last executing test programs:

19.35149212s ago: executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_io_uring_setup(0x40cb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000880)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x1}})
listen(0xffffffffffffffff, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000840)='oom_adj\x00')
r4 = epoll_create1(0x0)
close(r3)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xe2400, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x30000004})
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@tracing}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0)
r6 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1ff, 0x142)
write$midi(r6, &(0x7f0000000000)="9172", 0x2)
write$midi(r6, &(0x7f00000001c0)="9d", 0x3001)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0xfd, 0xeffd, 0x2, @private2, @loopback, 0x80, 0x10, 0x32}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r8 = io_uring_setup(0x168e, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap(&(0x7f0000b70000/0x4000)=nil, 0x4000, 0x0, 0x10, r7, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002a00)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000012c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="2000040000006f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

13.525394269s ago: executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00'}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
socket(0x0, 0x0, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfd, 0x11ff, &(0x7f0000003300)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x5)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="980000001800010a0000000000000000"], 0x98}}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000400)="e4")

12.52495988s ago: executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002a80)=""/4081, 0xff1)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffc000/0x4000)=nil)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
memfd_create(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r3 = open(&(0x7f0000000380)='./file2\x00', 0x14507e, 0x0)
pwrite64(r3, &(0x7f0000000000)='+', 0xc0000000, 0x7000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async)
read$msr(r0, &(0x7f0000002a80)=""/4081, 0xff1) (async)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x2000)=nil) (async)
prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffc000/0x4000)=nil) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
memfd_create(0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async)
open(&(0x7f0000000380)='./file2\x00', 0x14507e, 0x0) (async)
pwrite64(r3, &(0x7f0000000000)='+', 0xc0000000, 0x7000000) (async)

10.352480961s ago: executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x1b, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x103}, 0x90)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000300)={[{@numtail}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@shortname_win95}, {@numtail}, {@shortname_mixed}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_mixed}, {@shortname_winnt}]}, 0x4, 0x362, &(0x7f0000000480)="$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")
open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYRESDEC], 0x12, 0xa10, &(0x7f00000001c0)="$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")
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4080aea2, &(0x7f00000000c0))

9.824178205s ago: executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2004001, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRES64=r1, @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYRESDEC], 0x1, 0x2c8, &(0x7f0000000180)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x125f, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0045520, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={[{@grpquota}, {@filestreams}, {@logbufs={'logbufs', 0x3d, 0x3}}]}, 0x1, 0xb862, &(0x7f0000017140)="$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")
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1f, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x6, r3}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000001040)="9c", 0x0}, 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$mixer(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r6 = dup3(r4, r5, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000340), 0xfb, 0x50f9, &(0x7f0000005140)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
setuid(0xee00)
syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00')
clock_gettime(0x0, &(0x7f0000000000)={<r8=>0x0, <r9=>0x0})
utimensat(r2, 0x0, &(0x7f0000000080)={{0x77359400}, {r8, r9/1000+10000}}, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x4010942a, 0x0)

8.990411715s ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x790, 0xfe80, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

5.517412986s ago: executing program 2:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4006, 0x200000f, 0x40a2012, r0, 0x0)

5.510860136s ago: executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x4004510f, &(0x7f0000001b80))

