last executing test programs:

31.136228071s ago: executing program 2 (id=2262):
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x5, 0x745, 0x101})

29.26570183s ago: executing program 2 (id=2268):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
link(&(0x7f0000000300)='./file1\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f0000000b40)="$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")
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x1, 0x5004)
sched_setscheduler(r3, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='rxrpc_abort\x00'}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703f783b3961073966208af00002b6399b5b1cb14cf00830000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mknod(&(0x7f0000000340)='./bus\x00', 0x8000, 0x10000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500000002040000071f000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

23.96671158s ago: executing program 2 (id=2277):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000020240), 0x10010)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000540)=""/246, 0x36, 0xf6, 0x1, 0x0, 0x0, @void, @value}, 0x28)
ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"])
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r7, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)

17.309869061s ago: executing program 2 (id=2285):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18)
renameat2(r1, &(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x54a12000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000005c0)='./bus\x00')
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

16.097042478s ago: executing program 2 (id=2290):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed00080001"], 0x2c}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

14.749919495s ago: executing program 1 (id=2292):
prlimit64(0x0, 0xe, 0x0, 0x0)
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r1, 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1)
preadv2(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}]}, 0x2c}}, 0x8400)

13.553814331s ago: executing program 3 (id=2295):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x2a0, 0x268, 0x300, 0x0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0xffffff00, 0xffffffff, 0xff000000], 0x4e22, 0x4e22, 0x4e21, 0x4e21, 0xd9, 0x1, 0x5, 0x5b, 0x6}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498)

13.482097027s ago: executing program 1 (id=2296):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{}]}, @struct]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000f80)=""/4115, 0x3d, 0x1013, 0x1, 0x0, 0x0, @void, @value}, 0x20)
mkdir(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r5 = memfd_create(&(0x7f0000000000)='@\x1f)\x03\n*)\\\x00\x03\x00\x00\x00\x00\x00\x00\x00q\xe4F\x1a\xed\xa2C\xa6\x8a`\xfcE\b\x00\xe3R\xd6\xb8\xa8\x9d\x04\xfd\xaf\xb8vS\xceV\xa5\t\x00S~\x11\xd3\xa3`o\xa9z\xc8\xc9\xa3\xe7\xe9\xf7e\x8c3#\xac|\x88#\xe5\xa7\xd5r\x96\x0f\x8c\xa6\x1a~4\xc4,\x90\x84\xc2\x1a\x14\xd5\x91T\xechc\xcf]\xc8\bJ\xe0\'#\xd4L\xf6\"o\xb6\f\x95\x9b\xa8\x02\xaf\x91\xc5(O|\xe7\xee\x90\x86\x9d\x1bP>\xd9\xd7T\x8cg\x91\x99\xd9$\x1fL\x8f\bD\xfb\x98S+\xa3\x008\tn>\x14\x8a\x9a\xb2va\x1c\xd7\a\xc0\x93e\xbb\xab\x85uJ\xe3\xff\x16\x06\xb4C\x97[J\xccD\a\x9f\xd2\xdd\xe6\x1d\xa6\a\x16\xa0\n\xfeR-R \xf9\x8e\x8a\xe9\xe5\xc5\x14f\xa2\xc5\xd0\xbe\xf8\xb6m\x10>\x10o\xc3\xcf*\xc2\x7f\x8a\x10\x13&t\xd6\xef7\xaa\x96\xbc\xbc2+\xe6\x8a\x82\b\xdcBY\xee\x93\xe6\xe7\x8a\xa1D\xf8\x8fW\x16V\xf3;\xa2\x04\xfcY\xa5\xb2\x95h\xe0/\x00\x00\x00\x00\x00\x00\x00', 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)

13.451535645s ago: executing program 2 (id=2297):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f0000001140)=ANY=[], 0x1a3)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}, 0x38)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

9.479288548s ago: executing program 0 (id=2302):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nodiscard}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000580)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0)
ftruncate(r0, 0x2007ffb)
sendfile(r0, r0, 0x0, 0x800000009)

9.369631931s ago: executing program 1 (id=2304):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x40000000000011a, 0x44000)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10)
socket$netlink(0x10, 0x3, 0x8000000004)
write(r3, &(0x7f0000000c00)="1c0000001e005f0214bb7afffffffff807000000b800e6ff0d0000", 0x1b)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r0)

9.306644416s ago: executing program 3 (id=2305):
getpid()
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x17, 0x0, 0x4, 0xffff, 0x81, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x400000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
setrlimit(0xc, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$can_raw(0x1d, 0x3, 0x1)
connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @private=0xa010102}, 0x2, 0xfffffffd}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x3, 0x20000000, 0x4)
socket$inet6(0xa, 0x2, 0x0)

8.154600479s ago: executing program 0 (id=2307):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006140)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYBLOB="00001b0087e1e85631dc26e7a9ce3c4396436bc6736574e997938c382c009cd0aeba477396b2cb852b9c7a6a4bf39e0368bfe3e9c44e297aeade0000000000fb4fffa3da2229249f9eae67b594fb6fa71518c4638f5e66923f2ba986156feb62be500e4840d9758d3d1f11577798871b0a2d0009ae68165160d76495fc48f43da2e2147ad0809022a1a0c2d4", @ANYRESHEX=r2], 0x1, 0x14ee, &(0x7f0000004000)="$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")
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)

7.945775116s ago: executing program 0 (id=2310):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

7.454413993s ago: executing program 0 (id=2312):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
sendfile(r4, r4, 0x0, 0x7a680000)

7.313859097s ago: executing program 3 (id=2313):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00150000000006000000000000000000000000df", @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000019080)=ANY=[@ANYBLOB="1600005fa500010004000000ff000000d732b1a966f3484eb4024ce80000000052dd15f30e598b06379854fbfb2cced077e47a117303b0db53835d687dff0df67b43fbe4092efbdb0c58f453b14e08b32ae24e46e71b591b8a30e0da429b7626e7de8c84a2c89abe87c187d4", @ANYRES32=0x1, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00')
pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]})
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000280)='./file1/file0\x00', r7, &(0x7f0000000380)='./file1\x00')

6.421434768s ago: executing program 4 (id=2314):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000004140)={@remote, @random="029bf51ae9ac", @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0xa, 0x6, 'hD&', 0x10, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @loopback, {[], {{0x4e22, 0x4e22, 0x4, 0x1, 0xb, 0x0, 0x0, 0xa, 0x6, '\x00', 0x5, "6322e5"}}}}}}}, 0x0)

6.146947888s ago: executing program 4 (id=2315):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r3 = dup3(r1, r2, 0x0)
read$FUSE(r3, &(0x7f0000006240)={0x2020}, 0x2020)

5.805841541s ago: executing program 4 (id=2316):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0)
r7 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000000c0), 0x12)
write$cgroup_freezer_state(r6, &(0x7f0000000400)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, 0x0, &(0x7f0000000380)}, 0x20)

4.714650915s ago: executing program 0 (id=2317):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nodiscard}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000580)="$eJzs289vFFUcAPDvTFuggLIS/AWoVTQSf7S0IHLwotGbJiZ6wOPaFoIs1NCaCCEIxuDRkHg3Hk38CzzpxagnjVe9GxJiehH1MmZ2dtv9Wdqy7YL7+STTft/Ma9777szbfTOvG8DAGst/JBE7I+K3iNhVFJsrjBW/bi5enP578eJ0Eln21p9JtV5j3Xq8o14Yjkg/SWJfh3bnz184Xa5UZs/VyhMLZ96fmD9/4flTZ8onZ0/Onp06duzI4ckXj0690JM887z+2ntpbv+/2TvX3pg+fu3dH79O6vnnxxYvTvekoWVjKx18Kst63Fx/3dMQJ8N97AhrMlQM0xipjv9dMRTLJ29XvPZxXzsHbKgsy7IHuh++nAH/Y0mssmK62orA3aH+QZ/f/9a3TZp63BFuvFzcAOV536xtxZHhSGt1Rlrub3tpLCKOX/7ni3yLjXkOAQDQ5Nt8/vNcp/lfGo3Phe6traGUIuK+iNgdEUcjYk9E3B9RrftgRDy0xvZbF0na5z/p9XUltkr5/O+l2tpW8/yvPvuL0lBEbKuGWRIxkpw4VZk9VHtNDsbI1rw8uUIb373662fdjjXO//Itb78+F6z14/rw1ua/mSkvlNefcbMbV2I0n/+2558srQQkEfFwROxdZxunnvlqf7djt85/BT1YZ8q+jHi6OP+XoyX/umTl9cmJbVGZPTRRvyra/fTz1Te7tX9b+ffAjSsR2zte/0v5l5LG9dr5tbdx9fdPu97TrPf635K83bTvw/LCwrnJiC3J60WnG/dPtdSbWq6f53/wQOfxvzuWX4l9EZFfxI9ExKMR8Vit749HxBMRcWCF/H945cn31p//xsrzn1nV+R+N4vwvXQjnt7TtuXC6XGq6WKrB0Onvv2lqtLSW/PPzf6QaHaztWc37X1u/ugS3+/oBAADA3SCNiJ2RpONLcZqOjxf/w78ntqeVufmFZ0/MfXB2pviOQClG0vqTruJ5cPE8dLJ2W18vT7WUD9eeG38+NFotj0/PVWb6nTwMuB1dxn/uj6F+9w7YcL6vBYPL+IfBZfzD4DL+YXB1GP+j/egHsPk6ff5/1Id+AJuvZfxb9oMB4v4fBpfxD4OrZfz/cqlTpXSTOgNslvnRuPWX5AWCtiDSO6Ibgg0K+v3OBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BQAA//+2juNa")
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0)
ftruncate(r0, 0x2007ffb)
sendfile(r0, r0, 0x0, 0x800000009)

4.350486992s ago: executing program 4 (id=2318):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f0000001140)=ANY=[], 0x1a3)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}, 0x38)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

4.33986566s ago: executing program 1 (id=2319):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0xce3, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4ac9, 0x0, 0x0, 0x0, 0x0)

3.37767571s ago: executing program 4 (id=2320):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
write$evdev(r4, &(0x7f0000000000), 0x100000008)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioperm(0x0, 0x2, 0x2)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
syz_usb_connect(0x0, 0x4f, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r8, 0x8943, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})

3.333424796s ago: executing program 1 (id=2321):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r3, &(0x7f0000000080), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711020000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

3.273465882s ago: executing program 0 (id=2322):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
sendmsg$inet(r4, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x38}, 0x0)

2.221864586s ago: executing program 3 (id=2323):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = creat(0x0, 0xecf86c37d53049cc)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb)
close(r0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e", 0xc7}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0)

2.054198409s ago: executing program 1 (id=2324):
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000892e79105e042107259c0102030109022200010000000009040000000e010000082402010102002008"], 0x0)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000500)='./file0\x00', 0x22004846, &(0x7f0000001e00)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="0002001100000000303030303030303030303030303030303030303135322c796f636884c178f94be4ee34617273657439697300926f38", @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cd30e197ceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e65c9", @ANYRES64, @ANYRESDEC], 0x81, 0x1536, &(0x7f00000008c0)="$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")
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="cb0fc89e6ff259d0553a1d80c52adfc849f29295d18d0dbc748d902388da07966baadee92b1e3f67af8888029960c6dcbd9a7097accbda384398e1d53116c025d37293dc46ab949471219f723e7c2c5f1d1339c08c005da317312c4a38ca797de7589d857a315295f52cea733f5c526dbd7633d922bee1eee8b824e6a78690cfd458c462213d6eb5520d87b7a2b86209943fb282281fe4a5b2735ad2f3856d373a718a4ef69b5a152ffe7545a092b49aa3017cc3"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x16)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r4}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0x9fa}], 0x1}, 0x0)

1.930067329s ago: executing program 4 (id=2325):
timerfd_create(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000003c0)={'bridge0\x00'})
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bridge0\x00')
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000002c0)=@get={0x1, &(0x7f0000000540)=""/210, 0x4})

1.153125629s ago: executing program 3 (id=2326):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x3}, &(0x7f0000001580)=ANY=[@ANYBLOB="0200"], 0x48, 0xfffffffffffffffd)

