last executing test programs:

17m20.524135448s ago: executing program 32 (id=1506):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x181800, 0x0)
openat(r0, 0x0, 0x4004c1, 0x42)
close(0x3)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0xca58c30f81b6079f})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x2901, 0x0)
close(r2)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000010c0)={'syzkaller0\x00', @link_local})
pread64(r0, &(0x7f0000000500)=""/92, 0x5c, 0x2)

10m27.885537483s ago: executing program 33 (id=3070):
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x1810714, &(0x7f0000000700)={[{@test_dummy_encryption}, {@debug}, {@minixdf}, {@jqfmt_vfsv1}, {@prjquota}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xe2, 0x47c, &(0x7f00000007c0)="$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")
unshare(0x60000600)
r0 = openat(0xffffffffffffff9c, &(0x7f00000064c0)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000006500)={@desc={0x1, 0x0, @desc1}})

9m35.568695686s ago: executing program 34 (id=3167):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$pid(0x0, 0x0, 0x6000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x20)
syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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")
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2)
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x54}, 0x1, 0xa00000000000000}, 0x0)

8m59.02054423s ago: executing program 35 (id=3245):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001680)={0x0, &(0x7f0000001480)=[@wr_crn={0x67, 0x20, {0x4, 0x6}}, @uexit={0x0, 0x18, 0x4}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x29, 0x2, 0x1, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x4, 0x3}}, @nested_create_vm={0x12d, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x399, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest16=0x802, 0x315080000, 0x4a30, 0x54}}, @nested_create_vm={0x12d, 0x18, 0x2}], 0x128})
ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@generic={0xdc, 0x0, 0xe, 0x0, 0x40}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001700)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000001740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000017c0), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000001800)=0x2)
recvmmsg(r2, &(0x7f0000001840), 0x80002c1, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
brk(0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000018c0)='ext4\x00', &(0x7f0000001900)='./file0\x00', 0x0, &(0x7f0000001940), 0x1, 0x5b9, &(0x7f0000001980)="$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")
symlink(&(0x7f0000001f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e240400020000008700", @ANYBLOB], 0xd4}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x5, 0x1c, &(0x7f0000002800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x0, 0x5e, 0x0, 0x1}, 0x28)

7m46.392007077s ago: executing program 7 (id=3458):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mount(0x0, 0x0, &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, &(0x7f0000000340)=ANY=[@ANYBLOB])
r0 = getpid()
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newsa={0x238, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@private0}, {@in6=@empty, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0xfffffffffffffffd, 0x5, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x24}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0xfe, 0x1, {{'md5\x00'}, 0x5b0, "fd035908924fcac0cbb6f1008a3f5256073b49b3e81cf0fe94913eddaa0c1f450a3b907592bf0b9dde6f538da722bf532197e2d64415f95f4f09b393deb9e4e642cab40b191f3d7d9844f12b427abbccfd508570c95107e9ac58507b88c569f8080ae02ef3d9f96ed0a0b9fef83f6d723e23fd07d394463f47a89abcf35502fb80ba65a1957916304117b0a418de4bd4fa5b7acae9abf7663876219c2428743148d6fbc9c80c6da9104640b1ce16c1f4db29b6c24a3d"}}]}, 0x238}}, 0x0)
mount(&(0x7f0000000000), 0x0, 0x0, 0x1001, 0x0)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

7m31.21846007s ago: executing program 36 (id=3458):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mount(0x0, 0x0, &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, &(0x7f0000000340)=ANY=[@ANYBLOB])
r0 = getpid()
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newsa={0x238, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@private0}, {@in6=@empty, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0xfffffffffffffffd, 0x5, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x24}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0xfe, 0x1, {{'md5\x00'}, 0x5b0, "fd035908924fcac0cbb6f1008a3f5256073b49b3e81cf0fe94913eddaa0c1f450a3b907592bf0b9dde6f538da722bf532197e2d64415f95f4f09b393deb9e4e642cab40b191f3d7d9844f12b427abbccfd508570c95107e9ac58507b88c569f8080ae02ef3d9f96ed0a0b9fef83f6d723e23fd07d394463f47a89abcf35502fb80ba65a1957916304117b0a418de4bd4fa5b7acae9abf7663876219c2428743148d6fbc9c80c6da9104640b1ce16c1f4db29b6c24a3d"}}]}, 0x238}}, 0x0)
mount(&(0x7f0000000000), 0x0, 0x0, 0x1001, 0x0)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

3m22.537686889s ago: executing program 4 (id=4045):
symlink(&(0x7f0000002840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000002980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=<r0=>0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x270bd25, 0x8000000, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x5, 0x3, 0x7}]}}}]}, 0x44}, 0x1, 0xba01}, 0x20000040)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040), r0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00', 0xb})
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x7f)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x16)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='2\n', 0x2)
truncate(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7f)

3m21.674279871s ago: executing program 37 (id=4046):
syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f00000000c0)='./bus\x00', 0x10000, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000050040)='./file1\x00', 0x42, 0x2)
pwrite64(r0, &(0x7f0000050080)='\f', 0x1, 0x8000c61)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
lstat(&(0x7f0000000900)='./file1\x00', &(0x7f0000000940))

3m21.661555971s ago: executing program 4 (id=4049):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0x82e)

3m18.193236289s ago: executing program 4 (id=4052):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r3)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0)
setns(0xffffffffffffffff, 0x24020000)
syz_pidfd_open(0x0, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8100, &(0x7f0000001dc0)={0x0, 0x84, 0x40000, {r4}}, 0x20)

3m15.480658397s ago: executing program 4 (id=4056):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity\x00\x00\x00\x00\x00\x00\x007:0 0 4', 0x2f)
ioctl(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000400)="0400000000000000000000006c010000380100000100"/39)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x2, 0x8, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600), 0x1003, r3}, 0x38)

3m14.525302481s ago: executing program 4 (id=4061):
gettid()
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000440), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x2)
recvmmsg(r2, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2800091, &(0x7f0000000b00)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f0000001bc0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000001d80)='./file2\x00', 0x80000, 0x82)
socket$can_raw(0x1d, 0x3, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0xfffffff8, 0x2000007, 0x13, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001dc0)={0x1, &(0x7f0000001e00)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000001e40)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0)
read$FUSE(r4, &(0x7f0000001e80)={0x2020}, 0x2020)
mount$cgroup(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000580), 0x2208000, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000080)=@arm64)
getrlimit(0x3, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x2000000000000216, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000940)={r5}, 0xc)
syz_emit_ethernet(0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffff0900b8bbccddeeff88ca5b50002800000001000001000012670000000010095b11000000001122330785dab75b134d441122330000000000"], 0x0)

3m11.306950623s ago: executing program 4 (id=4063):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x26, 0x6, 0x51)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0xc000000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
iopl(0x3)
gettid()
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0)
geteuid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./tracing\x00', &(0x7f0000000480)='tracefs\x00', 0xc440, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x42, 0x1ff)
write(r1, &(0x7f00000001c0)="9c36d7ce3d8b384eb85dc7cd036c7c0491e85c18323ab60fca4c7b8c2cc881c150890c74b538b55c27e357fc284e08207078875412fac8ca8d002956892bee9ca6efb9ae485b905cb5ef99f17292", 0x4e)
r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r2, &(0x7f0000000600)='p:p1 ./file0:0', 0xe)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f0000000680)='1', 0x1)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x0, &(0x7f00000006c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

3m9.515002598s ago: executing program 38 (id=4065):
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000d00)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d40)='.\x00', 0x0, 0x80)
getdents64(r0, &(0x7f0000000d80)=""/4096, 0x1000)

2m55.971575061s ago: executing program 39 (id=4063):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x26, 0x6, 0x51)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0xc000000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
iopl(0x3)
gettid()
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0)
geteuid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./tracing\x00', &(0x7f0000000480)='tracefs\x00', 0xc440, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x42, 0x1ff)
write(r1, &(0x7f00000001c0)="9c36d7ce3d8b384eb85dc7cd036c7c0491e85c18323ab60fca4c7b8c2cc881c150890c74b538b55c27e357fc284e08207078875412fac8ca8d002956892bee9ca6efb9ae485b905cb5ef99f17292", 0x4e)
r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r2, &(0x7f0000000600)='p:p1 ./file0:0', 0xe)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f0000000680)='1', 0x1)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x0, &(0x7f00000006c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

2m32.066997985s ago: executing program 1 (id=4047):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000006008500000008000000850000000800000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000680)=r2)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)=r1)

2m30.131788614s ago: executing program 1 (id=4108):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
unshare(0x64020600)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x200002, 0x200003, 0x803, 0x4, 0x7})
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='ns\x00')
fstat(r0, &(0x7f0000000640))

2m17.612522551s ago: executing program 1 (id=4117):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r0}, 0xc)

2m17.219171141s ago: executing program 1 (id=4118):
syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000040)={[{@dmask={'dmask', 0x3d, 0x2263}}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@dmask={'dmask', 0x3d, 0x4}}, {@errors_continue}, {@utf8}, {@discard}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@time_offset={'time_offset', 0x3d, 0x7}}]}, 0x2, 0x1533, &(0x7f00000009c0)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI")
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})

2m15.510102024s ago: executing program 1 (id=4120):
pipe(&(0x7f00000002c0))
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000300)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTVtFTxUPIhgoaBn27DZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7aXabbM3uhubzgck+z8xsnue7z8wzz+wMOwHsWWPpn0zEoYj4MIkYqc1PImKgkuqPOFld787aai6dklhff+P3pLLO7bXVXDS8J3WglnkyIn54L+JwZnO5peWVuelCIb9Yy0+U5y9MlJZXjpyfn57Nz+YXjk9OTR09cezE8Z2L9c+fVw7e+OjVZ78++fe7T1z74MckTsbB2rLGOHbKWIzVPpOB9CPc4JWdLqzHko3Zfb2qB+1Jd82+6l4eh2Ik+iqpFoa6WTMAoFPWAYC9651eVwAA6Jb69wC311Zz9am330h0182XI2J/Nf769c3qkv7aNbv9leugw7eTDVdGkogY3YHyxyLi82/f+jKdotYOyQ78X4CtXL4SEWdHxzb3/8mmexba9dyDFq4PVl7G7pu9144/0EvfpeOfF5qN/zJ3xz/RZPwz2GTffRhb7/+Z67VE3w4Ut0k6/nup4d62Ow3x14z21XL/q4z5BpJz5wv5tG/7f0SMx8Bgmp+srNp85DZ+659brcpvHP/98fHbX6Tlp6/31shc7x/c+J6Z6fL0f4277uaViKf6m8Wf3G3/pMX49/Q2y3jtxfc/a7UsjT+Ntz5tjr+z1q9GPNO0/e+1ZdLy/sT+YyeOT1Q2h4n6RtHEN798Otyq/Mb2T6e0/Pq5QDek7T/84PhHk8b7NUvtl/HT1ZHvWy3bOv7m2/++5M1Kun6j4aXpcnlxMmJf8vrm+Ufvvbeer6+fxj/+dPP9v1ps8+0/PSc8u834+2/89tXDx99ZafwzbbV/+4lrd+Za9t3ba/+pSmq8Nmc7/d8W9bocD701AwAAAAAAAAAAAAAAAAAAAAAAAED7MhFxMJJM9m46k8lmq8/wfjyGM4ViqXz4XHFpYSYqz8oejYFM/acuRxp+D3Wy9nv49fzR+/LPR8RjEfHJ4FAln80VCzO9Dh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAag60eP5/6tfBXtcOAOiY/b2uAADQdY7/ALD3tHf8H+pYPQCA7nH+DwB7z7aP/2c7Ww8AoHvaPf/v61A9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGSdPnUqndb/WlvNpfmZi8tLc8WLR2bypbns/FIumysuXsjOFouzhXw2V5xv+Y8uV18KxeKFqVhYujRRzpfKE6XllTPzxaWF8pnz89Oz+TP5ga5FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbV1pemZsuFPKLEg9MDO2OauyaRH/simo8Com+2BXVuD/R2EsM9a6DAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/g0AAP//3BEuHw==")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0xa, 0x400000000008d}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x20000000000000fe, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r0}, &(0x7f0000000e80), &(0x7f0000000f00)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xa, 0xc, &(0x7f0000001100)=ANY=[], &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000b80)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffbfd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000cc0)=@abs={0x0, 0x0, 0x80}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000d40), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000d80), 0x4000087, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="3400000000000000000000000700000044140601ffffffff00000401e000000100000000070f"], 0x38}}], 0x1, 0x4000080)
openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file1\x00', 0x101442, 0x0)

2m13.67005823s ago: executing program 1 (id=4125):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x3, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x6, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0x0, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x5, 0xff, 0x5, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x7fffffff, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x5, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x3c, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0x2, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x583, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x0, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x0)

2m11.938335454s ago: executing program 40 (id=4125):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x3, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x6, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0x0, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x5, 0xff, 0x5, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x7fffffff, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x5, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x3c, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0x2, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x583, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x0, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x0)

1m44.961495806s ago: executing program 5 (id=4180):
getresuid(&(0x7f0000000080), 0x0, 0x0)

1m44.596406606s ago: executing program 5 (id=4183):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000200)=""/43, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000440)=""/87, &(0x7f00000004c0)=""/90, 0x1000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540))
socket$netlink(0x10, 0x3, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001700)=0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

1m42.954416097s ago: executing program 5 (id=4185):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r3, 0x0, 0x0, 0x4000000000000000, &(0x7f0000000580)={0xa, 0x0, 0xfffffffe, @mcast1}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f00000007c0)=0x6, 0x4)

1m42.02636696s ago: executing program 5 (id=4187):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000008000104fcfffffd8000000000000000", @ANYRES32=0x0, @ANYBLOB="4312000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20045808}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xf, 0xf}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x90)

1m38.165897848s ago: executing program 5 (id=4193):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0x7, 0x8, [@multicast2]}, @rr={0x7, 0xf, 0xa, [@private=0xa010101, @private=0xa010102, @broadcast]}, @ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e0, 0x98, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2, 0x2}, [{0x8, 0x4}], {0x2}, {0x2}}, 0x2c, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x2)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x50000)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'veth0_to_team\x00', &(0x7f0000000380)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}})
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'veth0_to_team\x00', 0x800})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x465, 0x0, 0x8, 0x4, 0x0, @broadcast, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @local, @empty}}}})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x300000e, 0x401d031, 0xffffffffffffffff, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
r6 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r6, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00')
pread64(r7, &(0x7f0000000980)=""/102356, 0x18fd4, 0xc2a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x24080)

1m36.393629093s ago: executing program 5 (id=4196):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x183081, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})

1m21.055767871s ago: executing program 41 (id=4196):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x183081, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})

1m5.293273339s ago: executing program 3 (id=4230):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
symlinkat(&(0x7f00000018c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f00000028c0)='./file0\x00')
mount(0x0, 0x0, &(0x7f0000001040)='ext3\x00', 0x850481, 0x0)
syz_mount_image$vfat(&(0x7f0000002940), &(0x7f0000002980)='./file0\x00', 0x200008, &(0x7f00000029c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x3b7, &(0x7f0000002a00)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002dc0))
bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x22020600)
r2 = memfd_create(&(0x7f0000001380)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0)
pwrite64(r2, &(0x7f00000013c0), 0x0, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
lseek(r2, 0x0, 0x4)
setns(0xc9, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001340)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
exit(0x7ff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001500)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}})

1m4.171087648s ago: executing program 3 (id=4232):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
unshare(0x2040400)
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0)

1m3.938469804s ago: executing program 3 (id=4233):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000010800)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f00000108c0)={0x0, 0x0, 0x0}, 0x1c0)

1m3.7037814s ago: executing program 3 (id=4235):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000340), 0x1, 0x250, &(0x7f0000000380)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x0)
mount(&(0x7f0000000640)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./mnt\x00', &(0x7f00000006c0)='ext4\x00', 0x8410, 0x0)

1m3.178187743s ago: executing program 3 (id=4236):
socket(0x2b, 0xa, 0x0)
pipe2$watch_queue(0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000540), 0x4000087, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x2581)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x22e, &(0x7f0000000600)="$eJzs2r+LHGUYB/BnzguJFy674i8SEF+0UJsht7VFDk1AXFA0K0RBMvFmddlx99hZDlbEXKWtf4K1WNoJktLmQPwLLOyuuTKFOJLb87IJJyJiNujn08wD73zheXmHl6eY/Ze//HjYr/N+MY2VLIuVS7Ebt7Nox0r8YTdeeuHaD8+8fe3d1ze73ctvpXRl8+pGJ6V07tnv3/v0m+duTc++8+25707HXvv9/YPOL3tP7Z3f/+3qR4M6Deo0Gk9TkW6Mx9PiRlWmrUE9zFN6syqLukyDUV1O7lnvV+Pt7VkqRlvra9uTsq5TMZqlYTlL03GaTmap+LAYjFKe52l9Lfgnel/fbpo4aE5dj6ZpHv0qzt6K9Z+jFdljKXv8Uvbk9ezp3ez8QdO0lt0q/wrn//+2cKmfiai+2Ont9ObP+fqrP8YgqijjYrTi17jzmRyZ11de616+mA614/Pq5lH+5qneI4f5zf5RfiNa0T45vzHPp8X8Tu90rC3mO9GKJ07Od07Mn4kXn1/I59GKnz6IcVSxFXeyd/OfbaT0yhvd+/IXDt8DAPivydOx9r3zz3x+y/M/W5/nj+erv54P75uvVuPC6nL3TkQ9+2RYVFU5URwXq/FQtKFQLLFY9s3Eg3D30JfdCQAAAAAAAAAAAH/Hg/idcNl7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHm6/BwAA//+HytTx")
timer_create(0x0, &(0x7f0000000840)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000880))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000008c0)={0x0, 0x0, 0x10001, 0x5})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980), 0x208e24b)

