794][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.231348][ T5273] usb 3-1: Product: syz
[  609.235826][ T5273] usb 3-1: Manufacturer: syz
[  609.240810][ T5273] usb 3-1: SerialNumber: syz
[  609.273095][ T6722] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  609.361066][ T6519] veth1_macvtap: entered promiscuous mode
[  609.711860][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  609.723051][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.734290][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  609.745575][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.756440][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  609.768050][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.778856][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  609.790145][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.811722][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_0
[  610.119054][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  610.129952][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.141522][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  610.153417][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.166545][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  610.178782][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.189316][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  610.211813][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.229558][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_1
[  610.251285][ T6519] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  610.260586][ T6519] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  610.270112][ T6519] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  610.280272][ T6519] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  610.574783][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.633773][ T5273] cdc_ncm 3-1:1.0: bind() failure
[  610.655568][ T5273] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  610.663231][ T5273] cdc_ncm 3-1:1.1: bind() failure
[  610.781998][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.834292][ T5273] usb 3-1: USB disconnect, device number 10
[  611.019463][ T5252] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  611.408842][ T5252] usb 2-1: Using ep0 maxpacket: 16
[  611.421466][ T5260] usb 5-1: USB disconnect, device number 6
[  611.459410][ T5384] udevd[5384]: setting owner of /dev/bus/usb/005/006 to uid=0, gid=7 failed: No such file or directory
[  611.500631][ T5252] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  611.511358][ T5252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.520024][ T5252] usb 2-1: Product: syz
[  611.524494][ T5252] usb 2-1: Manufacturer: syz
[  611.529589][ T5252] usb 2-1: SerialNumber: syz
[  611.653592][ T5252] usb 2-1: config 0 descriptor??
[  611.706133][ T5252] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  612.068594][ T5260] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  612.271070][ T5260] usb 3-1: Using ep0 maxpacket: 8
[  612.308737][ T5260] usb 3-1: config 0 has an invalid interface number: 30 but max is 0
[  612.317425][ T5260] usb 3-1: config 0 has no interface number 0
[  612.324336][ T5260] usb 3-1: too many endpoints for config 0 interface 30 altsetting 56: 102, using maximum allowed: 30
[  612.335789][ T5260] usb 3-1: config 0 interface 30 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 102
[  612.350613][ T5260] usb 3-1: config 0 interface 30 has no altsetting 0
[  612.360534][ T5260] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=f7.eb
[  612.370641][ T5260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.623416][ T5260] usb 3-1: config 0 descriptor??
[  612.684617][ T6752] Cannot find add_set index 0 as target
[  613.107034][ T5260] usb 3-1: string descriptor 0 read error: -32
[  613.166937][ T6745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.239158][ T5260] asix 3-1:0.30 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  613.252661][ T5260] asix 3-1:0.30: probe with driver asix failed with error -32
[  613.319699][ T6745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.542481][ T5252] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110
[  614.142802][ T5252] usb 2-1: USB disconnect, device number 10
[  615.030012][ T5260] usb 3-1: USB disconnect, device number 11
[  615.386070][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'.
[  616.211309][ T6777] loop1: detected capacity change from 0 to 2048
[  616.221134][ T6777] EXT4-fs: Ignoring removed bh option
[  616.537323][ T6792] capability: warning: `syz.4.351' uses 32-bit capabilities (legacy support in use)
[  616.582859][ T6777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  616.700174][ T6797] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  617.017631][ T6784] loop2: detected capacity change from 0 to 4096
[  617.083839][ T6784] ntfs3: loop2: ino=0, Correct links count -> 1.
[  617.224882][ T6784] ntfs3: loop2: MFT: r=0, expect seq=1 instead of 0!
[  617.234095][ T6784] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  617.300861][ T6784] ntfs3: loop2: Failed to load $MFT (-22).
[  617.314088][ T5209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.981527][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'.
[  617.994243][    T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  618.151200][ T6811] Cannot find add_set index 0 as target
[  618.198452][    T8] usb 5-1: Using ep0 maxpacket: 8
[  618.253238][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  618.264806][    T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024
[  618.277569][    T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  618.289091][    T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  618.302881][    T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  618.561082][    T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  618.571304][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.579909][    T8] usb 5-1: Product: syz
[  618.584361][    T8] usb 5-1: Manufacturer: syz
[  618.589638][    T8] usb 5-1: SerialNumber: syz
[  618.718917][ T5303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.727025][ T5303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.931592][ T6816] loop2: detected capacity change from 0 to 512
[  618.941778][ T5227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.950697][ T5227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  619.040909][ T6816] EXT4-fs (loop2): Invalid default hash set in the superblock
[  619.143807][ T5227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  619.153272][ T5227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  619.174356][    T8] cdc_ncm 5-1:1.0: bind() failure
[  619.196410][    T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  619.204036][    T8] cdc_ncm 5-1:1.1: bind() failure
[  619.342472][ T5303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  619.350972][ T5303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  619.400925][    T8] usb 5-1: USB disconnect, device number 7
[  620.076572][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'.
[  620.484559][ T6832] loop2: detected capacity change from 0 to 1024
[  620.513100][ T5196] Bluetooth: hci4: command 0x0406 tx timeout
[  620.556227][ T6832] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  620.631480][ T6832] JBD2: no valid journal superblock found
[  620.637695][ T6832] EXT4-fs (loop2): Could not load journal inode
[  621.341927][ T6829] loop3: detected capacity change from 0 to 8192
[  621.503075][ T6829] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  621.549295][ T6834] loop1: detected capacity change from 0 to 4096
[  621.820351][ T6834] ntfs3: loop1: ino=0, Correct links count -> 1.
[  622.159576][ T6834] ntfs3: loop1: MFT: r=0, expect seq=1 instead of 0!
[  622.166973][ T6834] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  622.190120][ T6834] ntfs3: loop1: Failed to load $MFT (-22).
[  622.523479][ T6841] Cannot find add_set index 0 as target
[  622.613171][ T6840] loop0: detected capacity change from 0 to 512
[  622.757390][ T6840] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  623.000565][ T5252] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  623.059534][ T6840] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.365: iget: bad i_size value: -67835469387268086
[  623.166695][ T6840] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.365: couldn't read orphan inode 15 (err -117)
[  623.251381][ T6840] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  623.265148][ T6840] ext2 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  623.476184][ T6840] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.365: Directory hole found for htree leaf block 0
[  623.642320][ T5252] usb 4-1: device descriptor read/all, error -71
[  623.879974][   T29] audit: type=1326 audit(1727629263.028:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.0.365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f957dff9 code=0x0
[  624.035942][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.051596][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.062164][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.070062][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.077820][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.085883][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.093750][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.101658][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.109563][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.117301][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.125187][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.139400][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.147164][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.157281][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.165214][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.173322][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.181232][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.195652][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.205905][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.213932][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.221913][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.229846][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.244483][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.254315][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.262316][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.270385][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.278440][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.286205][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.294186][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.302167][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.310076][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.317837][ T5260] hid-generic 0000:04AD:0000.0005: unknown main item tag 0x0
[  624.334031][ T5260] hid-generic 0000:04AD:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  624.499830][ T6848] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.365: Directory hole found for htree leaf block 0
[  624.598801][ T1586] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  624.780033][ T1586] usb 2-1: config 0 has no interfaces?
[  624.786015][ T1586] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  624.795711][ T1586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.946004][ T1586] usb 2-1: config 0 descriptor??
[  625.035629][ T6857] netlink: 'syz.2.372': attribute type 11 has an invalid length.
[  625.255217][ T6859] loop3: detected capacity change from 0 to 512
[  625.309884][ T6519] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000.
[  625.367215][ T6852] loop1: detected capacity change from 0 to 1024
[  625.396468][ T6852] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  625.432826][ T6859] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  625.441016][ T6859] UDF-fs: Scanning with blocksize 512 failed
[  625.498820][ T6852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  625.516150][ T6852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.539085][    T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  625.603799][ T6859] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  625.611642][ T6859] UDF-fs: Scanning with blocksize 1024 failed
[  625.693013][ T6859] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  625.702413][ T6859] UDF-fs: Scanning with blocksize 2048 failed
[  625.704074][ T5252] usb 2-1: USB disconnect, device number 11
[  625.818576][ T6865] loop2: detected capacity change from 0 to 512
[  625.931021][ T6863] loop0: detected capacity change from 0 to 128
[  626.061650][    T8] usb 5-1: Using ep0 maxpacket: 8
[  626.090743][ T6865] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.374: corrupted in-inode xattr: invalid ea_ino
[  626.113012][ T6859] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  626.133881][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  626.136596][ T6863] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  626.145310][    T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024
[  626.145514][    T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  626.145702][    T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  626.195280][    T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  626.206790][ T6865] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.374: couldn't read orphan inode 15 (err -117)
[  626.208915][ T6863] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  626.257999][ T6865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  626.270340][    T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  626.280838][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.294304][    T8] usb 5-1: Product: syz
[  626.299022][    T8] usb 5-1: Manufacturer: syz
[  626.303919][    T8] usb 5-1: SerialNumber: syz
[  626.316579][   T29] audit: type=1326 audit(1727629265.528:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.2.374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16d517dff9 code=0x0
[  626.374446][ T6859] UDF-fs: warning (device loop3): udf_fill_super: No fileset found
[  626.614225][    T8] cdc_ncm 5-1:1.0: bind() failure
[  626.653447][    T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  626.660824][    T8] cdc_ncm 5-1:1.1: bind() failure
[  626.747639][    T8] usb 5-1: USB disconnect, device number 8
[  626.993433][ T6871] loop1: detected capacity change from 0 to 128
[  627.045997][ T5202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.415033][ T6871] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  627.449461][ T6871] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  627.652314][ T6519] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  628.430093][ T6874] loop3: detected capacity change from 0 to 4096
[  628.552857][ T6874] ntfs3: loop3: ino=0, Correct links count -> 1.
[  628.715415][ T6888] loop0: detected capacity change from 0 to 512
[  628.754765][ T6888] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  628.880629][ T6888] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.383: iget: bad i_size value: -67835469387268086
[  628.890018][ T6874] ntfs3: loop3: MFT: r=0, expect seq=1 instead of 0!
[  628.901397][ T6874] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  628.910553][ T6874] ntfs3: loop3: Failed to load $MFT (-22).
[  628.942219][ T6888] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.383: couldn't read orphan inode 15 (err -117)
[  628.977013][ T6891] loop4: detected capacity change from 0 to 256
[  629.020034][ T6888] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  629.033078][ T6888] ext2 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  629.101910][ T5209] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  629.126527][ T6888] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.383: Directory hole found for htree leaf block 0
[  629.543126][ T6888] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.383: Directory hole found for htree leaf block 0
[  629.967200][ T6901] loop1: detected capacity change from 0 to 1764
[  630.180324][ T6901] iso9660: Unknown parameter '01777777777777777777777'
[  630.272733][ T6519] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000.