0s ago: executing program 3 (id=2327):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480d, &(0x7f00000000c0)={0x2, 0x200})

kernel console output (not intermixed with test programs):

ommended to keep mac addresses unique to avoid problems!
[ 1109.500781][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1109.511403][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1109.521423][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1109.533198][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1109.553143][T12271] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1110.085106][T12278] veth0_macvtap: entered promiscuous mode
[ 1110.129959][T12278] veth1_macvtap: entered promiscuous mode
[ 1110.286118][T12271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1110.296373][T12271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1110.344575][T12271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1110.385876][T12271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1110.399541][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1110.421657][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1110.431648][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1110.442290][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1110.452508][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1110.463293][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1110.473437][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1110.484751][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1110.495347][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1110.506018][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1110.517321][T12278] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1110.569023][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1110.582351][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1110.593017][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1110.613765][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1110.629526][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1110.641156][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1110.669768][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1110.714258][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1110.728094][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1110.748294][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1110.760389][T12278] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1110.784556][T12278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1110.793504][T12278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1110.819438][T12278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1110.832950][T12278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1110.901972][T12499] netlink: 'syz.4.1385': attribute type 21 has an invalid length.
[ 1110.910413][T12499] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1385'.
[ 1111.717691][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1111.735611][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1111.804142][ T6512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1111.812066][ T6512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1111.904843][ T4584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1111.914674][ T4584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1111.922212][ T4584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1111.932334][ T4584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1112.026824][T12511] veth0_vlan: entered allmulticast mode
[ 1112.648240][T12525] overlayfs: missing 'lowerdir'
[ 1113.525108][T12511] ªªªªªªÿÿ: renamed from vlan0
[ 1115.340350][T12561] overlayfs: missing 'lowerdir'
[ 1116.090994][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.099047][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.130180][T12567] loop3: detected capacity change from 0 to 512
[ 1116.410388][T12567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[ 1116.423790][T12567] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1116.754073][ T5291] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1116.944689][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1117.153664][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1117.173717][ T5291] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[ 1117.230311][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.251918][ T5291] usb 5-1: config 0 descriptor??
[ 1118.024775][T12603] tipc: Started in network mode
[ 1118.029756][T12603] tipc: Node identity 2, cluster identity 4711
[ 1118.036172][T12603] tipc: Node number set to 2
[ 1120.013421][ T5291] usbhid 5-1:0.0: can't add hid device: -71
[ 1120.026182][ T5291] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1120.036244][ T5291] usb 5-1: USB disconnect, device number 12
[ 1120.310513][T10537] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 1120.460443][T12624] overlayfs: missing 'lowerdir'
[ 1121.765769][T12643] tipc: Started in network mode
[ 1121.770956][T12643] tipc: Node identity 2, cluster identity 4711
[ 1121.779018][T12643] tipc: Node number set to 2
[ 1122.752611][T12649] loop3: detected capacity change from 0 to 16
[ 1122.784030][T12649] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1122.806714][T12649] syz.3.1435: attempt to access beyond end of device
[ 1122.806714][T12649] loop3: rw=0, sector=1049256, nr_sectors = 128 limit=16
[ 1122.821314][T12649] erofs: (device loop3): z_erofs_read_folio: read error -5 @ 0 of nid 36
[ 1122.835493][T12649] syz.3.1435: attempt to access beyond end of device
[ 1122.835493][T12649] loop3: rw=0, sector=1049256, nr_sectors = 128 limit=16
[ 1122.849600][T12649] erofs: (device loop3): z_erofs_read_folio: read error -5 @ 0 of nid 36
[ 1125.069043][T12672] overlayfs: missing 'lowerdir'
[ 1127.449372][T12695] loop2: detected capacity change from 0 to 16
[ 1128.244474][T12695] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1128.257200][T12694] syz.2.1449: attempt to access beyond end of device
[ 1128.257200][T12694] loop2: rw=0, sector=1049256, nr_sectors = 128 limit=16
[ 1128.270859][T12694] erofs: (device loop2): z_erofs_read_folio: read error -5 @ 0 of nid 36
[ 1128.280846][T12694] syz.2.1449: attempt to access beyond end of device
[ 1128.280846][T12694] loop2: rw=0, sector=1049256, nr_sectors = 128 limit=16
[ 1128.295335][T12694] erofs: (device loop2): z_erofs_read_folio: read error -5 @ 0 of nid 36
[ 1129.328446][   T29] audit: type=1326 audit(2000000955.700:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e77dff9 code=0x7ffc0000
[ 1129.398184][   T29] audit: type=1326 audit(2000000955.730:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e77dff9 code=0x7ffc0000
[ 1129.520295][   T29] audit: type=1326 audit(2000000955.730:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f524e77c990 code=0x7ffc0000
[ 1129.589156][   T29] audit: type=1326 audit(2000000955.730:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e77dff9 code=0x7ffc0000
[ 1129.740625][   T29] audit: type=1326 audit(2000000955.730:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e77dff9 code=0x7ffc0000
[ 1129.752694][T12688] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1129.763833][   T29] audit: type=1326 audit(2000000955.740:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f524e77dff9 code=0x7ffc0000
[ 1129.799968][   T29] audit: type=1326 audit(2000000955.740:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e77dff9 code=0x7ffc0000
[ 1129.823082][T12688] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1129.901915][T12688] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1129.926806][T12688] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1129.961563][T12688] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1129.977274][   T29] audit: type=1326 audit(2000000955.750:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f524e77dff9 code=0x7ffc0000
[ 1130.000401][   T29] audit: type=1326 audit(2000000955.750:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e77dff9 code=0x7ffc0000
[ 1130.024532][T12688] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1130.116071][   T29] audit: type=1326 audit(2000000955.750:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f524e77dff9 code=0x7ffc0000
[ 1130.156257][T12688] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1130.223396][T12688] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1130.230066][T12688] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1130.282123][T12688] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1130.356693][T12688] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1130.364076][T12688] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1130.602231][T12688] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1130.727024][T11987] Bluetooth: hci5: command 0x0406 tx timeout
[ 1131.448767][T12703] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1132.014241][T11987] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1132.014328][ T9394] Bluetooth: hci1: command 0x0406 tx timeout
[ 1132.037436][ T8809] Bluetooth: hci0: Opcode 0x2046 failed: -110
[ 1132.189463][ T5290] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1132.276996][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'.
[ 1132.334389][ T8809] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1132.415608][ T8809] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1132.438316][ T5290] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1132.609194][ T5290] usb 4-1: config 0 has no interfaces?
[ 1132.645585][ T5290] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1132.685013][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1132.723922][ T5290] usb 4-1: Product: syz
[ 1132.735232][ T5290] usb 4-1: Manufacturer: syz
[ 1132.762096][ T5290] usb 4-1: SerialNumber: syz
[ 1132.777561][ T5290] usb 4-1: config 0 descriptor??
[ 1132.814298][ T8809] Bluetooth: hci5: command 0x0406 tx timeout
[ 1133.077927][T12771] IPv6: Can't replace route, no match found
[ 1133.164990][T12776] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[ 1134.097862][ T8809] Bluetooth: hci1: command 0x0406 tx timeout
[ 1134.104012][T11987] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1134.426096][ T8809] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1134.494977][ T8809] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1134.555983][ T5291] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1134.854050][ T5291] usb 2-1: config 0 has no interfaces?
[ 1134.863222][   T46] usb 4-1: USB disconnect, device number 14
[ 1134.945100][ T5291] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1135.029616][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.057182][ T5291] usb 2-1: Product: syz
[ 1135.064796][ T5291] usb 2-1: Manufacturer: syz
[ 1135.075176][ T5291] usb 2-1: SerialNumber: syz
[ 1135.116541][ T5291] usb 2-1: config 0 descriptor??
[ 1136.187258][ T8809] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1136.320885][T12812] loop4: detected capacity change from 0 to 256
[ 1136.350457][T12812] FAT-fs (loop4): Directory bread(block 64) failed
[ 1136.366079][T12812] FAT-fs (loop4): Directory bread(block 65) failed
[ 1136.378745][T12812] FAT-fs (loop4): Directory bread(block 66) failed
[ 1136.401163][T12812] FAT-fs (loop4): Directory bread(block 67) failed
[ 1136.408482][T12812] FAT-fs (loop4): Directory bread(block 68) failed
[ 1136.437763][T12812] FAT-fs (loop4): Directory bread(block 69) failed
[ 1136.452504][T12812] FAT-fs (loop4): Directory bread(block 70) failed
[ 1136.459810][T12812] FAT-fs (loop4): Directory bread(block 71) failed
[ 1136.467792][T12812] FAT-fs (loop4): Directory bread(block 72) failed
[ 1136.482996][T12812] FAT-fs (loop4): Directory bread(block 73) failed
[ 1136.498276][ T8809] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1136.573661][ T8809] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1136.839759][T12817] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[ 1138.279122][ T8809] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1138.597814][ T8834] usb 2-1: USB disconnect, device number 5
[ 1138.864649][T12843] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[ 1138.949618][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'.
[ 1139.203731][ T8834] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1139.368365][ T8834] usb 2-1: Using ep0 maxpacket: 8
[ 1139.388042][ T8834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1139.425034][ T8834] usb 2-1: config 0 has no interfaces?
[ 1139.452612][ T8834] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[ 1139.498222][ T8834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1139.565531][ T8834] usb 2-1: config 0 descriptor??
[ 1139.968336][T12857] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[ 1141.191266][ T8809] Bluetooth: hci0: ISO packet for unknown connection handle 14
[ 1141.620195][T12873] syzkaller0: entered promiscuous mode
[ 1141.642460][T12873] syzkaller0: entered allmulticast mode
[ 1142.336290][ T6873] usb 2-1: USB disconnect, device number 6
[ 1142.803730][ T6873] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1143.707004][ T6873] usb 2-1: Using ep0 maxpacket: 16
[ 1143.732837][ T6873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1143.755506][ T6873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1143.791196][ T6873] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[ 1143.821646][ T6873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1143.874931][ T6873] usb 2-1: config 0 descriptor??
[ 1144.312898][ T6873] lenovo 0003:17EF:6009.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0
[ 1144.610705][T12884] lenovo 0003:17EF:6009.0007: pid 12884 passed too short report
[ 1144.632124][ T6873] usb 2-1: USB disconnect, device number 7
[ 1146.503687][ T8834] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1146.689519][ T8834] usb 2-1: config 0 has no interfaces?
[ 1146.708552][ T8834] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1146.718156][ T8834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1146.736684][ T8834] usb 2-1: Product: syz
[ 1146.749327][ T8834] usb 2-1: Manufacturer: syz
[ 1146.754537][ T8834] usb 2-1: SerialNumber: syz
[ 1146.768033][ T8834] usb 2-1: config 0 descriptor??
[ 1148.694173][    C1] dccp_v4_rcv: dropped packet with invalid checksum
[ 1148.701417][    C1] dccp_v4_rcv: dropped packet with invalid checksum
[ 1149.828686][ T8834] usb 2-1: USB disconnect, device number 8
[ 1149.943675][   T46] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1150.246856][   T46] usb 5-1: config 0 has no interfaces?
[ 1150.272221][   T46] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1150.303620][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.331403][   T46] usb 5-1: Product: syz
[ 1150.344120][   T46] usb 5-1: Manufacturer: syz
[ 1150.361559][   T46] usb 5-1: SerialNumber: syz
[ 1150.378633][   T46] usb 5-1: config 0 descriptor??
[ 1152.068680][T12991] team0: entered promiscuous mode
[ 1152.076003][T12991] team_slave_0: entered promiscuous mode
[ 1152.090905][T12991] team_slave_1: entered promiscuous mode
[ 1152.108434][T12988] team0: left promiscuous mode
[ 1152.117408][T12988] team_slave_0: left promiscuous mode
[ 1152.123436][T12988] team_slave_1: left promiscuous mode
[ 1152.323700][ T8834] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1153.423678][ T8834] usb 3-1: Using ep0 maxpacket: 32
[ 1153.436234][ T8834] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[ 1153.463061][ T8834] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1153.569479][ T8834] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1154.333645][ T8834] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1154.397568][ T8834] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1154.616412][ T8834] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1154.753722][ T8834] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1154.772593][ T8834] usb 3-1: Product: syz
[ 1154.782709][ T8834] usb 3-1: Manufacturer: syz
[ 1154.789432][ T8834] usb 3-1: SerialNumber: syz
[ 1154.815005][ T8834] usb 3-1: config 0 descriptor??
[ 1154.826377][ T8834] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1154.889268][ T8834] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1155.134778][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1551'.
[ 1155.144471][T13028] vivid-004: disconnect
[ 1155.152201][T12989] vivid-004: reconnect
[ 1155.210135][ T6873] usb 3-1: USB disconnect, device number 8
[ 1155.229289][ T6873] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[ 1155.304759][T10854] usb 5-1: USB disconnect, device number 13
[ 1155.430154][T13031] nfs: Unknown parameter 'a[l'