5.465835995s ago: executing program 4:
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x20d, &(0x7f0000000200)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x0, 0x7}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x8, 0xfff, 0x407}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x8, 0xfff, 0x407}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0xfffffffe) (async)
listen(r1, 0xfffffffe)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x4004662b, &(0x7f0000000780))
syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045f80034000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c02000090780000080a00002a62bd45"], 0x0)
socket$inet6(0xa, 0x200000000003, 0x87) (async)
socket$inet6(0xa, 0x200000000003, 0x87)
syz_emit_ethernet(0x1443, &(0x7f0000001880)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "269956", 0x140d, 0x2f, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@fragment={0x6, 0x0, 0x1, 0x0, 0x0, 0x4, 0x68}, @routing={0x33, 0x12, 0x2, 0x5, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xfffffff7}]}, @dstopts={0x27, 0x21, '\x00', [@generic={0x7}, @generic={0x52, 0xbe, "47733afe3bd32422e4234904f2108dce9044a468b8d014c400653202c471db7c2b8f0c0c30d4e2144e80fb260c77ff7f8d7db5959d168b70165ad9b6f3a62af2a7677b74c5fed1cd95a6ef00a3152658dab9c78b9da6f2636c37b60467d3acaaefc1b1f46da08937d4bada7d817ca9b6b0995b1ac19b4f721018a3900306b6639d9bf30d708e81cfe4cdd0cbff3395316cdb8ba220667299aa23572f5fba6d9d8ce682697aae99a408bbf53ddd38c9aba47e083952edb49fb1af7533aa71"}, @pad1, @calipso={0x7, 0x38, {0x1, 0xc, 0xff, 0x1, [0x9, 0x4, 0x6, 0x0, 0x9, 0x0]}}, @pad1, @jumbo={0xc2, 0x4, 0x1}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xdf, 0x1, [], "b7a849466ae788f6b1c7dbf1cb4e3d65027ab7cf27df83ce768821ef98ab20da4ab6cd46e2665b43f45d5fa9a800b4640af537cf8ca2c13098c2c20878c9f1768edb47af0a1636b52100143adb3c7e617a8a19d5a392e5068ca9be83a99ce891e4758b112dc8b903967750453910c820f045dd89c9907be70e9b5e1fbe972640668015c4ad79b96eeb78a1072238252b1877427dfec0f97499d31504ab57d9269df6fe3912fe8df9fc2b87430bd9f88d548f22d1be913eeffc20c7552bff38d5246d3ba542b638fead9ccd001d72441aec000ccc5ce3462cebf3f9c71a789c"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x800, 0x8], "9d7a4ce448c1fb6ca8dbb707d70551b1ead3fb87d84fe5e0f010d8cd367114af2e026f5e83c4318c5a45a01ac55843977870f89c6ad2d4a44d46c0dfab4b46c22470250d0b846da940bd773dabb2b8698d818073f01cef79a4946310b0ba7e487da7d4a5f923b0b860b55d3df787b52e0a7fb94c523ae08dfa9c469fd52d2eec065ae92bc1649fd42d201ac09e1811770e1a125d9e4c14dcd50497a034c4d49224de1ecbfaca9fa1a0dd75144b9366e9743ce93c5c"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0x7], "7e9c700bdb9993f0e5098b1753cfdc8eb0a28363ba0e37275c8e8d9b40b017f7eb268ef9865427642d490cc998ebb63d8aa3066bb9e98dfd9558fbcae01684f27bb2158fed3f04a6fac96ba789b5c6e59445cd35ea7f9e5db81f8308ea7178c0949f2f4cd35b23f4625fd3bfae"}, {0x8, 0x88be, 0x2, {{0x8, 0x1, 0x20, 0x1, 0x1, 0x3, 0x1, 0x86}, 0x1, {0xfff}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x8, 0x0, 0x1, 0x3, 0x1, 0x5}, 0x2, {0x0, 0x200, 0x2, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2000)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x15) (async)
sendfile(r3, r4, 0x0, 0x15)
creat(&(0x7f0000000100)='./bus\x00', 0x0) (async)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r5 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
lseek(r5, 0x7ffffb, 0x0)
write$vhost_msg(r5, &(0x7f0000000600)={0x1, {0x0, 0x0, 0x0}}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0}, 0x90)
fspick(0xffffffffffffff9c, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
truncate(0x0, 0x0) (async)
truncate(0x0, 0x0)

5.115695417s ago: executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000001c0))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r1, 0x4b44, 0x10000000000004)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x5}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, r8, 0x9, 0x0, 0x0, {}, [{{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x5c}}, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000840)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="6e6c733d6d6163637972696c6c69632c6e6f626172726965722c756d61736b3d30303030303030303030303030303030303030303031302c747970653ddafd7c7f2c666f7263652c756d61736b3d30303030303030303030303030303030303030363734352c008a9f72fbdfa5042d7c42afa1b6db69f992761108b5a066b80d6c55682ee08b2c8b59ae1719174c5a26a268d5617d5585cf4748c9a43e754c6def010484ecc0db6985954338cfd318e19d7e14220d1182eb00bedad53c8ce62cd619e187e09debab4cca3a6daf5bf00af5daffdd744341fdc53b241f1b4351bbcb9802ef2a4b8219d518"], 0x3, 0x6a4, &(0x7f0000000100)="$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")
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f00000007c0)={0x8, 0x0, 0x0, {0x2, 0x3, 0x2, 0x401}})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000000)=0xc)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
sendmsg$nl_route_sched(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=@deltaction={0x16c, 0x31, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5db5}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3f}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

4.720798917s ago: executing program 3:
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="14"], 0x18}, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000540)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xa, 0x0, 0x0, 0x0, 0x0})
io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x104, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe169}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}]}]}]}, 0x104}}, 0x4008010)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44008080)
io_uring_enter(r2, 0x4ac6, 0x0, 0x0, 0x0, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
r9 = dup3(0xffffffffffffffff, r8, 0x0)
preadv(r9, &(0x7f0000000300)=[{&(0x7f0000000000)=""/24, 0x18}, {0x0}], 0x1000000000000374, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000040)={&(0x7f0000001b00), 0x2, 0x400})

4.691003655s ago: executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000004000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000600)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x44401, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0xc020660b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6})
write$FUSE_INIT(r3, 0x0, 0x0)
dup3(r0, r1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB='\x00'], 0x4c}}, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)

4.675102212s ago: executing program 4:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='xen_mc_entry\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000340)={r4, &(0x7f0000000400), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000080)=0x13)
ioctl$TCSETA(r5, 0x5406, &(0x7f0000000200)={0xff02, 0x0, 0x0, 0x9, 0x0, "5f730000a9003f00"})
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0x1a)

4.650247254s ago: executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r3 = accept$alg(r2, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000002e40)=[{0x0, 0x0, &(0x7f00000003c0)}], 0x1, 0x49050)
sendfile(r3, r1, 0x0, 0x10000a006)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0)
setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000001780)=0x1, 0x4)
recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/50, 0x32}}], 0x1, 0x0, 0x0)
r5 = add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0x29, 0xfffffffffffffffa)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000300)={@id={0x2, 0x0, @b}, 0x40, r5, '\x00', @a})

4.21697274s ago: executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x6c, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@index_off}, {@nfs_export_on}]})