1m1.184960294s ago: executing program 3 (id=4238):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
ioctl(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000400)="0400000000000000000000006c010000380100000100"/39)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x2, 0x8, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600), 0x1003, r3}, 0x38)

1m0.617074978s ago: executing program 42 (id=4238):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
ioctl(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000400)="0400000000000000000000006c010000380100000100"/39)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x2, 0x8, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600), 0x1003, r3}, 0x38)

1m0.172353759s ago: executing program 6 (id=4241):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
symlinkat(&(0x7f00000018c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f00000028c0)='./file0\x00')
mount(0x0, 0x0, &(0x7f0000001040)='ext3\x00', 0x850481, 0x0)
syz_mount_image$vfat(&(0x7f0000002940), &(0x7f0000002980)='./file0\x00', 0x200008, &(0x7f00000029c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x3b7, &(0x7f0000002a00)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002dc0))
bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x22020600)
r2 = memfd_create(&(0x7f0000001380)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0)
pwrite64(r2, &(0x7f00000013c0), 0x0, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
lseek(r2, 0x0, 0x4)
setns(0xc9, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001340)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
exit(0x7ff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001500)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}})

59.076370897s ago: executing program 6 (id=4242):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
unshare(0x2040400)
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0)

58.730445506s ago: executing program 6 (id=4243):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002204"], 0x0}, 0x0)

56.639166879s ago: executing program 6 (id=4244):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x3c5093, 0x0)
umount2(&(0x7f0000000400)='./file0/file0\x00', 0x0)

56.444575083s ago: executing program 6 (id=4245):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

54.491007402s ago: executing program 6 (id=4246):
socket(0x2b, 0xa, 0x0)
pipe2$watch_queue(0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000540), 0x4000087, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x2581)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x22e, &(0x7f0000000600)="$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")
timer_create(0x0, &(0x7f0000000840)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000880))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000008c0)={0x0, 0x0, 0x10001, 0x5})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980), 0x208e24b)

54.026605005s ago: executing program 43 (id=4246):
socket(0x2b, 0xa, 0x0)
pipe2$watch_queue(0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000540), 0x4000087, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x2581)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x22e, &(0x7f0000000600)="$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")
timer_create(0x0, &(0x7f0000000840)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000880))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000008c0)={0x0, 0x0, 0x10001, 0x5})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980), 0x208e24b)

38.78633523s ago: executing program 7 (id=4209):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'lo\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0)

38.37536573s ago: executing program 7 (id=4260):
prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000a00)={@id={0x2, 0x0, @d}})
sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
statfs(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000002c0)=""/216)
connect$unix(r1, &(0x7f0000001a00)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001a80), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x2010410, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x4, 0x2ae, &(0x7f0000000c40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x46042, 0x179)
unlinkat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r3, 0x540a, 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
mkdir(&(0x7f0000000180)='./control\x00', 0x111)

35.381912046s ago: executing program 7 (id=4262):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000280)=0x18, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'})
socket$inet6(0xa, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x1c8, 0x0, 0xffffffad, 0x268, 0x0, 0x190, 0x130, 0x268, 0x268, 0x130, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'veth1_to_team\x00', 'hsr0\x00', {}, {}, 0x300, 0x3}, 0x0, 0x70, 0x98, 0xffffffc5}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xff, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1, 0x5fe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x228)
r4 = socket(0x10, 0x2, 0x0)
write(r4, &(0x7f00000006c0)="1c0000001a009b8a140000003b0000000000000000000000000e8000", 0x1c)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x1ea81, 0x97)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x20380)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000fc0)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000001000)={{0x1, 0x0, 0x3f8}})
setns(0xffffffffffffffff, 0x40000000)
ioctl$int_in(r6, 0x5452, &(0x7f00000010c0)=0x3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xf2f}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x1ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x2a0471a, &(0x7f0000000300)={[{@i_version}]}, 0x82, 0x499, &(0x7f0000000b00)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==")

33.694195488s ago: executing program 7 (id=4264):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0)
recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000a40)=""/171, 0xab}], 0x1}, 0x2000)

33.21778938s ago: executing program 7 (id=4265):
unshare(0x60000600)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4, 0x0, 0x2000000}, 0x10)
write(r0, &(0x7f00000000c0)="1400000052004f7fb3e4bf80a000f0", 0xf)
recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x2, 0x10002, 0x0)

18.119869823s ago: executing program 44 (id=4265):
unshare(0x60000600)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4, 0x0, 0x2000000}, 0x10)
write(r0, &(0x7f00000000c0)="1400000052004f7fb3e4bf80a000f0", 0xf)
recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x2, 0x10002, 0x0)

13.816409151s ago: executing program 2 (id=4273):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000d80)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

11.90988141s ago: executing program 2 (id=4276):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3bf, 0x4, 0x14a, 0x100}})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000001c0))

11.650648526s ago: executing program 2 (id=4277):
r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x3, 0x0)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000980)=""/4096)

11.10635513s ago: executing program 2 (id=4278):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b1"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x3, "020000"}, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)

10.397867568s ago: executing program 9 (id=4247):
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

10.026211787s ago: executing program 9 (id=4279):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880), 0xc)

9.717743385s ago: executing program 9 (id=4281):
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x28)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x2)
recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_setup(0x3ff, &(0x7f0000000440))

9.208686078s ago: executing program 0 (id=4282):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000840)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000940), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000009c0), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000a00))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000a40)=@usbdevfs_connect)

8.72737454s ago: executing program 9 (id=4283):
gettid()
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000440), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x2)
recvmmsg(r3, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2800091, &(0x7f0000000b00)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f0000001bc0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000001d80)='./file2\x00', 0x80000, 0x82)
socket$can_raw(0x1d, 0x3, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001dc0)={0x1, &(0x7f0000001e00)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000001e40)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0)
read$FUSE(r5, &(0x7f0000001e80)={0x2020}, 0x2020)
mount$cgroup(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000580), 0x2208000, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000080)=@arm64)
getrlimit(0x3, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x2000000000000216, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0)
syz_emit_ethernet(0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffff0900b8bbccddeeff88ca5b50002800000001000001000012670000000010095b11000000001122330785dab75b134d441122330000000000"], 0x0)

8.063887897s ago: executing program 0 (id=4284):
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3bf, 0x4, 0x14a, 0x100}})
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000001c0))

6.542266355s ago: executing program 0 (id=4285):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000780), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x100000000e2)
r3 = syz_io_uring_setup(0x141c, &(0x7f0000000240)={0x0, 0xddf7, 0x8000, 0x3, 0xbd}, &(0x7f00000008c0), &(0x7f00000000c0), &(0x7f0000000000))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020103000000000000000000000003a8000a807c0002802c00018014000300ff01000000000000000000000000000114000400200100000000000000000000000000001400018008000100e000000108000200640101020600034000020000060003e5351719381c73428005000100880000001400018008000100ac1414aa08000200e0000002060003000003000008000140000000000800014000000001100002800c00028005000100060000000800014000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x804)
r5 = io_uring_setup(0x168f, &(0x7f0000000980)={0x0, 0x631d, 0x2, 0x2, 0x2d8})
io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, 0x0, 0x0)
io_uring_enter(r3, 0x4118, 0x9bbf, 0x8, 0x0, 0x0)
futex(0x0, 0x1, 0x0, 0x0, 0x0, 0xb0090199)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000a00)=0x8, 0x1)
syz_mount_image$exfat(&(0x7f0000000a40), &(0x7f0000000a80)='./file1\x00', 0x40, &(0x7f0000000ac0)=ANY=[], 0x1, 0x14fe, &(0x7f0000000b00)="$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")
r6 = open(&(0x7f0000002000)='./file1\x00', 0x145142, 0x0)
sendfile(r6, r6, 0x0, 0x7a680000)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
unshare(0x64000400)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)

5.664407897s ago: executing program 9 (id=4286):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x82, "7925fdff870042c7e733a2c1cc6f1f35012bbc51622fef0c62603e8e95abe15a6e786dd11dea9e5b7fc21851b3661ef5b0cdad28e0fa9a66d6a0e9b0019cc9a936496fec4c17cb5b0aa9b0f727c6a4cec0aa931e42e208b381ac75da38a4c5ee65d1223d53ff782a2a883756a835fcb3802c6044a64fc48cf903372e5dd99f70dce2"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x0, 0xae, {0xac, "9b97e732b96278221c310ba43cd7f3b81a14d6a40c7e4723b269dace5916cb3fddfb90be6b13af28a7420ef618e11cbfc23d289d960f04217cc952856ade930b5128875ccbc0cc9dac2771cdeff452f9158f3d5d9fbd33d9940da5fdafd73e4899b578e04252c49d20259f3e8d6b4ac8195beb707aaada3ba0276e0ee742e5d9c50adef170bafd2cb34583099bd215d2504271d82059d08c5295d0e3c5ad93124fbddd9c2f0e7ef4e2485a09"}}, &(0x7f0000001180)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x0, 0x1, 0x4}})
syz_open_dev$evdev(0x0, 0x3, 0x143080)
r1 = syz_open_dev$evdev(&(0x7f00000014c0), 0x1, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001500)={0x17, 0x2, &(0x7f0000001540)="952b"})
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000800)={0x0, 0x15, 0x1, 0xe, "c9f46062481af759e05da36b8b125492714a63554c00826f9f6d96495837df83"})
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001240)={0x20, 0x3, 0x43, {0x43, 0xb, "6f21e75e41467c3c26550db7092bd55c10aa156ac6b2dd0d1c5ea937074e9a0e3caf051331ff15186409eadc1c8183082ea6eee8ae4676dc0134a49cafabc06d76"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001340)={0x40, 0xf, 0x9b, "dfc82c2022c71970019fe72d7ee8ba2171c2f0e438ef165774b12cf36369970ca4736efb8f658028aaf5c018e9214db8c1ecfa348a22ed76f9d9dc971f02ca2786dd4d40d21500f22d1169dba2a6be77cdd4cbc4e353536005a33b44147ee86f37e603768bcf001e0b9594b603f98816c5a044241e67576c4ffd54c86df33fd89d37e4d83f16521ab12f752bb5b4c7c16fcd4adb7e43bf6c9ccb32"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1}})
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000a3d000000f4a29c2f"], 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0})
r3 = syz_usb_connect$cdc_ncm(0x6, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x6, 0xa0, 0x80, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "cd"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0xf779}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x59, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x7, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x40, 0x2}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x9, 0x6, 0x7f, 0x10, 0x6}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x4ff}}]})
syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0x2, 0x47, {0x47, 0x6, "1286dadf62c643b888656f1f3ecb65de7bc69ad0abd9f9f4656191a0cb0c2af2675cc0ffdd7d5c0e4c54063e959a633b57c24c63c9a5bb6a074bcbefbc6a4d939ae1789fa9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a00)={0x40, 0xa, 0x4b, "a326546720beb36c8a21969bfc6d05bdc56f58dd3ac2f6ef9f63ba1032578a6c28870c9ca833be6d63ef5b9cc1345652ee4c0d7b618a4cc0cb87a6b34b119b441638af9f817f0bf8fe1057"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000b00)={0x20, 0x81, 0x2, '01'}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "f465"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "33bad7"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "32f7"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "bf31e6"}})
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xf61f5928cbfd62d4, 0x90, {0x90, 0x1, "13dadd73c0303de72993f1023e0301613b31e7b87610020c8a1ca7ac33391d06967bbf4deccd0e7cecb7c723dbb28a490aa6328f8e21b8a0b6d69590674e026372dfa5b06f70f28ae9ad36a7168caad61702ce94bc2e728a3e3c264b3e11f3d9a36d4884dbe07fdf6332ab59b28572da82dca23a2dd9e2e5def61c4f6b12aa2488aefd549fa33349936fde755da6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x94, "148e79eb265f17ced98b13ab69d0c95c5e45fa1c6e574715c90ecf1d61cc5afe75552f4c2e62fb1b81194453a88311328f44110f8be25be380adacfd111a783511b640fa167fa1300b496bb702f620a6824c31c2882eebfb679e136dcb7cb995980c4f7294678fa7fb9863a3a65f781d3c9e00dd3d4b1ca9b458ded1d1118ef19cc800c3c85a91883fedd6e5198f4b8fd3395a4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x8, 0x7, 0x8b3, 0x54, 0x2, 0x2, 0x5, 0x0, 0x100, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}})

5.254603887s ago: executing program 2 (id=4287):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000003c0)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x0, 0x18, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000004c0)={0x20, 0x7, 0x4, "60aadbbb"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="400004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="401504"], 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000006c0)={0x6eb4b8ece19adc84, 0x14, 0x4, "371fcf83"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000740)={0x20, 0x17, 0x4, "0f6dfedf"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000840)={0x40, 0xb, 0x4, "9f6f1480"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000008c0)={0x20, 0xe, 0x4, ',Y\\^'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

4.884416067s ago: executing program 0 (id=4288):
syz_usb_connect(0x5, 0x248, &(0x7f0000000040)=ANY=[@ANYBLOB="120150024b31d110da0b23d7aed50102030109023602010902a0080904a3c10fffffff"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})

4.448065288s ago: executing program 8 (id=4239):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000000000700000000000000000000000203000000000000000000000a0000000000000000002e"], 0x0, 0x43}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000480)={0x6, 0x1b4, 0x3, 0x8, 0xc0, "84f4a245df4684fa26343c888265f666f1acfe", 0x7, 0x1})
ptrace(0x10, r3)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)

3.387815165s ago: executing program 8 (id=4289):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880), 0xc)

3.077539693s ago: executing program 8 (id=4290):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x10106, 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000280)=0x18, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'})
socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x1c8, 0x0, 0xffffffad, 0x268, 0x0, 0x190, 0x130, 0x268, 0x268, 0x130, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'veth1_to_team\x00', 'hsr0\x00', {}, {}, 0x300, 0x3}, 0x0, 0x70, 0x98, 0xffffffc5}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xff, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1, 0x5fe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x228)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f00000006c0)="1c0000001a009b8a140000003b0000000000000000000000000e8000", 0x1c)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x1ea81, 0x97)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x20380)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000fc0)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x1, 0x0, 0x3f8}})
setns(0xffffffffffffffff, 0x40000000)
ioctl$int_in(r5, 0x5452, &(0x7f00000010c0)=0x3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xf2f}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x1ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x2a0471a, &(0x7f0000000300)={[{@i_version}]}, 0x82, 0x499, &(0x7f0000000b00)="$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")

2.661337813s ago: executing program 8 (id=4291):
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x28)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x2)
recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_setup(0x3ff, &(0x7f0000000440))

2.070594598s ago: executing program 0 (id=4292):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000840)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000940), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000980), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$usbfs(0x0, 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000a00))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000a40)=@usbdevfs_connect)

1.567906061s ago: executing program 8 (id=4293):
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3bf, 0x4, 0x14a, 0x100}})
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000001c0))

1.004382105s ago: executing program 0 (id=4294):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000840)='L', 0x1)
write$char_usb(r0, &(0x7f0000000880)="324ce6ec83", 0x5)
r2 = syz_usb_connect$uac1(0x1, 0x89, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1604, 0x8005, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x1, 0xf0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x21}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0x23, "eea2"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x3, 0x3}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0xd4e, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xb, 0x9, 0x39, {0x7, 0x25, 0x1, 0x0, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0xfb, 0x6, {0x7, 0x25, 0x1, 0x8, 0x3, 0x2}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x5, 0xd, 0x6, 0x20, 0xa}, 0xd5, &(0x7f0000000400)={0x5, 0xf, 0xd5, 0x4, [@generic={0x3, 0x10, 0x1}, @generic={0xb7, 0x10, 0x4, "9aa51505e4d92af907d8e6f4eddf26de00e772c5f5b6e81e1511752706a2a0398cfa849a9e352fba19206fd3fd880c46e430e5f42e6e07ceab6ac4a8e87ca8bed18228a0df33e578794c8908f6ae6c194f1c27290720b5326a5fd84d40129ab53fd032120c2c7de585a7391cd5b49f1dc3aefc1125eb5587a2c1f5818bdd3931ec0b670ae6f7eeb5ad25a59df1de3babedeab27e1926277a3b838a627546cb3eb154e539e79ca5385dca06acadb0d12b5ff447aa"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x88, 0x80, 0x6, 0x1, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x33, 0x17, 0x0, 0x5, 0x8}]}, 0x1, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c12}}]})
read$char_usb(0xffffffffffffffff, &(0x7f0000000980)=""/239, 0xef)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b02, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_read(r2, 0x81, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b501"], 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x7d, 0xf3, 0xfb, 0x20, 0x545, 0x8080, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x57, 0x5, 0x40, 0x1, "", [{{0x9, 0x4, 0xcf, 0x1, 0x0, 0xbe, 0x96, 0xe5, 0xf}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000a80)=ANY=[], 0x0)
syz_usb_connect$uac3(0x5, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x3, 0x7b, 0xc, 0x20, 0x2e}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0xd}]}})