[ 1155.809896][ T6873] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1156.017685][ T6873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1156.035432][ T6873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1156.057367][ T6873] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[ 1156.070346][ T6873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1156.134906][ T6873] usb 5-1: config 0 descriptor??
[ 1157.125289][T13053] random: crng reseeded on system resumption
[ 1158.507080][T13075] nfs: Unknown parameter 'a[l'
[ 1159.017870][T13033] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[ 1159.324492][T13093] fuse: Bad value for 'fd'
[ 1159.729621][ T6873] usbhid 5-1:0.0: can't add hid device: -71
[ 1159.744596][ T6873] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1159.772618][ T6873] usb 5-1: USB disconnect, device number 14
[ 1160.030535][   T46] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1160.394638][   T46] usb 4-1: device descriptor read/64, error -71
[ 1161.163732][    T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1161.382317][T13111] bond0: entered promiscuous mode
[ 1161.400708][T13111] bond_slave_0: entered promiscuous mode
[ 1161.414229][T13111] bond_slave_1: entered promiscuous mode
[ 1161.510883][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'.
[ 1161.563733][    T8] usb 3-1: Using ep0 maxpacket: 8
[ 1161.641513][T13115] nfs: Unknown parameter 'a[l'
[ 1161.643357][T13111] bond0: left promiscuous mode
[ 1161.671687][T13111] bond_slave_0: left promiscuous mode
[ 1161.783662][T13111] bond_slave_1: left promiscuous mode
[ 1162.624834][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 46781, setting to 64
[ 1162.636272][    T8] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[ 1162.646100][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1162.656155][    T8] usb 3-1: config 0 descriptor??
[ 1162.665930][    T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1162.784884][T13133] fuse: Bad value for 'fd'
[ 1162.828948][    T8] usb 3-1: USB disconnect, device number 9
[ 1166.547717][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1588'.
[ 1166.810458][T13187] dccp_close: ABORT with 40 bytes unread
[ 1170.422749][   T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1170.490924][ T6873] IPVS: starting estimator thread 0...
[ 1170.593768][T13251] IPVS: using max 27 ests per chain, 64800 per kthread
[ 1170.613877][   T46] usb 1-1: Using ep0 maxpacket: 32
[ 1170.625416][   T46] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1170.637640][   T46] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1170.651286][   T46] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1170.666817][   T46] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1170.675496][   T46] usb 1-1: Product: syz
[ 1170.679706][   T46] usb 1-1: Manufacturer: syz
[ 1170.690930][   T46] hub 1-1:4.0: USB hub found
[ 1170.859200][ T6873] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1170.943988][   T46] hub 1-1:4.0: config failed, can't read hub descriptor (err -22)
[ 1170.994674][   T46] usb 1-1: USB disconnect, device number 9
[ 1171.153850][ T6873] usb 3-1: config 0 has no interfaces?
[ 1171.206429][ T6873] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1171.215815][ T6873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1171.224064][ T6873] usb 3-1: Product: syz
[ 1171.228378][ T6873] usb 3-1: Manufacturer: syz
[ 1171.233105][ T6873] usb 3-1: SerialNumber: syz
[ 1171.242333][ T6873] usb 3-1: config 0 descriptor??
[ 1171.361773][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1629'.
[ 1171.951350][T13295] vcan0: tx drop: invalid sa for name 0x0000000020000000
[ 1172.718134][T13311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1646'.
[ 1172.754341][T13311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1646'.
[ 1173.373885][   T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1173.485396][ T6873] usb 3-1: USB disconnect, device number 10
[ 1173.558297][T13337] loop2: detected capacity change from 0 to 512
[ 1173.569611][   T46] usb 1-1: config index 0 descriptor too short (expected 65316, got 36)
[ 1173.575507][T13337] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1173.593053][   T46] usb 1-1: config 0 has too many interfaces: 255, using maximum allowed: 32
[ 1173.612744][T13337] EXT4-fs (loop2): 1 truncate cleaned up
[ 1173.621130][   T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1173.629798][T13337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1173.637601][   T46] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 255
[ 1173.663124][   T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1173.672947][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1173.682453][   T29] kauditd_printk_skb: 17 callbacks suppressed
[ 1173.682468][   T29] audit: type=1800 audit(2000001000.050:561): pid=13337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1657" name="bus" dev="loop2" ino=18 res=0 errno=0
[ 1173.703362][   T46] usb 1-1: config 0 descriptor??
[ 1174.485409][T13323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1652'.
[ 1174.550957][T13323] netlink: 'syz.0.1652': attribute type 63 has an invalid length.
[ 1174.603784][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'.
[ 1174.651435][ T5291] usb 1-1: USB disconnect, device number 10
[ 1174.747950][T10678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1175.211119][T13360] loop2: detected capacity change from 0 to 7
[ 1175.257972][ T7781] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1175.273835][T13360] Dev loop2: unable to read RDB block 7
[ 1175.296965][T13360]  loop2: unable to read partition table
[ 1175.398529][ T7781] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1175.447289][    C1] dccp_v6_rcv: dropped packet with invalid checksum
[ 1175.454221][    C1] dccp_v6_rcv: dropped packet with invalid checksum
[ 1175.475129][T13360] loop2: partition table beyond EOD, truncated
[ 1175.483452][T13360] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1175.953135][ T7781] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.014243][T11987] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1176.027406][T11987] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1176.038181][T11987] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1176.048593][T11987] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1176.057364][T11987] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1176.065013][T11987] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1176.163148][ T7781] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.532126][ T7781] bridge_slave_1: left allmulticast mode
[ 1176.538264][ T7781] bridge_slave_1: left promiscuous mode
[ 1176.544682][ T7781] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1176.674494][ T7781] bridge_slave_0: left allmulticast mode
[ 1176.745559][ T7781] bridge_slave_0: left promiscuous mode
[ 1176.774505][ T7781] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1177.456240][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.462675][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.095184][T11987] Bluetooth: hci4: command tx timeout
[ 1178.496379][    C1] dccp_v6_rcv: dropped packet with invalid checksum
[ 1178.729899][ T7781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1178.743490][ T7781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1178.759139][ T7781] bond0 (unregistering): Released all slaves
[ 1178.775441][ T7781] bond1 (unregistering): Released all slaves
[ 1178.807131][T13389] bond_slave_0: entered promiscuous mode
[ 1178.813362][T13389] bond_slave_1: entered promiscuous mode
[ 1178.860923][T13395] bond_slave_0: left promiscuous mode
[ 1178.873740][    T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1178.899875][T13395] bond_slave_1: left promiscuous mode
[ 1179.035319][    T8] usb 3-1: Using ep0 maxpacket: 16
[ 1179.201485][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1179.244855][    T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1179.254486][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1179.264764][    T8] usb 3-1: config 0 descriptor??
[ 1179.296206][    T8] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input29
[ 1179.580783][ T4677] bcm5974 3-1:0.0: could not read from device
[ 1179.594721][ T4677] bcm5974 3-1:0.0: could not read from device
[ 1179.619681][    T8] usb 3-1: USB disconnect, device number 11
[ 1179.668183][T11149] bcm5974 3-1:0.0: could not read from device
[ 1179.694163][T13395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1179.709915][ T4677] bcm5974 3-1:0.0: could not read from device
[ 1179.717532][ T4677] bcm5974 3-1:0.0: could not read from device
[ 1179.929970][T13395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1179.948390][T13395] bond0 (unregistering): Released all slaves
[ 1180.078098][ T7781] tipc: Left network mode
[ 1180.173709][T11987] Bluetooth: hci4: command tx timeout
[ 1180.492219][T13374] chnl_net:caif_netlink_parms(): no params data found
[ 1180.816153][ T7781] hsr_slave_0: left promiscuous mode
[ 1180.834696][ T7781] hsr_slave_1: left promiscuous mode
[ 1180.848048][ T7781] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1180.860077][ T7781] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1180.869499][ T7781] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1180.877225][ T7781] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1180.905831][ T7781] veth1_macvtap: left promiscuous mode
[ 1180.911514][ T7781] veth0_macvtap: left promiscuous mode
[ 1180.917706][ T7781] veth1_vlan: left promiscuous mode
[ 1180.923062][ T7781] veth0_vlan: left promiscuous mode
[ 1181.068074][T13449] dccp_close: ABORT with 3193 bytes unread
[ 1181.818730][ T7781] team0 (unregistering): Port device team_slave_1 removed
[ 1181.900949][ T7781] team0 (unregistering): Port device team_slave_0 removed
[ 1182.253744][T11987] Bluetooth: hci4: command tx timeout
[ 1183.559864][T13452] netlink: 'syz.2.1694': attribute type 29 has an invalid length.
[ 1183.573614][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1694'.
[ 1183.676156][T13374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1183.683329][T13374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1183.714022][T13374] bridge_slave_0: entered allmulticast mode
[ 1183.721625][T13374] bridge_slave_0: entered promiscuous mode
[ 1183.843614][T13374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1183.850742][T13374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1183.858153][T13374] bridge_slave_1: entered allmulticast mode
[ 1183.865221][T13374] bridge_slave_1: entered promiscuous mode
[ 1183.916261][T13374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1183.937910][T13374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1184.040607][T13374] team0: Port device team_slave_0 added
[ 1184.061120][T13374] team0: Port device team_slave_1 added
[ 1184.219911][T13374] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1184.227405][T13374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1184.255818][T13374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1184.309898][T13374] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1184.319885][T13374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1184.345821][T11987] Bluetooth: hci4: command tx timeout
[ 1184.345830][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1184.394255][T13374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1184.420344][    C1] dccp_v4_rcv: dropped packet with invalid checksum
[ 1184.452377][T13374] hsr_slave_0: entered promiscuous mode
[ 1184.461432][T13374] hsr_slave_1: entered promiscuous mode
[ 1184.468618][T13374] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1184.476592][T13374] Cannot create hsr debugfs directory
[ 1185.267825][T13374] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1185.297304][T13374] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1185.335654][T13374] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1185.378970][T13374] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1185.565374][T13374] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1185.593240][T13374] 8021q: adding VLAN 0 to HW filter on device team0
[ 1185.621817][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1185.629112][ T9163] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1185.688632][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1185.695913][ T9163] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1185.775428][    C1] dccp_v4_rcv: dropped packet with invalid checksum
[ 1186.073135][T13374] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1186.168595][T13374] veth0_vlan: entered promiscuous mode
[ 1186.199827][T13374] veth1_vlan: entered promiscuous mode
[ 1186.262700][T13374] veth0_macvtap: entered promiscuous mode
[ 1186.287307][T13374] veth1_macvtap: entered promiscuous mode
[ 1186.320943][T13374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1186.345327][T13374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.376256][T13374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1186.388145][T13374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.409322][T13374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1186.423760][T13374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.433754][T13374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1186.444409][T13374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.455446][T13374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1186.466284][T13374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.477760][T13374] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1186.502604][T13374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1186.526423][T13374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.543199][T13374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1186.557429][T13374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.583683][T13374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1186.601315][T13374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.632332][T13374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1186.664017][T13374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.713645][T13374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1186.765417][T13374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1186.807749][T13374] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1186.931172][T13374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.940306][T13374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.949188][T13374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.958342][T13374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.991805][T13552] netlink: 'syz.1.1728': attribute type 2 has an invalid length.
[ 1187.063816][    T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1187.205712][ T7781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1187.229830][ T7781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1187.280342][    T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1187.295940][    T8] usb 1-1: config 0 has no interfaces?
[ 1187.326442][    T8] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1187.336853][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1187.352585][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1187.367844][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1187.389295][    T8] usb 1-1: Product: syz
[ 1187.406334][    T8] usb 1-1: Manufacturer: syz
[ 1187.411222][    T8] usb 1-1: SerialNumber: syz
[ 1187.427833][    T8] usb 1-1: config 0 descriptor??
[ 1187.454049][    C1] dccp_v4_rcv: dropped packet with invalid checksum
[ 1187.670774][T13568] input: syz0 as /devices/virtual/input/input30
[ 1188.064154][ T7805] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1188.215576][ T7805] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[ 1188.228511][ T7805] usb 2-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0
[ 1188.238034][ T7805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1188.255407][ T7805] usb 2-1: Product: syz
[ 1188.264495][ T7805] usb 2-1: Manufacturer: syz
[ 1188.284176][ T7805] usb 2-1: SerialNumber: syz
[ 1188.292369][    C0] dccp_invalid_packet: P.CsCov 2 exceeds packet length 48
[ 1188.559043][ T7805] qmi_wwan 2-1:1.0: skipping garbage
[ 1188.595569][ T7805] qmi_wwan 2-1:1.0: probe with driver qmi_wwan failed with error -22
[ 1188.612777][ T7805] usb 2-1: USB disconnect, device number 9
[ 1189.934063][   T46] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[ 1189.953859][T11987] Bluetooth: hci1: command 0x0406 tx timeout