[  630.662943][ T5279] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  630.843921][ T6909] Cannot find add_set index 0 as target
[  630.850852][ T5279] usb 3-1: Using ep0 maxpacket: 8
[  630.936374][ T5279] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  630.948344][ T5279] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024
[  630.960126][ T5279] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  630.970710][ T5279] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  630.981006][ T5279] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  631.213015][ T5279] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  631.222806][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.233221][ T5279] usb 3-1: Product: syz
[  631.237705][ T5279] usb 3-1: Manufacturer: syz
[  631.243324][ T5279] usb 3-1: SerialNumber: syz
[  631.306193][ T1586] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  631.554295][ T6914] loop0: detected capacity change from 0 to 512
[  631.628842][ T1586] usb 4-1: Using ep0 maxpacket: 8
[  631.737125][ T1586] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  631.748918][ T1586] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024
[  631.760715][ T1586] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  631.771319][ T1586] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  631.781503][ T1586] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  631.923019][ T5279] cdc_ncm 3-1:1.0: bind() failure
[  631.942072][ T5279] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  631.949471][ T5279] cdc_ncm 3-1:1.1: bind() failure
[  631.981439][ T6914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  631.991523][ T5279] usb 3-1: USB disconnect, device number 12
[  631.994806][ T6914] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  632.021245][ T5252] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  632.147530][   T29] audit: type=1800 audit(1727629271.328:38): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.391" name="file1" dev="loop0" ino=15 res=0 errno=0
[  632.190436][ T5252] usb 5-1: Using ep0 maxpacket: 32
[  632.211491][ T5252] usb 5-1: unable to get BOS descriptor or descriptor too short
[  632.573678][   T29] audit: type=1800 audit(1727629271.718:39): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.391" name="file2" dev="loop0" ino=16 res=0 errno=0
[  632.609856][ T1586] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  632.619807][ T1586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.628336][ T1586] usb 4-1: Product: syz
[  632.639802][ T1586] usb 4-1: Manufacturer: syz
[  632.644699][ T1586] usb 4-1: SerialNumber: syz
[  633.054565][ T1586] cdc_ncm 4-1:1.0: bind() failure
[  633.073964][ T1586] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  633.081284][ T1586] cdc_ncm 4-1:1.1: bind() failure
[  633.196174][ T5252] usb 5-1: config 253 has an invalid interface number: 227 but max is 0
[  633.205123][ T5252] usb 5-1: config 253 has no interface number 0
[  633.211869][ T5252] usb 5-1: config 253 interface 227 altsetting 16 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  633.223588][ T5252] usb 5-1: config 253 interface 227 altsetting 16 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  633.235401][ T5252] usb 5-1: config 253 interface 227 has no altsetting 0
[  633.430718][ T1586] usb 4-1: USB disconnect, device number 10
[  633.512874][ T6919] loop2: detected capacity change from 0 to 512
[  634.516231][ T5252] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  634.525843][ T5252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.552301][ T5252] usb 5-1: can't set config #253, error -71
[  634.647678][ T5252] usb 5-1: USB disconnect, device number 9
[  635.574671][ T6933] loop3: detected capacity change from 0 to 64
[  636.139706][ T6519] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.266943][ T6944] loop4: detected capacity change from 0 to 128
[  636.510138][ T6944] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  636.731695][ T6932] loop2: detected capacity change from 0 to 4096
[  636.838544][ T6944] overlayfs: upper fs needs to support d_type.
[  636.861742][ T6932] ntfs3: loop2: ino=0, Correct links count -> 1.
[  636.968879][ T6944] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  636.976572][ T6944] overlayfs: failed to set xattr on upper
[  636.983095][ T6944] overlayfs: ...falling back to redirect_dir=nofollow.
[  636.993605][ T6944] overlayfs: ...falling back to index=off.
[  637.001705][ T6944] overlayfs: ...falling back to uuid=null.
[  637.040676][   T29] audit: type=1804 audit(1727629276.178:40): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.402" name="/newroot/19/file0/bus/bus/bus" dev="loop4" ino=122 res=1 errno=0
[  637.186180][ T6947] Cannot find add_set index 0 as target
[  637.449211][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  637.550798][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  637.652468][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  637.810623][ T6935] loop1: detected capacity change from 0 to 32768
[  637.878483][ T6932] ntfs3: loop2: MFT: r=0, expect seq=1 instead of 0!
[  637.886218][ T6932] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  637.915949][ T6932] ntfs3: loop2: Failed to load $MFT (-22).
[  638.125926][ T6935] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  638.430206][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  638.471036][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  638.537752][ T6211] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh
[  638.594611][ T6211] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh
[  638.617013][ T5209] ocfs2: Unmounting device (7,1) on (node local)
[  639.195038][ T5238] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.442381][ T5238] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.914883][ T5238] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.286266][ T5238] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.561240][ T6956] loop2: detected capacity change from 0 to 1764
[  640.580766][ T6956] iso9660: Unknown parameter '01777777777777777777777'
[  640.693951][ T5252] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  640.809248][ T5238] bridge_slave_1: left allmulticast mode
[  640.815228][ T5238] bridge_slave_1: left promiscuous mode
[  640.828356][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state
[  640.918570][ T5252] usb 2-1: Using ep0 maxpacket: 16
[  640.940804][ T5238] bridge_slave_0: left allmulticast mode
[  640.946763][ T5238] bridge_slave_0: left promiscuous mode
[  640.953988][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state
[  640.971799][ T5252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  640.984246][ T5252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  640.997437][ T5252] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  641.008341][ T5252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.171458][ T5252] usb 2-1: config 0 descriptor??
[  641.527046][ T6958] loop1: detected capacity change from 0 to 512
[  641.925044][ T6958] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  642.150196][ T5238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  642.221873][ T6965] loop3: detected capacity change from 0 to 64
[  642.250541][ T6958] EXT4-fs (loop1): orphan cleanup on readonly fs
[  642.353724][ T6958] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.405: bad orphan inode 15
[  642.427684][ T6958] ext4_test_bit(bit=14, block=18) = 1
[  642.433787][ T6958] is_bad_inode(inode)=0
[  642.438514][ T6958] NEXT_ORPHAN(inode)=1023
[  642.443117][ T6958] max_ino=32
[  642.446668][ T6958] i_nlink=0
[  642.501506][ T5196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  642.513925][ T5196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  642.525448][ T5238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  642.546939][ T6958] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2976: inode #15: comm syz.1.405: corrupted xattr block 19: e_value size too large
[  642.559388][ T5196] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  642.626784][ T5196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  642.638320][ T5238] bond0 (unregistering): Released all slaves
[  642.662893][ T6958] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117)
[  642.680920][ T6958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  642.766781][ T5196] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  642.782533][ T6963] sit0: mtu less than device minimum
[  642.800334][ T5260] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  642.813405][ T5196] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  642.979550][ T5260] usb 1-1: Using ep0 maxpacket: 8
[  643.012940][ T5260] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  643.024867][ T5260] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024
[  643.036734][ T5260] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  643.047268][ T5260] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  643.057417][ T5260] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  643.125991][ T5260] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  643.135996][ T5260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.144721][ T5260] usb 1-1: Product: syz
[  643.149444][ T5260] usb 1-1: Manufacturer: syz
[  643.154335][ T5260] usb 1-1: SerialNumber: syz
[  643.164797][ T6958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.251912][ T6958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.431634][ T5252] razer 0003:1532:011B.0006: failed to enable macro keys: -71
[  643.489871][ T5252] razer 0003:1532:011B.0006: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.1-1/input0
[  643.537362][ T5260] cdc_ncm 1-1:1.0: bind() failure
[  643.558803][ T5260] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  643.566033][ T5260] cdc_ncm 1-1:1.1: bind() failure
[  643.652977][ T5252] usb 2-1: USB disconnect, device number 12
[  643.751802][ T5260] usb 1-1: USB disconnect, device number 4
[  644.138640][ T5238] hsr_slave_0: left promiscuous mode
[  644.216907][ T5238] hsr_slave_1: left promiscuous mode
[  644.254203][ T5238] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  644.262847][ T5238] batman_adv: batadv0: Removing interface: batadv_slave_0
[  644.292255][ T6978] Cannot find add_set index 0 as target
[  644.326196][ T5238] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  644.334427][ T5238] batman_adv: batadv0: Removing interface: batadv_slave_1
[  644.428977][ T5238] veth1_macvtap: left promiscuous mode
[  644.435026][ T5238] veth0_macvtap: left promiscuous mode
[  644.441253][ T5238] veth1_vlan: left promiscuous mode
[  644.446875][ T5238] veth0_vlan: left promiscuous mode
[  644.548763][ T5209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.956661][ T5196] Bluetooth: hci0: command tx timeout
[  645.879187][ T5238] team0 (unregistering): Port device team_slave_1 removed
[  645.957314][ T5238] team0 (unregistering): Port device team_slave_0 removed
[  646.351216][ T5252] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  646.504456][    T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  646.591568][ T6985] loop3: detected capacity change from 0 to 4096
[  646.607698][ T6985] ntfs3: loop3: ino=0, Correct links count -> 1.
[  646.755051][ T5252] usb 3-1: Using ep0 maxpacket: 8
[  646.889727][ T6985] ntfs3: loop3: MFT: r=0, expect seq=1 instead of 0!
[  646.897107][ T6985] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  646.983397][ T6985] ntfs3: loop3: Failed to load $MFT (-22).
[  647.008367][ T5196] Bluetooth: hci0: command tx timeout
[  647.397104][    T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.409021][    T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024
[  647.421127][    T8] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  647.431837][    T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  647.442111][    T8] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  647.621953][    T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  647.632208][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.640918][    T8] usb 1-1: Product: syz
[  647.645595][    T8] usb 1-1: Manufacturer: syz
[  647.650797][    T8] usb 1-1: SerialNumber: syz
[  647.681149][ T5252] usb 3-1: device descriptor read/all, error -71
[  648.220283][    T8] cdc_ncm 1-1:1.0: bind() failure
[  648.223777][ T6970] chnl_net:caif_netlink_parms(): no params data found
[  648.240356][    T8] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  648.247598][    T8] cdc_ncm 1-1:1.1: bind() failure
[  648.361747][ T7011] netlink: 104 bytes leftover after parsing attributes in process `syz.2.421'.
[  648.545376][    T8] usb 1-1: USB disconnect, device number 5
[  649.081373][ T5196] Bluetooth: hci0: command tx timeout
[  649.226877][ T7021] FAULT_INJECTION: forcing a failure.