906.555078ms ago: executing program 8 (id=4295):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3c7, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12012000f1048108cd060202"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_ep_write(r1, 0x83, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="0700007f3c"])
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)

221.121795ms ago: executing program 9 (id=4296):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff0007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100))
syz_usb_ep_write(0xffffffffffffffff, 0x91, 0x100, &(0x7f0000000200)="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")
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)

0s ago: executing program 2 (id=4297):
syz_usb_connect(0x2, 0x4a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x84, 0x25, 0xc1, 0x8, 0xbda, 0x8179, 0x7bc5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x2, 0x6, 0x40, 0x7, "", [{{0x9, 0x4, 0xb2, 0x8, 0x1, 0xff, 0xff, 0xff, 0x9, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x7fff, 0x9}, {0x6, 0x24, 0x1a, 0x3, 0x10}}], [{{0x9, 0x5, 0xb, 0x2, 0x10, 0x1, 0xa1, 0x3}}]}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000000)={0x0, 0x16, 0x4, "6baf814f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

NGE): veth1_to_batadv: link becomes ready
[ 1570.341215][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1570.465108][T19285] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1571.026628][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1571.058590][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1571.074834][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1571.152147][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1571.160930][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1571.192730][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1571.205090][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1571.231198][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1571.259120][T19135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1571.338101][T19135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1571.376158][T15283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1571.395719][T15283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1572.029199][T15283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1572.056392][T15283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1572.400042][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1572.519848][ T4614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1572.530050][ T4614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1572.877449][T19186] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1573.239449][T19186] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1573.428414][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1573.800779][T19135] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1573.898090][T19186] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1573.987493][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1574.001844][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1574.123782][T19317] loop2: detected capacity change from 0 to 256
[ 1574.165940][T19317] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1574.207708][   T27] audit: type=1800 audit(1792528565.096:143): pid=19317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4106" name="file1" dev="loop2" ino=1048856 res=0 errno=0
[ 1574.905495][T19186] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1576.873189][   T11] device hsr_slave_0 left promiscuous mode
[ 1576.890072][   T11] device hsr_slave_1 left promiscuous mode
[ 1576.925720][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1576.961682][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1576.998803][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1577.031272][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1577.071114][   T11] device bridge_slave_1 left promiscuous mode
[ 1577.097485][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1577.129103][   T11] device bridge_slave_0 left promiscuous mode
[ 1577.677328][T19335] loop6: detected capacity change from 0 to 256
[ 1577.689600][T19335] FAT-fs (loop6): Unrecognized mount option "u~i_xlate=1" or missing value
[ 1577.828381][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1578.126614][   T11] device hsr_slave_0 left promiscuous mode
[ 1578.220492][   T11] device hsr_slave_1 left promiscuous mode
[ 1578.316716][T19340] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1578.337445][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1578.374461][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1578.389020][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1578.408659][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1578.419928][   T11] device bridge_slave_1 left promiscuous mode
[ 1578.426259][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1578.460772][   T11] device bridge_slave_0 left promiscuous mode
[ 1578.473498][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1578.675827][   T11] device bridge0 left promiscuous mode
[ 1578.691776][   T11] device veth1_macvtap left promiscuous mode
[ 1578.697902][   T11] device veth0_macvtap left promiscuous mode
[ 1578.714091][   T11] device veth1_vlan left promiscuous mode
[ 1578.727940][   T11] device veth0_vlan left promiscuous mode
[ 1578.748197][   T11] device bridge0 left promiscuous mode
[ 1578.758910][   T11] device veth1_macvtap left promiscuous mode
[ 1578.775945][   T11] device veth0_macvtap left promiscuous mode
[ 1578.790252][   T11] device veth1_vlan left promiscuous mode
[ 1578.806404][   T11] device veth0_vlan left promiscuous mode
[ 1581.348793][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1581.488087][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1581.582529][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1581.714616][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1582.616113][   T11] bond0 (unregistering): Released all slaves
[ 1583.999511][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1584.129227][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1584.260795][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1584.398662][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1585.273674][   T11] bond0 (unregistering): Released all slaves
[ 1585.408662][T19329] rxe_eth0 speed is unknown, defaulting to 1000
[ 1585.720850][T19186] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1585.772408][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1585.781225][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1585.815545][T19186] 8021q: adding VLAN 0 to HW filter on device team0
[ 1585.847518][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1585.872300][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1585.911205][ T4639] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1585.918402][ T4639] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1586.006138][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1586.026137][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1586.099253][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1586.130644][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1586.137836][ T4639] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1586.232071][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1586.261791][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1586.381874][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1586.405312][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1586.441820][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1586.460878][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1586.570210][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1586.588767][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1586.621858][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1586.660654][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1586.699009][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1586.718877][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1586.739561][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1586.761425][T19186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1586.858265][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1586.877610][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1586.948698][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1586.979038][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1587.004954][T19135] device veth0_vlan entered promiscuous mode
[ 1587.072713][T19135] device veth1_vlan entered promiscuous mode
[ 1587.243887][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1587.270842][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1587.294940][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1587.334120][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1587.372113][T19135] device veth0_macvtap entered promiscuous mode
[ 1587.405120][T19135] device veth1_macvtap entered promiscuous mode
[ 1587.435774][T19362] loop2: detected capacity change from 0 to 40427
[ 1587.500183][T19362] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1587.524093][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1587.538151][T19362] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1587.567574][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1587.601502][T19362] F2FS-fs (loop2): invalid crc value
[ 1587.617114][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1587.648719][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1587.700456][T19362] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1587.710657][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1587.741671][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1587.772656][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1587.819005][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1587.861024][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1587.880427][T19362] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1587.892493][T19362] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1587.909927][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1587.933191][T19135] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1587.970710][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1587.989148][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1588.019037][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1588.044435][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1588.096217][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1588.127462][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1588.166672][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1588.199883][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1588.229721][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1588.249730][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1588.269974][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1588.299807][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1588.321132][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1588.340177][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1588.375699][T19135] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1588.424770][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1588.464551][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1588.528009][T19135] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1588.547335][T19135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1588.569332][T19135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1588.598628][T19135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1588.621730][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1588.629365][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1588.687892][T19186] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1588.835173][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1588.891390][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1588.965833][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1589.014326][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1589.036067][T19186] device veth0_vlan entered promiscuous mode
[ 1589.089883][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1589.098941][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1589.179186][T19186] device veth1_vlan entered promiscuous mode
[ 1589.187799][T16817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1589.220011][T16817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1589.245103][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1589.360121][ T4624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1589.368431][ T4624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1589.411869][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1589.463321][T19186] device veth0_macvtap entered promiscuous mode
[ 1589.510285][T16817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1589.519521][T16817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1589.558114][T16817] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1589.597477][T19375] loop1: detected capacity change from 0 to 256
[ 1589.645439][T19375] exfat: Deprecated parameter 'utf8'
[ 1589.661004][T19186] device veth1_macvtap entered promiscuous mode
[ 1589.661469][T19375] exfat: Deprecated parameter 'utf8'
[ 1589.735292][T19375] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[ 1589.753596][T19378] loop2: detected capacity change from 0 to 256
[ 1589.895498][T19378] FAT-fs (loop2): Directory bread(block 64) failed
[ 1589.923851][T19186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1589.955240][T19378] FAT-fs (loop2): Directory bread(block 65) failed
[ 1589.982178][T19186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1589.992277][T19186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1590.005073][T19186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1590.015513][T19186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1590.026058][T19186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1590.036117][T19186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1590.046695][T19186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1590.046981][T19378] FAT-fs (loop2): Directory bread(block 66) failed
[ 1590.074846][T19186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1590.171263][T19378] FAT-fs (loop2): Directory bread(block 67) failed
[ 1590.361874][T19186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1590.408730][T19378] FAT-fs (loop2): Directory bread(block 68) failed
[ 1590.675890][T19378] FAT-fs (loop2): Directory bread(block 69) failed
[ 1590.703536][T19186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1590.812876][T19378] FAT-fs (loop2): Directory bread(block 70) failed
[ 1590.897546][T19186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1590.951838][T19378] FAT-fs (loop2): Directory bread(block 71) failed
[ 1590.966849][T19378] FAT-fs (loop2): Directory bread(block 72) failed
[ 1591.093652][T19378] FAT-fs (loop2): Directory bread(block 73) failed
[ 1591.134641][T19186] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1591.227822][T19186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1591.310403][T19186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1591.379968][T19186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1591.445257][T19186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1591.513346][T19186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1591.575441][T19186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1591.627135][T19186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1591.678904][T19186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1591.729919][T19186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1591.756222][T19186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1591.767080][T19186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1591.865849][T19186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1591.952613][T19186] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1592.060146][T19186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1592.124335][T19186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1592.168954][T19186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1592.218873][T19186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1592.250334][T19388] loop2: detected capacity change from 0 to 512
[ 1592.280914][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1592.288912][T19388] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1592.311750][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1592.371181][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1592.385809][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1592.395242][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1592.455834][T19382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1592.476312][T19382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1592.630457][T19388] EXT4-fs (loop2): 1 truncate cleaned up
[ 1592.636498][T19388] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1592.795576][   T27] audit: type=1800 audit(1792528583.696:144): pid=19392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4122" name=08 dev="sda1" ino=2048 res=0 errno=0
[ 1592.980584][T14872] EXT4-fs (loop2): unmounting filesystem.
[ 1593.064273][T19385] loop6: detected capacity change from 0 to 40427
[ 1593.147823][T19385] F2FS-fs (loop6): Unrecognized mount option "active_logs=Í" or missing value
[ 1593.332523][ T4642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1593.373252][ T4642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1593.461120][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1594.435522][ T4614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1594.456203][ T4614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1594.553091][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1594.907433][T19406] loop3: detected capacity change from 0 to 256
[ 1597.583539][T19406] FAT-fs (loop3): Directory bread(block 64) failed
[ 1597.600654][T19406] FAT-fs (loop3): Directory bread(block 65) failed
[ 1597.619562][T19406] FAT-fs (loop3): Directory bread(block 66) failed
[ 1597.645650][T19417] loop6: detected capacity change from 0 to 512
[ 1597.668008][T19406] FAT-fs (loop3): Directory bread(block 67) failed
[ 1597.682629][T19417] EXT4-fs: Ignoring removed nobh option
[ 1597.706784][T19406] FAT-fs (loop3): Directory bread(block 68) failed
[ 1597.735722][T19406] FAT-fs (loop3): Directory bread(block 69) failed
[ 1597.752290][T19417] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.4130: invalid indirect mapped block 256 (level 2)
[ 1597.766875][T19406] FAT-fs (loop3): Directory bread(block 70) failed
[ 1597.784869][T19406] FAT-fs (loop3): Directory bread(block 71) failed
[ 1597.806789][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1597.830978][T19417] EXT4-fs (loop6): 2 truncates cleaned up
[ 1597.836808][T19417] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1597.864176][T19418] netlink: 'syz.5.4131': attribute type 3 has an invalid length.
[ 1597.875380][T19406] FAT-fs (loop3): Directory bread(block 72) failed
[ 1597.928821][T19406] FAT-fs (loop3): Directory bread(block 73) failed
[ 1598.214199][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1598.285367][T19425] loop5: detected capacity change from 0 to 256
[ 1598.536736][T15525] EXT4-fs (loop6): unmounting filesystem.
[ 1598.630072][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1598.644540][ T4276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1598.654734][ T4276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1598.689570][ T4276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1598.701477][ T4276] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1598.716925][ T4276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1598.870537][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1599.075520][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1599.105831][T19436] rxe_eth0 speed is unknown, defaulting to 1000
[ 1600.800161][ T4276] Bluetooth: hci1: command 0x0409 tx timeout
[ 1600.975527][T19458] loop2: detected capacity change from 0 to 128
[ 1601.020907][T19458] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1601.082855][ T4624] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1601.255487][T19465] loop6: detected capacity change from 0 to 16
[ 1601.273605][T19465] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1601.294392][T19465] erofs: (device loop6): z_erofs_readahead: readahead error at page 3 @ nid 89
[ 1601.305150][T19465] syz.6.4142: attempt to access beyond end of device
[ 1601.305150][T19465] loop6: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[ 1601.372665][T19465] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1601.382564][T19465] syz.6.4142: attempt to access beyond end of device
[ 1601.382564][T19465] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16
[ 1601.399998][T19465] syz.6.4142: attempt to access beyond end of device
[ 1601.399998][T19465] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[ 1601.417095][   T27] audit: type=1800 audit(1792528592.316:145): pid=19465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4142" name="file2" dev="loop6" ino=89 res=0 errno=0
[ 1602.044582][T19463] netlink: 'syz.5.4143': attribute type 3 has an invalid length.
[ 1602.097328][T19467] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[ 1602.841015][T19472] loop2: detected capacity change from 0 to 512
[ 1602.879477][T19472] EXT4-fs: Ignoring removed nobh option
[ 1602.930135][ T4276] Bluetooth: hci1: command 0x041b tx timeout
[ 1602.962771][T19472] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4144: invalid indirect mapped block 256 (level 2)
[ 1603.082434][T19472] EXT4-fs (loop2): 2 truncates cleaned up
[ 1603.123818][T19472] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1603.175072][T19436] chnl_net:caif_netlink_parms(): no params data found
[ 1604.233803][T14872] EXT4-fs (loop2): unmounting filesystem.
[ 1604.944750][T19482] loop6: detected capacity change from 0 to 131072
[ 1604.961085][T14501] Bluetooth: hci1: command 0x040f tx timeout
[ 1605.030855][T19482] F2FS-fs (loop6): invalid crc value
[ 1605.097102][T19482] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 1605.151672][T19436] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1605.159450][T19482] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2
[ 1605.179968][T19436] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1605.179979][T19482] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[ 1605.270198][T19496] xt_hashlimit: max too large, truncated to 1048576