[ 1190.293798][   T46] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[ 1190.513133][T13609] netdevsim netdevsim4 netdevsim2: entered promiscuous mode
[ 1190.545691][T13609] netdevsim netdevsim4 netdevsim2: left promiscuous mode
[ 1190.854138][ T6873] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[ 1190.899630][ T8834] usb 1-1: USB disconnect, device number 11
[ 1191.038526][ T6873] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[ 1191.056043][ T6873] usb 3-1: config 0 has no interface number 0
[ 1191.064722][ T6873] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1191.079785][ T6873] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1191.109225][ T6873] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1191.124522][ T6873] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[ 1191.147240][ T6873] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1191.198764][ T6873] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1191.211236][ T6873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1191.274708][ T6873] usb 3-1: config 0 descriptor??
[ 1191.322445][T13612] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1191.361235][ T6873] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1192.113774][ T6873] usb 3-1: USB disconnect, device number 12
[ 1192.130270][ T6873] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[ 1192.661600][ T6873] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1192.704131][ T8834] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1192.815981][ T6873] usb 4-1: Using ep0 maxpacket: 16
[ 1192.893893][T11987] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1192.944777][ T6873] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[ 1192.952230][ T6873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[ 1192.987947][   T46] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1192.999741][   T46] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[ 1193.032824][ T6873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 1193.760742][ T6873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1193.771674][ T6873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[ 1193.787914][ T8834] usb 2-1: config 0 has no interfaces?
[ 1193.797083][ T8834] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1193.853620][ T8834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.861713][ T8834] usb 2-1: Product: syz
[ 1193.883125][ T8834] usb 2-1: Manufacturer: syz
[ 1193.891374][ T6873] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1193.899032][ T8834] usb 2-1: SerialNumber: syz
[ 1193.900853][ T6873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.913425][ T6873] usb 4-1: Product: syz
[ 1193.917891][ T6873] usb 4-1: Manufacturer: syz
[ 1193.922547][ T6873] usb 4-1: SerialNumber: syz
[ 1194.003219][ T6873] usb 4-1: config 0 descriptor??
[ 1194.013098][T13662] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1194.032122][ T6873] mcba_usb 4-1:0.0 can0: couldn't setup read URBs
[ 1194.049952][ T6873] mcba_usb 4-1:0.0 can0: couldn't start device: -90
[ 1194.061145][ T8834] usb 2-1: config 0 descriptor??
[ 1194.094079][    C1] dccp_v4_rcv: dropped packet with invalid checksum
[ 1194.194801][ T6873] mcba_usb 4-1:0.0: probe with driver mcba_usb failed with error -90
[ 1194.234076][T13662] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1768'.
[ 1194.271093][T13662] openvswitch: netlink: Message has 76 unknown bytes.
[ 1194.304136][ T6873] usb 4-1: USB disconnect, device number 17
[ 1194.937886][T13692] loop2: detected capacity change from 0 to 512
[ 1195.057371][   T46] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[ 1195.066475][   T46] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[ 1195.089132][T13692] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1195.103122][ T8809] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1195.942497][T13692] EXT4-fs (loop2): 1 truncate cleaned up
[ 1195.959649][T13692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1196.077101][   T29] audit: type=1800 audit(2000001022.430:562): pid=13692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1778" name="bus" dev="loop2" ino=18 res=0 errno=0
[ 1197.133778][   T46] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[ 1197.243623][   T46] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[ 1197.261579][ T8809] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1197.277644][T10678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1197.842917][ T6873] usb 2-1: USB disconnect, device number 10
[ 1198.214093][T13745] loop4: detected capacity change from 0 to 512
[ 1198.243242][T13745] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1198.309677][T13745] EXT4-fs (loop4): 1 truncate cleaned up
[ 1198.365072][T13745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1198.445113][   T29] audit: type=1800 audit(2000001024.820:563): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1796" name="bus" dev="loop4" ino=18 res=0 errno=0
[ 1199.444970][T12282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1200.074316][ T5291] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1200.893965][ T8809] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1200.919210][   T46] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[ 1200.934095][   T46] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[ 1200.942219][ T5291] usb 4-1: config 0 has no interfaces?
[ 1201.004129][ T5291] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1201.039013][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1201.065897][ T5291] usb 4-1: Product: syz
[ 1201.072472][ T5291] usb 4-1: Manufacturer: syz
[ 1201.080719][ T5291] usb 4-1: SerialNumber: syz
[ 1201.097634][ T5291] usb 4-1: config 0 descriptor??
[ 1201.316208][T13780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1806'.
[ 1202.834629][    T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1203.078487][    T8] usb 5-1: config 0 has no interfaces?
[ 1203.118220][    T8] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1203.152505][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1203.213067][    T8] usb 5-1: Product: syz
[ 1203.223217][    T8] usb 5-1: Manufacturer: syz
[ 1203.233766][    T8] usb 5-1: SerialNumber: syz
[ 1203.534607][    T8] usb 5-1: config 0 descriptor??
[ 1203.593700][   T46] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1203.778480][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1203.845280][   T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1203.864639][   T46] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping
[ 1203.883037][   T46] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[ 1203.999834][   T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1204.213799][   T46] usb 1-1: Product: syz
[ 1204.217998][   T46] usb 1-1: Manufacturer: syz
[ 1204.231741][   T46] usb 1-1: SerialNumber: syz
[ 1204.263865][   T46] usb 1-1: config 0 descriptor??
[ 1204.304632][   T46] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[ 1204.377729][ T5287] usb 4-1: USB disconnect, device number 18
[ 1204.635730][ T5290] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1204.829806][ T5290] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1204.854175][   T46] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 1204.871296][ T5290] usb 3-1: config 0 has no interfaces?
[ 1204.913666][ T5290] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1204.950139][ T5290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1205.011597][ T5290] usb 3-1: Product: syz
[ 1205.027909][ T5290] usb 3-1: Manufacturer: syz
[ 1205.050602][ T5290] usb 3-1: SerialNumber: syz
[ 1205.087000][ T5290] usb 3-1: config 0 descriptor??
[ 1205.096208][   T46] usb 4-1: too many configurations: 9, using maximum allowed: 8
[ 1205.123947][   T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1205.133282][   T46] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1205.157224][   T46] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1205.192586][   T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1205.212623][   T46] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1205.320048][   T46] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1205.348111][   T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1205.423623][   T46] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1205.443644][   T46] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1205.475796][   T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1205.497038][   T46] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1205.529606][   T46] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1205.548796][   T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1205.562530][   T46] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1205.588236][   T46] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1205.630017][   T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1205.679416][   T46] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1205.737599][   T46] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1205.772473][   T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1205.829612][   T46] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1205.856195][   T46] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1206.000862][   T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1206.014103][   T46] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1206.023845][ T5287] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1206.025041][   T46] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1206.040578][ T5291] usb 5-1: USB disconnect, device number 15
[ 1206.259117][    C1] dccp_v4_rcv: dropped packet with invalid checksum
[ 1206.287089][   T46] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1206.311076][   T46] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1206.319602][   T46] usb 4-1: Product: syz
[ 1206.323900][   T46] usb 4-1: Manufacturer: syz
[ 1206.328714][   T46] usb 4-1: SerialNumber: syz
[ 1206.335994][   T46] usb 4-1: config 0 descriptor??
[ 1206.370652][ T5287] usb 2-1: config 0 has no interfaces?
[ 1206.384392][   T46] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[ 1206.509748][ T5287] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1206.533727][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1206.573835][ T5287] usb 2-1: Product: syz
[ 1206.594472][ T5287] usb 2-1: Manufacturer: syz
[ 1206.606006][ T5287] usb 2-1: SerialNumber: syz
[ 1206.665755][ T5287] usb 2-1: config 0 descriptor??
[ 1206.681047][ T6873] usb 4-1: USB disconnect, device number 19
[ 1206.689216][ T6873] yurex 4-1:0.0: USB YUREX #0 now disconnected
[ 1207.169440][ T5287] usb 1-1: USB disconnect, device number 12
[ 1207.533759][ T6873] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1207.714578][ T6873] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1207.747187][ T6873] usb 4-1: config 0 has no interfaces?
[ 1207.819912][ T6873] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[ 1207.904812][ T6873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1207.939482][ T6873] usb 4-1: config 0 descriptor??
[ 1208.426094][ T5291] usb 3-1: USB disconnect, device number 13
[ 1209.492553][ T5287] usb 2-1: USB disconnect, device number 11
[ 1210.191542][T13947] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1210.198750][T13947] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1210.333894][ T6873] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1210.715477][ T5291] usb 4-1: USB disconnect, device number 20
[ 1210.882907][ T6873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1210.893231][ T6873] usb 2-1: config 0 has no interfaces?
[ 1210.921641][ T6873] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1210.950719][ T6873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1211.082576][ T6873] usb 2-1: Product: syz
[ 1211.192093][ T6873] usb 2-1: Manufacturer: syz
[ 1211.248797][ T6873] usb 2-1: SerialNumber: syz
[ 1211.278183][ T6873] usb 2-1: config 0 descriptor??
[ 1211.966958][T13984] ALSA: mixer_oss: invalid OSS volume ''
[ 1212.104330][T13984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1872'.
[ 1212.630974][T13993] netdevsim netdevsim3 netdevsim2: entered promiscuous mode
[ 1212.672119][T13993] netdevsim netdevsim3 netdevsim3: entered promiscuous mode
[ 1212.973801][T10854] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1213.153997][ T6873] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 1213.173964][T10854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1213.207216][T10854] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1213.261499][T10854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1213.337887][T10854] usb 3-1: config 0 descriptor??
[ 1213.373446][ T6873] usb 4-1: Using ep0 maxpacket: 32
[ 1213.425079][ T6873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1213.490251][ T6873] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1213.509831][ T6873] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1213.738990][ T6873] usb 4-1: Product: syz
[ 1213.754569][ T6873] usb 4-1: Manufacturer: syz
[ 1213.763570][ T6873] usb 4-1: SerialNumber: syz
[ 1214.596214][T10854] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[ 1214.607429][T10854] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input31
[ 1214.623251][ T6873] usb 4-1: config 0 descriptor??
[ 1214.640569][T14003] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1214.747848][T10854] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[ 1214.867474][ T5291] usb 2-1: USB disconnect, device number 12
[ 1215.855780][ T5290] usb 3-1: USB disconnect, device number 14
[ 1216.308182][T14035] nfs: Unknown parameter 'a[l'
[ 1216.397845][T14037] loop4: detected capacity change from 0 to 256
[ 1216.460900][T14037] FAT-fs (loop4): Directory bread(block 64) failed
[ 1216.473882][T14037] FAT-fs (loop4): Directory bread(block 65) failed
[ 1216.489861][T14037] FAT-fs (loop4): Directory bread(block 66) failed
[ 1216.507606][T14037] FAT-fs (loop4): Directory bread(block 67) failed
[ 1216.527600][T14037] FAT-fs (loop4): Directory bread(block 68) failed
[ 1216.544885][T14037] FAT-fs (loop4): Directory bread(block 69) failed
[ 1216.553019][T14037] FAT-fs (loop4): Directory bread(block 70) failed
[ 1216.566561][T14037] FAT-fs (loop4): Directory bread(block 71) failed
[ 1216.578333][T14037] FAT-fs (loop4): Directory bread(block 72) failed
[ 1216.589577][T14037] FAT-fs (loop4): Directory bread(block 73) failed
[ 1217.359406][T14042] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[ 1218.210981][ T5290] usb 4-1: USB disconnect, device number 21
[ 1218.555561][   T46] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1219.423683][   T46] usb 3-1: Using ep0 maxpacket: 16
[ 1219.445408][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1219.480421][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1219.506181][   T46] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[ 1219.582628][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1219.595522][   T46] usb 3-1: config 0 descriptor??
[ 1220.115561][T14045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1220.174778][T14045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1220.193313][T14045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1220.235582][T14075] loop3: detected capacity change from 0 to 256
[ 1220.417224][T14045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1221.154104][T14078] nfs: Unknown parameter 'a[l'
[ 1221.196341][T14045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1221.243426][T14083] loop4: detected capacity change from 0 to 256
[ 1221.283952][T14045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1221.353633][   T46] usbhid 3-1:0.0: can't add hid device: -71
[ 1221.359900][T14083] FAT-fs (loop4): Directory bread(block 64) failed
[ 1221.363508][   T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1221.373965][T14083] FAT-fs (loop4): Directory bread(block 65) failed
[ 1221.381048][T14083] FAT-fs (loop4): Directory bread(block 66) failed
[ 1221.397859][T14083] FAT-fs (loop4): Directory bread(block 67) failed
[ 1221.460488][   T46] usb 3-1: USB disconnect, device number 15
[ 1221.474129][T14083] FAT-fs (loop4): Directory bread(block 68) failed
[ 1221.512770][T14083] FAT-fs (loop4): Directory bread(block 69) failed
[ 1221.530307][T14083] FAT-fs (loop4): Directory bread(block 70) failed
[ 1221.545171][T14083] FAT-fs (loop4): Directory bread(block 71) failed
[ 1221.564740][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1907'.
[ 1221.566668][T14083] FAT-fs (loop4): Directory bread(block 72) failed
[ 1221.592000][T14083] FAT-fs (loop4): Directory bread(block 73) failed