[  649.226877][ T7021] name failslab, interval 1, probability 0, space 0, times 0
[  649.239952][ T7021] CPU: 0 UID: 0 PID: 7021 Comm: syz.2.422 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[  649.250570][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  649.260874][ T7021] Call Trace:
[  649.264351][ T7021]  <TASK>
[  649.267505][ T7021]  dump_stack_lvl+0x216/0x2d0
[  649.272501][ T7021]  dump_stack+0x1e/0x30
[  649.276965][ T7021]  should_fail_ex+0x748/0x7f0
[  649.281948][ T7021]  should_failslab+0x17f/0x210
[  649.286974][ T7021]  kmem_cache_alloc_noprof+0xe2/0xb20
[  649.292688][ T7021]  ? skb_clone+0x303/0x550
[  649.297537][ T7021]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  649.303730][ T7021]  skb_clone+0x303/0x550
[  649.308385][ T7021]  dev_queue_xmit_nit+0x4d0/0x12a0
[  649.313855][ T7021]  ? kmsan_get_metadata+0x13e/0x1c0
[  649.319347][ T7021]  dev_hard_start_xmit+0x17d/0xa20
[  649.324810][ T7021]  __dev_queue_xmit+0x3576/0x55e0
[  649.330176][ T7021]  ? kmsan_get_metadata+0x13e/0x1c0
[  649.335669][ T7021]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  649.342335][ T7021]  ? kmsan_get_metadata+0x13e/0x1c0
[  649.347816][ T7021]  ? __dev_queue_xmit+0x352/0x55e0
[  649.353245][ T7021]  ? __skb_clone+0x4bf/0x650
[  649.358166][ T7021]  __netlink_deliver_tap+0x84c/0xc90
[  649.363800][ T7021]  ? kmsan_get_metadata+0x13e/0x1c0
[  649.369288][ T7021]  netlink_unicast+0x1103/0x1260
[  649.374545][ T7021]  netlink_sendmsg+0x10da/0x11e0
[  649.379838][ T7021]  ? __pfx_netlink_sendmsg+0x10/0x10
[  649.385441][ T7021]  ? __pfx_netlink_sendmsg+0x10/0x10
[  649.391043][ T7021]  __sock_sendmsg+0x30f/0x380
[  649.396051][ T7021]  ____sys_sendmsg+0x877/0xb60
[  649.401128][ T7021]  ___sys_sendmsg+0x28d/0x3c0
[  649.406085][ T7021]  ? kmsan_get_metadata+0x13e/0x1c0
[  649.411580][ T7021]  ? __rcu_read_unlock+0x7b/0xe0
[  649.416830][ T7021]  ? __fget_files+0x4f5/0x5c0
[  649.421832][ T7021]  ? kmsan_get_metadata+0x13e/0x1c0
[  649.427359][ T7021]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  649.433488][ T7021]  __x64_sys_sendmsg+0x300/0x4a0
[  649.438747][ T7021]  ? perf_mmap+0x960/0x28d0
[  649.443581][ T7021]  x64_sys_call+0x2da0/0x3ba0
[  649.448577][ T7021]  do_syscall_64+0xcd/0x1e0
[  649.453404][ T7021]  ? clear_bhb_loop+0x25/0x80
[  649.458378][ T7021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.464624][ T7021] RIP: 0033:0x7f16d517dff9
[  649.469282][ T7021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  649.489236][ T7021] RSP: 002b:00007f16d5eef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  649.497989][ T7021] RAX: ffffffffffffffda RBX: 00007f16d5336130 RCX: 00007f16d517dff9
[  649.506235][ T7021] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000007
[  649.514467][ T7021] RBP: 00007f16d5eef090 R08: 0000000000000000 R09: 0000000000000000
[  649.522694][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  649.530918][ T7021] R13: 0000000000000001 R14: 00007f16d5336130 R15: 00007fff2de47c48
[  649.539215][ T7021]  </TASK>
[  649.811609][ T7005] loop1: detected capacity change from 0 to 4096
[  649.978759][ T7005] ntfs3: loop1: Unsupported bytes per MFT record 8192.
[  650.029021][ T7005] ntfs3: loop1: try to read out of volume at offset 0x1ffe00
[  650.442139][ T7032] Cannot find add_set index 0 as target
[  650.607966][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'.
[  650.913915][ T7041] sctp: [Deprecated]: syz.1.427 (pid 7041) Use of struct sctp_assoc_value in delayed_ack socket option.
[  650.913915][ T7041] Use struct sctp_sack_info instead
[  650.953379][ T7036] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.228467][ T5196] Bluetooth: hci0: command tx timeout
[  651.634152][ T7036] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.859240][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state
[  651.867316][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.875538][ T6970] bridge_slave_0: entered allmulticast mode
[  651.892554][ T6970] bridge_slave_0: entered promiscuous mode
[  652.040719][ T7036] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.097283][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.105574][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.114701][ T6970] bridge_slave_1: entered allmulticast mode
[  652.124272][ T6970] bridge_slave_1: entered promiscuous mode
[  652.322136][ T7036] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.579410][ T6970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  652.705239][ T6970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  653.020035][ T5227] tipc: Subscription rejected, illegal request
[  653.241360][ T7036] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  653.275276][ T7036] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  653.307962][ T7036] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  653.350441][ T7036] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  653.477675][ T6970] team0: Port device team_slave_0 added
[  653.502161][ T6970] team0: Port device team_slave_1 added
[  653.641364][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_0
[  653.649580][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.676274][ T6970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  653.740628][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_1
[  653.748394][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.775082][ T6970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  653.814875][ T7049] loop0: detected capacity change from 0 to 4096
[  653.975365][ T7049] ntfs3: loop0: ino=0, Correct links count -> 1.
[  654.177311][ T7049] ntfs3: loop0: MFT: r=0, expect seq=1 instead of 0!
[  654.184998][ T7049] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  654.269217][ T7049] ntfs3: loop0: Failed to load $MFT (-22).
[  654.413628][ T6970] hsr_slave_0: entered promiscuous mode
[  654.520726][ T6970] hsr_slave_1: entered promiscuous mode
[  654.598238][ T6970] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  654.606087][ T6970] Cannot create hsr debugfs directory
[  654.990504][ T7075] loop2: detected capacity change from 0 to 256
[  655.028996][ T7075] exfat: Unknown parameter '00000000000000000003'
[  655.164834][ T7077] Cannot find add_set index 0 as target
[  655.301273][ T7080] loop3: detected capacity change from 0 to 16
[  655.395093][ T7080] erofs: (device loop3): mounted with root inode @ nid 36.
[  655.639199][ T5196] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000]
[  655.663052][ T7085] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  655.678638][ T7085] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89
[  655.710567][   T29] audit: type=1800 audit(1727629294.898:41): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.438" name="file3" dev="loop3" ino=89 res=0 errno=0
[  656.188732][ T5252] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  656.409820][ T5252] usb 1-1: Using ep0 maxpacket: 8
[  656.460133][ T5252] usb 1-1: config 0 has an invalid interface number: 254 but max is 0
[  656.468809][ T5252] usb 1-1: config 0 has no interface number 0
[  656.610514][ T5252] usb 1-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice=7b.f3
[  656.620262][ T5252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.629212][ T5252] usb 1-1: Product: syz
[  656.633666][ T5252] usb 1-1: Manufacturer: syz
[  656.638811][ T5252] usb 1-1: SerialNumber: syz
[  656.655137][ T5252] usb 1-1: config 0 descriptor??
[  656.733154][ T7096] loop1: detected capacity change from 0 to 512
[  656.740241][ T5252] usb 1-1: can't set first interface for hiFace device.
[  656.747489][ T5252] snd-usb-hiface 1-1:0.254: probe with driver snd-usb-hiface failed with error -5
[  656.870792][ T7096] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.442: corrupted in-inode xattr: invalid ea_ino
[  656.939217][ T7096] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.442: couldn't read orphan inode 12 (err -117)
[  656.992047][ T7096] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  657.134036][ T7096] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.442: Directory hole found for htree leaf block 0
[  657.241639][    T8] usb 1-1: USB disconnect, device number 6
[  657.330155][ T7096] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.442: Directory hole found for htree leaf block 0
[  657.368821][ T5252] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  657.628560][ T5252] usb 4-1: Invalid ep0 maxpacket: 64
[  657.795721][ T5252] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[  658.054243][ T5209] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  658.064924][ T5252] usb 4-1: Invalid ep0 maxpacket: 64
[  658.202723][ T5252] usb usb4-port1: attempt power cycle
[  658.453919][ T6970] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  658.582647][ T5252] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[  658.619914][ T6970] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  658.671963][ T5252] usb 4-1: Invalid ep0 maxpacket: 64
[  658.735248][ T6970] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  658.817729][ T6970] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  658.827197][ T5252] usb 4-1: new low-speed USB device number 14 using dummy_hcd
[  658.931857][ T5252] usb 4-1: Invalid ep0 maxpacket: 64
[  658.939759][ T5252] usb usb4-port1: unable to enumerate USB device
[  659.381731][ T7133] Cannot find add_set index 0 as target
[  659.422569][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  659.429782][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  659.934871][ T7117] loop2: detected capacity change from 0 to 4096
[  659.988971][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.451'.
[  660.109886][ T7117] ntfs3: loop2: ino=0, Correct links count -> 1.
[  660.219157][ T6970] 8021q: adding VLAN 0 to HW filter on device bond0
[  660.273016][ T6970] 8021q: adding VLAN 0 to HW filter on device team0
[  660.400651][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.408643][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state
[  660.425751][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.433633][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state
[  660.606157][ T6970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  660.819722][ T7117] ntfs3: loop2: MFT: r=0, expect seq=1 instead of 0!
[  660.826998][ T7117] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  660.932613][ T7117] ntfs3: loop2: Failed to load $MFT (-22).
[  660.966485][ T7139] loop1: detected capacity change from 0 to 256
[  661.036580][ T7139] exfat: Unknown parameter ''
[  661.773680][ T7150] 9pnet_fd: Insufficient options for proto=fd
[  662.233276][ T7155] loop3: detected capacity change from 0 to 1024
[  662.246314][ T7159] netlink: 51 bytes leftover after parsing attributes in process `syz.2.456'.
[  662.255874][ T7159] tipc: Started in network mode
[  662.262042][ T7159] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  662.271798][ T7159] tipc: Enabled bearer <eth:vlan0>, priority 10
[  662.283059][ T7155] EXT4-fs: Ignoring removed nomblk_io_submit option
[  662.548601][ T5252] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  662.647909][ T7155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  662.701209][ T6970] 8021q: adding VLAN 0 to HW filter on device batadv0
[  662.794645][ T5252] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  662.804639][ T5252] usb 2-1: config 0 has no interface number 0
[  662.812068][ T5252] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  662.823568][ T5252] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  662.833934][ T5252] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  662.846177][ T5252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.112739][ T5252] usb 2-1: config 0 descriptor??
[  663.274386][ T5279] tipc: Node number set to 10005162
[  663.396927][ T7171] loop2: detected capacity change from 0 to 64
[  663.411275][ T7171] hfs: unable to parse mount options
[  663.598564][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  663.746617][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  663.780515][ T6493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  663.811567][ T5252] uclogic 0003:5543:0522.0007: unknown main item tag 0x0
[  663.819219][ T5252] uclogic 0003:5543:0522.0007: unknown main item tag 0x0
[  663.826620][ T5252] uclogic 0003:5543:0522.0007: unknown main item tag 0x0
[  663.837043][ T5252] uclogic 0003:5543:0522.0007: unknown main item tag 0x0
[  663.846532][ T5252] uclogic 0003:5543:0522.0007: unknown main item tag 0x0
[  663.935318][ T5252] uclogic 0003:5543:0522.0007: No inputs registered, leaving
[  664.141467][ T5252] uclogic 0003:5543:0522.0007: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.1-1/input2
[  664.330147][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.459'.