[ 1605.280961][T19436] device bridge_slave_0 entered promiscuous mode
[ 1605.323060][T19436] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1605.363335][T19436] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1605.410157][T19436] device bridge_slave_1 entered promiscuous mode
[ 1605.469024][T19501] loop3: detected capacity change from 0 to 512
[ 1605.491010][T19501] ext4: Unknown parameter 'context'
[ 1606.451771][T19436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1606.622595][T19484] loop5: detected capacity change from 0 to 40427
[ 1606.663044][T19436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1606.695084][T19484] F2FS-fs (loop5): invalid crc value
[ 1606.771539][T19484] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1607.039866][T14501] Bluetooth: hci1: command 0x0419 tx timeout
[ 1607.070245][T19484] F2FS-fs (loop5): Start checkpoint disabled!
[ 1607.520173][T19436] team0: Port device team_slave_0 added
[ 1607.683235][T19436] team0: Port device team_slave_1 added
[ 1608.941667][T19517] loop2: detected capacity change from 0 to 512
[ 1609.070134][T19517] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[ 1609.113037][T19517] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1609.130403][T19517] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1609.170609][T14501] Bluetooth: hci1: command 0x0405 tx timeout
[ 1609.199159][T19436] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1609.219289][T19436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1609.344030][T19436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1609.409515][T14872] EXT4-fs (loop2): unmounting filesystem.
[ 1609.467276][T19436] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1609.484587][T19436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1609.568556][T19436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1609.621055][   T11] device hsr_slave_0 left promiscuous mode
[ 1609.658357][   T11] device hsr_slave_1 left promiscuous mode
[ 1609.676054][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1609.709596][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1609.740700][T19530] loop3: detected capacity change from 0 to 4096
[ 1609.741292][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1609.789005][T19532] loop2: detected capacity change from 0 to 256
[ 1609.801011][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1609.816621][T19530] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1609.837042][   T11] device bridge_slave_1 left promiscuous mode
[ 1609.870980][T19532] FAT-fs (loop2): Directory bread(block 64) failed
[ 1609.877902][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1609.915931][T19532] FAT-fs (loop2): Directory bread(block 65) failed
[ 1609.953811][T19532] FAT-fs (loop2): Directory bread(block 66) failed
[ 1609.975128][   T11] device bridge_slave_0 left promiscuous mode
[ 1609.986290][T19538] loop6: detected capacity change from 0 to 512
[ 1609.991812][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1610.002907][T19532] FAT-fs (loop2): Directory bread(block 67) failed
[ 1610.005696][T19538] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1610.028633][T19532] FAT-fs (loop2): Directory bread(block 68) failed
[ 1610.059928][T19532] FAT-fs (loop2): Directory bread(block 69) failed
[ 1610.083735][T19532] FAT-fs (loop2): Directory bread(block 70) failed
[ 1610.091308][T19532] FAT-fs (loop2): Directory bread(block 71) failed
[ 1610.098054][T19532] FAT-fs (loop2): Directory bread(block 72) failed
[ 1610.104952][T19532] FAT-fs (loop2): Directory bread(block 73) failed
[ 1610.140943][T19186] EXT4-fs (loop3): unmounting filesystem.
[ 1610.157182][   T11] device veth1_macvtap left promiscuous mode
[ 1610.165487][   T11] device veth0_macvtap left promiscuous mode
[ 1610.171843][   T11] device veth1_vlan left promiscuous mode
[ 1610.178082][   T11] device veth0_vlan left promiscuous mode
[ 1610.238455][T15525] EXT4-fs (loop6): unmounting filesystem.
[ 1610.400908][T19543] loop6: detected capacity change from 0 to 512
[ 1610.429039][T19543] ext4: Unknown parameter 'context'
[ 1612.082591][T19562] hub 8-0:1.0: USB hub found
[ 1612.088349][T19562] hub 8-0:1.0: 1 port detected
[ 1613.002487][T19551] loop2: detected capacity change from 0 to 40427
[ 1613.012164][T19551] F2FS-fs (loop2): invalid crc value
[ 1613.020449][T19551] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1613.243076][T19551] F2FS-fs (loop2): Start checkpoint disabled!
[ 1613.346965][T19551] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[ 1613.749078][T19579] syz.2.4163: attempt to access beyond end of device
[ 1613.749078][T19579] loop2: rw=2049, sector=53248, nr_sectors = 1056 limit=40427
[ 1614.302012][T19584] loop5: detected capacity change from 0 to 16
[ 1614.726043][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1614.732485][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1615.010005][T19584] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1615.404842][T19584] erofs: (device loop5): z_erofs_readahead: readahead error at page 3 @ nid 89
[ 1615.416306][T19584] syz.5.4168: attempt to access beyond end of device
[ 1615.416306][T19584] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[ 1615.868609][T19584] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1615.878403][T19584] syz.5.4168: attempt to access beyond end of device
[ 1615.878403][T19584] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16
[ 1615.895967][T19584] syz.5.4168: attempt to access beyond end of device
[ 1615.895967][T19584] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[ 1615.923677][   T27] audit: type=1800 audit(1792528606.816:146): pid=19584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4168" name="file2" dev="loop5" ino=89 res=0 errno=0
[ 1617.508255][T19592] loop3: detected capacity change from 0 to 256
[ 1617.600353][T19592] FAT-fs (loop3): Directory bread(block 64) failed
[ 1617.609861][T19592] FAT-fs (loop3): Directory bread(block 65) failed
[ 1617.616629][T19592] FAT-fs (loop3): Directory bread(block 66) failed
[ 1617.652775][T19592] FAT-fs (loop3): Directory bread(block 67) failed
[ 1617.659561][T19592] FAT-fs (loop3): Directory bread(block 68) failed
[ 1617.712128][T19592] FAT-fs (loop3): Directory bread(block 69) failed
[ 1617.718943][T19592] FAT-fs (loop3): Directory bread(block 70) failed
[ 1617.750346][T19592] FAT-fs (loop3): Directory bread(block 71) failed
[ 1617.757426][T19592] FAT-fs (loop3): Directory bread(block 72) failed
[ 1617.830033][T19592] FAT-fs (loop3): Directory bread(block 73) failed
[ 1618.683180][T19598] loop3: detected capacity change from 0 to 512
[ 1618.711694][T19598] ext4: Unknown parameter 'context'
[ 1618.729008][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1619.009243][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1619.173902][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1619.374135][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1621.392664][   T11] bond0 (unregistering): Released all slaves
[ 1621.589336][T19590] tipc: Started in network mode
[ 1621.594453][T19590] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[ 1621.602186][T19590] tipc: Enabled bearer <eth:syz_tun>, priority 0
[ 1622.111024][T19436] device hsr_slave_0 entered promiscuous mode
[ 1622.121947][T19622] loop3: detected capacity change from 0 to 1024
[ 1622.632317][T19436] device hsr_slave_1 entered promiscuous mode
[ 1622.884200][T19436] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1622.913321][T19436] Cannot create hsr debugfs directory
[ 1622.965359][T19624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1622.976301][T19624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1622.992830][T15467] tipc: Node number set to 43690
[ 1623.358404][T19634] loop3: detected capacity change from 0 to 256
[ 1625.210133][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4187'.
[ 1626.509695][T19654] loop2: detected capacity change from 0 to 16
[ 1626.525795][T19654] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1626.542855][T19654] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89
[ 1626.553474][T19654] syz.2.4190: attempt to access beyond end of device
[ 1626.553474][T19654] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[ 1626.584281][T19654] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1626.594095][T19654] syz.2.4190: attempt to access beyond end of device
[ 1626.594095][T19654] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16
[ 1626.612558][T19654] syz.2.4190: attempt to access beyond end of device
[ 1626.612558][T19654] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[ 1626.647773][T19654] syz.2.4190: attempt to access beyond end of device
[ 1626.647773][T19654] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[ 1626.664433][T19654] syz.2.4190: attempt to access beyond end of device
[ 1626.664433][T19654] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[ 1626.692837][   T27] audit: type=1800 audit(1792528617.526:147): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4190" name="file2" dev="loop2" ino=89 res=0 errno=0
[ 1628.290390][T19654] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[ 1628.654531][T19657] loop6: detected capacity change from 0 to 2048
[ 1630.024166][T19657] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1630.060095][T19657] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1631.089788][T19688] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[ 1632.230825][T19691] Need at least one configuration in g1.
[ 1632.236627][T19691] udc dummy_udc.0: failed to start g1: -22
[ 1632.269857][T19691] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1632.338385][T19691] UDC core: g1: couldn't find an available UDC or it's busy
[ 1632.423199][T14501] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1632.430681][ T4276] Bluetooth: hci2: command 0x1003 tx timeout
[ 1632.763397][T19697] loop3: detected capacity change from 0 to 1024
[ 1632.841470][T19697] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002]
[ 1632.852416][T19697] System zones: 0-1, 3-12
[ 1632.874337][T19697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1634.435929][T19186] EXT4-fs (loop3): unmounting filesystem.
[ 1636.246532][T19714] loop3: detected capacity change from 0 to 256
[ 1636.338445][T19714] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[ 1636.783673][T19718] loop3: detected capacity change from 0 to 16
[ 1636.800951][T19718] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1636.816265][T19718] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89
[ 1636.830941][T19718] syz.3.4204: attempt to access beyond end of device
[ 1636.830941][T19718] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[ 1636.855312][T19718] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1636.864945][T19718] syz.3.4204: attempt to access beyond end of device
[ 1636.864945][T19718] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16
[ 1636.882174][T19718] syz.3.4204: attempt to access beyond end of device
[ 1636.882174][T19718] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[ 1636.911398][   T27] audit: type=1800 audit(1792528627.796:148): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4204" name="file2" dev="loop3" ino=89 res=0 errno=0
[ 1636.957796][T19718] syz.3.4204: attempt to access beyond end of device
[ 1636.957796][T19718] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[ 1636.974758][T19718] syz.3.4204: attempt to access beyond end of device
[ 1636.974758][T19718] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[ 1640.172513][T15525] EXT4-fs (loop6): unmounting filesystem.
[ 1640.287348][T19721] loop6: detected capacity change from 0 to 512
[ 1640.322535][T19721] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿ" or missing value
[ 1640.547381][T19723] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1640.574266][T19723] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1640.788478][T19725] loop6: detected capacity change from 0 to 512
[ 1640.798464][T19725] ext4: Unknown parameter 'context'
[ 1641.178120][T19726] loop6: detected capacity change from 0 to 512
[ 1641.211145][T19726] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[ 1646.301213][T14501] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1646.315959][T14501] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1646.345542][T14501] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1646.372407][T14501] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1646.380554][T14501] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1646.387989][T14501] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1646.904936][T19718] tipc: Started in network mode
[ 1646.911019][T19718] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[ 1646.918826][T19718] tipc: Enabled bearer <eth:syz_tun>, priority 0
[ 1647.158844][T19436] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1647.196431][T19735] rxe_eth0 speed is unknown, defaulting to 1000
[ 1647.232836][T19436] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1647.258787][T19436] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1648.235919][T19745] loop2: detected capacity change from 0 to 256
[ 1648.567511][T19745] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1648.720716][ T4276] Bluetooth: hci2: command 0x0409 tx timeout
[ 1648.808183][T19744] tipc: Resetting bearer <eth:syz_tun>
[ 1648.814855][T19744] tipc: Resetting bearer <eth:syz_tun>
[ 1648.834246][T19744] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1648.851449][T19744] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1648.904008][T19436] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1649.002515][T16972] tipc: Node number set to 43690
[ 1649.072974][T19745] rxe_eth0 speed is unknown, defaulting to 1000
[ 1649.361271][T19756] hub 8-0:1.0: USB hub found
[ 1649.382694][T19756] hub 8-0:1.0: 1 port detected
[ 1649.559869][T19680] tipc: Resetting bearer <eth:syz_tun>
[ 1649.673968][T19680] tipc: Disabling bearer <eth:syz_tun>
[ 1649.922876][T17201] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1650.136860][T19436] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1650.233956][T17201] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1650.337114][T19752] loop3: detected capacity change from 0 to 40427
[ 1650.393370][T19752] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1650.408482][T17201] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1650.413660][T19752] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1650.464402][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1650.485956][T19752] F2FS-fs (loop3): invalid crc value
[ 1650.491852][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1650.529737][T19436] 8021q: adding VLAN 0 to HW filter on device team0
[ 1650.539370][T19752] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1650.623067][T19735] chnl_net:caif_netlink_parms(): no params data found
[ 1650.731620][T17201] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1650.752468][T19752] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1650.781070][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1650.789242][T19752] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1650.798413][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1650.809459][ T4276] Bluetooth: hci2: command 0x041b tx timeout
[ 1650.859001][ T4624] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1650.866270][ T4624] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1650.933493][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1650.967331][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1651.017092][ T4624] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1651.024354][ T4624] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1651.099182][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1651.191959][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1651.220422][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1651.372135][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1651.423599][T19771] loop2: detected capacity change from 0 to 512
[ 1651.448384][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1651.584057][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1651.685756][T19771] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1651.732087][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1651.825051][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1651.943362][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1652.039551][T19771] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=842c018, mo2=0002]
[ 1652.273965][T19436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1652.331351][T19771] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1652.360578][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1652.437305][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1652.462232][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1652.489790][T19771] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.4216: Allocating blocks 41-42 which overlap fs metadata
[ 1652.505920][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1652.585947][T19771] Quota error (device loop2): write_blk: dquota write failed
[ 1652.610982][T19735] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1652.628454][T19735] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1652.637707][T19771] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1652.661289][T19735] device bridge_slave_0 entered promiscuous mode
[ 1652.687342][T19771] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.4216: Failed to acquire dquot type 0
[ 1652.717305][T19735] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1652.728934][T19771] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[ 1652.759247][T19735] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1652.769366][T19735] device bridge_slave_1 entered promiscuous mode
[ 1652.795832][T19771] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.4216: corrupted inode contents
[ 1652.830973][T19771] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #12: comm syz.2.4216: mark_inode_dirty error
[ 1652.858482][T19771] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.4216: corrupted inode contents
[ 1652.881534][ T4276] Bluetooth: hci2: command 0x040f tx timeout
[ 1652.891498][T19735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1652.902825][T19771] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.4216: mark_inode_dirty error
[ 1652.917430][T19735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1652.931293][T19771] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.4216: corrupted inode contents
[ 1652.950290][T19771] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[ 1652.962567][T19771] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.4216: corrupted inode contents
[ 1652.975195][T19771] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.4216: mark_inode_dirty error
[ 1652.995626][T19771] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[ 1653.006012][T19771] EXT4-fs (loop2): 1 truncate cleaned up
[ 1653.026856][T19771] EXT4-fs (loop2): pa ffff888073d3f620: logic 1, phys. 41, len 23
[ 1653.035051][T19771] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23
[ 1653.058109][T19771] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1653.143421][T19735] team0: Port device team_slave_0 added
[ 1653.189411][T19735] team0: Port device team_slave_1 added
[ 1653.247058][T19735] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1653.279977][T19735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1653.346654][T14872] EXT4-fs (loop2): unmounting filesystem.
[ 1653.417851][T19735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1653.610720][T19735] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1653.617764][T19735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1653.713136][T19787] loop2: detected capacity change from 0 to 16
[ 1653.739291][T19787] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1653.756666][T19787] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89
[ 1653.767787][T19787] syz.2.4220: attempt to access beyond end of device
[ 1653.767787][T19787] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[ 1653.847601][T19787] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1653.857352][T19787] syz.2.4220: attempt to access beyond end of device
[ 1653.857352][T19787] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16
[ 1653.874994][T19787] syz.2.4220: attempt to access beyond end of device
[ 1653.874994][T19787] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[ 1653.936933][T19790] loop6: detected capacity change from 0 to 512
[ 1653.944561][T19790] EXT4-fs: Ignoring removed i_version option
[ 1653.961978][   T27] audit: type=1800 audit(1792528652.839:149): pid=19787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4220" name="file2" dev="loop2" ino=89 res=0 errno=0
[ 1654.082349][T19790] EXT4-fs (loop6): 1 truncate cleaned up
[ 1654.088507][T19790] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1654.505737][T19735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1654.853275][T19789] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[ 1654.921435][T18609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1654.937908][T18609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1654.955649][T17201] tipc: Left network mode
[ 1654.960465][ T4276] Bluetooth: hci2: command 0x0419 tx timeout
[ 1654.973659][T15525] EXT4-fs (loop6): unmounting filesystem.
[ 1655.070865][T19436] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1655.341942][T19735] device hsr_slave_0 entered promiscuous mode
[ 1655.421830][T19735] device hsr_slave_1 entered promiscuous mode
[ 1655.494276][T19735] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1655.533408][T19735] Cannot create hsr debugfs directory
[ 1656.483973][T19805] loop2: detected capacity change from 0 to 256
[ 1656.590980][T19805] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1656.857306][T19805] rxe_eth0 speed is unknown, defaulting to 1000
[ 1657.574849][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1657.590606][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1657.606720][T19811] loop2: detected capacity change from 0 to 512
[ 1657.613823][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1657.622012][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1657.633686][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1657.641327][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1657.805982][T19811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[ 1657.830034][T19811] System zones: 1-12