4.010894949s ago: executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000200)=0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe0, 0x3}, {0xfff1, 0x2}, {0x2, 0xfff3}}, [@filter_kind_options=@f_flow={{}, {0x0, 0x2, [@TCA_FLOW_POLICE={0x0, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0x0, 0x8, 0x7}, @TCA_POLICE_RATE={0x0, 0x2, [0xef0e, 0x3, 0x1, 0x80000001, 0x2, 0x7ff, 0x3, 0x4, 0x0, 0x8, 0x401, 0xaa25, 0x3, 0x2, 0x401, 0x9b0c, 0xfffffff7, 0xd274, 0x1, 0x5, 0x7, 0x0, 0x8, 0x2, 0x81, 0xa99, 0x6, 0x36, 0xfffffffa, 0x8001, 0x9, 0x5, 0xffffff7f, 0x4, 0x4fdfc1ed, 0xbb, 0x800, 0x5, 0x464, 0x20, 0x401, 0x8ce, 0x2, 0x80000000, 0x9, 0x200, 0x5, 0x3f, 0x7f, 0xfffffff9, 0x3f, 0xba7a, 0x10001, 0x8000, 0x9, 0x334a4442, 0x0, 0x6e67, 0x8, 0x5, 0xca56, 0x3, 0x4, 0x4616cf7b, 0x1, 0x2, 0xd5db, 0x7fffffff, 0x12, 0x0, 0x10001, 0x80000001, 0x3, 0x6, 0xbdbe, 0x4, 0x6, 0x2, 0x1000, 0x1f, 0x1, 0x5, 0x1, 0x5, 0x1, 0x6, 0x2, 0x40, 0xa1cf, 0x8000, 0x4, 0x923, 0x32b16775, 0x49, 0x3, 0x4, 0x5, 0x3074, 0xfff, 0x7, 0x4, 0x9, 0x0, 0x1, 0x7ff, 0x72f, 0xe39, 0x2, 0xffffffff, 0x80, 0x7, 0x3, 0x0, 0x40000, 0x101, 0x7, 0x1, 0x6, 0xfffffffd, 0xfffffffb, 0x2, 0xfffffffc, 0x101, 0xdae, 0x5, 0x1, 0x80000001, 0x0, 0x2, 0x7, 0x401, 0x400, 0x4, 0x2, 0x5, 0x3, 0xad, 0x7, 0x3ff, 0x6, 0x1a, 0x8, 0x1, 0x5, 0x10000000, 0x6, 0x3, 0x6450d2e4, 0xfff, 0x6, 0x6, 0x0, 0xfffffffe, 0x6, 0x2, 0x1, 0x7fff, 0x2, 0x1, 0x96, 0x5, 0x9, 0x9, 0xbc, 0x1, 0x1, 0x25, 0x81, 0x5, 0x6, 0x5, 0xffffffff, 0x799, 0x80000001, 0x6, 0x4, 0x8, 0x9, 0x198f, 0x3, 0xf1, 0xba09, 0x9, 0x1, 0x0, 0x1f, 0x20, 0x5, 0x7ff, 0x6, 0x4, 0x401, 0x81, 0x7, 0x8, 0x0, 0x1f, 0x1f, 0x5, 0x0, 0x4, 0x3, 0xfffffffe, 0x36ae, 0xd01, 0x0, 0x6, 0x7, 0x9, 0x9, 0x0, 0x8, 0x4d19, 0x80000000, 0x0, 0xa88, 0xff800000, 0x2, 0x1, 0x2, 0x8, 0x400, 0x9, 0x0, 0x8, 0x20, 0x3, 0x1f0, 0x3f, 0x2, 0x9, 0x9, 0x101, 0x7f, 0x9, 0x80, 0x2, 0x390f, 0x2, 0x8, 0x8, 0x2, 0x5, 0xffffff00, 0x80000001, 0xfffffff9, 0xfffff800, 0x0, 0x1, 0x3cbd, 0x8000, 0x1f, 0x1ff, 0x8, 0x3, 0x5]}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x9a26}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0xffff1258, 0x8, 0x0, 0xff, 0xfffff801, 0x6, 0x7, 0x5, 0x9, 0x935d, 0x3f, 0xffffffe1, 0x101, 0x759, 0x2, 0x101, 0x5, 0x0, 0xfffff001, 0x7, 0x0, 0x9, 0x3ff, 0x8, 0x7, 0x80000000, 0x5, 0x9dfb, 0xfffffeba, 0xff, 0x3, 0x6, 0x6, 0x80000000, 0x80000001, 0x80000000, 0x187, 0x1, 0x81, 0x1a, 0x7f, 0x10000, 0x2, 0x9ede, 0x1, 0x7, 0x800, 0x7fff, 0x8, 0x9, 0x8, 0x0, 0x4, 0xbe3f, 0x80000000, 0x2, 0x1, 0xfffffffe, 0x7, 0x9, 0x800, 0x9, 0x80000001, 0x9, 0x7, 0xfffffffc, 0x8, 0x8, 0x5f9c, 0x2, 0x0, 0x9, 0x1a0, 0x9, 0x3, 0xee, 0x1f, 0x40, 0xa32, 0x0, 0xfffffe01, 0xffffffff, 0x7ab, 0x200, 0x7, 0x9, 0x5, 0x80000000, 0x1a09, 0x4, 0x7, 0x6, 0x181, 0xfffffd09, 0x3f, 0x3, 0x4, 0x0, 0xffff, 0x1f, 0xfffffffb, 0x759, 0x4, 0x1, 0x10000, 0x9, 0x8, 0xb14, 0x4, 0x7f, 0x6, 0x0, 0x2b47, 0xfffffc00, 0x8f, 0x8001, 0x6, 0x2, 0x9, 0x200, 0x0, 0x1, 0x2, 0x80000001, 0x3, 0x6, 0x11, 0x2, 0x81, 0xfffffffb, 0x0, 0xdd, 0xc1a, 0x1f, 0x86, 0x41, 0x280, 0x5, 0x7, 0x400, 0x8, 0xfff, 0x0, 0x3, 0xffffffff, 0x3, 0x718, 0x1f, 0x0, 0x5, 0x8, 0x1000, 0x5e, 0x8, 0x4, 0x1, 0x2, 0x7fffffff, 0x91e, 0x2, 0x7, 0x80, 0x4, 0x8, 0x52, 0x8, 0x9, 0x15, 0x5, 0x8, 0xffff, 