[  665.646549][ T1586] usb 2-1: USB disconnect, device number 13
[  665.657254][ T7191] Cannot find add_set index 0 as target
[  666.156777][ T7188] loop3: detected capacity change from 0 to 2048
[  666.639275][ T7188] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  666.864795][ T7188] syz.3.460: attempt to access beyond end of device
[  666.864795][ T7188] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  666.889583][ T7194] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  667.793258][ T6970] veth0_vlan: entered promiscuous mode
[  667.894221][ T6970] veth1_vlan: entered promiscuous mode
[  668.757982][ T6970] veth0_macvtap: entered promiscuous mode
[  668.794434][ T6970] veth1_macvtap: entered promiscuous mode
[  668.906855][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  668.917805][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.928353][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  668.939879][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.950460][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  668.961380][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.972157][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  668.988482][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.010574][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_0
[  669.255241][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  669.266278][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.277106][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  669.288256][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.304258][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  669.316810][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.327055][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  669.339500][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.355285][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_1
[  669.752137][ T6970] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  669.763067][ T6970] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  669.772852][ T6970] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  669.782537][ T6970] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  671.042780][ T7205] loop1: detected capacity change from 0 to 4096
[  671.104128][ T7213] sch_tbf: burst 511 is lower than device geneve0 mtu (1464) !
[  671.121519][ T7205] ntfs3: loop1: ino=0, Correct links count -> 1.
[  671.419604][ T7205] ntfs3: loop1: MFT: r=0, expect seq=1 instead of 0!
[  671.426978][ T7205] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  671.532098][ T7205] ntfs3: loop1: Failed to load $MFT (-22).
[  672.281630][ T7226] 9pnet_fd: Insufficient options for proto=fd
[  672.431420][ T7235] Cannot find add_set index 0 as target
[  672.458751][ T7226] loop0: detected capacity change from 0 to 1024
[  672.591957][ T7226] EXT4-fs: Ignoring removed nomblk_io_submit option
[  672.702202][ T7226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  673.218653][ T5252] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  673.509750][ T5252] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  673.519412][ T5252] usb 3-1: New USB device strings: Mfr=0, Product=232, SerialNumber=0
[  673.527985][ T5252] usb 3-1: Product: syz
[  673.642214][ T5252] usb 3-1: config 0 descriptor??
[  673.844178][ T5252] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  673.857475][ T5252] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  674.141849][ T6519] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  674.427925][ T7246] loop2: detected capacity change from 0 to 1024
[  674.640832][ T7246] hfsplus: invalid btree extent records (0 size)
[  674.647605][ T7246] hfsplus: failed to load extents file
[  675.321232][ T7266] loop1: detected capacity change from 0 to 4096
[  675.516079][ T7266] ntfs3: loop1: ino=0, Correct links count -> 1.
[  675.563681][ T5255] usb 3-1: USB disconnect, device number 15
[  675.573111][ T5255] ftdi_sio 3-1:0.0: device disconnected
[  676.040012][ T7266] ntfs3: loop1: MFT: r=0, expect seq=1 instead of 0!
[  676.047296][ T7266] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  676.149543][ T7266] ntfs3: loop1: Failed to load $MFT (-22).
[  676.507455][ T7281] loop3: detected capacity change from 0 to 1024
[  676.633170][ T7281] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  676.643544][ T7281] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  676.654367][ T7281] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  676.666573][ T7281] EXT4-fs (loop3): filesystem has both journal inode and journal device!
[  677.141443][ T7287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  677.311017][ T7287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  677.358828][ T5252] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  677.661995][ T7287] netlink: 36 bytes leftover after parsing attributes in process `syz.0.482'.
[  677.882053][ T5252] usb 1-1: unable to read config index 0 descriptor/all
[  677.889689][ T5252] usb 1-1: can't read configurations, error -61
[  678.228382][ T5252] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  678.299095][ T7293] Cannot find add_set index 0 as target
[  678.828510][ T5238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.836659][ T5238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  679.664014][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.672422][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  680.397702][ T7302] 9pnet_fd: Insufficient options for proto=fd
[  680.670281][ T5255] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  680.906099][ T7302] loop3: detected capacity change from 0 to 1024
[  680.926793][ T5255] usb 2-1: Using ep0 maxpacket: 8
[  680.993178][ T5255] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  681.004973][ T5255] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024
[  681.016756][ T5255] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  681.027254][ T5255] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  681.037471][ T5255] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  681.101500][ T7302] EXT4-fs: Ignoring removed nomblk_io_submit option
[  681.360973][ T7302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  681.560313][ T5255] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  681.570234][ T5255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.583462][ T5255] usb 2-1: Product: syz
[  681.587932][ T5255] usb 2-1: Manufacturer: syz
[  681.594584][ T5255] usb 2-1: SerialNumber: syz
[  682.018754][ T5255] cdc_ncm 2-1:1.0: bind() failure
[  682.042192][ T5255] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  682.049527][ T5255] cdc_ncm 2-1:1.1: bind() failure
[  682.266260][ T5255] usb 2-1: USB disconnect, device number 14
[  682.701557][ T6493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.850032][ T7325] loop4: detected capacity change from 0 to 4096
[  685.293168][ T7338] Cannot find add_set index 0 as target
[  685.682952][ T7325] ntfs3: loop4: ino=0, Correct links count -> 1.
[  686.053412][ T7325] ntfs3: loop4: MFT: r=0, expect seq=1 instead of 0!
[  686.060807][ T7325] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  686.156826][ T7325] ntfs3: loop4: Failed to load $MFT (-22).
[  688.213457][ T7357] loop4: detected capacity change from 0 to 16
[  688.421688][ T7357] erofs: (device loop4): mounted with root inode @ nid 36.
[  688.492390][ T7357] FAULT_INJECTION: forcing a failure.
[  688.492390][ T7357] name failslab, interval 1, probability 0, space 0, times 0
[  688.505617][ T7357] CPU: 1 UID: 0 PID: 7357 Comm: syz.4.500 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[  688.516241][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  688.526597][ T7357] Call Trace:
[  688.530103][ T7357]  <TASK>
[  688.533249][ T7357]  dump_stack_lvl+0x216/0x2d0
[  688.538296][ T7357]  dump_stack+0x1e/0x30
[  688.542794][ T7357]  should_fail_ex+0x748/0x7f0
[  688.547851][ T7357]  should_failslab+0x17f/0x210
[  688.552955][ T7357]  kmem_cache_alloc_lru_noprof+0xec/0xb30
[  688.559073][ T7357]  ? __d_alloc+0x69/0x9c0
[  688.563734][ T7357]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  688.569889][ T7357]  __d_alloc+0x69/0x9c0
[  688.574362][ T7357]  ? kmsan_get_metadata+0x13e/0x1c0
[  688.579883][ T7357]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  688.586048][ T7357]  d_alloc_parallel+0x9f/0x26c0
[  688.591238][ T7357]  ? __rcu_read_unlock+0x7b/0xe0
[  688.596532][ T7357]  ? __d_lookup+0x885/0x900
[  688.601367][ T7357]  ? filter_irq_stacks+0x60/0x1a0
[  688.606814][ T7357]  ? kmsan_get_metadata+0x13e/0x1c0
[  688.612327][ T7357]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  688.618490][ T7357]  path_openat+0x1120/0x6200
[  688.623495][ T7357]  do_filp_open+0x20e/0x590
[  688.628387][ T7357]  do_sys_openat2+0x1bf/0x2f0
[  688.633386][ T7357]  __x64_sys_openat+0x2a1/0x310
[  688.638606][ T7357]  x64_sys_call+0x120e/0x3ba0
[  688.643654][ T7357]  do_syscall_64+0xcd/0x1e0
[  688.648509][ T7357]  ? clear_bhb_loop+0x25/0x80
[  688.653521][ T7357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.659865][ T7357] RIP: 0033:0x7f46c877dff9
[  688.664589][ T7357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  688.684577][ T7357] RSP: 002b:00007f46c9658038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  688.693456][ T7357] RAX: ffffffffffffffda RBX: 00007f46c8935f80 RCX: 00007f46c877dff9
[  688.701732][ T7357] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c
[  688.710006][ T7357] RBP: 00007f46c9658090 R08: 0000000000000000 R09: 0000000000000000
[  688.718252][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  688.726497][ T7357] R13: 0000000000000000 R14: 00007f46c8935f80 R15: 00007fff21fc3228
[  688.734780][ T7357]  </TASK>
[  689.123080][ T5225] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.130027][ T7360] 9pnet_fd: Insufficient options for proto=fd
[  689.281724][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  689.299872][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  689.314514][ T5225] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.333157][ T5260] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  689.344092][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  689.405263][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  689.422039][   T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  689.432120][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  689.519661][ T5225] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.541037][ T5260] usb 4-1: Using ep0 maxpacket: 16
[  689.584894][ T5260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  689.596457][ T5260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  689.606915][ T5260] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  689.616506][ T5260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.634010][ T7360] loop1: detected capacity change from 0 to 1024
[  689.718008][ T7360] EXT4-fs: Ignoring removed nomblk_io_submit option
[  689.886644][ T5225] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.023738][ T5260] usb 4-1: config 0 descriptor??
[  690.061379][ T7360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  690.575271][ T7358] loop3: detected capacity change from 0 to 512
[  690.690278][ T7358] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  690.921700][ T7358] EXT4-fs (loop3): orphan cleanup on readonly fs
[  690.942521][ T5225] bridge_slave_1: left allmulticast mode
[  690.949084][ T5225] bridge_slave_1: left promiscuous mode
[  690.956866][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.995256][ T7358] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.499: bad orphan inode 15
[  691.118847][ T7358] ext4_test_bit(bit=14, block=18) = 1
[  691.124752][ T7358] is_bad_inode(inode)=0
[  691.129672][ T7358] NEXT_ORPHAN(inode)=1023
[  691.134427][ T7358] max_ino=32
[  691.138271][ T7358] i_nlink=0
[  691.143834][ T5225] bridge_slave_0: left allmulticast mode
[  691.150139][ T5225] bridge_slave_0: left promiscuous mode
[  691.157419][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.456744][ T7358] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2976: inode #15: comm syz.3.499: corrupted xattr block 19: e_value size too large
[  691.506394][ T7380] loop0: detected capacity change from 0 to 256
[  691.577681][ T7385] Cannot find add_set index 0 as target
[  691.584789][ T7358] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117)
[  691.599657][ T7358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  691.688492][   T52] Bluetooth: hci3: command tx timeout
[  691.909871][ T7380] exFAT-fs (loop0): bogus fat length
[  691.915432][ T7380] exFAT-fs (loop0): failed to read boot sector
[  691.927880][ T7380] exFAT-fs (loop0): failed to recognize exfat type
[  692.113352][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.209725][ T7387] loop4: detected capacity change from 0 to 16
[  692.281313][ T5209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  692.580302][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  692.611254][ T5260] razer 0003:1532:011B.0008: failed to enable macro keys: -71
[  692.645158][ T5260] razer 0003:1532:011B.0008: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.3-1/input0
[  692.696318][ T5225] bridge0 (unregistering): left allmulticast mode
[  692.835177][ T5260] usb 4-1: USB disconnect, device number 15
[  692.904635][ T5259] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  692.975621][ T5225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  693.078802][ T5259] usb 1-1: Using ep0 maxpacket: 8
[  693.090032][ T5225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  693.094315][ T5259] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  693.110598][ T5259] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024
[  693.122355][ T5259] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  693.132876][ T5259] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  693.143032][ T5259] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  693.209274][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'.