[ 1221.662547][T14089] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1907'.
[ 1222.256155][T14099] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[ 1223.856296][T14111] loop3: detected capacity change from 0 to 256
[ 1224.829266][T14124] nfs: Unknown parameter 'a[l'
[ 1224.836296][T14121] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1919' sets config #0
[ 1224.961376][T14122] xt_bpf: check failed: parse error
[ 1225.119100][T14129] loop3: detected capacity change from 0 to 256
[ 1225.138612][T14130] loop2: detected capacity change from 0 to 512
[ 1225.238193][T14129] FAT-fs (loop3): Directory bread(block 64) failed
[ 1225.247361][T14129] FAT-fs (loop3): Directory bread(block 65) failed
[ 1225.449006][T14130] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1225.551512][T14129] FAT-fs (loop3): Directory bread(block 66) failed
[ 1225.563652][T14129] FAT-fs (loop3): Directory bread(block 67) failed
[ 1225.573050][T14129] FAT-fs (loop3): Directory bread(block 68) failed
[ 1225.584280][T14129] FAT-fs (loop3): Directory bread(block 69) failed
[ 1225.593331][T14129] FAT-fs (loop3): Directory bread(block 70) failed
[ 1225.604341][T14129] FAT-fs (loop3): Directory bread(block 71) failed
[ 1225.612546][T14129] FAT-fs (loop3): Directory bread(block 72) failed
[ 1225.629617][T14129] FAT-fs (loop3): Directory bread(block 73) failed
[ 1225.684888][T14130] EXT4-fs (loop2): 1 truncate cleaned up
[ 1225.691899][T14130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1227.964238][T14147] cgroup: Unknown subsys name 'cpuset'
[ 1228.023878][T14145] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[ 1228.678023][T10678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1230.164563][T14175] loop3: detected capacity change from 0 to 512
[ 1230.624488][T14175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1230.751162][T14175] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1231.670440][T14192] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[ 1232.273134][T14194] loop2: detected capacity change from 0 to 256
[ 1232.909258][T13374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1233.493781][ T5291] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1233.525008][T14216] 9pnet_fd: Insufficient options for proto=fd
[ 1233.691129][ T5291] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[ 1233.713615][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1233.753932][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1233.796933][ T5291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1233.850614][ T5291] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1233.876151][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1233.911468][ T5291] usb 4-1: config 0 descriptor??
[ 1233.944263][T14212] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1234.386043][ T5291] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd
[ 1234.395778][ T5291] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[ 1234.415188][ T5291] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1234.616456][T14219] loop2: detected capacity change from 0 to 512
[ 1234.683949][ T5291] usb 4-1: USB disconnect, device number 22
[ 1234.857380][T14219] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent
[ 1236.045170][T14226] trusted_key: encrypted_key: insufficient parameters specified
[ 1236.193699][T11987] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1236.239350][T11987] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1236.269330][T11987] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1236.319244][T11987] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1236.331196][T11987] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1236.344855][T11987] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1236.383672][ T8809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1236.394170][ T8809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1236.401908][ T8809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1236.443821][ T8809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1236.479349][ T8809] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1236.489180][ T8809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1236.933652][   T29] audit: type=1326 audit(2000001063.300:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14252 comm="syz.3.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526d7dff9 code=0x7ffc0000
[ 1237.016055][   T29] audit: type=1326 audit(2000001063.300:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14252 comm="syz.3.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526d7dff9 code=0x7ffc0000
[ 1237.054962][   T29] audit: type=1326 audit(2000001063.360:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14252 comm="syz.3.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f1526d7dff9 code=0x7ffc0000
[ 1237.091432][   T29] audit: type=1326 audit(2000001063.360:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14252 comm="syz.3.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526d7dff9 code=0x7ffc0000
[ 1237.253882][   T29] audit: type=1326 audit(2000001063.360:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14252 comm="syz.3.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526d7dff9 code=0x7ffc0000
[ 1238.574189][T11987] Bluetooth: hci5: command tx timeout
[ 1238.677950][T14264] loop3: detected capacity change from 0 to 16
[ 1238.696431][T14264] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1238.747068][T14269] loop2: detected capacity change from 0 to 1024
[ 1238.767508][T14269] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1238.839979][T14269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1238.901746][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.908250][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.163661][ T5287] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1239.233911][T14278] loop3: detected capacity change from 0 to 512
[ 1239.278779][T14278] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1239.324229][T14278] EXT4-fs (loop3): 1 truncate cleaned up
[ 1239.330842][T14278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1239.408208][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1239.419445][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1239.429408][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1239.442401][ T5287] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1239.451598][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1239.580473][ T5287] usb 3-1: config 0 descriptor??
[ 1240.273613][ T5287] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[ 1240.275058][T13374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1240.307499][ T5287] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1240.532946][   T29] audit: type=1326 audit(2000001066.870:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5df7dff9 code=0x7ffc0000
[ 1240.587824][ T6873] usb 3-1: USB disconnect, device number 16
[ 1240.654531][   T29] audit: type=1326 audit(2000001066.890:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5df7dff9 code=0x7ffc0000
[ 1240.659100][T11987] Bluetooth: hci5: command tx timeout
[ 1240.680022][   T29] audit: type=1326 audit(2000001066.890:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd5df7dff9 code=0x7ffc0000
[ 1240.713456][   T29] audit: type=1326 audit(2000001066.890:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5df7dff9 code=0x7ffc0000
[ 1240.737823][   T29] audit: type=1326 audit(2000001066.890:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5df7dff9 code=0x7ffc0000
[ 1241.171727][T10678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1242.013221][T14301] loop2: detected capacity change from 0 to 512
[ 1242.086978][T14301] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent
[ 1243.233067][T11987] Bluetooth: hci5: command tx timeout
[ 1243.381356][T14313] trusted_key: encrypted_key: insufficient parameters specified
[ 1243.454812][T14231] chnl_net:caif_netlink_parms(): no params data found
[ 1243.701106][ T4584] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1244.444401][T14231] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1244.456188][T14231] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1244.488966][T14231] bridge_slave_0: entered allmulticast mode
[ 1244.518618][T14231] bridge_slave_0: entered promiscuous mode
[ 1244.600320][ T4584] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1245.093744][ T5291] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1245.259784][ T5291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1245.306619][ T5291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1245.341673][T11987] Bluetooth: hci5: command tx timeout
[ 1245.577252][ T5291] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1245.740255][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1245.764003][T14231] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1245.898566][T14231] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1245.912029][T14231] bridge_slave_1: entered allmulticast mode
[ 1245.921987][T14231] bridge_slave_1: entered promiscuous mode
[ 1245.993016][ T4584] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1245.996881][ T5291] usb 3-1: config 0 descriptor??
[ 1246.704748][T14231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1246.842383][ T4584] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1246.900536][T14231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1247.089577][T14231] team0: Port device team_slave_0 added
[ 1247.115934][T14231] team0: Port device team_slave_1 added
[ 1247.155444][T14365] 9pnet: Unknown protocol version 9p20\++}
[ 1247.182027][T14365] bridge0: port 3(syz_tun) entered blocking state
[ 1247.206774][T14365] bridge0: port 3(syz_tun) entered disabled state
[ 1247.241585][T14365] syz_tun: entered allmulticast mode
[ 1247.256096][T14365] syz_tun: entered promiscuous mode
[ 1247.273279][T14365] bridge0: port 3(syz_tun) entered blocking state
[ 1247.280309][T14365] bridge0: port 3(syz_tun) entered forwarding state
[ 1247.362190][T14231] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1247.362519][ T5291] usbhid 3-1:0.0: can't add hid device: -71
[ 1247.378239][ T5291] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1247.402828][T14231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1247.433892][ T5291] usb 3-1: USB disconnect, device number 17
[ 1247.469552][T14231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1247.483003][T14231] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1247.492031][T14231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1247.550552][T14372] loop2: detected capacity change from 0 to 512
[ 1247.560557][T14231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1247.600191][T14372] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1247.613623][ T8834] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1247.645396][T14372] EXT4-fs (loop2): 1 truncate cleaned up
[ 1247.651923][T14372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1247.683844][   T29] kauditd_printk_skb: 17 callbacks suppressed
[ 1247.683862][   T29] audit: type=1800 audit(2000001074.060:591): pid=14372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1999" name="bus" dev="loop2" ino=18 res=0 errno=0
[ 1247.786080][ T4584] bridge_slave_1: left allmulticast mode
[ 1247.792417][ T4584] bridge_slave_1: left promiscuous mode
[ 1247.798736][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1247.809091][ T4584] bridge_slave_0: left allmulticast mode
[ 1247.830542][ T4584] bridge_slave_0: left promiscuous mode
[ 1247.836589][T10854] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1247.859429][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1248.013971][ T8834] usb 1-1: Using ep0 maxpacket: 16
[ 1248.052988][ T8834] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[ 1248.462474][ T8834] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1248.503673][ T8834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1248.545234][ T8834] usb 1-1: Product: syz
[ 1248.549471][ T8834] usb 1-1: Manufacturer: syz
[ 1248.572071][ T8834] usb 1-1: SerialNumber: syz
[ 1248.610401][ T8834] usb 1-1: config 0 descriptor??
[ 1248.639850][T10854] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1248.661050][T10854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1248.673847][T10854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1248.691755][T10854] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1248.715806][T10854] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1248.731059][T10854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1248.752592][T10854] usb 4-1: config 0 descriptor??
[ 1248.763006][T14373] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1248.930424][T14231] hsr_slave_0: entered promiscuous mode
[ 1248.942384][T14231] hsr_slave_1: entered promiscuous mode
[ 1248.956993][T14231] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1248.986995][T14231] Cannot create hsr debugfs directory
[ 1249.155449][ T4584] tipc: Left network mode
[ 1249.169275][T10678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1249.208213][T10854] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd
[ 1249.245921][T10854] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[ 1249.320967][T10854] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1249.564576][T10854] usb 4-1: USB disconnect, device number 23
[ 1250.031375][ T4584] hsr_slave_0: left promiscuous mode
[ 1250.217632][ T4584] hsr_slave_1: left promiscuous mode
[ 1250.260212][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1250.292683][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1250.366720][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1250.409552][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1250.472306][ T8834] usb 1-1: USB disconnect, device number 13
[ 1250.555938][T14386] loop3: detected capacity change from 0 to 16
[ 1250.572902][ T4584] veth1_macvtap: left promiscuous mode
[ 1250.595613][T14386] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1250.598598][ T4584] veth0_macvtap: left promiscuous mode
[ 1250.623768][ T4584] veth1_vlan: left promiscuous mode
[ 1250.629138][ T4584] veth0_vlan: left promiscuous mode
[ 1252.853610][ T5287] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1253.043656][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1253.073566][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1253.102340][ T5287] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1253.131996][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1253.168656][ T5287] usb 3-1: config 0 descriptor??
[ 1253.562227][T14403] loop3: detected capacity change from 0 to 40427
[ 1253.572727][T14403] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1253.580646][T14403] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1253.646899][T14403] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1253.841588][ T4584] team0 (unregistering): Port device team_slave_1 removed
[ 1253.858302][T14403] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1253.873604][T14403] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1254.041989][ T4584] team0 (unregistering): Port device team_slave_0 removed
[ 1254.444590][ T5287] usbhid 3-1:0.0: can't add hid device: -71
[ 1254.510435][ T5287] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1254.565648][ T5287] usb 3-1: USB disconnect, device number 18
[ 1254.828734][T14427] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1255.146661][T14441] overlayfs: failed to resolve './file2': -2
[ 1256.456437][T13374] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[ 1256.476496][T13374] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[ 1256.503652][T13374] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[ 1256.550772][T13374] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[ 1256.581215][T13374] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[ 1256.599480][T13374] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[ 1256.608769][T13374] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[ 1256.773923][T14453] ptrace attach of "./syz-executor exec"[12278] was attempted by "./syz-executor exec"[14453]
[ 1256.819922][T14441] input: syz0 as /devices/virtual/input/input36
[ 1258.163632][ T5287] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1259.572000][ T8834] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1259.757716][ T8834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1259.821588][ T8834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1259.890049][ T8834] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1259.932134][ T8834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1260.012378][ T8834] usb 4-1: config 0 descriptor??