0x401, 0x9, 0xf6b, 0x400, 0x6, 0x3ff, 0x0, 0x1000, 0x1, 0x1, 0x9, 0x1, 0x7fffffff, 0xfffffff9, 0x579, 0x67, 0x7, 0x7, 0x2f, 0x0, 0x2, 0x80000000, 0x6, 0x2, 0x8, 0x5, 0x5, 0x100, 0x9, 0x4, 0x4ee, 0x6, 0xfff, 0x0, 0x1, 0x1, 0xfffffffc, 0x2, 0x3c, 0x8, 0x5, 0x3, 0x9, 0xffff, 0x3, 0xffffffff, 0x5, 0x2400000, 0x0, 0x101, 0x8, 0x45c, 0x7f, 0x6e4, 0x2, 0x2, 0x7, 0xb60, 0x3, 0x4, 0x40, 0x36, 0x873, 0x2, 0x3, 0x4, 0x7, 0x139a372e, 0xa5f, 0x800, 0x7, 0xfffff801, 0x5, 0xd4, 0x2, 0xa403, 0x2c, 0x3ff, 0x9, 0x2, 0x39, 0x8, 0x1, 0x5, 0xfffffffa]}, @TCA_POLICE_RATE={0x0, 0x2, [0x0, 0x80000000, 0x9, 0x6, 0x0, 0x30, 0x215b, 0x6, 0xfffffffd, 0x0, 0x6, 0x5, 0x3, 0x0, 0x542e, 0xc5b, 0x401, 0x3, 0x3, 0xfffff5db, 0x2, 0x4f, 0x7fff, 0x1f, 0x3, 0x1, 0x8, 0x0, 0xffff4e7a, 0x8, 0x5, 0x7, 0x20, 0x10001, 0x5, 0x401, 0x5, 0x0, 0xfffffff9, 0x200, 0xa3, 0xffffffff, 0x3ff, 0x1ceba125, 0x5, 0x9, 0x7, 0x101, 0x8, 0x3, 0xd, 0x3, 0x7, 0x401, 0x1, 0x9c, 0x9, 0x8, 0x5, 0x7, 0x3, 0x81, 0x57, 0x5, 0x80000001, 0x5, 0x29a4db1a, 0x100, 0xb234, 0xfffffff8, 0x7fffffff, 0x5, 0x7, 0xe2a, 0x100, 0x19c, 0x7, 0x81, 0xb80, 0x6, 0x0, 0x4, 0x80000001, 0x10001, 0xffffffff, 0x1f, 0x7ff, 0x1000, 0x4, 0x80000001, 0x7, 0x3, 0x3ff, 0x1, 0x3f, 0x9, 0x1, 0x24fe, 0x9, 0x9, 0xa60b, 0x9, 0x40, 0x4, 0xffffffff, 0xffffffff, 0x7, 0x1ff, 0x7, 0x18000000, 0x8, 0x0, 0xc, 0x3ff, 0x6, 0x2, 0x10001, 0x4, 0x3, 0x5, 0x0, 0xfff, 0xff, 0xffff, 0xf71e, 0x9, 0xb45, 0x3, 0x9, 0x8, 0x10000, 0x2, 0x101, 0x7, 0x2, 0x2, 0x3, 0x81, 0x401, 0x9, 0x2, 0x2, 0xfff, 0x6, 0x1, 0x2, 0x80000000, 0x2, 0x800, 0x81, 0x9, 0x8, 0x1, 0x5, 0x80, 0x80000000, 0x100, 0x5, 0x6, 0x71, 0x1755ecb8, 0x9, 0x81, 0xde, 0x7, 0x0, 0x80, 0x7, 0x71, 0x1, 0x6, 0x5, 0x7fff, 0x9, 0xfffff801, 0x7, 0x3, 0x3, 0x48, 0x500, 0x5, 0x8001, 0xffff0000, 0x2, 0x5, 0x4, 0x400, 0x1, 0x7, 0x7f, 0x9, 0x3, 0x8, 0x7fffffff, 0x1, 0x0, 0x4, 0x9, 0x9, 0x1, 0x3, 0x5, 0x4, 0x0, 0x7, 0x9e52, 0x101, 0x5, 0x8, 0x7, 0x0, 0x401, 0x9, 0xb89a800d, 0x3, 0x401, 0x2, 0x8, 0x2, 0x2, 0x7, 0x44, 0x3, 0x2, 0x4, 0xfffffffc, 0x9, 0x0, 0x7, 0x7, 0xffffffd6, 0x79, 0x7, 0x7, 0x9, 0x4, 0x100, 0x1, 0xde2, 0x9, 0x80000001, 0x6, 0x6, 0x800, 0x8, 0x8, 0x4, 0x4, 0x7, 0x9, 0x6000, 0x22b7, 0x3, 0x80, 0x2, 0xfffffff7]}, @TCA_POLICE_RATE64={0x0, 0x8, 0x400}, @TCA_POLICE_AVRATE={0x0, 0x4, 0xfff}]}, @TCA_FLOW_RSHIFT={0x0, 0x4, 0x1000}, @TCA_FLOW_MODE={0x0, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x0, 0x4, 0x3}, @TCA_FLOW_MODE, @TCA_FLOW_BASECLASS={0x0, 0x3, {0xe, 0x10}}, @TCA_FLOW_POLICE={0x0, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x0, 0x5, 0x243c}, @TCA_POLICE_RATE64={0x0, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x0, 0x1, {0x3, 0x0, 0x0, 0x6, 0x3, {0x1, 0x0, 0x7, 0x5cc0, 0xd04a, 0x7}, {0x1, 0x1, 0xf5, 0x2, 0x9, 0x3}, 0x6be, 0x7, 0x3}}]}]}}, @TCA_CHAIN={0x0, 0xb, 0x10001}, @TCA_RATE={0x0, 0x5, {0x3f, 0xfc}}, @TCA_RATE={0x0, 0x5, {0x1f, 0x80}}]}, 0x50}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x108)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000100), 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1b, &(0x7f0000000800), 0x4)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000000)={0x7fffffff, 0x3})
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @remote}, @private2}}}}}}, 0x0)