[ 1657.850903][T19811] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.4226: missing EA_INODE flag
[ 1657.914591][T19811] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.4226: error while reading EA inode 12 err=-117
[ 1657.927646][T19811] EXT4-fs (loop2): 1 orphan inode deleted
[ 1657.934069][T19811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1658.707988][T19801] loop6: detected capacity change from 0 to 40427
[ 1658.741836][T19801] F2FS-fs (loop6): invalid crc value
[ 1659.744478][T19808] rxe_eth0 speed is unknown, defaulting to 1000
[ 1659.869051][T17494] Bluetooth: hci4: command 0x0409 tx timeout
[ 1659.895842][T19801] F2FS-fs (loop6): Failed to start F2FS issue_checkpoint_thread (-12)
[ 1661.079129][T14872] EXT4-fs (loop2): unmounting filesystem.
[ 1661.562784][T19828] loop3: detected capacity change from 0 to 512
[ 1661.922810][T17494] Bluetooth: hci4: command 0x041b tx timeout
[ 1662.844454][T19843] loop2: detected capacity change from 0 to 256
[ 1662.881630][T19843] exfat: Deprecated parameter 'utf8'
[ 1662.897394][T19843] exfat: Deprecated parameter 'utf8'
[ 1662.937777][T19843] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[ 1663.147676][T19846] loop3: detected capacity change from 0 to 128
[ 1663.190857][T19846] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1663.262825][T19846] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1663.429949][   T27] audit: type=1326 audit(1792528662.329:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.2.4234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eba39f559 code=0x7ffc0000
[ 1663.529010][   T27] audit: type=1326 audit(1792528662.359:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.2.4234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eba39f559 code=0x7ffc0000
[ 1663.601591][T19186] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /33/file1/lost+found: directory fails checksum at offset 1024
[ 1663.684898][   T27] audit: type=1326 audit(1792528662.359:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.2.4234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eba39f559 code=0x7ffc0000
[ 1663.740805][T19186] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /33/file1/lost+found: directory fails checksum at offset 8192
[ 1663.787254][   T27] audit: type=1326 audit(1792528662.359:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.2.4234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3eba39f559 code=0x7ffc0000
[ 1663.823257][T19186] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 1: comm syz-executor: Directory block failed checksum
[ 1663.901111][   T27] audit: type=1326 audit(1792528662.359:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.2.4234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eba39f559 code=0x7ffc0000
[ 1663.986947][T19186] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /33/file1/lost+found: directory fails checksum at offset 1024
[ 1664.002357][   T27] audit: type=1326 audit(1792528662.369:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.2.4234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eba39f559 code=0x7ffc0000
[ 1664.017587][T17494] Bluetooth: hci4: command 0x040f tx timeout
[ 1664.041465][   T27] audit: type=1326 audit(1792528662.369:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.2.4234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eba39f559 code=0x7ffc0000
[ 1664.075902][T19186] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /33/file1/lost+found: directory fails checksum at offset 8192
[ 1664.114525][   T27] audit: type=1326 audit(1792528662.369:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.2.4234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f3eba39f559 code=0x7ffc0000
[ 1664.150883][T19186] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 1: comm syz-executor: Directory block failed checksum
[ 1664.179443][T19186] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /33/file1/lost+found: directory fails checksum at offset 1024
[ 1664.210831][   T27] audit: type=1326 audit(1792528662.419:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.2.4234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3eba3992d7 code=0x7ffc0000
[ 1664.246035][T19808] chnl_net:caif_netlink_parms(): no params data found
[ 1664.255292][   T27] audit: type=1326 audit(1792528662.419:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.2.4234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3eba3408d9 code=0x7ffc0000
[ 1664.280936][T19186] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /33/file1/lost+found: directory fails checksum at offset 8192
[ 1664.311568][T19186] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 1: comm syz-executor: Directory block failed checksum
[ 1664.335847][T19186] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /33/file1/lost+found: directory fails checksum at offset 1024
[ 1664.390788][T19850] rxe_eth0 speed is unknown, defaulting to 1000
[ 1664.933884][T19747] EXT4-fs (loop3): unmounting filesystem.
[ 1665.171767][T19747] tipc: Resetting bearer <eth:syz_tun>
[ 1665.252641][T19747] tipc: Disabling bearer <eth:syz_tun>
[ 1665.262448][T19808] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1665.279268][T19808] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1665.314093][T19808] device bridge_slave_0 entered promiscuous mode
[ 1665.409265][T19808] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1665.426980][T19808] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1665.451506][T19808] device bridge_slave_1 entered promiscuous mode
[ 1665.502297][T17201] device hsr_slave_0 left promiscuous mode
[ 1665.520103][T17201] device hsr_slave_1 left promiscuous mode
[ 1665.527972][T17201] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1665.547792][T17201] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1665.568394][T17201] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1665.579330][T17201] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1665.618660][T17201] device bridge_slave_1 left promiscuous mode
[ 1665.649142][T17201] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1665.676801][T17201] device bridge_slave_0 left promiscuous mode
[ 1665.701100][T17201] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1665.791918][T17201] device veth1_vlan left promiscuous mode
[ 1665.800171][T17201] device veth0_vlan left promiscuous mode
[ 1666.080130][T17494] Bluetooth: hci4: command 0x0419 tx timeout
[ 1666.777437][T19866] loop6: detected capacity change from 0 to 512
[ 1667.056506][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1667.070110][ T4276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1667.078768][ T4276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1667.108703][ T4276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1667.122269][ T4276] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1667.132214][ T4276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1668.300024][ T5265] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1668.507411][ T5265] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1668.539781][ T5265] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1668.609942][ T5265] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[ 1668.619092][ T5265] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1668.660829][ T5265] usb 7-1: config 0 descriptor??
[ 1668.896822][T17201] team0 (unregistering): Port device team_slave_1 removed
[ 1669.184785][ T5265] hid-led 0003:1D34:000A.0008: unknown main item tag 0x0
[ 1669.199926][T17494] Bluetooth: hci1: command 0x0409 tx timeout
[ 1669.209285][ T5265] hid-led 0003:1D34:000A.0008: unknown main item tag 0x0
[ 1669.228123][T17201] team0 (unregistering): Port device team_slave_0 removed
[ 1669.259439][ T5265] hid-led 0003:1D34:000A.0008: unknown main item tag 0x0
[ 1669.390825][ T5265] hid-led: probe of 0003:1D34:000A.0008 failed with error -71
[ 1669.419336][ T5265] usb 7-1: USB disconnect, device number 4
[ 1669.496797][T17201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1669.810643][T17201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1671.290014][T17494] Bluetooth: hci1: command 0x041b tx timeout
[ 1671.686965][T17201] bond0 (unregistering): Released all slaves
[ 1671.825531][T19735] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1671.872138][T18473] tipc: Resetting bearer <eth:syz_tun>
[ 1671.947177][T18473] tipc: Disabling bearer <eth:syz_tun>
[ 1671.963371][T19735] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1671.973995][T19735] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1671.984798][T19735] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1672.013956][T19808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1672.053746][T19808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1672.194697][T19808] team0: Port device team_slave_0 added
[ 1672.232042][T19808] team0: Port device team_slave_1 added
[ 1672.245233][T19867] rxe_eth0 speed is unknown, defaulting to 1000
[ 1672.335837][T19808] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1672.370021][T19808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1672.511465][T19808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1672.618631][T19808] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1672.628821][T19808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1672.689788][T19808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1673.054879][T19808] device hsr_slave_0 entered promiscuous mode
[ 1673.108388][T19808] device hsr_slave_1 entered promiscuous mode
[ 1673.121423][T19808] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1673.129060][T19808] Cannot create hsr debugfs directory
[ 1673.191629][T19735] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1673.304657][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1673.320973][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1673.359977][T17494] Bluetooth: hci1: command 0x040f tx timeout
[ 1673.423075][T19735] 8021q: adding VLAN 0 to HW filter on device team0
[ 1673.490387][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1673.510544][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1673.547215][ T4630] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1673.554439][ T4630] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1673.572379][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1673.587516][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1673.596665][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1673.607017][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1673.615409][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1673.623712][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1673.635584][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1673.825073][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1673.838495][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1673.868238][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1673.875485][ T4639] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1673.908358][T19883] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1673.925928][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1673.938789][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1673.963572][T19884] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1673.971887][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1673.995501][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1674.056630][T19879] rxe_eth0 speed is unknown, defaulting to 1000
[ 1674.141596][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1674.169149][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1674.205383][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1674.223031][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1674.232532][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1674.337760][T17201] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1674.404591][T19735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1674.440914][T19735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1674.468933][T11700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1674.479982][T11700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1674.503890][T19867] chnl_net:caif_netlink_parms(): no params data found
[ 1674.559444][T19889] loop2: detected capacity change from 0 to 512
[ 1674.695855][T17201] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1675.060544][T17201] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1675.105322][T19867] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1675.118326][T19867] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1675.138648][T19867] device bridge_slave_0 entered promiscuous mode
[ 1675.162517][T19867] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1675.179999][T19867] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1675.201312][T19867] device bridge_slave_1 entered promiscuous mode
[ 1675.389331][T17201] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1675.440146][T17494] Bluetooth: hci1: command 0x0419 tx timeout
[ 1675.562934][T19867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1675.623324][T19867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1675.680021][T17494] Bluetooth: hci3: command 0x0409 tx timeout
[ 1675.736837][T11700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1675.745654][T11700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1675.753524][ T6188] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1675.777663][T19735] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1675.915822][T19867] team0: Port device team_slave_0 added
[ 1675.955989][T19867] team0: Port device team_slave_1 added
[ 1675.964990][ T6188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1675.997533][ T6188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1676.011217][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1676.017612][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1676.049893][ T6188] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1676.059062][ T6188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1676.131245][ T6188] usb 3-1: config 0 descriptor??
[ 1676.184546][T19879] chnl_net:caif_netlink_parms(): no params data found
[ 1676.232522][T19867] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1676.250438][T19867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1676.294462][T19867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1676.370101][T19867] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1676.377187][T19867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1676.449766][T19867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1676.591125][ T6188] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 1676.598208][ T6188] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 1676.616352][T17201] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1676.627818][ T6188] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 1676.636595][ T6188] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 1676.651792][ T6188] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 1676.658838][ T6188] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 1676.666500][ T6188] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 1676.715150][T19808] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1676.723119][ T6188] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[ 1676.771926][T19808] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1676.816844][T19808] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1676.830218][ T6188] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00
[ 1676.914633][T17201] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1676.974929][T19808] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1677.029579][T19867] device hsr_slave_0 entered promiscuous mode
[ 1677.038753][T19867] device hsr_slave_1 entered promiscuous mode
[ 1677.058673][T19867] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1677.078419][T19867] Cannot create hsr debugfs directory
[ 1677.186949][T17201] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1677.239397][ T6188] cp2112 0003:10C4:EA90.0009: error setting SMBus config
[ 1677.264693][ T6188] cp2112: probe of 0003:10C4:EA90.0009 failed with error -71
[ 1677.301584][ T6188] usb 3-1: USB disconnect, device number 31
[ 1677.311353][T19879] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1677.322217][T19879] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1677.341345][T19879] device bridge_slave_0 entered promiscuous mode
[ 1677.428435][T17201] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1677.472211][T19879] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1677.490784][T19879] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1677.499587][T19879] device bridge_slave_1 entered promiscuous mode
[ 1677.629754][T19879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1677.639568][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1677.663675][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1677.713865][T19879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1677.760415][T17494] Bluetooth: hci3: command 0x041b tx timeout
[ 1677.781161][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1677.801282][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1677.891999][T19879] team0: Port device team_slave_0 added
[ 1677.944782][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1677.960892][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1677.987908][T19735] device veth0_vlan entered promiscuous mode
[ 1678.005183][T19879] team0: Port device team_slave_1 added
[ 1678.086565][T19879] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1678.096836][T19879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1678.154595][T19879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1678.188691][T19879] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1678.208831][T19879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1678.266159][T19879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1678.394201][T19735] device veth1_vlan entered promiscuous mode
[ 1678.582142][T19879] device hsr_slave_0 entered promiscuous mode
[ 1678.634523][T19879] device hsr_slave_1 entered promiscuous mode
[ 1678.668810][T19879] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1678.693495][T19879] Cannot create hsr debugfs directory
[ 1678.723122][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1678.868106][T19808] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1679.301870][T17201] tipc: Left network mode
[ 1679.452484][T11700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1679.462569][T11700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1679.471723][T11700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1679.480831][T11700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1679.513946][T19735] device veth0_macvtap entered promiscuous mode
[ 1679.532006][T17201] tipc: Left network mode
[ 1679.563535][T19808] 8021q: adding VLAN 0 to HW filter on device team0
[ 1679.705315][T19735] device veth1_macvtap entered promiscuous mode
[ 1679.727382][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1679.757670][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1679.777940][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1679.802671][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1679.812588][ T4656] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1679.819799][ T4656] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1679.829445][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1679.840475][T17494] Bluetooth: hci3: command 0x040f tx timeout
[ 1680.145356][T19935] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1680.171630][T19935] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1680.376617][T19735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1680.401385][T19735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1680.429984][T19735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1680.449913][T19735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1680.470262][T19735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1680.495611][T19735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1680.506565][T19735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1680.517307][T19735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1680.530874][T19735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1680.542773][T19735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1680.559150][T19735] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1680.589353][T11700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1680.613851][T11700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1680.650610][T11700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1680.673773][T11700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1680.690363][T11700] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1680.697576][T11700] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1680.716713][T11700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1680.858637][T19939] loop2: detected capacity change from 0 to 16
[ 1680.921929][T19939] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1680.940234][T19939] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89
[ 1680.950710][T19939] syz.2.4257: attempt to access beyond end of device
[ 1680.950710][T19939] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[ 1680.982410][T19939] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1680.992194][T19939] syz.2.4257: attempt to access beyond end of device
[ 1680.992194][T19939] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16
[ 1681.010007][T19939] syz.2.4257: attempt to access beyond end of device
[ 1681.010007][T19939] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[ 1681.026399][   T27] kauditd_printk_skb: 109 callbacks suppressed
[ 1681.026419][   T27] audit: type=1800 audit(1792528695.925:269): pid=19939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4257" name="file2" dev="loop2" ino=89 res=0 errno=0
[ 1681.935335][T17494] Bluetooth: hci3: command 0x0419 tx timeout