[  693.214308][ T5225] bond0 (unregistering): Released all slaves
[  693.344069][ T5225] bond1 (unregistering): Released all slaves
[  693.372111][ T5225] bond2 (unregistering): Released all slaves
[  693.393497][ T5225] bond3 (unregistering): Released all slaves
[  693.437650][ T5225] bond4 (unregistering): Released all slaves
[  693.465638][ T5225] bond5 (unregistering): Released all slaves
[  693.547607][ T5259] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  693.557516][ T5259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.570452][ T5259] usb 1-1: Product: syz
[  693.574908][ T5259] usb 1-1: Manufacturer: syz
[  693.576580][ T5225] bond6 (unregistering): Released all slaves
[  693.581898][ T5259] usb 1-1: SerialNumber: syz
[  693.604983][ T5225] bond7 (unregistering): Released all slaves
[  693.792153][   T52] Bluetooth: hci3: command tx timeout
[  693.941592][ T6493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  694.594567][ T5259] usb 1-1: can't set config #1, error -71
[  694.617482][ T5259] usb 1-1: USB disconnect, device number 9
[  694.695213][ T5225] tipc: Disabling bearer <eth:vlan0>
[  694.708000][ T5225] tipc: Left network mode
[  695.186362][ T7400] loop4: detected capacity change from 0 to 1024
[  695.209170][ T5259] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  695.286311][ T7400] hfsplus: unable to parse mount options
[  695.341294][ T7405] loop3: detected capacity change from 0 to 1024
[  695.439555][ T7364] chnl_net:caif_netlink_parms(): no params data found
[  695.464870][ T5259] usb 1-1: Using ep0 maxpacket: 8
[  695.472332][ T7405] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  695.512994][ T5259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  695.524664][ T5259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  695.535083][ T5259] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  695.541558][ T7405] UDF-fs: error (device loop3): udf_read_inode: (ino 832) failed !bh
[  695.544620][ T5259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.552981][ T7405] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=48, partition=0
[  695.800258][ T5259] usb 1-1: config 0 descriptor??
[  695.937172][   T52] Bluetooth: hci3: command tx timeout
[  696.051864][ T7395] loop1: detected capacity change from 0 to 4096
[  696.280596][ T5225] hsr_slave_0: left promiscuous mode
[  696.302076][ T5225] hsr_slave_1: left promiscuous mode
[  696.337742][ T7395] ntfs3: loop1: ino=0, Correct links count -> 1.
[  696.433066][ T5225] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  696.441574][ T5225] batman_adv: batadv0: Removing interface: batadv_slave_0
[  696.453489][ T7407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.518925][ T5225] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  696.533111][ T5225] batman_adv: batadv0: Removing interface: batadv_slave_1
[  696.552336][ T7407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.723127][ T5259] usbhid 1-1:0.0: can't add hid device: -71
[  696.730155][ T5259] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  696.777464][ T5259] usb 1-1: USB disconnect, device number 10
[  696.778964][ T7395] ntfs3: loop1: MFT: r=0, expect seq=1 instead of 0!
[  696.790851][ T7395] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  696.800166][ T5225] veth1_macvtap: left promiscuous mode
[  696.805993][ T5225] veth0_macvtap: left promiscuous mode
[  696.812232][ T5225] veth1_vlan: left promiscuous mode
[  696.817856][ T5225] veth0_vlan: left promiscuous mode
[  696.832257][ T7395] ntfs3: loop1: Failed to load $MFT (-22).
[  697.564919][ T5225] pim6reg (unregistering): left allmulticast mode
[  697.799706][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'.
[  697.816010][ T7425] overlayfs: failed to resolve './file2': -2
[  697.948627][   T52] Bluetooth: hci3: command tx timeout
[  698.218644][ T7432] netlink: 216 bytes leftover after parsing attributes in process `syz.3.518'.
[  698.228351][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'.
[  698.318467][ T7433] 9pnet_fd: Insufficient options for proto=fd
[  698.637302][ T5225] team0 (unregistering): Port device team_slave_1 removed
[  698.716472][ T7428] loop1: detected capacity change from 0 to 1024
[  698.724309][ T5225] team0 (unregistering): Port device team_slave_0 removed
[  698.785398][ T7428] EXT4-fs: Ignoring removed nomblk_io_submit option
[  699.061639][ T7428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  699.283720][ T7423] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.677836][ T7423] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.879970][ T7438] loop3: detected capacity change from 0 to 4096
[  699.934481][ T7438] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  700.130191][ T7423] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.156485][ T5209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  700.207919][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.226698][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.236976][ T7364] bridge_slave_0: entered allmulticast mode
[  700.249093][ T7364] bridge_slave_0: entered promiscuous mode
[  700.265126][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.273177][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state
[  700.281849][ T7364] bridge_slave_1: entered allmulticast mode
[  700.291599][ T7364] bridge_slave_1: entered promiscuous mode
[  700.380581][ T7437] ntfs3: loop3: ino=3, ntfs_iget5
[  700.798986][ T7423] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.874116][ T7454] loop1: detected capacity change from 0 to 128
[  700.917226][ T7364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  701.078249][ T7364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  701.506931][ T7364] team0: Port device team_slave_0 added
[  701.608525][ T7423] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  701.646485][ T7423] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  701.686500][ T7423] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  701.720217][ T7423] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  701.761390][ T7364] team0: Port device team_slave_1 added
[  701.795266][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'.
[  702.548254][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  702.555506][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  702.586051][ T7364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  702.614488][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'.
[  702.737761][ T7471] netlink: 160 bytes leftover after parsing attributes in process `syz.3.526'.
[  702.841973][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  702.849558][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  702.881292][ T7364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  703.177114][ T7364] hsr_slave_0: entered promiscuous mode
[  703.260197][ T7364] hsr_slave_1: entered promiscuous mode
[  703.456866][ T7459] loop1: detected capacity change from 0 to 4096
[  703.620637][ T7459] ntfs3: loop1: ino=0, Correct links count -> 1.
[  704.084502][ T7459] ntfs3: loop1: MFT: r=0, expect seq=1 instead of 0!
[  704.092637][ T7459] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  704.171414][ T7487] 9pnet_fd: Insufficient options for proto=fd
[  704.199583][ T7459] ntfs3: loop1: Failed to load $MFT (-22).
[  704.308845][ T7487] loop3: detected capacity change from 0 to 1024
[  704.354052][ T7487] EXT4-fs: Ignoring removed nomblk_io_submit option
[  704.531085][ T7487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  704.749265][ T7493] loop0: detected capacity change from 0 to 512
[  704.793885][ T7493] EXT4-fs: Ignoring removed mblk_io_submit option
[  704.873501][ T7493] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.532: corrupted in-inode xattr: invalid ea_ino
[  704.903182][ T7493] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.532: couldn't read orphan inode 15 (err -117)
[  705.031717][ T7493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  705.460314][ T6519] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  706.013303][ T7364] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  706.204631][ T7505] loop1: detected capacity change from 0 to 512
[  706.265416][ T7364] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  706.356087][ T7364] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  706.401695][ T6493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  706.581792][ T7515] loop4: detected capacity change from 0 to 1764
[  706.591080][ T7515] iso9660: Unknown parameter '01777777777777777777777'
[  706.608949][ T5252] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  706.640032][ T7364] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  707.464224][ T7521] FAULT_INJECTION: forcing a failure.
[  707.464224][ T7521] name failslab, interval 1, probability 0, space 0, times 0
[  707.477818][ T7521] CPU: 1 UID: 0 PID: 7521 Comm: syz.3.538 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[  707.488945][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  707.499269][ T7521] Call Trace:
[  707.502752][ T7521]  <TASK>
[  707.505966][ T7521]  dump_stack_lvl+0x216/0x2d0
[  707.510980][ T7521]  dump_stack+0x1e/0x30
[  707.515440][ T7521]  should_fail_ex+0x748/0x7f0
[  707.520469][ T7521]  should_failslab+0x17f/0x210
[  707.525517][ T7521]  kmem_cache_alloc_node_noprof+0xeb/0xb80
[  707.531752][ T7521]  ? __alloc_skb+0x1e9/0x7b0
[  707.536639][ T7521]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  707.542741][ T7521]  __alloc_skb+0x1e9/0x7b0
[  707.547433][ T7521]  netlink_ack+0x281/0xe80
[  707.552150][ T7521]  ? kmsan_get_metadata+0x13e/0x1c0
[  707.557630][ T7521]  netlink_rcv_skb+0x510/0x650
[  707.562797][ T7521]  ? __pfx_genl_rcv_msg+0x10/0x10
[  707.568151][ T7521]  ? __pfx_genl_rcv+0x10/0x10
[  707.573098][ T7521]  genl_rcv+0x40/0x60
[  707.577369][ T7521]  netlink_unicast+0xf52/0x1260
[  707.582528][ T7521]  netlink_sendmsg+0x10da/0x11e0
[  707.587831][ T7521]  ? __pfx_netlink_sendmsg+0x10/0x10
[  707.593480][ T7521]  ? __pfx_netlink_sendmsg+0x10/0x10
[  707.599108][ T7521]  __sock_sendmsg+0x30f/0x380
[  707.604155][ T7521]  ____sys_sendmsg+0x877/0xb60
[  707.609254][ T7521]  ___sys_sendmsg+0x28d/0x3c0
[  707.614226][ T7521]  ? kmsan_get_metadata+0x13e/0x1c0
[  707.619734][ T7521]  ? __rcu_read_unlock+0x7b/0xe0
[  707.624995][ T7521]  ? __fget_files+0x4f5/0x5c0
[  707.630017][ T7521]  ? kmsan_get_metadata+0x13e/0x1c0
[  707.635613][ T7521]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  707.641739][ T7521]  __x64_sys_sendmsg+0x300/0x4a0
[  707.646990][ T7521]  ? perf_mmap+0x960/0x28d0
[  707.652051][ T7521]  x64_sys_call+0x2da0/0x3ba0
[  707.657058][ T7521]  do_syscall_64+0xcd/0x1e0
[  707.661875][ T7521]  ? clear_bhb_loop+0x25/0x80
[  707.666833][ T7521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.673081][ T7521] RIP: 0033:0x7f431a57dff9
[  707.677754][ T7521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  707.697683][ T7521] RSP: 002b:00007f431b381038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  707.706435][ T7521] RAX: ffffffffffffffda RBX: 00007f431a735f80 RCX: 00007f431a57dff9
[  707.714674][ T7521] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[  707.722923][ T7521] RBP: 00007f431b381090 R08: 0000000000000000 R09: 0000000000000000
[  707.731242][ T7521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  707.739441][ T7521] R13: 0000000000000000 R14: 00007f431a735f80 R15: 00007ffd4a5c4418
[  707.747798][ T7521]  </TASK>
[  707.791315][ T4563] Bluetooth: hci1: command 0x0406 tx timeout
[  707.803337][ T4563] Bluetooth: hci2: command 0x0406 tx timeout
[  707.938483][ T7364] 8021q: adding VLAN 0 to HW filter on device bond0
[  707.990963][ T7364] 8021q: adding VLAN 0 to HW filter on device team0
[  708.063810][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state
[  708.071742][ T5238] bridge0: port 1(bridge_slave_0) entered forwarding state
[  708.088749][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.096522][ T5238] bridge0: port 2(bridge_slave_1) entered forwarding state
[  708.551924][ T7525] netlink: 'syz.0.540': attribute type 11 has an invalid length.