3.810389177s ago: executing program 3:
r0 = socket$unix(0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3b320660"], 0x20000600}, 0x1, 0x0, 0x0, 0xc007}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@broadcast, @multicast1}, &(0x7f00000002c0)=0xc)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1d8, 0x0, 0x1d8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xfd, 0x9}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@icmp={{0x28}, {0x11, 'h/'}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00', 0x32, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', <r4=>0x0})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001540)=ANY=[@ANYBLOB="03eb240721cde8c800"/31, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000020110000000416e2b5536e78d3645ab5a7cee3bfd027c778704e905a6e96dd59ce4b5b93cf70e13c27ba5d3aebab8da74e792c789694391e923f67c117c330c7cc04d88eb4"], 0x80}}, 0x8000)
r5 = socket(0x1, 0x803, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0, 0x679, &(0x7f0000000cc0)="$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")
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
connect$packet(r7, &(0x7f0000000400)={0x11, 0xd, r4, 0x1, 0x9, 0x6, @broadcast}, 0x14)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000001980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001940)={&(0x7f00000001c0)={0x1060, 0x1, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "a0051f29d1b3366c633cc97ca950090340706d253166948a4dc790ad205a951a", "68e5af54ab21a8b16b08dcab26e618516f34f3e013f9b7631e13b7e67b2fc46e", [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x0, 0x400}}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x0, 0x100}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "153c1d86c71ed9660d8debe04c23211bd6ae881e7e681bd961876f3dd77ab97e", "dfa061941b646d1c5d19ebc445098f86db3b41d701af751a0a5de4a2400f47ae", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x0, 0x1}}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x2}}, {}, {}, {}, {0x0, 0x0, {0x2}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "273e9bbab0b0f7caf58a45373efa9e417abbc0bcd03f4ce90f053354e80f0c52", "cd899c7601d079bf019bbd204295db3d55fdd59c90fe6109613a7809d10999d7", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x3}}, {}, {}, {}, {}, {0x0, 0x0, {0x0, 0x80}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "8ad45a3846ee42e45819fd69f7584f5e8913b7ca439f37c1e71f40aff8f3847a", "f8de7f90f69e5dfef0cf3c7fc7c6f6b270f25e5dcc664dcf90f87219ab4cb5ec", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x3}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "ea721eecfacb82b2b49724bf47d3b3e3dd2176bc9ef04ff952dda354f5f3a4f1", "1c16d795b0a3ff846db7674d64f33310a3aea12cc915371681f486ec8190d116", [{}, {0x0, 0x0, {0x0, 0xcede}}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x1}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "7e0d306db0e2fd7110e70414ce109e565b1ac7fd7ac4d3dfdc8386b15662b48b", "11bde4b2ee7a915f46b37a208c3faa9bdb3acdff8cddbbb25c986f9b0461e4a7", [{}, {}, {}, {}, {0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x3}}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x100}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "542fdfa0a2fc976d20cf14291962befd675007d2029317c06169a0344b381aab", "b3cb648475310ac3314be0e108f4e9ca58f1220067a039b8be22681219cb2fe8", [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x2}}]}}}]}, 0x1060}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000014c0), 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000001)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0)
socket$unix(0x1, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000854600000000fb74ff0100000000", @ANYRES32, @ANYBLOB="0100000000000000806e6400000000000000e3467686fc6d40b539457604a655f415192389b629aa2693b8b5978ffee0f73ab3f938c7b2eac55863f118506cca406312166987fc3e8f19a872be7bc9f5cb27ad890c25e822943de7f736d5c6b63b6eacb73c535ae90d0a1bf70198f9f27db9ad7a120d1b71a14a3bfac6a9fa00"/141], 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)=@ipv6_delroute={0xe4, 0x19, 0x200, 0x70bd2d, 0x25dfdbfc, {0xa, 0x20, 0x80, 0x3, 0xfd, 0x3, 0xfd, 0x2, 0x1400}, [@RTA_METRICS={0x9f, 0x8, 0x0, 0x1, "deed07a5bf80f9f05487d2faefbf267c4cd7736bc53b8db72d7c72b30ad21b1df245df3bead222119cd964c78187ab16ea286541c28e8758396096b81c26f9db4108fa08929e0c401eeed4a6e07b7fb31ab2e5c00d234d9c9eb57f0d5adda15114f0a63841057b26f2242af149bfd5455ac2d8477cdb8ad53330dfd8a57c8fe78dce9f9a3cc7ff7116ca8522dd46e3ffc3ab91ed2cb23e3b8d1c3f"}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xcf0}}, @RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_IIF={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4080}, 0x20008004)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x3}, @device_b, @broadcast}}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40040)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r12, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="030000a0010000000200008003000000f88e7fb317ea6117"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r14=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x78, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r14}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x78}}, 0x2)