[ 1681.983587][T19735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1682.052129][T19735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1682.136870][T19735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1682.225787][T19735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1682.310842][T19735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1682.397637][T19735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1682.493200][T19735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1682.577352][T19735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1682.661756][T19735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1682.729756][T19735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1682.821454][T19735] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1683.717727][T19939] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[ 1684.213416][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1684.230847][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1684.260534][T19735] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1684.269321][T19735] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1684.312223][T19735] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1684.336092][T19735] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1684.376881][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1684.396335][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1684.445909][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1684.471414][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1685.049255][T19942] loop2: detected capacity change from 0 to 40427
[ 1685.059302][T19942] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1685.087709][T19942] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1685.100325][T19942] F2FS-fs (loop2): invalid crc value
[ 1685.112978][T19942] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1685.197027][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1685.208339][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1685.226003][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1685.235454][T19942] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1685.244239][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1685.252169][T19942] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1685.270363][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1685.280493][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1685.404397][T19942] syz.2.4258: attempt to access beyond end of device
[ 1685.404397][T19942] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[ 1685.469986][   T27] audit: type=1804 audit(1792528700.365:270): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4258" name="/newroot/329/file0/file1" dev="loop2" ino=10 res=1 errno=0
[ 1685.901505][T19867] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1685.992505][T19867] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1686.160706][T19867] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1686.272968][T19867] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1686.661300][ T4624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1686.679797][ T4624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1686.905747][   T22] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1687.033742][T16129] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1687.064511][T16129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1687.081658][T16129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1687.124781][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1687.138958][T19808] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1687.146208][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1687.157971][   T22] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1687.168872][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1687.179971][   T22] usb 3-1: config 0 descriptor??
[ 1687.501565][T16129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1687.512104][ T4601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1687.530425][ T4601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1687.543073][T16129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1687.615300][   T22] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 1687.629692][   T22] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 1687.647014][   T22] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 1687.663564][   T22] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 1687.681020][   T22] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 1687.688108][   T22] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 1687.709701][   T22] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 1687.735320][   T22] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[ 1687.795322][T16129] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1687.812252][   T22] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x00
[ 1687.816317][T16129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1687.846449][T16129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1687.871845][T16129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1687.900860][T16129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1688.013629][   T22] cp2112 0003:10C4:EA90.000A: error requesting SMBus config
[ 1688.022960][   T22] cp2112: probe of 0003:10C4:EA90.000A failed with error -71
[ 1688.031943][T19808] device veth0_vlan entered promiscuous mode
[ 1688.053911][   T22] usb 3-1: USB disconnect, device number 32
[ 1688.264476][T19808] device veth1_vlan entered promiscuous mode
[ 1688.358722][T19867] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1688.479666][T19959] loop7: detected capacity change from 0 to 512
[ 1688.700547][   T27] audit: type=1800 audit(1792528703.475:271): pid=19959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4260" name="file1" dev="loop7" ino=1048903 res=0 errno=0
[ 1690.914358][T19964] loop2: detected capacity change from 0 to 512
[ 1690.922017][T19964] EXT4-fs: inline encryption not supported
[ 1690.927972][T19964] EXT4-fs: Ignoring removed i_version option
[ 1691.108973][T19964] EXT4-fs (loop2): 1 orphan inode deleted
[ 1691.114974][T19964] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1691.209511][T19964] EXT4-fs error (device loop2): ext4_add_entry:2488: inode #2: comm syz.2.4261: Directory hole found for htree leaf block 0
[ 1691.338317][T19879] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1691.863640][T19879] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1691.932646][T19879] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1691.954817][T19879] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1692.135723][T19971] loop7: detected capacity change from 0 to 512
[ 1692.192127][T19971] EXT4-fs: Ignoring removed i_version option
[ 1692.251786][T19971] EXT4-fs (loop7): 1 truncate cleaned up
[ 1692.280070][T19971] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1692.353668][T19970] sch_fq: defrate 511 ignored.
[ 1692.576302][T19879] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1692.620653][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1692.666573][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1692.699402][T19808] device veth0_macvtap entered promiscuous mode
[ 1692.759867][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1692.803647][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1692.845373][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1692.896233][T19867] 8021q: adding VLAN 0 to HW filter on device team0
[ 1692.943161][T19808] device veth1_macvtap entered promiscuous mode
[ 1692.983835][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1692.998819][T14872] EXT4-fs (loop2): unmounting filesystem.
[ 1693.023986][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1693.058309][T19735] EXT4-fs (loop7): unmounting filesystem.
[ 1693.066833][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1693.124159][T19879] 8021q: adding VLAN 0 to HW filter on device team0
[ 1693.163863][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1693.174059][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1693.202032][ T4607] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1693.209206][ T4607] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1693.236137][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1693.257002][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1693.265816][T19974] loop2: detected capacity change from 0 to 256
[ 1693.292003][ T4607] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1693.299242][ T4607] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1693.310655][T19974] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[ 1693.346087][T19808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1693.407655][T19808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1693.449426][T19808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1693.469794][T19808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1693.507891][T19808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1693.539647][T19808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1693.566679][T19808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1693.589636][T19808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1693.617820][T19808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1693.646443][T19808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1693.670955][T19808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1693.699093][T19808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1693.749293][T19808] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1693.789581][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1693.807181][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1693.833653][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1693.859241][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1693.888696][ T4607] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1693.895976][ T4607] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1693.921930][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1693.941745][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1693.962559][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1693.984694][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1694.007119][ T4607] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1694.014391][ T4607] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1694.046819][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1694.087846][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1694.148399][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1694.164415][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1694.196489][T19808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1694.224754][T19808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1694.258032][T19808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1694.299465][T19808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1694.329979][T19808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1694.360592][T19808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1694.379856][T19808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1694.412201][T19808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1694.436289][T19808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1694.460224][T19808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1694.479845][T19808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1694.510196][T19808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1694.536791][T19808] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1694.558142][T17201] device hsr_slave_0 left promiscuous mode
[ 1694.588216][T17201] device hsr_slave_1 left promiscuous mode
[ 1694.611027][T17201] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1694.619040][T17201] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1694.648263][T17201] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1694.666796][T17201] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1694.688646][T17201] device bridge_slave_1 left promiscuous mode
[ 1694.707990][T17201] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1694.743292][T17201] device bridge_slave_0 left promiscuous mode
[ 1694.760512][T17201] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1694.785477][T17201] device hsr_slave_0 left promiscuous mode
[ 1694.802020][T17201] device hsr_slave_1 left promiscuous mode
[ 1694.840393][T17201] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1694.853653][T17201] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1694.875951][T17201] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1694.890007][T17201] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1694.910173][T17201] device bridge_slave_1 left promiscuous mode
[ 1694.916499][T17201] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1694.949484][T17201] device bridge_slave_0 left promiscuous mode
[ 1694.963157][T17201] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1695.005251][T17201] device hsr_slave_0 left promiscuous mode
[ 1695.018978][T17201] device hsr_slave_1 left promiscuous mode
[ 1695.037197][T17201] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1695.059445][T17201] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1695.078300][T17201] device bridge_slave_1 left promiscuous mode
[ 1695.098531][T17201] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1695.118899][T17201] device bridge_slave_0 left promiscuous mode
[ 1695.137516][T17201] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1695.351933][T17201] device bridge0 left promiscuous mode
[ 1695.371710][T17201] device veth1_macvtap left promiscuous mode
[ 1695.378477][T17201] device veth0_macvtap left promiscuous mode
[ 1695.398436][T17201] device veth1_vlan left promiscuous mode
[ 1695.408740][T17201] device veth0_vlan left promiscuous mode
[ 1695.427815][T17201] device veth1_macvtap left promiscuous mode
[ 1695.441333][T17201] device veth0_macvtap left promiscuous mode
[ 1695.456011][T17201] device veth1_vlan left promiscuous mode
[ 1695.469215][T17201] device veth0_vlan left promiscuous mode
[ 1699.212114][T17201] team0 (unregistering): Port device team_slave_1 removed
[ 1699.374383][T17201] team0 (unregistering): Port device team_slave_0 removed
[ 1699.461613][T17201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1699.622861][T17201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1700.985923][T17201] bond0 (unregistering): Released all slaves
[ 1702.690000][T17201] team0 (unregistering): Port device team_slave_1 removed
[ 1702.835357][T17201] team0 (unregistering): Port device team_slave_0 removed
[ 1703.015793][T17201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1703.167787][T17201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1704.197723][T17201] bond0 (unregistering): Released all slaves
[ 1704.953602][T17201] team0 (unregistering): Port device team_slave_1 removed
[ 1705.050797][T17201] team0 (unregistering): Port device team_slave_0 removed
[ 1705.195431][T17201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1705.300854][T17201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1706.161984][T17201] bond0 (unregistering): Released all slaves
[ 1706.278973][T19978] rxe_eth0 speed is unknown, defaulting to 1000
[ 1706.292486][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1706.337897][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1706.370947][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1706.390325][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1706.462227][T19879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1706.489728][T19879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1706.604873][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1706.615183][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1706.665728][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1706.711139][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1706.741761][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1706.771102][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1706.801217][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1706.824365][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1706.844130][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1706.864837][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1706.890516][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1706.910782][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1706.941407][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1706.971756][T19808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1706.991066][T19808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1707.020092][T19808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1707.040077][T19808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1707.073075][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1707.104233][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1707.132090][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1707.150719][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1707.393217][T19867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1707.554715][T19997] loop2: detected capacity change from 0 to 128
[ 1708.519853][T19879] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1709.498191][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1709.519994][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1709.808653][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1709.834932][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1709.886321][T19867] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1709.971440][ T4630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1709.997126][ T4630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1710.033614][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1710.071272][ T4601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1710.094191][ T4601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1710.122321][T16940] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1710.661480][T17494] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1710.689655][T17494] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1710.710989][T17494] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1710.737965][T17494] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1711.040146][T17494] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1711.089939][T17494] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1711.254377][T20011] rxe_eth0 speed is unknown, defaulting to 1000
[ 1711.548439][T20021] loop2: detected capacity change from 0 to 512
[ 1711.571381][T20021] EXT4-fs: Ignoring removed i_version option
[ 1711.617211][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1711.634962][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1711.651180][T20021] EXT4-fs (loop2): 1 truncate cleaned up
[ 1711.668610][T20021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1711.751002][T20027] loop0: detected capacity change from 0 to 16
[ 1711.807037][T20027] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1711.825138][T20027] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89
[ 1711.835914][T20027] syz.0.4272: attempt to access beyond end of device
[ 1711.835914][T20027] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[ 1711.934613][T20029] tipc: Started in network mode
[ 1711.940062][T20029] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[ 1711.948346][T20029] tipc: Enabled bearer <eth:syz_tun>, priority 0
[ 1711.997050][T20027] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1712.007088][T20027] syz.0.4272: attempt to access beyond end of device
[ 1712.007088][T20027] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16
[ 1712.024706][T20027] syz.0.4272: attempt to access beyond end of device
[ 1712.024706][T20027] loop0: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[ 1712.051339][   T27] audit: type=1800 audit(1792528726.945:272): pid=20027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4272" name="file2" dev="loop0" ino=89 res=0 errno=0
[ 1712.699490][T16822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1712.738828][T16822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1712.803244][T19879] device veth0_vlan entered promiscuous mode
[ 1712.844851][T16822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1712.865044][T16822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1712.973049][T19879] device veth1_vlan entered promiscuous mode
[ 1713.022840][   T22] tipc: Node number set to 43690
[ 1713.188394][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1713.208970][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1713.260507][T19879] device veth0_macvtap entered promiscuous mode
[ 1713.391966][ T4276] Bluetooth: hci5: command 0x0409 tx timeout
[ 1713.414829][T14872] EXT4-fs (loop2): unmounting filesystem.
[ 1713.446370][T19879] device veth1_macvtap entered promiscuous mode
[ 1713.539965][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1713.581542][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1713.629891][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1713.671037][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1713.723941][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1713.773165][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1713.816378][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1713.867829][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1713.908770][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1713.970431][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.022544][T19879] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1714.069255][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1714.109777][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.138669][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1714.179766][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.199693][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1714.210508][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.220493][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1714.231660][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.242514][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1714.253282][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.281995][T19879] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1714.332129][T19879] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1714.359526][T19879] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1714.368535][T19879] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1714.389944][T19879] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1714.479261][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1714.501027][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1714.509716][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1714.518897][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1714.541100][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1714.550826][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1714.585143][T20035] IPv6: Can't replace route, no match found