[ 1261.003703][ T5287] usb 2-1: device descriptor read/64, error -71
[ 1261.139371][T14231] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1261.527736][T14231] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1262.153633][ T5287] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1262.185743][ T8834] usbhid 4-1:0.0: can't add hid device: -71
[ 1262.193992][ T8834] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1262.203757][ T8834] usb 4-1: USB disconnect, device number 24
[ 1262.292584][T14231] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1262.320821][T14231] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1262.447595][T14231] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1262.485106][T14231] 8021q: adding VLAN 0 to HW filter on device team0
[ 1262.526846][ T6512] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1262.534160][ T6512] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1262.538456][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1262.565117][ T6512] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1262.572305][ T6512] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1262.579966][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1262.620391][ T5287] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[ 1262.642776][T14231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1262.652162][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1262.653617][T14231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1262.670895][ T5287] usb 2-1: config 0 descriptor??
[ 1262.949270][ T5287] usbhid 2-1:0.0: can't add hid device: -71
[ 1262.963746][ T5287] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1263.001702][ T5287] usb 2-1: USB disconnect, device number 14
[ 1263.120760][T14231] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1264.447017][T14526] bridge0: port 3(syz_tun) entered disabled state
[ 1264.539376][T14526] syz_tun (unregistering): left allmulticast mode
[ 1264.569770][T14526] syz_tun (unregistering): left promiscuous mode
[ 1264.588762][T14526] bridge0: port 3(syz_tun) entered disabled state
[ 1265.577337][ T5290] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1265.745674][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1265.787335][T14231] veth0_vlan: entered promiscuous mode
[ 1265.803207][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1265.832558][ T5290] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1265.862886][T14231] veth1_vlan: entered promiscuous mode
[ 1265.890229][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1265.955852][ T5290] usb 3-1: config 0 descriptor??
[ 1266.035872][T14231] veth0_macvtap: entered promiscuous mode
[ 1266.087946][T14231] veth1_macvtap: entered promiscuous mode
[ 1266.114518][T14231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1266.125215][T14231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1266.135159][T14231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1266.145836][T14231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1266.155728][T14231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1266.169928][T14231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1266.185287][T14231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1266.200130][T14231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1266.214776][T14231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1266.225463][T14231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1266.252633][T14231] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1266.274286][T14231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1266.296643][T14231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1266.318386][T14231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1266.355859][T14231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1266.385846][T14231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1266.418109][T14231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1266.447384][T14231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1266.471132][T14231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1266.492561][T14231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1266.540450][T14231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1266.565952][T14231] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1266.627068][T14231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1266.686889][T14231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1266.724887][T14231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1266.762399][T14231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1268.186847][ T5290] usbhid 3-1:0.0: can't add hid device: -71
[ 1268.197073][ T5290] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1268.429472][ T5290] usb 3-1: USB disconnect, device number 19
[ 1269.471140][ T6520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1269.533689][ T6520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1269.607945][ T7781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1269.616534][ T7781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1271.345075][T14601] loop2: detected capacity change from 0 to 1024
[ 1271.634568][T14601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1272.043938][ T5291] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1272.224439][ T5291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1272.453673][ T5291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1272.493765][ T5291] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1272.527978][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1272.561354][ T5291] usb 2-1: config 0 descriptor??
[ 1272.805487][T14606] ptrace attach of "./syz-executor exec"[14231] was attempted by "./syz-executor exec"[14606]
[ 1272.867216][T14606] input: syz0 as /devices/virtual/input/input39
[ 1273.255923][ T8834] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1273.355636][T10678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1273.614536][T14625] loop3: detected capacity change from 0 to 16
[ 1273.658452][T14625] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1274.362240][ T5291] usbhid 2-1:0.0: can't add hid device: -71
[ 1274.396752][ T5291] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1274.880941][T14644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2083'.
[ 1275.172054][ T5291] usb 2-1: USB disconnect, device number 15
[ 1277.894121][ T5291] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1278.060533][ T5291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1278.217092][ T5291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1278.244176][ T5291] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1278.273804][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1278.329488][ T5291] usb 3-1: config 0 descriptor??
[ 1279.548834][T14711] loop4: detected capacity change from 0 to 512
[ 1279.599705][ T5291] usbhid 3-1:0.0: can't add hid device: -71
[ 1279.606745][ T5291] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1279.617194][ T5291] usb 3-1: USB disconnect, device number 20
[ 1279.658218][T14711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1279.763815][T14711] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1281.093079][T14231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1282.231531][T14742] loop3: detected capacity change from 0 to 16
[ 1282.362194][T14743] loop4: detected capacity change from 0 to 256
[ 1282.373245][T14743] exfat: Deprecated parameter 'namecase'
[ 1282.379246][T14743] exfat: Deprecated parameter 'utf8'
[ 1282.984978][T14742] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1283.291765][T14743] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66cd20, utbl_chksum : 0xe619d30d)
[ 1283.304370][T14743] exFAT-fs (loop4): failed to load alloc-bitmap
[ 1283.310656][T14743] exFAT-fs (loop4): failed to recognize exfat type
[ 1284.284047][ T5287] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1285.003930][   T46] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1285.234263][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1285.384370][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1285.395110][T14758] loop2: detected capacity change from 0 to 1024
[ 1285.403255][T14758] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled
[ 1285.419175][   T46] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1285.437309][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1285.454024][T14760] loop4: detected capacity change from 0 to 1024
[ 1285.474924][   T46] usb 4-1: config 0 descriptor??
[ 1285.482756][T14758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1285.576701][T14760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1285.782335][T14231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1286.063293][T14771] loop4: detected capacity change from 0 to 2048
[ 1286.151236][T14771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1286.410394][T14231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1286.831087][ T5287] usb 2-1: device descriptor read/all, error -71
[ 1287.267455][   T46] usbhid 4-1:0.0: can't add hid device: -71
[ 1287.282891][   T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1287.338377][T10678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1287.362055][   T46] usb 4-1: USB disconnect, device number 25
[ 1288.113998][ T5287] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1288.315670][ T5287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1288.355408][ T5287] usb 3-1: config 0 has no interfaces?
[ 1288.360953][ T5287] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[ 1288.418738][T14800] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[ 1288.443868][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1288.475842][T14800] netdevsim netdevsim4 netdevsim3: entered promiscuous mode
[ 1288.488492][ T5287] usb 3-1: config 0 descriptor??
[ 1288.547331][T14800] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[ 1288.577368][T14800] Cannot create hsr debugfs directory
[ 1288.772413][ T5287] usb 3-1: USB disconnect, device number 21
[ 1289.808307][T14822] loop2: detected capacity change from 0 to 16
[ 1289.911852][T14822] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1290.054257][T14825] loop4: detected capacity change from 0 to 16
[ 1290.065554][T14825] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1290.315029][T14828] cgroup: Unknown subsys name 'cpuset'
[ 1290.449782][T14830] input: syz0 as /devices/virtual/input/input40
[ 1292.475253][T14849] dccp_close: ABORT with 40 bytes unread
[ 1292.745767][T14857] loop2: detected capacity change from 0 to 512
[ 1292.794467][T14857] EXT4-fs: inline encryption not supported
[ 1292.813685][T14857] EXT4-fs: Ignoring removed oldalloc option
[ 1292.819749][T14857] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1292.855982][T14857] ext4: Unknown parameter 'hash'
[ 1292.993654][T14857] loop2: detected capacity change from 0 to 1024
[ 1293.073059][T14857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1293.947937][T10678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1294.143250][T14874] loop2: detected capacity change from 0 to 512
[ 1294.201349][T14874] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1294.222202][T14872] loop3: detected capacity change from 0 to 16
[ 1294.261261][T14872] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1294.279730][T14874] EXT4-fs (loop2): 1 truncate cleaned up
[ 1294.351974][T14878] nfs: Unknown parameter 'a[l'
[ 1294.369449][T14874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1294.801317][T14879] cgroup: Unknown subsys name 'cpuset'
[ 1295.119536][T14858] loop4: detected capacity change from 0 to 40427
[ 1295.202624][T14858] F2FS-fs (loop4): invalid crc value
[ 1295.468814][T14858] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1295.492507][T10678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1295.894380][   T46] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1296.062388][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1296.209494][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1296.221682][T14887] loop3: detected capacity change from 0 to 1024
[ 1296.240250][   T46] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[ 1296.250229][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1296.262998][   T46] usb 1-1: config 0 descriptor??
[ 1296.329828][T14887] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled
[ 1296.377495][T14887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1297.804203][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'.
[ 1297.864985][T14913] ip6gretap0: entered promiscuous mode
[ 1298.281086][   T46] usbhid 1-1:0.0: can't add hid device: -71
[ 1298.303669][   T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1298.338633][   T46] usb 1-1: USB disconnect, device number 14
[ 1298.497620][T14918] loop2: detected capacity change from 0 to 256
[ 1298.564281][T14918] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1298.748426][T14924] nfs: Unknown parameter 'a[l'
[ 1298.962245][   T29] audit: type=1800 audit(2000001125.330:592): pid=14926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2163" name="file1" dev="loop2" ino=1048818 res=0 errno=0
[ 1299.051333][T14925] usb usb1: usbfs: process 14925 (syz.1.2160) did not claim interface 0 before use
[ 1300.712776][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.723358][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.849285][T14938] loop2: detected capacity change from 0 to 256
[ 1301.574720][T13374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1301.875218][T14944] dccp_close: ABORT with 40 bytes unread
[ 1302.367775][T14949] loop3: detected capacity change from 0 to 512
[ 1302.413184][T14949] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1302.442819][   T29] audit: type=1326 audit(2000001128.810:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5df7dff9 code=0x7ffc0000
[ 1302.502586][T14949] EXT4-fs error (device loop3): __ext4_fill_super:5458: inode #2: comm syz.3.2169: casefold flag without casefold feature
[ 1302.547146][   T29] audit: type=1326 audit(2000001128.810:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd5df7dff9 code=0x7ffc0000
[ 1302.550112][T14949] EXT4-fs (loop3): get root inode failed
[ 1302.570328][   T29] audit: type=1326 audit(2000001128.810:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5df7dff9 code=0x7ffc0000
[ 1302.579931][T14949] EXT4-fs (loop3): mount failed
[ 1302.790026][   T29] audit: type=1326 audit(2000001128.810:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd5df7dff9 code=0x7ffc0000
[ 1302.993957][   T46] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1303.338558][   T29] audit: type=1326 audit(2000001128.810:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5df7dff9 code=0x7ffc0000
[ 1303.361097][   T29] audit: type=1326 audit(2000001128.810:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd5df7dff9 code=0x7ffc0000
[ 1303.390037][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1303.417991][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1303.443626][   T46] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[ 1303.453786][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1303.462735][   T29] audit: type=1326 audit(2000001128.810:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5df7dff9 code=0x7ffc0000
[ 1303.514570][   T46] usb 1-1: config 0 descriptor??
[ 1303.568394][   T29] audit: type=1326 audit(2000001128.810:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd5df7dff9 code=0x7ffc0000
[ 1303.663838][   T29] audit: type=1326 audit(2000001128.810:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5df7dff9 code=0x7ffc0000
[ 1303.865564][T14960] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[ 1303.917010][T14960] netdevsim netdevsim1 netdevsim3: entered promiscuous mode
[ 1304.014911][T14960] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[ 1304.024824][T14960] Cannot create hsr debugfs directory
[ 1304.114278][T14968] nfs: Unknown parameter 'a[l'
[ 1304.120743][T14967] loop4: detected capacity change from 0 to 512
[ 1304.246658][T14967] EXT4-fs (loop4): corrupt root inode, run e2fsck
[ 1304.324881][T14967] EXT4-fs (loop4): mount failed
[ 1305.453272][   T46] usbhid 1-1:0.0: can't add hid device: -71
[ 1305.460774][   T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1305.989253][   T46] usb 1-1: USB disconnect, device number 15
[ 1306.223650][ T5291] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1306.419323][ T5291] usb 2-1: Using ep0 maxpacket: 32