3.704984754s ago: executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2014000, &(0x7f00000005c0)={[{}, {@rodir}, {@fat=@usefree}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@numtail}, {@numtail}, {@shortname_mixed}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x3}}, {@shortname_win95}, {@rodir}]}, 0x26, 0x336, &(0x7f00000001c0)="$eJzs3T1sW9UXAPDjviROI/VvD3+pgsmwIaGqCWKAKVFVpIoMUGTxtWDRlI/YVIqFpTDE9QJiBLEgwcTWAcbOiAEhNgZWioQKiIVulVrxkP1e7OeP0BThlI/fb4iOzj3H976Xq/glSm5eWo/tC4tx8caN67G8XIqF9TPrcbMU1TgWSWQuBwDwb3IzTePXNHPn6vdX9qOlOa8LAJifwfv/KydGifK9XA0AcBQO+f3/UzOzl+a2LABgjqbe/x8cG574Mf/C8HcCAIB/rmeef+HJjc2I87XackTrnU69U4/HR+MbF+O1aMZWnI5K3I7IHhSyp4X+xyfObZ49Xev7sRr1fkenHtHqdurZk8JGMugvx2pUopr3p8P+pN+/OuivRcTl7mD+aJU69cVYyef/biW2Yi0q8f+p/ohzm2fXavkL1Fv7/d2IXizvX0R//aeiEt+8HJeiGRei3zta/95qrXYm3Rzr71wpD+oAAAAAAAAAAAAAAAAAAAAAAGAeTtWGqsPzb9JWt/P2+cmC6tj5OPVsOD8fqJedD5SW90/neTeZPB9o/HyeTn0hjt3TKwcAAAAAAAAAAAAAAAAAAIC/j/buUjSaza2d9u5b28WgW8i88dWnXxyPyZrXk1EmFrKXG6vJc1HoSmLYng7b02SsJg+SiFHxlavDFRdrysOrmGrvB+WpoVK+pkazeeKBHz6a1fXbKJPE1G0ZD0r5/IWh1v+y1B90HRys3aHmWpqmB7XvfTjdFaWIhalP3F8RfHn91fseaZ98dJD5PD/04aGHK89e++CTn7cbzchvTbO5tNO+nf7puZLC/inl97k0YyfMDnqjTG+nvdtIvv3lufvf+3qiOJm9f9Ji5s2D5/psMrOUBf1lHuZKF2ds/tnBi7eGu/fub+bJj9cbV/e+/+mwXYUvEg7qAAAAAAAAAAAAAAAAAACAI1H4W/G78NjT81sRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABy90f//LwS9qcxhglvdmB4qb+20D5z8+JFeKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2G/BwAA//9pxHjs")
r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001280)=""/4096, 0x1000) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1, 0x552e, &(0x7f0000002480)="$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")
io_setup(0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) (async)
syz_mount_image$minix(&(0x7f00000001c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYBLOB="7665b56bff7d13a2d819dd99d7b7fb44d89826e61bdd16b72b7b4b28466b2dd5276d640c15e37c725cc51cf9ccb08269fbbcf21642cf3700d39319aedab841312becd7508764407fc111e219d48aff23cec7bff40e31ce41ce552026be34aef66f44ef30690a7b52e1dd15b63c9d5de5b8fd41279c39eaa7c3660cdf0466414f5b966df46c5dd09f5d724a4d956293d161bf6a0aab3287558cfa91db1a051d07", @ANYRES32, @ANYRES8, @ANYRES16, @ANYRES8=0x0], 0x1, 0x1e5, &(0x7f0000000400)="$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") (async)
r1 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) (async)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0xaca02a, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
ftruncate(r1, 0x2007ffb) (async)
open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) (async, rerun: 32)
creat(&(0x7f0000000380)='./bus\x00', 0x0) (rerun: 32)