[ 1714.719461][T16822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1714.747658][T16822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1714.790827][T16822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1714.820434][T16822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1714.856703][T19867] device veth0_vlan entered promiscuous mode
[ 1714.951966][T16822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1714.963649][T16822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1715.015303][T20011] chnl_net:caif_netlink_parms(): no params data found
[ 1715.029741][ T6188] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1715.161449][T19867] device veth1_vlan entered promiscuous mode
[ 1715.232324][ T6188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1715.266774][ T6188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1715.304960][ T6188] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1715.352433][ T6188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1715.380111][T16822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1715.388003][T16822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1715.394159][ T6188] usb 1-1: config 0 descriptor??
[ 1715.422553][T16822] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1715.451020][ T4276] Bluetooth: hci5: command 0x041b tx timeout
[ 1715.463726][T16822] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1715.502916][T16822] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1715.663675][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1715.694463][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1715.761945][T20011] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1715.769193][T20011] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1715.787949][T20011] device bridge_slave_0 entered promiscuous mode
[ 1715.803351][T20011] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1715.810880][ T4642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1715.810934][T20011] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1715.819143][ T4642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1715.833001][T20011] device bridge_slave_1 entered promiscuous mode
[ 1715.848459][ T6188] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[ 1715.857643][T19867] device veth0_macvtap entered promiscuous mode
[ 1715.870121][ T6188] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[ 1715.892149][ T6188] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[ 1715.912475][ T6188] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[ 1715.944049][ T6188] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[ 1715.970903][ T6188] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[ 1715.988366][ T6188] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[ 1716.026821][ T6188] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[ 1716.109815][T16972] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1716.111983][ T6188] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00
[ 1716.126178][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1716.128812][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1716.163793][T19867] device veth1_macvtap entered promiscuous mode
[ 1716.258140][T19867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1716.294596][T19867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1716.313268][ T6188] cp2112 0003:10C4:EA90.000B: error requesting SMBus config
[ 1716.331361][T19867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1716.332400][ T6188] cp2112: probe of 0003:10C4:EA90.000B failed with error -71
[ 1716.345032][T16972] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1716.369702][T19867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1716.383433][T16972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1716.389964][T19867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1716.409994][ T6188] usb 1-1: USB disconnect, device number 38
[ 1716.414924][T16972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1716.445546][T19867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1716.449804][T16972] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1716.469860][T19867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1716.489977][T20051] overlayfs: upper fs does not support file handles, falling back to index=off.
[ 1716.500548][T19867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1716.519962][T19867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1716.534874][T16972] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1716.539848][T19867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1716.559304][T16972] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1716.571559][T16972] usb 3-1: Product: syz
[ 1716.575833][T16972] usb 3-1: Manufacturer: syz
[ 1716.585095][T19867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1716.599400][T16972] cdc_wdm 3-1:1.0: skipping garbage
[ 1716.611494][T16972] cdc_wdm 3-1:1.0: skipping garbage
[ 1716.622558][T16972] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1716.628700][T16972] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1716.630254][T19867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1716.683608][T19867] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1716.709177][T20011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1716.763460][T20011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1716.777243][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1716.808803][T19921] usb 3-1: USB disconnect, device number 33
[ 1716.815346][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1716.858368][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1716.940763][T19867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1716.969780][T19867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1716.999855][T19867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1717.019731][T19867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1717.032897][T19867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1717.047654][T19867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1717.058002][T19867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1717.080172][T19867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1717.093780][T19867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1717.120320][T19867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1717.139441][T19867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1717.167073][T20059] loop0: detected capacity change from 0 to 512
[ 1717.174682][T20059] EXT4-fs: Ignoring removed i_version option
[ 1717.203794][T19867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1717.216066][T20059] EXT4-fs (loop0): 1 truncate cleaned up
[ 1717.221932][T20059] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1717.280564][T19867] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1717.340609][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1717.355039][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1717.383500][T20011] team0: Port device team_slave_0 added
[ 1717.392196][T20058] sch_fq: defrate 511 ignored.
[ 1717.453979][T20011] team0: Port device team_slave_1 added
[ 1717.490835][T20011] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1717.505055][T19808] EXT4-fs (loop0): unmounting filesystem.
[ 1717.530351][ T4276] Bluetooth: hci5: command 0x040f tx timeout
[ 1717.539460][T20011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1717.570604][T20011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1717.617841][T19867] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1717.627072][T19921] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1717.645162][T19867] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1717.654334][T19867] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1717.666699][T19867] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1717.678511][T20065] hub 8-0:1.0: USB hub found
[ 1717.686960][T20065] hub 8-0:1.0: 1 port detected
[ 1717.707169][T20011] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1717.720183][T20011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1717.748108][T20011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1717.812417][T19921] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1717.828930][T19921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1717.964590][T19921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1717.973770][T19921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1718.012606][T19921] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1718.059665][T19921] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1718.076923][T19921] usb 3-1: Product: syz
[ 1718.089821][T19921] usb 3-1: Manufacturer: syz
[ 1718.141544][T19921] cdc_wdm 3-1:1.0: skipping garbage
[ 1718.146851][T19921] cdc_wdm 3-1:1.0: skipping garbage
[ 1718.169290][T19921] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1718.179749][T19921] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1718.213083][T20011] device hsr_slave_0 entered promiscuous mode
[ 1718.234223][T20011] device hsr_slave_1 entered promiscuous mode
[ 1718.251120][T20011] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1718.258861][T20011] Cannot create hsr debugfs directory
[ 1718.643489][T20070] loop9: detected capacity change from 0 to 16
[ 1718.657882][T20070] erofs: (device loop9): mounted with root inode @ nid 36.
[ 1718.684840][T20070] erofs: (device loop9): z_erofs_readahead: readahead error at page 3 @ nid 89
[ 1718.695528][T20070] syz.9.4283: attempt to access beyond end of device
[ 1718.695528][T20070] loop9: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[ 1718.849491][T20070] erofs: (device loop9): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1718.859218][T20070] syz.9.4283: attempt to access beyond end of device
[ 1718.859218][T20070] loop9: rw=524288, sector=16, nr_sectors = 40 limit=16
[ 1718.876685][T20070] syz.9.4283: attempt to access beyond end of device
[ 1718.876685][T20070] loop9: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[ 1718.907169][   T27] audit: type=1800 audit(1792528733.795:273): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4283" name="file2" dev="loop9" ino=89 res=0 errno=0
[ 1719.376036][T20072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1719.506351][T17201] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1719.524152][T20072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1719.600429][T17494] Bluetooth: hci5: command 0x0419 tx timeout
[ 1720.257374][T17201] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1720.977276][T20079] loop0: detected capacity change from 0 to 256
[ 1721.011302][T16972] usb 3-1: USB disconnect, device number 34
[ 1721.039073][T20079] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1721.075926][   T27] audit: type=1800 audit(1792528735.975:274): pid=20079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4285" name="file1" dev="loop0" ino=1048929 res=0 errno=0
[ 1721.545804][T20081] rxe_eth0 speed is unknown, defaulting to 1000
[ 1721.636168][ T4609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1721.667646][ T4609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1721.686609][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1721.822559][T17201] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1721.900282][T19921] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1721.973853][T17201] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1722.025139][ T4601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1722.042048][ T4601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1722.079555][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1722.105013][T19921] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1722.138235][T19921] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[ 1722.157807][T19921] usb 10-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[ 1722.168408][T19921] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1722.179962][T16972] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1722.209495][T19924] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1722.244515][T19921] usb 10-1: probing VID:PID(0424:012C)   
[ 1722.261386][T19921] usb 10-1: vub300 testing BULK IN EndPoint(0) 81
[ 1722.268471][T19921] usb 10-1: vub300 testing BULK OUT EndPoint(1) 02
[ 1722.275244][T19921] usb 10-1: vub300 testing BULK IN EndPoint(2) 83
[ 1722.289879][T19921] usb 10-1: vub300 testing BULK OUT EndPoint(3) 04
[ 1722.296468][T19921] usb 10-1: vub300 LARGE packets using EndPoints 02 81 04 83
[ 1722.389943][T16972] usb 3-1: Using ep0 maxpacket: 32
[ 1722.402634][T16972] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 1722.534975][T16972] usb 3-1: config 0 has no interface number 0
[ 1722.640151][T16972] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1722.864995][T16972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1722.985688][T16972] usb 3-1: Product: syz
[ 1723.033411][T16972] usb 3-1: Manufacturer: syz
[ 1723.096962][T16972] usb 3-1: SerialNumber: syz
[ 1723.230556][T19924] usb 1-1: Using ep0 maxpacket: 16
[ 1723.244395][T16972] usb 3-1: config 0 descriptor??
[ 1723.274941][T16972] smsc95xx v2.0.0
[ 1723.291101][T19921] usb 10-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[ 1723.309981][T19921] usb 10-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted
[ 1723.326372][T19924] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1723.344991][T19924] usb 1-1: config 9 has an invalid interface number: 163 but max is 0
[ 1723.353391][T19924] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[ 1723.366711][T19924] usb 1-1: config 9 has no interface number 0
[ 1723.373001][T19924] usb 1-1: config 9 interface 163 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 15
[ 1723.418125][T19924] usb 1-1: config 9 interface 163 has no altsetting 0
[ 1723.454129][T19924] usb 1-1: New USB device found, idVendor=0bda, idProduct=d723, bcdDevice=d5.ae
[ 1723.494208][T19924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1723.524636][T19924] usb 1-1: Product: syz
[ 1723.528888][T19924] usb 1-1: Manufacturer: syz
[ 1723.540988][T19924] usb 1-1: SerialNumber: syz
[ 1723.648881][T20084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1723.669148][T20084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1723.682134][T16972] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1723.701829][T16972] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1723.822689][T20087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1723.832532][T20087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1723.854843][T20099] sch_fq: defrate 511 ignored.
[ 1723.899713][T20098] loop8: detected capacity change from 0 to 512
[ 1723.907243][T20098] EXT4-fs: Ignoring removed i_version option
[ 1723.922568][T19924] usb 1-1: USB disconnect, device number 39
[ 1723.970703][T20098] EXT4-fs (loop8): 1 truncate cleaned up
[ 1723.976574][T20098] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1724.030143][T19867] EXT4-fs (loop8): unmounting filesystem.
[ 1724.668691][T16782] usb 10-1: card just inserted
[ 1725.746667][T20011] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1725.837740][T19923] usb 10-1: USB disconnect, device number 2
[ 1725.846233][T19921] usb 10-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[ 1725.886047][T20011] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1725.897881][T20011] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1725.913602][T20011] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1725.938689][T19923] USB vub300 remote SDIO host controller[0] now disconnected
[ 1725.999996][T19924] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1726.146754][ T5267] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1726.254635][T19924] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[ 1726.271369][T19924] usb 1-1: config 0 has no interface number 0
[ 1726.285831][T19924] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1726.313374][T19924] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1726.329779][T19924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1726.340851][ T5267] usb 9-1: too many configurations: 199, using maximum allowed: 8
[ 1726.362656][ T5267] usb 9-1: config index 0 descriptor too short (expected 65183, got 72)
[ 1726.381777][T19924] usb 1-1: Product: syz
[ 1726.398895][T19924] usb 1-1: Manufacturer: syz
[ 1726.420031][ T5267] usb 9-1: config index 1 descriptor too short (expected 65183, got 72)
[ 1726.431122][T19924] usb 1-1: SerialNumber: syz
[ 1726.446834][ T5267] usb 9-1: config index 2 descriptor too short (expected 65183, got 72)
[ 1726.456706][T19924] usb 1-1: config 0 descriptor??
[ 1726.481354][ T5267] usb 9-1: config index 3 descriptor too short (expected 65183, got 72)
[ 1726.493306][T19924] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[ 1726.511270][ T5267] usb 9-1: config index 4 descriptor too short (expected 65183, got 72)
[ 1726.543878][ T5267] usb 9-1: config index 5 descriptor too short (expected 65183, got 72)
[ 1726.581600][ T5267] usb 9-1: config index 6 descriptor too short (expected 65183, got 72)
[ 1726.611603][ T5267] usb 9-1: config index 7 descriptor too short (expected 65183, got 72)
[ 1726.625782][ T5267] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1726.635999][ T5267] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1726.659010][ T5267] usb 9-1: Product: syz
[ 1726.676536][T16972] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71
[ 1726.698582][ T5267] usb 9-1: Manufacturer: syz
[ 1726.705567][T16972] smsc95xx: probe of 3-1:0.67 failed with error -71
[ 1726.712121][ T5267] usb 9-1: SerialNumber: syz
[ 1726.719956][    C0] 
[ 1726.722341][    C0] ================================
[ 1726.727487][    C0] WARNING: inconsistent lock state
[ 1726.732641][    C0] syzkaller #0 Not tainted
[ 1726.737090][    C0] --------------------------------
[ 1726.742239][    C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[ 1726.749125][    C0] syz-executor/19879 [HC0[0]:SC1[1]:HE1:SE0] takes:
[ 1726.750275][T16972] usb 3-1: USB disconnect, device number 35
[ 1726.755740][    C0] ffff888036e38648 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0x109/0xac0
[ 1726.772990][    C0] {SOFTIRQ-ON-W} state was registered at:
[ 1726.778752][    C0]   lock_acquire+0x1bc/0x4a0
[ 1726.783437][    C0]   process_one_work+0x7ec/0x1160
[ 1726.788515][    C0]   worker_thread+0xaf5/0x12a0
[ 1726.793363][    C0]   kthread+0x29d/0x330
[ 1726.797557][    C0]   ret_from_fork+0x1f/0x30
[ 1726.802131][    C0] irq event stamp: 237940
[ 1726.806484][    C0] hardirqs last  enabled at (237940): [<ffffffff815474ea>] __cancel_work_timer+0x36a/0x560
[ 1726.816513][    C0] hardirqs last disabled at (237939): [<ffffffff81543e7a>] try_to_grab_pending+0xfa/0x890
[ 1726.826489][    C0] softirqs last  enabled at (237846): [<ffffffff814f4aab>] __irq_exit_rcu+0x13b/0x230
[ 1726.836129][    C0] softirqs last disabled at (237875): [<ffffffff814f4aab>] __irq_exit_rcu+0x13b/0x230
[ 1726.845914][    C0] 
[ 1726.845914][    C0] other info that might help us debug this:
[ 1726.854011][    C0]  Possible unsafe locking scenario:
[ 1726.854011][    C0] 
[ 1726.861501][    C0]        CPU0
[ 1726.864897][    C0]        ----
[ 1726.868208][    C0]   lock((work_completion)(&(&host->detect)->work));
[ 1726.874938][    C0]   <Interrupt>
[ 1726.878426][    C0]     lock((work_completion)(&(&host->detect)->work));
[ 1726.885315][    C0] 
[ 1726.885315][    C0]  *** DEADLOCK ***
[ 1726.885315][    C0] 
[ 1726.893490][    C0] 1 lock held by syz-executor/19879:
[ 1726.898823][    C0]  #0: ffffc90000007bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xcf/0x670
[ 1726.909352][    C0] 
[ 1726.909352][    C0] stack backtrace:
[ 1726.915294][    C0] CPU: 0 PID: 19879 Comm: syz-executor Not tainted syzkaller #0
[ 1726.923029][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1726.933158][    C0] Call Trace:
[ 1726.936501][    C0]  <IRQ>
[ 1726.939387][    C0]  dump_stack_lvl+0x188/0x24e
[ 1726.944128][    C0]  ? show_regs_print_info+0x12/0x12
[ 1726.949379][    C0]  ? unwind_get_return_address+0x49/0x80
[ 1726.955065][    C0]  valid_state+0x13b/0x1d0
[ 1726.959539][    C0]  mark_lock_irq+0xa9/0x900
[ 1726.964100][    C0]  ? stack_trace_save+0xa6/0xf0
[ 1726.969008][    C0]  ? save_trace+0xbb0/0xbb0
[ 1726.973578][    C0]  ? save_trace+0x5a/0xbb0
[ 1726.978059][    C0]  mark_lock+0x208/0x320
[ 1726.982358][    C0]  __lock_acquire+0xdf3/0x7ea0
[ 1726.983801][T20118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1726.987184][    C0]  ? verify_lock_unused+0x140/0x140
[ 1727.000747][    C0]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1727.005840][    C0]  ? debug_object_assert_init+0x1ed/0x300
[ 1727.011623][    C0]  lock_acquire+0x1bc/0x4a0
[ 1727.016177][    C0]  ? __flush_work+0x109/0xac0
[ 1727.020905][    C0]  ? do_raw_spin_unlock+0x11d/0x230
[ 1727.026168][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1727.031584][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1727.037310][T20118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1727.037506][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1727.050120][    C0]  ? slab_free_freelist_hook+0x133/0x1b0
[ 1727.055801][    C0]  ? kobject_put+0x25c/0x450
[ 1727.060452][    C0]  ? vub300_inactivity_timer_expired+0x190/0x3e0
[ 1727.066891][    C0]  ? call_timer_fn+0x1ac/0x670
[ 1727.071704][    C0]  ? __flush_work+0x109/0xac0
[ 1727.076425][    C0]  __flush_work+0x122/0xac0
[ 1727.080966][    C0]  ? __flush_work+0x109/0xac0
[ 1727.085688][    C0]  ? flush_work+0x20/0x20
[ 1727.090062][    C0]  ? __timer_delete+0x6c/0x220
[ 1727.094876][    C0]  ? mark_lock+0x94/0x320
[ 1727.099254][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1727.105307][    C0]  ? mod_delayed_work_on+0x1b0/0x1b0
[ 1727.110634][    C0]  ? lock_chain_count+0x20/0x20
[ 1727.115531][    C0]  ? kasan_quarantine_put+0xd4/0x210
[ 1727.120862][    C0]  ? __cancel_work_timer+0x36a/0x560
[ 1727.126215][    C0]  __cancel_work_timer+0x3f4/0x560
[ 1727.131391][    C0]  ? cancel_work_sync+0x20/0x20
[ 1727.136285][    C0]  ? kobject_put+0x25c/0x450
[ 1727.140930][    C0]  ? __kmem_cache_free+0xb6/0x200
[ 1727.146008][    C0]  ? kobject_put+0x41d/0x450
[ 1727.150654][    C0]  mmc_free_host+0x15/0x40
[ 1727.155118][    C0]  call_timer_fn+0x1ac/0x670
[ 1727.159767][    C0]  ? kref_get+0x70/0x70
[ 1727.163968][    C0]  ? call_timer_fn+0xcf/0x670
[ 1727.168692][    C0]  ? __run_timers+0x810/0x810
[ 1727.173417][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1727.178689][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1727.183939][    C0]  ? kref_get+0x70/0x70