[ 1306.450200][ T5291] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1306.500735][ T5291] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1306.539988][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1306.565423][ T5291] usb 2-1: Product: syz
[ 1306.580989][ T5291] usb 2-1: Manufacturer: syz
[ 1306.594241][ T5291] usb 2-1: SerialNumber: syz
[ 1306.614599][ T5291] usb 2-1: config 0 descriptor??
[ 1306.655710][ T5291] cdc_ether 2-1:0.0: skipping garbage
[ 1306.661151][ T5291] cdc_ether 2-1:0.0: skipping garbage
[ 1306.692894][ T5291] usb 2-1: bad CDC descriptors
[ 1306.715747][T14979] loop2: detected capacity change from 0 to 1024
[ 1306.726326][ T5291] usb 2-1: unsupported MDLM descriptors
[ 1306.764095][   T29] kauditd_printk_skb: 15 callbacks suppressed
[ 1306.764116][   T29] audit: type=1326 audit(2000001133.080:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f16b7dff9 code=0x7ffc0000
[ 1306.804357][ T8834] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1306.825588][T14979] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled
[ 1306.841879][   T29] audit: type=1326 audit(2000001133.080:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f16b7dff9 code=0x7ffc0000
[ 1306.866353][   T29] audit: type=1326 audit(2000001133.080:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f16b7dff9 code=0x7ffc0000
[ 1306.945128][   T29] audit: type=1326 audit(2000001133.310:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f16b7dff9 code=0x7ffc0000
[ 1306.994643][ T8834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1307.005999][T14979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1307.021055][ T8834] usb 5-1: config 0 has no interfaces?
[ 1307.044696][   T29] audit: type=1326 audit(2000001133.310:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f16b7dff9 code=0x7ffc0000
[ 1307.067472][   T29] audit: type=1326 audit(2000001133.320:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3f16b7dff9 code=0x7ffc0000
[ 1307.226189][T14996] loop3: detected capacity change from 0 to 512
[ 1307.241803][ T8834] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[ 1307.251291][ T8834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1307.261631][ T8834] usb 5-1: config 0 descriptor??
[ 1307.277191][T14996] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[ 1307.557571][   T29] audit: type=1326 audit(2000001133.930:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f16b7dff9 code=0x7ffc0000
[ 1307.593830][   T29] audit: type=1326 audit(2000001133.960:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f16b7dff9 code=0x7ffc0000
[ 1308.358688][ T8834] usb 2-1: USB disconnect, device number 18
[ 1309.108474][T10854] usb 5-1: USB disconnect, device number 17
[ 1310.469635][T15017] loop4: detected capacity change from 0 to 512
[ 1310.554929][T15017] EXT4-fs (loop4): corrupt root inode, run e2fsck
[ 1310.583621][T15017] EXT4-fs (loop4): mount failed
[ 1310.833917][   T29] audit: type=1326 audit(2000001137.200:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.3.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526d7dff9 code=0x7ffc0000
[ 1310.877791][   T29] audit: type=1326 audit(2000001137.200:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.3.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526d7dff9 code=0x7ffc0000
[ 1312.453158][T10678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1312.533755][T10854] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1312.857460][T10854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1312.966784][T10854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1313.197057][T10854] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[ 1313.327280][T10854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1313.430648][T15048] loop4: detected capacity change from 0 to 1024
[ 1313.437926][T15048] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1313.482346][T10854] usb 2-1: config 0 descriptor??
[ 1313.597496][T15048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1313.730411][ T8834] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[ 1313.932494][ T8834] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1314.089346][ T8834] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1314.272595][ T8834] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[ 1314.325499][ T8834] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1314.359339][ T8834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1314.384719][ T8834] usb 3-1: Product: syz
[ 1314.402850][ T8834] usb 3-1: Manufacturer: syz
[ 1314.421273][ T8834] usb 3-1: SerialNumber: syz
[ 1314.445740][T15044] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1314.551312][   T46] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1314.696774][T15044] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1314.710966][T15044] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1314.720493][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1314.732090][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1314.746647][   T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1314.809637][T10854] usbhid 2-1:0.0: can't add hid device: -71
[ 1314.816212][T10854] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1314.837120][T10854] usb 2-1: USB disconnect, device number 19
[ 1314.910234][   T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1314.927101][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1314.938710][   T46] usb 5-1: config 0 descriptor??
[ 1315.155576][T15044] ptrace attach of "./syz-executor exec"[10678] was attempted by "./syz-executor exec"[15044]
[ 1315.167474][ T8834] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS
[ 1315.174246][ T8834] cdc_ncm 3-1:1.0: bind() failure
[ 1315.192134][ T8834] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[ 1315.210076][ T8834] cdc_ncm 3-1:1.1: bind() failure
[ 1315.355977][T15065] loop2: detected capacity change from 0 to 512
[ 1315.387166][   T46] usbhid 5-1:0.0: can't add hid device: -71
[ 1315.393218][   T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1315.427827][T15065] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1315.484397][   T46] usb 5-1: USB disconnect, device number 18
[ 1315.872753][T15065] EXT4-fs (loop2): 1 truncate cleaned up
[ 1315.880866][T15065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1315.984696][T15065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1316.023694][   T46] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1316.063055][T15065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1316.176465][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1316.194041][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1316.208170][T14231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1316.237583][   T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1316.283451][   T46] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[ 1316.356674][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1316.817584][T15074] loop4: detected capacity change from 0 to 40427
[ 1316.826779][   T46] usb 2-1: config 0 descriptor??
[ 1316.850387][T15074] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1)
[ 1316.858217][T15074] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[ 1316.896932][T15074] F2FS-fs (loop4): invalid crc value
[ 1316.959695][T15074] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1317.054482][T15083] loop3: detected capacity change from 0 to 16
[ 1317.139322][T15083] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1317.652559][T15074] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[ 1317.675004][T15074] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1317.716131][T10854] usb 3-1: USB disconnect, device number 22
[ 1317.747295][T10678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1317.817234][   T46] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[ 1317.825709][   T46] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[ 1318.000232][   T29] kauditd_printk_skb: 14 callbacks suppressed
[ 1318.000252][   T29] audit: type=1326 audit(2000001144.370:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f16b7dff9 code=0x7ffc0000
[ 1318.045866][   T46] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[ 1318.053813][   T46] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[ 1318.061199][   T46] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0
[ 1318.070398][   T29] audit: type=1326 audit(2000001144.370:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3f16b7dff9 code=0x7ffc0000
[ 1318.102863][   T29] audit: type=1326 audit(2000001144.370:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f16b7dff9 code=0x7ffc0000
[ 1318.129822][   T46] prodikeys 0003:041E:2801.000C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0
[ 1318.154498][   T46] usb 2-1: USB disconnect, device number 20
[ 1318.875251][   T29] audit: type=1326 audit(2000001144.370:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f3f16b7dff9 code=0x7ffc0000
[ 1319.054034][   T29] audit: type=1326 audit(2000001144.400:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f16b7dff9 code=0x7ffc0000
[ 1319.130198][   T29] audit: type=1326 audit(2000001144.400:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.0.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f16b7dff9 code=0x7ffc0000
[ 1320.489546][T15110] loop2: detected capacity change from 0 to 512
[ 1320.604580][T15110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1320.653778][   T29] audit: type=1326 audit(2000001147.000:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526d7dff9 code=0x7ffc0000
[ 1320.739640][   T29] audit: type=1326 audit(2000001147.000:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526d7dff9 code=0x7ffc0000
[ 1320.802529][   T29] audit: type=1326 audit(2000001147.000:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1526d7dff9 code=0x7ffc0000
[ 1320.833828][T15110] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1320.885894][   T29] audit: type=1326 audit(2000001147.010:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1526d7dff9 code=0x7ffc0000
[ 1321.046233][T15116] loop3: detected capacity change from 0 to 40427
[ 1321.060019][T10678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1321.225865][T15116] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[ 1321.253681][T15116] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[ 1321.263779][    T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1321.817664][T15116] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1322.171032][T15132] loop4: detected capacity change from 0 to 512
[ 1322.201053][T15116] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[ 1322.213578][T15116] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1322.308076][T15132] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1322.529436][T15132] EXT4-fs (loop4): 1 truncate cleaned up
[ 1322.591919][T15132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1322.932794][T13374] syz-executor: attempt to access beyond end of device
[ 1322.932794][T13374] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[ 1322.992342][T13374] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1323.016330][T13374] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1323.024573][T13374] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1323.750029][T14231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1323.934808][    T8] usb 1-1: device descriptor read/all, error -71
[ 1324.423310][T15153] loop2: detected capacity change from 0 to 512
[ 1324.535297][T15153] EXT4-fs (loop2): corrupt root inode, run e2fsck
[ 1324.541839][T15153] EXT4-fs (loop2): mount failed
[ 1328.311618][T15194] fuse: Unknown parameter 'grou00000000000000000000'
[ 1329.775370][T15212] loop3: detected capacity change from 0 to 512
[ 1329.976583][T15212] EXT4-fs (loop3): corrupt root inode, run e2fsck
[ 1329.983925][T15212] EXT4-fs (loop3): mount failed
[ 1331.341063][T15201] loop4: detected capacity change from 0 to 40427
[ 1331.423712][T15201] F2FS-fs (loop4): Invalid SB checksum offset: 0
[ 1331.455303][T15201] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[ 1331.493609][T15201] F2FS-fs (loop4): Unrecognized mount option "lazytime" or missing value
[ 1332.023188][T15223] fuse: Unknown parameter 'grou00000000000000000000'
[ 1333.207822][T15235] loop4: detected capacity change from 0 to 128
[ 1333.264080][T15235] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1333.341845][T15239] loop3: detected capacity change from 0 to 512
[ 1333.410184][T15239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1333.423361][T15239] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1333.436106][T15239] ext4: Unknown parameter 'GPL'
[ 1333.443190][T15235] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1335.734822][T14231] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1335.990882][T13374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1336.187258][T15268] xt_hashlimit: size too large, truncated to 1048576
[ 1336.246865][T15267] fuse: Unknown parameter 'grou00000000000000000000'
[ 1337.984435][T15285] loop2: detected capacity change from 0 to 256
[ 1340.198141][T15296] loop4: detected capacity change from 0 to 256
[ 1340.670967][T15296] FAT-fs (loop4): Directory bread(block 64) failed
[ 1340.972738][T15296] FAT-fs (loop4): Directory bread(block 65) failed
[ 1341.015088][T15296] FAT-fs (loop4): Directory bread(block 66) failed
[ 1341.056286][T15296] FAT-fs (loop4): Directory bread(block 67) failed
[ 1341.062939][T15296] FAT-fs (loop4): Directory bread(block 68) failed
[ 1341.104001][T15296] FAT-fs (loop4): Directory bread(block 69) failed
[ 1341.110659][T15296] FAT-fs (loop4): Directory bread(block 70) failed
[ 1341.183610][T15296] FAT-fs (loop4): Directory bread(block 71) failed
[ 1341.190314][T15296] FAT-fs (loop4): Directory bread(block 72) failed
[ 1341.197067][T15296] FAT-fs (loop4): Directory bread(block 73) failed
[ 1342.991624][T15311] loop4: detected capacity change from 0 to 1024
[ 1343.002029][T15311] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled
[ 1343.170995][T15311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1347.288230][T15339] loop3: detected capacity change from 0 to 1024
[ 1347.333712][T15339] EXT4-fs: Ignoring removed orlov option
[ 1347.372038][T15339] EXT4-fs: Ignoring removed bh option
[ 1347.548961][T15339] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1347.635784][T15339] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled
[ 1347.966383][T15339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1348.905177][T13374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1349.182270][T15347] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1349.467618][T15347] batadv_slave_0: entered promiscuous mode
[ 1349.830228][T15352] loop3: detected capacity change from 0 to 512
[ 1349.872497][T15352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1349.886300][T15352] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1349.909268][T15357] loop2: detected capacity change from 0 to 512
[ 1349.931085][T15357] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1349.972980][T15357] EXT4-fs (loop2): 1 truncate cleaned up
[ 1349.980055][T15357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1350.269368][T14231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1350.313648][ T5290] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1350.503641][ T5290] usb 4-1: device descriptor read/64, error -71
[ 1350.763950][ T5290] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1350.953664][ T5290] usb 4-1: device descriptor read/64, error -71
[ 1351.012385][T10678] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /317/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[ 1351.057019][T10678] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[ 1351.090382][T10678] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /317/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[ 1351.170354][T10678] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[ 1351.221910][T10678] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /317/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[ 1351.236847][ T5290] usb usb4-port1: attempt power cycle
[ 1351.302233][T10678] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[ 1351.372029][T10678] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /317/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[ 1351.655985][ T5290] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1351.690176][T10678] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[ 1351.781238][ T5290] usb 4-1: device descriptor read/8, error -71