3.1944657s ago: executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x1b, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x103}, 0x90)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000300)={[{@numtail}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@shortname_win95}, {@numtail}, {@shortname_mixed}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_mixed}, {@shortname_winnt}]}, 0x4, 0x362, &(0x7f0000000480)="$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")
open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYRESDEC], 0x12, 0xa10, &(0x7f00000001c0)="$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")
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4080aea2, &(0x7f00000000c0))

2.964480429s ago: executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x3}], {0x14}}, 0x3c}}, 0x0)

2.36918646s ago: executing program 3:
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r0 = io_uring_setup(0x30d0, &(0x7f00000000c0)={0x0, 0x0, 0x800})
ppoll(&(0x7f0000000340), 0x0, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000003c0), 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x6ded, 0x30b8, 0x2, &(0x7f0000000300)={[0x2]}, 0x8)
r1 = gettid()
timer_create(0x2, &(0x7f0000000180)={0x0, 0x29, 0x4, @tid=r1}, &(0x7f00000000c0))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r2, 0x8924, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x100000001}}, './file0\x00'})
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x19, 0x1d, 0x1, 0x94, r3}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='thermal_power_allocator_pid\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x7, 0x974, 0x0, 0x1}, 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001440), 0x10)
fcntl$getown(r4, 0x9)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f00000003c0)="1543f73bc21df20164f49041314836660f5c31104cc998320dab2dfeddf7d95deddf1e7136aba077283970cd7b1949c2751837bdc887727824a1922586ef42a480cbd581ce10f59bb8f3f04d43c9d71f05709859e99a00505392eb134b0ca320", &(0x7f0000000440)=""/204}, 0x20)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
semop(0x0, 0x0, 0x0)
r5 = semget$private(0x0, 0x5, 0x600)
semop(r5, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1)
semop(r5, &(0x7f0000000140)=[{0x0, 0xd90d, 0x1000}], 0x1)
semtimedop(r5, &(0x7f0000000040)=[{0x2, 0x2}, {0x0, 0x0, 0x1000}], 0x2, &(0x7f0000000080)={0x77359400})
r6 = semget$private(0x0, 0x4, 0x0)
semop(r6, &(0x7f0000000380)=[{0x0, 0x440}, {0x3, 0xffff}], 0x2)
semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000080)=[0x7fff])
semtimedop(r6, &(0x7f0000000280)=[{0x1, 0x401, 0x1800}, {0x0, 0x3, 0x1800}], 0x2, &(0x7f0000000180)={0x0, 0x989680})
semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1)
semtimedop(r5, &(0x7f0000000100), 0x0, &(0x7f00000000c0))

2.204619206s ago: executing program 1:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x6}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x38}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