[  708.827117][ T7527] loop1: detected capacity change from 0 to 512
[  708.890046][ T7527] EXT4-fs: Ignoring removed mblk_io_submit option
[  709.302389][ T7538] x_tables: ip_tables: udp match: only valid for protocol 17
[  709.449439][ T7527] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.539: corrupted in-inode xattr: invalid ea_ino
[  709.521602][ T7527] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.539: couldn't read orphan inode 15 (err -117)
[  709.665812][ T7527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  709.744946][ T7546] loop0: detected capacity change from 0 to 256
[  709.940512][ T7546] vfat: Bad value for 'uid'
[  709.949552][ T7546] vfat: Bad value for 'uid'
[  710.281612][ T5209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  710.729024][ T7364] 8021q: adding VLAN 0 to HW filter on device batadv0
[  711.066725][ T7561] loop1: detected capacity change from 0 to 512
[  711.096511][ T7364] veth0_vlan: entered promiscuous mode
[  711.111103][ T7561] EXT4-fs: Ignoring removed mblk_io_submit option
[  711.186201][ T7364] veth1_vlan: entered promiscuous mode
[  711.427399][ T7561] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.545: corrupted in-inode xattr: invalid ea_ino
[  711.465227][ T7565] 9pnet_fd: Insufficient options for proto=fd
[  711.541217][ T7561] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.545: couldn't read orphan inode 15 (err -117)
[  711.588989][ T7364] veth0_macvtap: entered promiscuous mode
[  711.614284][ T7364] veth1_macvtap: entered promiscuous mode
[  711.681564][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  711.697849][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.709657][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  711.720829][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.731266][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  711.742278][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.752681][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  711.763625][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.779912][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  711.827784][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  711.839379][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.849748][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  711.860609][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.873030][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  711.883975][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.898685][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  711.911482][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.927345][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_1
[  711.971497][ T7561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  712.072316][ T7565] loop4: detected capacity change from 0 to 1024
[  712.127383][ T7364] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  712.137089][ T7364] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  712.147005][ T7364] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  712.156521][ T7364] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  712.169080][ T7565] EXT4-fs: Ignoring removed nomblk_io_submit option
[  712.457115][ T5209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  712.903346][ T7580] sch_tbf: burst 4 is lower than device lo mtu (65550) !
[  713.061748][ T7565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  713.728695][ T7595] loop0: detected capacity change from 0 to 1024
[  713.755527][ T7595] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  713.796970][ T7595] JBD2: no valid journal superblock found
[  713.803882][ T7595] EXT4-fs (loop0): Could not load journal inode
[  713.815276][ T5255] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  714.182779][ T5255] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  714.193560][ T5255] usb 4-1: config 0 has no interfaces?
[  714.200121][ T5255] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  714.209766][ T5255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.301631][ T5255] usb 4-1: config 0 descriptor??
[  714.463730][ T6970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  714.482785][ T7599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.554'.
[  714.511401][ T7599] binder: BINDER_SET_CONTEXT_MGR already set
[  714.517753][ T7599] binder: 7598:7599 ioctl 4018620d 20000100 returned -16
[  714.527269][ T7599] binder: 7598:7599 ioctl c018620c 20000000 returned -1
[  714.865420][ T5279] usb 4-1: USB disconnect, device number 16
[  715.327322][ T7606] loop0: detected capacity change from 0 to 4096
[  715.367399][ T7606] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  715.947772][ T7606] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[  716.529449][ T7621] Bluetooth: MGMT ver 1.23
[  716.799573][ T7626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  717.178713][ T7635] 9pnet_fd: Insufficient options for proto=fd
[  717.370324][ T7635] loop0: detected capacity change from 0 to 1024
[  717.402095][ T7635] EXT4-fs: Ignoring removed nomblk_io_submit option
[  717.573400][ T7635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  717.914291][ T7648] loop1: detected capacity change from 0 to 128
[  718.009179][ T7648] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  718.325596][ T7648] overlay: ./file1 is not a directory
[  718.420657][   T29] audit: type=1804 audit(1727629357.628:42): pid=7648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.565" name="/newroot/134/file0/bus/bus" dev="loop1" ino=117 res=1 errno=0
[  718.587084][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.566'.
[  718.588653][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  718.599867][ T7652] netlink: 48 bytes leftover after parsing attributes in process `syz.3.566'.
[  718.611906][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.566'.
[  718.618932][ T5196] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  719.185582][ T6519] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  719.791034][ T5267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  719.799343][ T5267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.122152][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.131306][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.158397][ T5255] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  720.345820][ T5255] usb 5-1: Using ep0 maxpacket: 32
[  720.384081][ T5255] usb 5-1: config 0 has an invalid interface number: 16 but max is 0
[  720.397276][ T5255] usb 5-1: config 0 has no interface number 0
[  720.405286][ T5255] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  720.415864][ T5255] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  720.545352][ T5255] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  720.555671][ T5255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.564183][ T5255] usb 5-1: Product: syz
[  720.568849][ T5255] usb 5-1: Manufacturer: syz
[  720.573749][ T5255] usb 5-1: SerialNumber: syz
[  720.575852][ T7661] loop1: detected capacity change from 0 to 4096
[  720.633520][ T7661] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  720.730864][ T5255] usb 5-1: config 0 descriptor??
[  720.755101][ T7663] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  720.764680][ T7663] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  720.857491][ T5255] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  720.895093][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  720.906013][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  721.165788][ T5255] usb 5-1: USB disconnect, device number 10
[  721.317762][ T7679] overlayfs: failed to resolve './file1': -2
[  721.343362][ T7661] ntfs3: loop1: ino=3, ntfs_iget5
[  721.724501][ T5260] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  721.937360][ T5260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  721.949811][ T5260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  721.961714][ T5260] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  721.975283][ T5260] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  721.985527][ T5260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.083017][ T7690] 9pnet_fd: Insufficient options for proto=fd
[  722.202574][ T5260] usb 1-1: config 0 descriptor??
[  722.212995][ T7679] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  722.413766][ T7690] loop2: detected capacity change from 0 to 1024
[  722.425305][ T7690] EXT4-fs: Ignoring removed nomblk_io_submit option
[  722.608505][ T7690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  722.674502][ T5260] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  722.777000][ T5260] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  722.929497][ T5260] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  723.146934][ T5260] usb 1-1: USB disconnect, device number 12
[  724.223114][ T7706] FAULT_INJECTION: forcing a failure.
[  724.223114][ T7706] name failslab, interval 1, probability 0, space 0, times 0
[  724.237749][ T7706] CPU: 1 UID: 0 PID: 7706 Comm: syz.4.583 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[  724.248375][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  724.258721][ T7706] Call Trace:
[  724.262226][ T7706]  <TASK>
[  724.265399][ T7706]  dump_stack_lvl+0x216/0x2d0
[  724.270459][ T7706]  dump_stack+0x1e/0x30
[  724.274966][ T7706]  should_fail_ex+0x748/0x7f0
[  724.280029][ T7706]  should_failslab+0x17f/0x210
[  724.285125][ T7706]  kmem_cache_alloc_node_noprof+0xeb/0xb80
[  724.291362][ T7706]  ? __alloc_skb+0x1e9/0x7b0
[  724.296292][ T7706]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  724.302452][ T7706]  __alloc_skb+0x1e9/0x7b0
[  724.307197][ T7706]  netlink_ack+0x281/0xe80
[  724.311974][ T7706]  ? kmsan_get_metadata+0x13e/0x1c0
[  724.317522][ T7706]  netlink_rcv_skb+0x510/0x650
[  724.322662][ T7706]  ? __pfx_genl_rcv_msg+0x10/0x10
[  724.328002][ T7706]  ? __pfx_genl_rcv+0x10/0x10
[  724.332955][ T7706]  genl_rcv+0x40/0x60
[  724.337228][ T7706]  netlink_unicast+0xf52/0x1260
[  724.342452][ T7706]  netlink_sendmsg+0x10da/0x11e0
[  724.347769][ T7706]  ? __pfx_netlink_sendmsg+0x10/0x10
[  724.353421][ T7706]  ? __pfx_netlink_sendmsg+0x10/0x10
[  724.359068][ T7706]  __sock_sendmsg+0x30f/0x380
[  724.364140][ T7706]  ____sys_sendmsg+0x877/0xb60
[  724.369294][ T7706]  ___sys_sendmsg+0x28d/0x3c0
[  724.374297][ T7706]  ? kmsan_get_metadata+0x13e/0x1c0
[  724.379839][ T7706]  ? __rcu_read_unlock+0x7b/0xe0
[  724.385125][ T7706]  ? __fget_files+0x4f5/0x5c0
[  724.390198][ T7706]  ? kmsan_get_metadata+0x13e/0x1c0
[  724.395720][ T7706]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  724.401938][ T7706]  __x64_sys_sendmsg+0x300/0x4a0
[  724.407222][ T7706]  ? perf_mmap+0x960/0x28d0
[  724.412104][ T7706]  x64_sys_call+0x2da0/0x3ba0
[  724.417185][ T7706]  do_syscall_64+0xcd/0x1e0
[  724.422063][ T7706]  ? clear_bhb_loop+0x25/0x80
[  724.427079][ T7706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  724.433401][ T7706] RIP: 0033:0x7f46c877dff9
[  724.438106][ T7706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  724.458080][ T7706] RSP: 002b:00007f46c9637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  724.466906][ T7706] RAX: ffffffffffffffda RBX: 00007f46c8936058 RCX: 00007f46c877dff9
[  724.475184][ T7706] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000007
[  724.483465][ T7706] RBP: 00007f46c9637090 R08: 0000000000000000 R09: 0000000000000000
[  724.491733][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  724.500004][ T7706] R13: 0000000000000000 R14: 00007f46c8936058 R15: 00007fff21fc3228
[  724.508295][ T7706]  </TASK>
[  724.861098][ T7697] loop3: detected capacity change from 0 to 32768
[  725.147630][ T7364] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  725.601537][ T7700] overlayfs: failed to resolve './file2': -2
[  725.862469][ T7719] syzkaller1: entered promiscuous mode
[  725.870919][ T7719] syzkaller1: entered allmulticast mode
[  726.072007][ T7723] loop0: detected capacity change from 0 to 8
[  726.074248][ T7720] overlay: Unknown parameter '�>��Ȧp����1��9nH�'rپ�%~4�U�ܸ���U���4a��f�q��'
[  726.127193][ T7723] squashfs: Unknown parameter '���D�K�:�^�P�P��_���g֍��G%��|�]��ȍ�����	(�8��M�{DE�q�:���%E_�����N��wf���v�~���ϥ��B��'
[  726.287940][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'.
[  726.616630][ T7720] loop2: detected capacity change from 0 to 1024
[  726.637673][ T7720] EXT4-fs (loop2): inodes count not valid: 0 vs 32
[  727.382108][ T5238] tipc: Subscription rejected, illegal request
[  727.398936][ T7738] netlink: 80 bytes leftover after parsing attributes in process `syz.2.594'.
[  727.632082][ T7744] 9pnet_fd: Insufficient options for proto=fd
[  727.834369][ T7744] loop4: detected capacity change from 0 to 1024
[  727.923650][ T7744] EXT4-fs: Ignoring removed nomblk_io_submit option
[  728.122050][ T7748] loop2: detected capacity change from 0 to 2048
[  728.164599][ T7744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  728.184313][ T7748] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  728.228706][ T7751] netlink: 216 bytes leftover after parsing attributes in process `syz.1.599'.