[ 1352.072111][T10678] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /317/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[ 1352.156794][T15371] ip6gre1: entered allmulticast mode
[ 1352.162130][T10678] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[ 1352.635699][ T5290] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1352.664672][ T5290] usb 4-1: device descriptor read/8, error -71
[ 1352.776876][ T5290] usb usb4-port1: unable to enumerate USB device
[ 1353.068832][T13374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1353.529172][T14749] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1357.098831][T15399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1357.109468][T15399] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1357.120358][T15399] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1357.130994][T15399] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1357.138705][T15399] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1357.146488][T15399] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1357.959493][T15397] chnl_net:caif_netlink_parms(): no params data found
[ 1358.799543][ T8809] Bluetooth: hci5: command 0x0406 tx timeout
[ 1359.104795][T15397] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1359.143725][T15397] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1359.151005][T15397] bridge_slave_0: entered allmulticast mode
[ 1359.171426][T15397] bridge_slave_0: entered promiscuous mode
[ 1359.198540][T15397] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1359.214158][T15397] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1359.232540][T15397] bridge_slave_1: entered allmulticast mode
[ 1359.250073][T15397] bridge_slave_1: entered promiscuous mode
[ 1359.256166][T11987] Bluetooth: hci1: command tx timeout
[ 1359.537206][T15397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1359.596872][T15397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1359.695748][T15397] team0: Port device team_slave_0 added
[ 1359.725882][T15397] team0: Port device team_slave_1 added
[ 1359.795645][T15397] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1359.804228][T15397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1359.831374][T15397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1359.845992][T15397] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1359.853082][T15397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1359.971311][T15397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1360.490133][T15397] hsr_slave_0: entered promiscuous mode
[ 1360.636621][T15397] hsr_slave_1: entered promiscuous mode
[ 1360.676766][T15397] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1360.727530][T15397] Cannot create hsr debugfs directory
[ 1361.293631][T11987] Bluetooth: hci1: command tx timeout
[ 1361.698427][T15397] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1362.026268][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.032742][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[ 1363.643223][T15397] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1363.654150][T11987] Bluetooth: hci1: command tx timeout
[ 1363.846516][T15397] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1364.793943][T15397] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1365.514356][ T5291] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1365.696689][T11987] Bluetooth: hci1: command tx timeout
[ 1365.824386][ T5291] usb 2-1: Using ep0 maxpacket: 16
[ 1365.855146][ T5291] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25
[ 1365.908272][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1365.928956][T15487] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1365.936499][T15487] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1365.991755][ T5291] usb 2-1: Product: syz
[ 1366.001952][ T5291] usb 2-1: Manufacturer: syz
[ 1366.021944][ T5291] usb 2-1: SerialNumber: syz
[ 1366.251062][ T5291] usb 2-1: config 0 descriptor??
[ 1366.271074][T15489] bridge_slave_1: left allmulticast mode
[ 1366.286467][T15489] bridge_slave_1: left promiscuous mode
[ 1366.292283][T15489] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1366.302496][T15489] bridge_slave_0: left allmulticast mode
[ 1366.308345][T15489] bridge_slave_0: left promiscuous mode
[ 1366.314732][T15489] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1367.021278][T15479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1367.457178][T15479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1367.537905][ T5291] usb 2-1: Found UVC 0.00 device syz (045e:0721)
[ 1367.544512][ T5291] usb 2-1: No valid video chain found.
[ 1367.553943][ T5291] ------------[ cut here ]------------
[ 1367.559467][ T5291] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[ 1367.566636][ T5291] WARNING: CPU: 1 PID: 5291 at kernel/locking/mutex.c:587 __mutex_lock+0xc41/0xd70
[ 1367.582294][ T5291] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1367.586325][ T5291] CPU: 1 UID: 0 PID: 5291 Comm: kworker/1:4 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0
[ 1367.596927][ T5291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1367.607601][ T5291] Workqueue: usb_hub_wq hub_event
[ 1367.612674][ T5291] RIP: 0010:__mutex_lock+0xc41/0xd70
[ 1367.618329][ T5291] Code: 0f b6 04 20 84 c0 0f 85 18 01 00 00 83 3d 36 20 49 04 00 75 19 90 48 c7 c7 20 b9 0a 8c 48 c7 c6 c0 b9 0a 8c e8 00 0f 81 f5 90 <0f> 0b 90 90 90 e9 bd f4 ff ff 90 0f 0b 90 e9 cf f8 ff ff 90 0f 0b
[ 1367.638171][ T5291] RSP: 0018:ffffc90004256980 EFLAGS: 00010246
[ 1367.644358][ T5291] RAX: fe4ca10364d57c00 RBX: 0000000000000000 RCX: 0000000000100000
[ 1367.652365][ T5291] RDX: ffffc90014002000 RSI: 0000000000023dca RDI: 0000000000023dcb
[ 1367.660417][ T5291] RBP: ffffc90004256ad0 R08: ffffffff8155d7b2 R09: 1ffff110170e519a
[ 1367.668846][ T5291] R10: dffffc0000000000 R11: ffffed10170e519b R12: dffffc0000000000
[ 1367.676900][ T5291] R13: ffff8880212bf518 R14: 0000000000000000 R15: ffff8880212bf4e8
[ 1367.684951][ T5291] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 1367.693939][ T5291] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1367.700547][ T5291] CR2: 00007fc3bd3addd3 CR3: 000000007e740000 CR4: 00000000003526f0
[ 1367.708734][ T5291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1367.717006][ T5291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1367.725103][ T5291] Call Trace:
[ 1367.728436][ T5291]  <TASK>
[ 1367.731409][ T5291]  ? __warn+0x168/0x4e0
[ 1367.735839][ T5291]  ? __mutex_lock+0xc41/0xd70
[ 1367.740589][ T5291]  ? report_bug+0x2b3/0x500
[ 1367.745283][ T5291]  ? __mutex_lock+0xc41/0xd70
[ 1367.750016][ T5291]  ? handle_bug+0x60/0x90
[ 1367.754456][ T5291]  ? exc_invalid_op+0x1a/0x50
[ 1367.759188][ T5291]  ? asm_exc_invalid_op+0x1a/0x20
[ 1367.764333][ T5291]  ? __warn_printk+0x292/0x360
[ 1367.769144][ T5291]  ? __mutex_lock+0xc41/0xd70
[ 1367.774028][ T5291]  ? uvc_status_unregister+0x2f/0xe0
[ 1367.779351][ T5291]  ? snprintf+0xda/0x120
[ 1367.783654][ T5291]  ? __pfx___mutex_lock+0x10/0x10
[ 1367.788703][ T5291]  ? uvc_scan_device+0x1593/0x1820
[ 1367.793875][ T5291]  ? __pfx_devm_gpiod_get_index+0x10/0x10
[ 1367.799624][ T5291]  uvc_status_unregister+0x2f/0xe0
[ 1367.804969][ T5291]  uvc_unregister_video+0xeb/0x1c0
[ 1367.810134][ T5291]  uvc_probe+0x9135/0x98c0
[ 1367.814762][ T5291]  ? mark_lock+0x9a/0x360
[ 1367.819181][ T5291]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 1367.825158][ T5291]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1367.831083][ T5291]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1367.837525][ T5291]  usb_probe_interface+0x645/0xbb0
[ 1367.842668][ T5291]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1367.848379][ T5291]  really_probe+0x2b8/0xad0
[ 1367.852907][ T5291]  __driver_probe_device+0x1a2/0x390
[ 1367.853665][ T6873] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1367.858287][ T5291]  driver_probe_device+0x50/0x430
[ 1367.870806][ T5291]  __device_attach_driver+0x2d6/0x530
[ 1367.876252][ T5291]  bus_for_each_drv+0x24e/0x2e0
[ 1367.881137][ T5291]  ? __pfx___device_attach_driver+0x10/0x10
[ 1367.887126][ T5291]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1367.892542][ T5291]  __device_attach+0x333/0x520
[ 1367.897401][ T5291]  ? __pfx_lock_release+0x10/0x10
[ 1367.902468][ T5291]  ? __pfx___device_attach+0x10/0x10
[ 1367.907989][ T5291]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1367.913244][ T5291]  bus_probe_device+0x189/0x260
[ 1367.918338][ T5291]  device_add+0x856/0xbf0
[ 1367.922711][ T5291]  usb_set_configuration+0x1976/0x1fb0
[ 1367.928268][ T5291]  usb_generic_driver_probe+0x88/0x140
[ 1367.933833][ T5291]  usb_probe_device+0x1b8/0x380
[ 1367.939144][ T5291]  ? __pfx_usb_probe_device+0x10/0x10
[ 1367.944595][ T5291]  really_probe+0x2b8/0xad0
[ 1367.949137][ T5291]  __driver_probe_device+0x1a2/0x390
[ 1367.954527][ T5291]  driver_probe_device+0x50/0x430
[ 1367.959968][ T5291]  __device_attach_driver+0x2d6/0x530
[ 1367.965448][ T5291]  bus_for_each_drv+0x24e/0x2e0
[ 1367.970329][ T5291]  ? __pfx___device_attach_driver+0x10/0x10
[ 1367.976619][ T5291]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1367.982171][ T5291]  __device_attach+0x333/0x520
[ 1367.987023][ T5291]  ? __pfx___device_attach+0x10/0x10
[ 1367.992382][ T5291]  bus_probe_device+0x189/0x260
[ 1367.997468][ T5291]  device_add+0x856/0xbf0
[ 1368.002399][ T5291]  usb_new_device+0x104a/0x19a0
[ 1368.007369][ T5291]  ? __pfx_usb_new_device+0x10/0x10
[ 1368.012796][ T5291]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1368.018434][ T5291]  ? lockdep_hardirqs_on+0x99/0x150
[ 1368.023751][ T5291]  hub_event+0x2d6d/0x5150
[ 1368.028448][ T5291]  ? __pfx_hub_event+0x10/0x10
[ 1368.033226][ T5291]  ? __pfx_lock_acquire+0x10/0x10
[ 1368.038303][ T5291]  ? preempt_schedule+0xe1/0xf0
[ 1368.043188][ T5291]  ? asan.module_dtor+0x1/0x20
[ 1368.048087][ T5291]  ? preempt_schedule_thunk+0x1a/0x30
[ 1368.053676][ T5291]  ? process_scheduled_works+0x976/0x1850
[ 1368.059435][ T5291]  process_scheduled_works+0xa63/0x1850
[ 1368.065071][ T5291]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1368.071094][ T5291]  ? assign_work+0x364/0x3d0
[ 1368.075833][ T5291]  worker_thread+0x870/0xd30
[ 1368.080465][ T5291]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1368.086534][ T5291]  ? __kthread_parkme+0x169/0x1d0
[ 1368.091601][ T5291]  ? __pfx_worker_thread+0x10/0x10
[ 1368.096944][ T5291]  kthread+0x2f0/0x390
[ 1368.101065][ T5291]  ? __pfx_worker_thread+0x10/0x10
[ 1368.106303][ T5291]  ? __pfx_kthread+0x10/0x10
[ 1368.111055][ T5291]  ret_from_fork+0x4b/0x80
[ 1368.115671][ T5291]  ? __pfx_kthread+0x10/0x10
[ 1368.120290][ T5291]  ret_from_fork_asm+0x1a/0x30
[ 1368.125151][ T5291]  </TASK>
[ 1368.128198][ T5291] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1368.135504][ T5291] CPU: 1 UID: 0 PID: 5291 Comm: kworker/1:4 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0
[ 1368.145753][ T5291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1368.155825][ T5291] Workqueue: usb_hub_wq hub_event
[ 1368.160883][ T5291] Call Trace:
[ 1368.164167][ T5291]  <TASK>
[ 1368.167098][ T5291]  dump_stack_lvl+0x241/0x360
[ 1368.171815][ T5291]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1368.177020][ T5291]  ? __pfx__printk+0x10/0x10
[ 1368.181646][ T5291]  ? vscnprintf+0x5d/0x90
[ 1368.185992][ T5291]  panic+0x349/0x880
[ 1368.189995][ T5291]  ? __warn+0x177/0x4e0
[ 1368.194163][ T5291]  ? __pfx_panic+0x10/0x10
[ 1368.198591][ T5291]  ? ret_from_fork_asm+0x1a/0x30
[ 1368.203546][ T5291]  __warn+0x34b/0x4e0
[ 1368.207538][ T5291]  ? __mutex_lock+0xc41/0xd70
[ 1368.212225][ T5291]  report_bug+0x2b3/0x500
[ 1368.216566][ T5291]  ? __mutex_lock+0xc41/0xd70
[ 1368.221247][ T5291]  handle_bug+0x60/0x90
[ 1368.225413][ T5291]  exc_invalid_op+0x1a/0x50
[ 1368.229924][ T5291]  asm_exc_invalid_op+0x1a/0x20
[ 1368.234782][ T5291] RIP: 0010:__mutex_lock+0xc41/0xd70
[ 1368.240086][ T5291] Code: 0f b6 04 20 84 c0 0f 85 18 01 00 00 83 3d 36 20 49 04 00 75 19 90 48 c7 c7 20 b9 0a 8c 48 c7 c6 c0 b9 0a 8c e8 00 0f 81 f5 90 <0f> 0b 90 90 90 e9 bd f4 ff ff 90 0f 0b 90 e9 cf f8 ff ff 90 0f 0b
[ 1368.259699][ T5291] RSP: 0018:ffffc90004256980 EFLAGS: 00010246
[ 1368.265771][ T5291] RAX: fe4ca10364d57c00 RBX: 0000000000000000 RCX: 0000000000100000
[ 1368.273836][ T5291] RDX: ffffc90014002000 RSI: 0000000000023dca RDI: 0000000000023dcb
[ 1368.281821][ T5291] RBP: ffffc90004256ad0 R08: ffffffff8155d7b2 R09: 1ffff110170e519a
[ 1368.289826][ T5291] R10: dffffc0000000000 R11: ffffed10170e519b R12: dffffc0000000000
[ 1368.297806][ T5291] R13: ffff8880212bf518 R14: 0000000000000000 R15: ffff8880212bf4e8
[ 1368.305790][ T5291]  ? __warn_printk+0x292/0x360
[ 1368.310577][ T5291]  ? uvc_status_unregister+0x2f/0xe0
[ 1368.315881][ T5291]  ? snprintf+0xda/0x120
[ 1368.320139][ T5291]  ? __pfx___mutex_lock+0x10/0x10
[ 1368.325174][ T5291]  ? uvc_scan_device+0x1593/0x1820
[ 1368.330289][ T5291]  ? __pfx_devm_gpiod_get_index+0x10/0x10
[ 1368.336056][ T5291]  uvc_status_unregister+0x2f/0xe0
[ 1368.341176][ T5291]  uvc_unregister_video+0xeb/0x1c0
[ 1368.346340][ T5291]  uvc_probe+0x9135/0x98c0
[ 1368.350771][ T5291]  ? mark_lock+0x9a/0x360
[ 1368.355117][ T5291]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 1368.361029][ T5291]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1368.366936][ T5291]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1368.373293][ T5291]  usb_probe_interface+0x645/0xbb0
[ 1368.378420][ T5291]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1368.384059][ T5291]  really_probe+0x2b8/0xad0
[ 1368.388573][ T5291]  __driver_probe_device+0x1a2/0x390
[ 1368.393868][ T5291]  driver_probe_device+0x50/0x430
[ 1368.398909][ T5291]  __device_attach_driver+0x2d6/0x530
[ 1368.404300][ T5291]  bus_for_each_drv+0x24e/0x2e0
[ 1368.409162][ T5291]  ? __pfx___device_attach_driver+0x10/0x10
[ 1368.415069][ T5291]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1368.420482][ T5291]  __device_attach+0x333/0x520
[ 1368.425255][ T5291]  ? __pfx_lock_release+0x10/0x10
[ 1368.430305][ T5291]  ? __pfx___device_attach+0x10/0x10
[ 1368.435596][ T5291]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1368.440818][ T5291]  bus_probe_device+0x189/0x260
[ 1368.445706][ T5291]  device_add+0x856/0xbf0
[ 1368.450039][ T5291]  usb_set_configuration+0x1976/0x1fb0
[ 1368.455513][ T5291]  usb_generic_driver_probe+0x88/0x140
[ 1368.460982][ T5291]  usb_probe_device+0x1b8/0x380
[ 1368.465843][ T5291]  ? __pfx_usb_probe_device+0x10/0x10
[ 1368.471219][ T5291]  really_probe+0x2b8/0xad0
[ 1368.475756][ T5291]  __driver_probe_device+0x1a2/0x390
[ 1368.481055][ T5291]  driver_probe_device+0x50/0x430
[ 1368.486090][ T5291]  __device_attach_driver+0x2d6/0x530
[ 1368.491473][ T5291]  bus_for_each_drv+0x24e/0x2e0
[ 1368.496341][ T5291]  ? __pfx___device_attach_driver+0x10/0x10
[ 1368.502243][ T5291]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1368.507636][ T5291]  __device_attach+0x333/0x520
[ 1368.512411][ T5291]  ? __pfx___device_attach+0x10/0x10
[ 1368.517705][ T5291]  bus_probe_device+0x189/0x260
[ 1368.522573][ T5291]  device_add+0x856/0xbf0
[ 1368.526907][ T5291]  usb_new_device+0x104a/0x19a0
[ 1368.531785][ T5291]  ? __pfx_usb_new_device+0x10/0x10
[ 1368.537024][ T5291]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1368.542237][ T5291]  ? lockdep_hardirqs_on+0x99/0x150
[ 1368.547446][ T5291]  hub_event+0x2d6d/0x5150
[ 1368.551911][ T5291]  ? __pfx_hub_event+0x10/0x10
[ 1368.556687][ T5291]  ? __pfx_lock_acquire+0x10/0x10
[ 1368.561718][ T5291]  ? preempt_schedule+0xe1/0xf0
[ 1368.566579][ T5291]  ? asan.module_dtor+0x1/0x20
[ 1368.571352][ T5291]  ? preempt_schedule_thunk+0x1a/0x30
[ 1368.576740][ T5291]  ? process_scheduled_works+0x976/0x1850
[ 1368.582481][ T5291]  process_scheduled_works+0xa63/0x1850
[ 1368.588051][ T5291]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1368.594044][ T5291]  ? assign_work+0x364/0x3d0
[ 1368.598646][ T5291]  worker_thread+0x870/0xd30
[ 1368.603251][ T5291]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1368.609162][ T5291]  ? __kthread_parkme+0x169/0x1d0
[ 1368.614226][ T5291]  ? __pfx_worker_thread+0x10/0x10
[ 1368.619450][ T5291]  kthread+0x2f0/0x390
[ 1368.623545][ T5291]  ? __pfx_worker_thread+0x10/0x10
[ 1368.628680][ T5291]  ? __pfx_kthread+0x10/0x10
[ 1368.633282][ T5291]  ret_from_fork+0x4b/0x80
[ 1368.637708][ T5291]  ? __pfx_kthread+0x10/0x10
[ 1368.642316][ T5291]  ret_from_fork_asm+0x1a/0x30
[ 1368.647106][ T5291]  </TASK>
[ 1368.650514][ T5291] Kernel Offset: disabled
[ 1368.654842][ T5291] Rebooting in 86400 seconds..