[ 1727.188146][    C0]  __run_timers+0x56c/0x810
[ 1727.193051][    C0]  ? detach_timer+0x350/0x350
[ 1727.197782][    C0]  ? lock_chain_count+0x20/0x20
[ 1727.202712][    C0]  run_timer_softirq+0x63/0xf0
[ 1727.207517][    C0]  handle_softirqs+0x291/0x910
[ 1727.212327][    C0]  ? __irq_exit_rcu+0x13b/0x230
[ 1727.217222][    C0]  ? do_softirq+0x210/0x210
[ 1727.221762][    C0]  ? hrtimer_interrupt+0x775/0x980
[ 1727.226916][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[ 1727.232153][    C0]  __irq_exit_rcu+0x13b/0x230
[ 1727.236880][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1727.241420][    C0]  irq_exit_rcu+0x5/0x20
[ 1727.245709][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1727.251397][    C0]  </IRQ>
[ 1727.254359][    C0]  <TASK>
[ 1727.257321][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1727.263355][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[ 1727.269894][    C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> ff b7 1a f7 65 8b 05 c0 67 c4 75 85 c0 74 3c 48 c7 04 24 0e 36
[ 1727.289715][    C0] RSP: 0018:ffffc90004247ba0 EFLAGS: 00000206
[ 1727.291819][T20110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1727.295893][    C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 667cc0748aeb8b00
[ 1727.312325][    C0] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 0000000000000001
[ 1727.319496][T20110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1727.320325][    C0] RBP: ffffc90004247c30 R08: ffff8880b8c2a5c3 R09: 1ffff110171854b8
[ 1727.336079][    C0] R10: dffffc0000000000 R11: ffffed10171854b9 R12: dffffc0000000000
[ 1727.344099][    C0] R13: ffffc90004247dc0 R14: ffff8880b8c2a5c0 R15: 1ffff92000848f74
[ 1727.352128][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1727.357035][    C0]  do_nanosleep+0x17a/0x5e0
[ 1727.361597][    C0]  ? do_nanosleep+0x7c/0x5e0
[ 1727.366244][    C0]  ? usleep_range_state+0x1a0/0x1a0
[ 1727.371495][    C0]  ? memset+0x1e/0x40
[ 1727.375516][    C0]  ? __hrtimer_init+0x189/0x270
[ 1727.379949][T16972] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[ 1727.380398][    C0]  hrtimer_nanosleep+0x171/0x370
[ 1727.392932][    C0]  ? __might_fault+0xc2/0x120
[ 1727.396764][T20110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1727.397641][    C0]  ? __might_fault+0xa6/0x120
[ 1727.410785][    C0]  ? nanosleep_copyout+0x110/0x110
[ 1727.415973][    C0]  ? __remove_hrtimer+0x470/0x470
[ 1727.421077][    C0]  ? timespec64_add_safe+0x1f0/0x1f0
[ 1727.426421][    C0]  __se_sys_clock_nanosleep+0x30b/0x3a0
[ 1727.432018][    C0]  ? __x64_sys_clock_nanosleep+0xa0/0xa0
[ 1727.437697][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1727.438423][T20110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1727.442929][    C0]  do_syscall_64+0x4c/0xa0
[ 1727.455135][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1727.459870][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1727.464782][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1727.470718][    C0] RIP: 0033:0x7f0ede15fd8e
[ 1727.475262][    C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1727.475279][T20110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1727.475869][T20110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1727.494904][    C0] RSP: 002b:00007ffe705f6378 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[ 1727.519454][    C0] RAX: ffffffffffffffda RBX: 000055558cf4e500 RCX: 00007f0ede15fd8e
[ 1727.527470][    C0] RDX: 00007ffe705f63d0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1727.535492][    C0] RBP: 00007ffe705f643c R08: 0000000000000000 R09: 0000000000000000
[ 1727.543508][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 1727.551697][    C0] R13: 00000000000927c0 R14: 00000000001a5832 R15: 00007ffe705f6490
[ 1727.559715][    C0]  </TASK>
[ 1727.563083][    C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3013
[ 1727.572182][    C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 19879, name: syz-executor
[ 1727.581553][    C0] preempt_count: 101, expected: 0
[ 1727.586607][    C0] RCU nest depth: 0, expected: 0
[ 1727.591637][    C0] INFO: lockdep is turned off.
[ 1727.596447][    C0] Preemption disabled at:
[ 1727.596458][    C0] [<0000000000000000>] 0x0
[ 1727.605400][    C0] CPU: 0 PID: 19879 Comm: syz-executor Not tainted syzkaller #0
[ 1727.613072][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1727.623170][    C0] Call Trace:
[ 1727.626486][    C0]  <IRQ>
[ 1727.629357][    C0]  dump_stack_lvl+0x188/0x24e
[ 1727.630383][T16696] usb 1-1: USB disconnect, device number 40
[ 1727.634069][    C0]  ? show_regs_print_info+0x12/0x12
[ 1727.645220][    C0]  ? load_image+0x410/0x410
[ 1727.649800][    C0]  __might_resched+0x489/0x5f0
[ 1727.654614][    C0]  ? __might_sleep+0xd0/0xd0
[ 1727.659261][    C0]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1727.664351][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1727.670285][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1727.673815][T16972] usb 3-1: not running at top speed; connect to a high speed hub
[ 1727.675153][    C0]  ? slab_free_freelist_hook+0x133/0x1b0
[ 1727.688561][    C0]  ? kobject_put+0x25c/0x450
[ 1727.693206][    C0]  ? vub300_inactivity_timer_expired+0x190/0x3e0
[ 1727.698169][T16972] usb 3-1: config 2 has an invalid interface number: 178 but max is 0
[ 1727.699576][    C0]  ? call_timer_fn+0x1ac/0x670
[ 1727.699608][    C0]  ? __flush_work+0x109/0xac0
[ 1727.717474][    C0]  __flush_work+0x142/0xac0
[ 1727.722032][    C0]  ? flush_work+0x20/0x20
[ 1727.726838][    C0]  ? __timer_delete+0x6c/0x220
[ 1727.729760][T16972] usb 3-1: config 2 has no interface number 0
[ 1727.731656][    C0]  ? mark_lock+0x94/0x320
[ 1727.731694][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1727.738146][T16972] usb 3-1: config 2 interface 178 has no altsetting 0
[ 1727.742112][    C0]  ? mod_delayed_work_on+0x1b0/0x1b0
[ 1727.742141][    C0]  ? lock_chain_count+0x20/0x20
[ 1727.742168][    C0]  ? kasan_quarantine_put+0xd4/0x210
[ 1727.770552][    C0]  ? __cancel_work_timer+0x36a/0x560
[ 1727.775892][    C0]  __cancel_work_timer+0x3f4/0x560
[ 1727.776200][T16972] usb 3-1: string descriptor 0 read error: -22
[ 1727.781036][    C0]  ? cancel_work_sync+0x20/0x20
[ 1727.781060][    C0]  ? kobject_put+0x25c/0x450
[ 1727.781092][    C0]  ? __kmem_cache_free+0xb6/0x200
[ 1727.801805][    C0]  ? kobject_put+0x41d/0x450
[ 1727.806460][    C0]  mmc_free_host+0x15/0x40
[ 1727.807873][T16972] usb 3-1: New USB device found, idVendor=0bda, idProduct=8179, bcdDevice=7b.c5
[ 1727.810912][    C0]  call_timer_fn+0x1ac/0x670
[ 1727.810941][    C0]  ? kref_get+0x70/0x70
[ 1727.810968][    C0]  ? call_timer_fn+0xcf/0x670
[ 1727.810987][    C0]  ? __run_timers+0x810/0x810
[ 1727.811010][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1727.811033][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1727.811062][    C0]  ? kref_get+0x70/0x70
[ 1727.811089][    C0]  __run_timers+0x56c/0x810
[ 1727.811117][    C0]  ? detach_timer+0x350/0x350
[ 1727.811139][    C0]  ? lock_chain_count+0x20/0x20
[ 1727.811170][    C0]  run_timer_softirq+0x63/0xf0
[ 1727.811190][    C0]  handle_softirqs+0x291/0x910
[ 1727.811214][    C0]  ? __irq_exit_rcu+0x13b/0x230
[ 1727.811234][    C0]  ? do_softirq+0x210/0x210
[ 1727.811252][    C0]  ? hrtimer_interrupt+0x775/0x980
[ 1727.811276][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[ 1727.811297][    C0]  __irq_exit_rcu+0x13b/0x230
[ 1727.811315][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1727.811337][    C0]  irq_exit_rcu+0x5/0x20
[ 1727.811354][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1727.811382][    C0]  </IRQ>
[ 1727.811391][    C0]  <TASK>
[ 1727.811398][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1727.811423][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[ 1727.811448][    C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> ff b7 1a f7 65 8b 05 c0 67 c4 75 85 c0 74 3c 48 c7 04 24 0e 36
[ 1727.811467][    C0] RSP: 0018:ffffc90004247ba0 EFLAGS: 00000206
[ 1727.811488][    C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 667cc0748aeb8b00
[ 1727.811503][    C0] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 0000000000000001
[ 1727.853844][T16972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1727.857892][    C0] RBP: ffffc90004247c30 R08: ffff8880b8c2a5c3 R09: 1ffff110171854b8
[ 1727.992596][    C0] R10: dffffc0000000000 R11: ffffed10171854b9 R12: dffffc0000000000
[ 1728.000616][    C0] R13: ffffc90004247dc0 R14: ffff8880b8c2a5c0 R15: 1ffff92000848f74
[ 1728.008651][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1728.013571][    C0]  do_nanosleep+0x17a/0x5e0
[ 1728.018151][    C0]  ? do_nanosleep+0x7c/0x5e0
[ 1728.022802][    C0]  ? usleep_range_state+0x1a0/0x1a0
[ 1728.028058][    C0]  ? memset+0x1e/0x40
[ 1728.032082][    C0]  ? __hrtimer_init+0x189/0x270
[ 1728.036977][    C0]  hrtimer_nanosleep+0x171/0x370
[ 1728.041980][    C0]  ? __might_fault+0xc2/0x120
[ 1728.046693][    C0]  ? __might_fault+0xa6/0x120
[ 1728.051450][    C0]  ? nanosleep_copyout+0x110/0x110
[ 1728.056608][    C0]  ? __remove_hrtimer+0x470/0x470
[ 1728.061678][    C0]  ? timespec64_add_safe+0x1f0/0x1f0
[ 1728.067110][    C0]  __se_sys_clock_nanosleep+0x30b/0x3a0
[ 1728.072702][    C0]  ? __x64_sys_clock_nanosleep+0xa0/0xa0
[ 1728.078396][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1728.083652][    C0]  do_syscall_64+0x4c/0xa0
[ 1728.088210][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1728.092935][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1728.097760][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1728.103698][    C0] RIP: 0033:0x7f0ede15fd8e
[ 1728.108360][    C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1728.128034][    C0] RSP: 002b:00007ffe705f6378 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[ 1728.136525][    C0] RAX: ffffffffffffffda RBX: 000055558cf4e500 RCX: 00007f0ede15fd8e
[ 1728.144608][    C0] RDX: 00007ffe705f63d0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1728.152647][    C0] RBP: 00007ffe705f643c R08: 0000000000000000 R09: 0000000000000000
[ 1728.160694][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 1728.168748][    C0] R13: 00000000000927c0 R14: 00000000001a5832 R15: 00007ffe705f6490
[ 1728.176778][    C0]  </TASK>
[ 1728.179944][    C0] ODEBUG: object ffffc900000079a0 is NOT on stack ffffc90004240000, but annotated.
[ 1728.180345][T20119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1728.191162][    C0] ------------[ cut here ]------------
[ 1728.203187][    C0] WARNING: CPU: 0 PID: 19879 at lib/debugobjects.c:558 __debug_object_init+0x18e/0x440
[ 1728.212915][    C0] Modules linked in:
[ 1728.216877][    C0] CPU: 0 PID: 19879 Comm: syz-executor Tainted: G        W          syzkaller #0
[ 1728.226024][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1728.236132][    C0] RIP: 0010:__debug_object_init+0x18e/0x440
[ 1728.242089][    C0] Code: 24 04 74 2f 41 ff c6 44 89 35 3e 36 bf 13 48 c7 c1 00 7a df 8a 48 c7 c7 60 7a df 8a 84 c0 48 0f 45 f9 48 89 de e8 f2 9a 0d 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f
[ 1728.260836][T20119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1728.261755][    C0] RSP: 0018:ffffc90000007908 EFLAGS: 00010046
[ 1728.275604][    C0] RAX: 0000000000000050 RBX: ffffc900000079a0 RCX: 667cc0748aeb8b00
[ 1728.283617][    C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000
[ 1728.291634][    C0] RBP: dffffc0000000000 R08: ffffffff8f00d22f R09: 1ffffffff1e01a45
[ 1728.299677][    C0] R10: dffffc0000000000 R11: fffffbfff1e01a46 R12: ffff88802ffc1e20
[ 1728.307259][T16972] usb 3-1: USB disconnect, device number 36
[ 1728.307685][    C0] R13: ffff8880552aa268 R14: 0000000000000001 R15: ffffffff8a8d32c0
[ 1728.307710][    C0] FS:  000055558cf4e500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[ 1728.330580][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1728.337212][    C0] CR2: 0000001b3241cff8 CR3: 0000000062d6e000 CR4: 00000000003506f0
[ 1728.345227][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1728.353247][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1728.361263][    C0] Call Trace:
[ 1728.364573][    C0]  <IRQ>
[ 1728.367460][    C0]  __synchronize_srcu+0x227/0x350
[ 1728.372556][    C0]  ? synchronize_srcu_expedited+0x20/0x20
[ 1728.378343][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1728.383255][    C0]  ? ktime_get_mono_fast_ns+0x199/0x1b0
[ 1728.388859][    C0]  ? synchronize_srcu+0x18f/0x1b0
[ 1728.393973][    C0]  wakeup_source_unregister+0x112/0x190
[ 1728.399584][    C0]  mmc_host_classdev_release+0x43/0xf0
[ 1728.405098][    C0]  ? mmc_free_host+0x40/0x40
[ 1728.409738][    C0]  device_release+0x92/0x1c0
[ 1728.414380][    C0]  kobject_put+0x217/0x450
[ 1728.418866][    C0]  call_timer_fn+0x1ac/0x670
[ 1728.423502][    C0]  ? kref_get+0x70/0x70
[ 1728.427746][    C0]  ? call_timer_fn+0xcf/0x670
[ 1728.432478][    C0]  ? __run_timers+0x810/0x810
[ 1728.437214][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1728.442454][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1728.447704][    C0]  ? kref_get+0x70/0x70
[ 1728.452003][    C0]  __run_timers+0x56c/0x810
[ 1728.456559][    C0]  ? detach_timer+0x350/0x350
[ 1728.461320][    C0]  ? lock_chain_count+0x20/0x20
[ 1728.466228][    C0]  run_timer_softirq+0x63/0xf0
[ 1728.471036][    C0]  handle_softirqs+0x291/0x910
[ 1728.475846][    C0]  ? __irq_exit_rcu+0x13b/0x230
[ 1728.480750][    C0]  ? do_softirq+0x210/0x210
[ 1728.485304][    C0]  ? hrtimer_interrupt+0x775/0x980
[ 1728.490504][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[ 1728.495750][    C0]  __irq_exit_rcu+0x13b/0x230
[ 1728.500483][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1728.505065][    C0]  irq_exit_rcu+0x5/0x20
[ 1728.509370][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1728.515057][    C0]  </IRQ>
[ 1728.518020][    C0]  <TASK>
[ 1728.521007][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1728.527038][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[ 1728.533584][    C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> ff b7 1a f7 65 8b 05 c0 67 c4 75 85 c0 74 3c 48 c7 04 24 0e 36
[ 1728.553328][    C0] RSP: 0018:ffffc90004247ba0 EFLAGS: 00000206
[ 1728.559448][    C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 667cc0748aeb8b00
[ 1728.567467][    C0] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 0000000000000001
[ 1728.575497][    C0] RBP: ffffc90004247c30 R08: ffff8880b8c2a5c3 R09: 1ffff110171854b8
[ 1728.583526][    C0] R10: dffffc0000000000 R11: ffffed10171854b9 R12: dffffc0000000000
[ 1728.591543][    C0] R13: ffffc90004247dc0 R14: ffff8880b8c2a5c0 R15: 1ffff92000848f74
[ 1728.599570][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1728.604485][    C0]  do_nanosleep+0x17a/0x5e0
[ 1728.609076][    C0]  ? do_nanosleep+0x7c/0x5e0
[ 1728.613737][    C0]  ? usleep_range_state+0x1a0/0x1a0
[ 1728.618985][    C0]  ? memset+0x1e/0x40
[ 1728.623018][    C0]  ? __hrtimer_init+0x189/0x270
[ 1728.627923][    C0]  hrtimer_nanosleep+0x171/0x370
[ 1728.632912][    C0]  ? __might_fault+0xc2/0x120
[ 1728.637662][    C0]  ? __might_fault+0xa6/0x120
[ 1728.642390][    C0]  ? nanosleep_copyout+0x110/0x110
[ 1728.647545][    C0]  ? __remove_hrtimer+0x470/0x470
[ 1728.652617][    C0]  ? timespec64_add_safe+0x1f0/0x1f0
[ 1728.657979][    C0]  __se_sys_clock_nanosleep+0x30b/0x3a0
[ 1728.663576][    C0]  ? __x64_sys_clock_nanosleep+0xa0/0xa0
[ 1728.669258][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1728.674507][    C0]  do_syscall_64+0x4c/0xa0
[ 1728.678977][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1728.683700][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1728.688422][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1728.694364][    C0] RIP: 0033:0x7f0ede15fd8e
[ 1728.698818][    C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1728.718480][    C0] RSP: 002b:00007ffe705f6378 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[ 1728.726976][    C0] RAX: ffffffffffffffda RBX: 000055558cf4e500 RCX: 00007f0ede15fd8e
[ 1728.735003][    C0] RDX: 00007ffe705f63d0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1728.743036][    C0] RBP: 00007ffe705f643c R08: 0000000000000000 R09: 0000000000000000
[ 1728.751057][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 1728.759086][    C0] R13: 00000000000927c0 R14: 00000000001a5832 R15: 00007ffe705f6490
[ 1728.767152][    C0]  </TASK>
[ 1728.770226][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1728.777568][    C0] CPU: 0 PID: 19879 Comm: syz-executor Tainted: G        W          syzkaller #0
[ 1728.786723][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1728.796822][    C0] Call Trace:
[ 1728.800181][    C0]  <IRQ>
[ 1728.803064][    C0]  dump_stack_lvl+0x188/0x24e
[ 1728.807801][    C0]  ? memcpy+0x3c/0x60
[ 1728.811842][    C0]  ? show_regs_print_info+0x12/0x12
[ 1728.817097][    C0]  ? load_image+0x410/0x410
[ 1728.821665][    C0]  panic+0x2d3/0x710
[ 1728.825624][    C0]  ? bpf_jit_dump+0xd0/0xd0
[ 1728.830197][    C0]  __warn+0x2f8/0x4f0
[ 1728.834231][    C0]  ? __debug_object_init+0x18e/0x440
[ 1728.839574][    C0]  ? __debug_object_init+0x18e/0x440
[ 1728.844915][    C0]  report_bug+0x2ba/0x4f0
[ 1728.849302][    C0]  ? __debug_object_init+0x18e/0x440
[ 1728.854646][    C0]  handle_bug+0x3a/0x70
[ 1728.858869][    C0]  exc_invalid_op+0x16/0x40
[ 1728.863428][    C0]  asm_exc_invalid_op+0x16/0x20
[ 1728.868339][    C0] RIP: 0010:__debug_object_init+0x18e/0x440
[ 1728.874294][    C0] Code: 24 04 74 2f 41 ff c6 44 89 35 3e 36 bf 13 48 c7 c1 00 7a df 8a 48 c7 c7 60 7a df 8a 84 c0 48 0f 45 f9 48 89 de e8 f2 9a 0d 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f
[ 1728.894046][    C0] RSP: 0018:ffffc90000007908 EFLAGS: 00010046
[ 1728.900167][    C0] RAX: 0000000000000050 RBX: ffffc900000079a0 RCX: 667cc0748aeb8b00
[ 1728.908191][    C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000
[ 1728.916211][    C0] RBP: dffffc0000000000 R08: ffffffff8f00d22f R09: 1ffffffff1e01a45
[ 1728.924232][    C0] R10: dffffc0000000000 R11: fffffbfff1e01a46 R12: ffff88802ffc1e20
[ 1728.932290][    C0] R13: ffff8880552aa268 R14: 0000000000000001 R15: ffffffff8a8d32c0
[ 1728.940325][    C0]  ? __debug_object_init+0x18e/0x440
[ 1728.945673][    C0]  __synchronize_srcu+0x227/0x350
[ 1728.950758][    C0]  ? synchronize_srcu_expedited+0x20/0x20
[ 1728.956577][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1728.961473][    C0]  ? ktime_get_mono_fast_ns+0x199/0x1b0
[ 1728.967078][    C0]  ? synchronize_srcu+0x18f/0x1b0
[ 1728.972162][    C0]  wakeup_source_unregister+0x112/0x190
[ 1728.977801][    C0]  mmc_host_classdev_release+0x43/0xf0
[ 1728.983317][    C0]  ? mmc_free_host+0x40/0x40
[ 1728.987970][    C0]  device_release+0x92/0x1c0
[ 1728.992612][    C0]  kobject_put+0x217/0x450
[ 1728.997092][    C0]  call_timer_fn+0x1ac/0x670
[ 1729.001734][    C0]  ? kref_get+0x70/0x70
[ 1729.005962][    C0]  ? call_timer_fn+0xcf/0x670
[ 1729.010684][    C0]  ? __run_timers+0x810/0x810
[ 1729.015423][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1729.020680][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1729.025959][    C0]  ? kref_get+0x70/0x70
[ 1729.030208][    C0]  __run_timers+0x56c/0x810
[ 1729.034787][    C0]  ? detach_timer+0x350/0x350
[ 1729.039517][    C0]  ? lock_chain_count+0x20/0x20
[ 1729.044511][    C0]  run_timer_softirq+0x63/0xf0
[ 1729.049312][    C0]  handle_softirqs+0x291/0x910
[ 1729.054118][    C0]  ? __irq_exit_rcu+0x13b/0x230
[ 1729.059022][    C0]  ? do_softirq+0x210/0x210
[ 1729.063576][    C0]  ? hrtimer_interrupt+0x775/0x980
[ 1729.068746][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[ 1729.074001][    C0]  __irq_exit_rcu+0x13b/0x230
[ 1729.078723][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1729.083284][    C0]  irq_exit_rcu+0x5/0x20
[ 1729.087564][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1729.093264][    C0]  </IRQ>
[ 1729.096224][    C0]  <TASK>
[ 1729.099193][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1729.105225][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[ 1729.111791][    C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> ff b7 1a f7 65 8b 05 c0 67 c4 75 85 c0 74 3c 48 c7 04 24 0e 36
[ 1729.131454][    C0] RSP: 0018:ffffc90004247ba0 EFLAGS: 00000206
[ 1729.137582][    C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 667cc0748aeb8b00
[ 1729.145607][    C0] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 0000000000000001
[ 1729.153622][    C0] RBP: ffffc90004247c30 R08: ffff8880b8c2a5c3 R09: 1ffff110171854b8
[ 1729.161650][    C0] R10: dffffc0000000000 R11: ffffed10171854b9 R12: dffffc0000000000
[ 1729.169667][    C0] R13: ffffc90004247dc0 R14: ffff8880b8c2a5c0 R15: 1ffff92000848f74
[ 1729.177696][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1729.182620][    C0]  do_nanosleep+0x17a/0x5e0
[ 1729.187225][    C0]  ? do_nanosleep+0x7c/0x5e0
[ 1729.191879][    C0]  ? usleep_range_state+0x1a0/0x1a0
[ 1729.197130][    C0]  ? memset+0x1e/0x40
[ 1729.201153][    C0]  ? __hrtimer_init+0x189/0x270
[ 1729.206051][    C0]  hrtimer_nanosleep+0x171/0x370
[ 1729.211041][    C0]  ? __might_fault+0xc2/0x120
[ 1729.215770][    C0]  ? __might_fault+0xa6/0x120
[ 1729.220498][    C0]  ? nanosleep_copyout+0x110/0x110
[ 1729.225662][    C0]  ? __remove_hrtimer+0x470/0x470
[ 1729.230787][    C0]  ? timespec64_add_safe+0x1f0/0x1f0
[ 1729.236171][    C0]  __se_sys_clock_nanosleep+0x30b/0x3a0
[ 1729.241860][    C0]  ? __x64_sys_clock_nanosleep+0xa0/0xa0
[ 1729.247543][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1729.252798][    C0]  do_syscall_64+0x4c/0xa0
[ 1729.257259][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1729.262000][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1729.266722][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1729.272668][    C0] RIP: 0033:0x7f0ede15fd8e
[ 1729.277123][    C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1729.296790][    C0] RSP: 002b:00007ffe705f6378 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[ 1729.305264][    C0] RAX: ffffffffffffffda RBX: 000055558cf4e500 RCX: 00007f0ede15fd8e
[ 1729.313288][    C0] RDX: 00007ffe705f63d0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1729.321305][    C0] RBP: 00007ffe705f643c R08: 0000000000000000 R09: 0000000000000000
[ 1729.329319][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 1729.337327][    C0] R13: 00000000000927c0 R14: 00000000001a5832 R15: 00007ffe705f6490
[ 1729.345334][    C0]  </TASK>
[ 1729.349033][    C0] Kernel Offset: disabled
[ 1729.353417][    C0] Rebooting in 86400 seconds..