[  728.238418][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'.
[  729.394476][ T6970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  730.499098][ T7774] mkiss: ax0: crc mode is auto.
[  731.148553][ T7760] loop1: detected capacity change from 0 to 32768
[  731.185475][ T7774] loop4: detected capacity change from 0 to 2048
[  731.204305][ T7774] ext4: Unknown parameter 'smackfstransmute'
[  731.622623][ T7760] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  731.795910][ T7777] loop0: detected capacity change from 0 to 1024
[  731.832661][ T7777] hfsplus: failed to load attributes file
[  732.251439][ T5209] ocfs2: Unmounting device (7,1) on (node local)
[  732.521110][ T7798] 9pnet_fd: Insufficient options for proto=fd
[  732.738499][ T7798] loop2: detected capacity change from 0 to 1024
[  732.772150][ T7798] EXT4-fs: Ignoring removed nomblk_io_submit option
[  732.890698][ T7798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  732.941089][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'.
[  733.170329][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.618'.
[  733.630133][ T7811] loop4: detected capacity change from 0 to 256
[  733.770422][ T7364] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  734.238471][ T5255] IPVS: starting estimator thread 0...
[  734.287187][ T7821] tipc: Started in network mode
[  734.292613][ T7821] tipc: Node identity ac1414aa, cluster identity 4711
[  734.302040][ T7821] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  734.309568][ T7821] tipc: Enabled bearer <udp:s>, priority 10
[  734.360062][ T7823] IPVS: using max 192 ests per chain, 9600 per kthread
[  734.431786][ T7819] loop3: detected capacity change from 0 to 1764
[  734.449773][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  734.451853][ T7819] iso9660: Unknown parameter '01777777777777777777777'
[  734.588400][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  734.701876][ T5259] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  734.715968][ T7830] FAULT_INJECTION: forcing a failure.
[  734.715968][ T7830] name failslab, interval 1, probability 0, space 0, times 0
[  734.729239][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  734.742621][ T7830] CPU: 0 UID: 0 PID: 7830 Comm: syz.1.626 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[  734.753323][ T7830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  734.763648][ T7830] Call Trace:
[  734.767128][ T7830]  <TASK>
[  734.770257][ T7830]  dump_stack_lvl+0x216/0x2d0
[  734.775267][ T7830]  dump_stack+0x1e/0x30
[  734.779733][ T7830]  should_fail_ex+0x748/0x7f0
[  734.784745][ T7830]  should_failslab+0x17f/0x210
[  734.789799][ T7830]  __kmalloc_noprof+0x175/0xf30
[  734.794978][ T7830]  ? __se_sys_memfd_create+0x604/0x1260
[  734.800844][ T7830]  __se_sys_memfd_create+0x604/0x1260
[  734.806718][ T7830]  ? ksys_write+0x416/0x4c0
[  734.811525][ T7830]  ? kmsan_get_metadata+0x13e/0x1c0
[  734.817044][ T7830]  __x64_sys_memfd_create+0x6c/0xa0
[  734.822625][ T7830]  x64_sys_call+0x31cf/0x3ba0
[  734.827695][ T7830]  do_syscall_64+0xcd/0x1e0
[  734.832561][ T7830]  ? clear_bhb_loop+0x25/0x80
[  734.837543][ T7830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.843897][ T7830] RIP: 0033:0x7f45dc97dff9
[  734.848667][ T7830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  734.868655][ T7830] RSP: 002b:00007f45dd792e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  734.877457][ T7830] RAX: ffffffffffffffda RBX: 000000000001f797 RCX: 00007f45dc97dff9
[  734.885751][ T7830] RDX: 00007f45dd792ef0 RSI: 0000000000000000 RDI: 00007f45dc9f0b02
[  734.894063][ T7830] RBP: 000000002003f280 R08: 00007f45dd792bb7 R09: 00007f45dd792e40
[  734.902372][ T7830] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000000
[  734.910743][ T7830] R13: 00007f45dd792ef0 R14: 00007f45dd792eb0 R15: 0000000020000740
[  734.919034][ T7830]  </TASK>
[  734.923971][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  735.058370][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  735.118493][ T5259] usb 1-1: Using ep0 maxpacket: 16
[  735.143245][ T5259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  735.156698][ T5259] usb 1-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00
[  735.166439][ T5259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.198522][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  735.257385][ T5259] usb 1-1: config 0 descriptor??
[  735.349366][ T5279] tipc: Node number set to 2886997162
[  735.419152][ T5255] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  735.480279][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  735.481054][ T7834] loop4: detected capacity change from 0 to 2048
[  735.499072][ T7834] udf: Unknown parameter 'unhi5�K|j��`J���
de'
[  735.609555][ T5255] usb 3-1: Using ep0 maxpacket: 16
[  735.641761][ T5255] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  735.658361][ T5255] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  735.670170][ T5255] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  735.681669][ T5255] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  735.702470][ T7834] netlink: 20 bytes leftover after parsing attributes in process `syz.4.628'.
[  735.752700][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  735.790116][ T5255] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  735.800148][ T5255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.808759][ T5255] usb 3-1: Product: syz
[  735.813258][ T5255] usb 3-1: Manufacturer: syz
[  735.818686][ T5255] usb 3-1: SerialNumber: syz
[  736.006101][ T7821] loop0: detected capacity change from 0 to 1024
[  736.033632][ T7821] hfsplus: unable to parse mount options
[  736.278462][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  736.481917][ T5279] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  736.519291][ T7821] loop0: detected capacity change from 0 to 256
[  736.536347][ T7821] exfat: Unknown parameter 'nl80211'
[  736.619924][ T7821] netlink: 'syz.0.623': attribute type 3 has an invalid length.
[  736.632611][ T5255] usb 3-1: USB disconnect, device number 16
[  736.693522][ T5259] usbhid 1-1:0.0: can't add hid device: -71
[  736.700528][ T5259] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  736.727716][ T5259] usb 1-1: USB disconnect, device number 13
[  736.750073][ T5279] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  736.812664][ T5279] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  736.823112][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  736.832828][ T5279] usb 2-1: SerialNumber: syz
[  736.929933][ T7846] 9pnet_fd: Insufficient options for proto=fd
[  737.234550][ T7846] loop4: detected capacity change from 0 to 1024
[  737.262606][ T7846] EXT4-fs: Ignoring removed nomblk_io_submit option
[  737.349607][ T7846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  737.524966][ T5279] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42
[  738.100232][ T5260] usb 2-1: USB disconnect, device number 15
[  738.112546][ T5260] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device
[  738.242737][ T7860] FAULT_INJECTION: forcing a failure.
[  738.242737][ T7860] name failslab, interval 1, probability 0, space 0, times 0
[  738.255966][ T7860] CPU: 0 UID: 0 PID: 7860 Comm: syz.3.635 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[  738.266563][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  738.276916][ T7860] Call Trace:
[  738.280448][ T7860]  <TASK>
[  738.283620][ T7860]  dump_stack_lvl+0x216/0x2d0
[  738.288679][ T7860]  dump_stack+0x1e/0x30
[  738.293186][ T7860]  should_fail_ex+0x748/0x7f0
[  738.298267][ T7860]  should_failslab+0x17f/0x210
[  738.303402][ T7860]  kmem_cache_alloc_noprof+0xe2/0xb20
[  738.309166][ T7860]  ? vm_area_alloc+0x5c/0x410
[  738.314243][ T7860]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  738.320421][ T7860]  vm_area_alloc+0x5c/0x410
[  738.325325][ T7860]  mmap_region+0x1a25/0x43e0
[  738.330365][ T7860]  do_mmap+0xead/0x1b00
[  738.334896][ T7860]  vm_mmap_pgoff+0x23b/0x5a0
[  738.339854][ T7860]  ksys_mmap_pgoff+0x16e/0x790
[  738.344968][ T7860]  ? kmsan_get_metadata+0x13e/0x1c0
[  738.350508][ T7860]  __x64_sys_mmap+0x1a8/0x240
[  738.355563][ T7860]  x64_sys_call+0x1bfb/0x3ba0
[  738.360620][ T7860]  do_syscall_64+0xcd/0x1e0
[  738.365490][ T7860]  ? clear_bhb_loop+0x25/0x80
[  738.370498][ T7860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.376807][ T7860] RIP: 0033:0x7f431a57e033
[  738.381534][ T7860] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  738.401572][ T7860] RSP: 002b:00007f431b380e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  738.410338][ T7860] RAX: ffffffffffffffda RBX: 00000000000055b8 RCX: 00007f431a57e033
[  738.418599][ T7860] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  738.426849][ T7860] RBP: 000000002000ac42 R08: 00000000ffffffff R09: 0000000000000000
[  738.435110][ T7860] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004
[  738.443353][ T7860] R13: 00007f431b380ef0 R14: 00007f431b380eb0 R15: 0000000020000280
[  738.451608][ T7860]  </TASK>
[  738.479299][ T6970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  738.787178][ T7840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.630'.
[  739.063366][ T7869] loop0: detected capacity change from 0 to 64
[  739.478299][    C0] net_ratelimit: 2 callbacks suppressed
[  739.478388][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  739.515666][ T7879] netlink: 'syz.3.644': attribute type 11 has an invalid length.
[  739.618563][ T5259] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  739.801647][ T5259] usb 5-1: Using ep0 maxpacket: 8
[  739.827786][ T5259] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  739.836876][ T5259] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  739.851941][ T5259] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  739.863658][ T5259] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  739.875962][ T5259] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  739.890077][ T5259] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  739.899729][ T5259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.929166][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'.
[  740.170150][ T5259] usb 5-1: usb_control_msg returned -32
[  740.176183][ T5259] usbtmc 5-1:16.0: can't read capabilities
[  740.298353][ T5255] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  740.475346][ T7886] loop2: detected capacity change from 0 to 1024
[  740.477097][ T5255] usb 2-1: Using ep0 maxpacket: 32
[  740.508444][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  740.543184][ T7886] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  740.545038][ T5255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  740.569749][ T5255] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  740.584973][ T5255] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  740.594604][ T5255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.625259][ T7886] JBD2: no valid journal superblock found
[  740.631780][ T7886] EXT4-fs (loop2): Could not load journal inode
[  740.726358][ T5255] usb 2-1: config 0 descriptor??
[  741.205916][ T5255] kone 0003:1E7D:2CED.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0
[  741.396317][ T7893] 9pnet_fd: Insufficient options for proto=fd
[  741.548538][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  741.651722][ T7893] loop3: detected capacity change from 0 to 1024
[  741.658476][ T5255] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  741.684118][ T7893] EXT4-fs: Ignoring removed nomblk_io_submit option
[  741.826593][ T5255] usb 3-1: Using ep0 maxpacket: 32
[  741.827987][ T7893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  741.857516][ T5255] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  741.867377][ T5255] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  741.876805][ T5255] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  741.886589][ T5255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  741.901382][ T5255] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  741.913121][ T5255] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  741.927018][ T5255] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  741.936713][ T5255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.954747][ T5255] usb 3-1: config 0 descriptor??
[  742.018854][ T5259] usb 2-1: USB disconnect, device number 16
[  742.179755][ T5255] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  742.220258][ T5255] usb 3-1: USB disconnect, device number 17
[  742.249840][ T5255] usblp1: removed
[  742.345094][ T7897] hsr0: entered allmulticast mode
[  742.353001][ T7897] hsr_slave_0: entered allmulticast mode
[  742.359721][ T7897] hsr_slave_1: entered allmulticast mode
[  742.417811][ T5279] usb 5-1: USB disconnect, device number 11
[  742.438879][ T7897] hsr_slave_0: left promiscuous mode
[  742.458464][ T7897] hsr_slave_1: left promiscuous mode
[  742.546149][ T7897] hsr0 (unregistering): left allmulticast mode
[  742.589069][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  742.728421][ T5255] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  742.811276][ T7901] FAULT_INJECTION: forcing a failure.
[  742.811276][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  742.829970][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.4.651 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[  742.840613][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  742.850974][ T7901] Call Trace:
[  742.854474][ T7901]  <TASK>
[  742.857662][ T7901]  dump_stack_lvl+0x216/0x2d0
[  742.862708][ T7901]  dump_stack+0x1e/0x30
[  742.867226][ T7901]  should_fail_ex+0x748/0x7f0
[  742.872253][ T7901]  should_fail+0x2a/0x40
[  742.876801][ T7901]  should_fail_usercopy+0x2e/0x40
[  742.882153][ T7901]  _copy_to_user+0x33/0x110
[  742.886971][ T7901]  simple_read_from_buffer+0x199/0x340
[  742.892793][ T7901]  proc_fail_nth_read+0x1e5/0x2c0
[  742.898651][ T7901]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  742.904606][ T7901]  vfs_read+0x29b/0xf60
[  742.909219][ T7901]  ? kmsan_get_metadata+0x13e/0x1c0
[  742.914787][ T7901]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  742.921830][ T7901]  ksys_read+0x24f/0x4c0
[  742.926470][ T7901]  __x64_sys_read+0x93/0xe0
[  742.931356][ T7901]  x64_sys_call+0x3055/0x3ba0
[  742.936401][ T7901]  do_syscall_64+0xcd/0x1e0
[  742.941265][ T7901]  ? clear_bhb_loop+0x25/0x80
[  742.946246][ T7901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.952565][ T7901] RIP: 0033:0x7f46c877ca3c
[  742.957282][ T7901] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  742.977249][ T7901] RSP: 002b:00007f46c9658030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  742.986039][ T7901] RAX: ffffffffffffffda RBX: 00007f46c8935f80 RCX: 00007f46c877ca3c
[  742.994309][ T7901] RDX: 000000000000000f RSI: 00007f46c96580a0 RDI: 0000000000000005
[  743.002567][ T7901] RBP: 00007f46c9658090 R08: 0000000000000000 R09: 0000000000000000
[  743.010822][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  743.019086][ T7901] R13: 0000000000000000 R14: 00007f46c8935f80 R15: 00007fff21fc3228
[  743.027392][ T7901]  </TASK>
[  743.058414][ T5255] usb 3-1: Using ep0 maxpacket: 32
[  743.079390][ T5255] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  743.088452][ T5255] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  743.097387][ T5255] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  743.106871][ T5255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  743.117052][ T5255] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  743.131665][ T5255] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  743.146707][ T5255] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  743.156458][ T5255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.216842][   T29] audit: type=1326 audit(1727629382.428:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dc97dff9 code=0x7ffc0000
[  743.240692][ T5255] usb 3-1: config 0 descriptor??
[  743.253467][   T29] audit: type=1326 audit(1727629382.428:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f45dc97dff9 code=0x7ffc0000
[  743.459409][   T29] audit: type=1326 audit(1727629382.588:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7905 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f45dc9b00e5 code=0x7ffc0000
[  743.485015][ T5255] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  743.551886][ T6493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  743.603174][   T29] audit: type=1326 audit(1727629382.738:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7905 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f45dc97dff9 code=0x7ffc0000
[  743.628362][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  744.014413][ T7913] loop2: detected capacity change from 0 to 64
[  744.302325][ T7917] loop4: detected capacity change from 0 to 512
[  744.328661][ T7917] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  744.336592][ T7917] UDF-fs: Scanning with blocksize 512 failed
[  744.373355][ T7917] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  744.381668][ T7917] UDF-fs: Scanning with blocksize 1024 failed
[  744.423431][ T7917] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  744.431392][ T7917] UDF-fs: Scanning with blocksize 2048 failed
[  744.502531][ T7917] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  744.649372][ T7924] loop1: detected capacity change from 0 to 128
[  744.678399][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  744.724949][ T7917] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  744.820105][ T7926] loop0: detected capacity change from 0 to 2048
[  745.155173][ T7933] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  745.255851][ T7933] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  745.267836][ T7933] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  745.418774][ T7933] Remounting filesystem read-only
[  745.456516][ T7935] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  745.467517][ T7935] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  745.487132][ T7935] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  745.503259][ T7935] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  745.514449][ T7935] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  745.527372][ T7935] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  745.708946][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  745.776580][ T7941] loop1: detected capacity change from 0 to 64
[  745.793728][ T5259] usb 3-1: USB disconnect, device number 18
[  745.849951][ T6519] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  745.862862][ T7941] hfs: keylen 94 too large
[  745.867537][ T7941] hfs: request for non-existent node 1818584064 in B*Tree
[  745.875211][ T7941] hfs: request for non-existent node 1818584064 in B*Tree
[  745.892458][ T7941] tmpfs: Unknown parameter 'nr_bl��������'
[  745.900534][ T7941] hfs: keylen 94 too large
[  745.905219][ T7941] =====================================================
[  745.913499][ T7941] BUG: KMSAN: uninit-value in hfs_brec_find+0x65e/0x980
[  745.920961][ T7941]  hfs_brec_find+0x65e/0x980
[  745.925775][ T7941]  hfs_brec_read+0x3f/0x1a0
[  745.930703][ T7941]  hfs_lookup+0x1ce/0x3d0
[  745.935270][ T7941]  path_openat+0x292f/0x6200
[  745.940527][ T7941]  do_filp_open+0x20e/0x590
[  745.945277][ T7941]  do_sys_openat2+0x1bf/0x2f0
[  745.950500][ T7941]  __x64_sys_openat+0x2a1/0x310
[  745.955573][ T7941]  x64_sys_call+0x120e/0x3ba0
[  745.960739][ T7941]  do_syscall_64+0xcd/0x1e0
[  745.965496][ T7941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  745.971915][ T7941] 
[  745.974362][ T7941] Local variable fd created at:
[  745.979483][ T7941]  hfs_lookup+0x5b/0x3d0
[  745.983956][ T7941]  path_openat+0x292f/0x6200
[  745.993706][ T7941] 
[  745.996162][ T7941] CPU: 1 UID: 0 PID: 7941 Comm: syz.1.665 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[  746.008415][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  746.019648][ T7941] =====================================================
[  746.026770][ T7941] Disabling lock debugging due to kernel taint
[  746.033423][ T7941] Kernel panic - not syncing: kmsan.panic set ...
[  746.040115][ T7941] CPU: 1 UID: 0 PID: 7941 Comm: syz.1.665 Tainted: G    B              6.11.0-syzkaller-11993-g3efc57369a0c #0
[  746.052083][ T7941] Tainted: [B]=BAD_PAGE
[  746.056349][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  746.066656][ T7941] Call Trace:
[  746.070069][ T7941]  <TASK>
[  746.073129][ T7941]  dump_stack_lvl+0x216/0x2d0
[  746.078038][ T7941]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  746.084069][ T7941]  dump_stack+0x1e/0x30
[  746.088437][ T7941]  panic+0x4e2/0xcf0
[  746.092565][ T7941]  ? kmsan_get_metadata+0xf1/0x1c0
[  746.097912][ T7941]  kmsan_report+0x2c7/0x2d0
[  746.102681][ T7941]  ? vprintk_default+0x3e/0x50
[  746.107665][ T7941]  ? __msan_warning+0x95/0x120
[  746.112651][ T7941]  ? hfs_brec_find+0x65e/0x980
[  746.117613][ T7941]  ? hfs_brec_read+0x3f/0x1a0
[  746.122484][ T7941]  ? hfs_lookup+0x1ce/0x3d0
[  746.127193][ T7941]  ? path_openat+0x292f/0x6200
[  746.132173][ T7941]  ? do_filp_open+0x20e/0x590
[  746.137058][ T7941]  ? do_sys_openat2+0x1bf/0x2f0
[  746.142100][ T7941]  ? __x64_sys_openat+0x2a1/0x310
[  746.147322][ T7941]  ? x64_sys_call+0x120e/0x3ba0
[  746.152454][ T7941]  ? do_syscall_64+0xcd/0x1e0
[  746.157348][ T7941]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.163691][ T7941]  ? kmsan_get_metadata+0x13e/0x1c0
[  746.169076][ T7941]  ? hfs_brec_keylen+0x398/0x610
[  746.174224][ T7941]  ? hfs_brec_keylen+0x58f/0x610
[  746.179369][ T7941]  ? __hfs_brec_find+0x426/0x830
[  746.184497][ T7941]  ? __pfx_hfs_cat_keycmp+0x10/0x10
[  746.189907][ T7941]  ? kmsan_get_metadata+0x13e/0x1c0
[  746.195396][ T7941]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  746.201434][ T7941]  __msan_warning+0x95/0x120
[  746.206265][ T7941]  hfs_brec_find+0x65e/0x980
[  746.211165][ T7941]  hfs_brec_read+0x3f/0x1a0
[  746.215852][ T7941]  ? hfs_cat_build_key+0xa5/0xd0
[  746.221007][ T7941]  hfs_lookup+0x1ce/0x3d0
[  746.225538][ T7941]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  746.231552][ T7941]  ? kmsan_get_metadata+0x13e/0x1c0
[  746.236944][ T7941]  ? kmsan_get_metadata+0x13e/0x1c0
[  746.242340][ T7941]  ? __pfx_hfs_lookup+0x10/0x10
[  746.247397][ T7941]  path_openat+0x292f/0x6200
[  746.252256][ T7941]  do_filp_open+0x20e/0x590
[  746.257011][ T7941]  do_sys_openat2+0x1bf/0x2f0
[  746.261887][ T7941]  __x64_sys_openat+0x2a1/0x310
[  746.266936][ T7941]  x64_sys_call+0x120e/0x3ba0
[  746.271886][ T7941]  do_syscall_64+0xcd/0x1e0
[  746.276606][ T7941]  ? clear_bhb_loop+0x25/0x80
[  746.281497][ T7941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.287657][ T7941] RIP: 0033:0x7f45dc97dff9
[  746.292236][ T7941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  746.312100][ T7941] RSP: 002b:00007f45dd793038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  746.320733][ T7941] RAX: ffffffffffffffda RBX: 00007f45dcb35f80 RCX: 00007f45dc97dff9
[  746.328982][ T7941] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c
[  746.337136][ T7941] RBP: 00007f45dc9f0296 R08: 0000000000000000 R09: 0000000000000000
[  746.345275][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  746.353422][ T7941] R13: 0000000000000000 R14: 00007f45dcb35f80 R15: 00007ffd4e80a688
[  746.361597][ T7941]  </TASK>
[  746.365098][ T7941] Kernel Offset: disabled
[  746.369531][ T7941] Rebooting in 86400 seconds..