2.08963586s ago: executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
ftruncate(r1, 0x2007ffb) (async)
ftruncate(r1, 0x2007ffb)
sendfile(r1, r1, 0x0, 0x800000009)
lseek(r1, 0x2007ffb, 0x4)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002000000e72505a8a4400001020301090224000101dd40ff090400ff01070101b609050102ff0300020409258202080006063f"], &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x8, 0xca, 0x8, 0x1f}, 0x50, &(0x7f00000000c0)={0x5, 0xf, 0x50, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x1, 0x4}, @generic={0x3a, 0x10, 0x5, "cd02e704f14f52c788be96f90fee0661b00e04d0108a7d09a733cee62822e311a914a66e3fdbe9159ec2acbbd1c15091cbefc07fc67c40"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x5e, 0xaf, 0x3}]}, 0x1, [{0x3c, &(0x7f0000000180)=ANY=[@ANYBLOB="3c03eace9477f7269698c78c0aae53c4d73ea27bcbc09b26139be0bb93b12105c3285e4569cb0fef6a66a85ab299151048cfe32ee78b2564c385bd4a"]}]})
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001d0000090000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
pipe2$watch_queue(&(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0)
add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) (async)
r6 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r3, 0xffffffff) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r3, 0xffffffff)
r7 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0xeef, 0x72d0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8b, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xc5, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x1c, 0x0, 0x1, {0x22, 0x4af}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0xe0}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0x5, 0x6}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x0, 0x1, 0x7, 0x1, 0x20}, 0x19, &(0x7f0000000380)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "16b5e78dda20674596319157bf205ef4"}]}, 0x9, [{0x4e, &(0x7f00000004c0)=@string={0x4e, 0x3, "09e84807b6aab82bb3a0b6c2ee40d82c34ee0576af19a2c63903a9a517291a994d2b306c0d03a4a38699450bb76b90d384a9acbab20a7206107572ba752e44b65a14497dbd8f2ec4d07ff0eb"}}, {0xcb, &(0x7f0000000540)=@string={0xcb, 0x3, "fd312c5905554b62af96cb0a05b27936ad3a41fda217a8262f011630b33f3429e9de5a07a45f3cf14bbdd869866cb809ea83bc2826ae39f0663a0e3a4a2291735d16d65920e3261b994a3aabaa15c231a6a0e028375f00672ec8f57ed6cdd7b60d7fcd0ad026fe8afbd3e00185601fc48e5b53bae6233d9e901f04636981ad3ec1f9a397cabe99e29393cdd04a72d772a4f383e26aa633a0cd60338cdf84e4471595b3f51ff6697577add85024bab89d649d70edca007780e103709e80c19e7496f3fde7c963668aed"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x10, &(0x7f0000000640)=@string={0x10, 0x3, "37d172149704322d5eab1ed23fda"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x42c}}, {0xe9, &(0x7f00000006c0)=@string={0xe9, 0x3, "d46361cf9f4952b6d68775a9d3f79885fa4406326c54db4f21a0542b1054050373fbbcacefc20a19ddecbf0b265a0e8b0ddb35d614a1e39c5694f496b827f0f51230eda9d8a4f7caa6283c1689124d106708e26f3cfa0a12c48e0adec64da9ede57c7a11a2c533a0894c1d48b0ad67637f286e3febb56b633f03c9106008c7cdc34c323cf1e6228a1b18c202e3725332515330afbc793632bb47de9b7a6fe1da163f63b0c0e8f38b44bc63fdf692b8cbafeca5fe9ba004e3bb73be49525d58fe549721c605b0dc96f4c3e43626b2d143c5bd2548201c3b9adee486574584d11a3e6e2df1210c7e"}}, {0x60, &(0x7f00000007c0)=ANY=[@ANYBLOB="60037df850054df1ff59b9d2a7a3b23486e6108a50dcacf20afa8b749882c62dae1d3c3b00cfd251ea18495d7a69bafc6db906019217f77a665f3668275ec3972856ffe43c08a6b936e9fc841bf7f81e549bd8aded941234b3f35ef0aeef0fcc"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x439}}]})
syz_usb_control_io$hid(r7, &(0x7f0000000b80)={0x24, &(0x7f0000000980)={0x0, 0x22, 0x4a, {0x4a, 0x23, "f3551e5c424c990c8a1e28ded1cf160820c264cde3527293135dfd2f8a2e21b82263a5a53da5e1b98738c9e3f4ff72701ad001e523bd213ed4bd100bbbd99c67c664baefe36e8dd4"}}, &(0x7f0000000a00)={0x0, 0x3, 0xda, @string={0xda, 0x3, "898642344609619ddc4623122c03055b97bac0cc47a4c3e4ab1d4aba8c21f4d26eee9ebcbd5c63ff940a34b1ada523c6428568e4ab96ee99caaa94e315f01fa2d7ae9e5fce783801ce6b17dae3981ac249cb90484b883616f08c432a1e3ddf7ee97f70bcae177a22ce14a6b1777caaa20fd201fbdf072aea37b97e82741b6718e621d4ddbe51c17ff1ba666f2a0cd83ce898bb24c56d30f0c6b070b21fc270dfd1c59eca6e3dcc99981920960c83ee9ded88a28c62ff28ec09ae3e20161c078955ea658f4376beb06e5dee128d91239a7dbed9123aa0508d"}}, &(0x7f0000001200)=ANY=[@ANYBLOB="00220d0000000a9beca9b6bf83fad19dd7578ce524187aa05187a4365a9552a5d3d1d5c44d6fad935fdb6b446c997f7aa6c22bfb3247404c3a98efbad3f0ddc56359064a4d5a09afee91a67cb90995ccdc9b4bb011e28b8d2bd2abed1c7981b1b33aefeba712a9fd77"], &(0x7f0000000b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x65, 0x1, {0x22, 0x45b}}}}, &(0x7f0000000d00)={0x2c, &(0x7f0000000bc0)={0x40, 0x14, 0x2c, "749a83702c3087a78df40c261287506d270f60d5c046d8742501777c87e3fff95375ffff9f1766decc344419"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0xa1}, &(0x7f0000000c40)={0x0, 0x8, 0x1}, &(0x7f0000000c80)=ANY=[@ANYBLOB="2001bffaa62600000085bfc0e56c952b07fcf45f43ea9b2972d50044ee2f4d52a3db5e58f5c677f43c39d0ea"], &(0x7f0000000cc0)={0x20, 0x3, 0x1, 0x81}}) (async)
syz_usb_control_io$hid(r7, &(0x7f0000000b80)={0x24, &(0x7f0000000980)={0x0, 0x22, 0x4a, {0x4a, 0x23, "f3551e5c424c990c8a1e28ded1cf160820c264cde3527293135dfd2f8a2e21b82263a5a53da5e1b98738c9e3f4ff72701ad001e523bd213ed4bd100bbbd99c67c664baefe36e8dd4"}}, &(0x7f0000000a00)={0x0, 0x3, 0xda, @string={0xda, 0x3, "898642344609619ddc4623122c03055b97bac0cc47a4c3e4ab1d4aba8c21f4d26eee9ebcbd5c63ff940a34b1ada523c6428568e4ab96ee99caaa94e315f01fa2d7ae9e5fce783801ce6b17dae3981ac249cb90484b883616f08c432a1e3ddf7ee97f70bcae177a22ce14a6b1777caaa20fd201fbdf072aea37b97e82741b6718e621d4ddbe51c17ff1ba666f2a0cd83ce898bb24c56d30f0c6b070b21fc270dfd1c59eca6e3dcc99981920960c83ee9ded88a28c62ff28ec09ae3e20161c078955ea658f4376beb06e5dee128d91239a7dbed9123aa0508d"}}, &(0x7f0000001200)=ANY=[@ANYBLOB="00220d0000000a9beca9b6bf83fad19dd7578ce524187aa05187a4365a9552a5d3d1d5c44d6fad935fdb6b446c997f7aa6c22bfb3247404c3a98efbad3f0ddc56359064a4d5a09afee91a67cb90995ccdc9b4bb011e28b8d2bd2abed1c7981b1b33aefeba712a9fd77"], &(0x7f0000000b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x65, 0x1, {0x22, 0x45b}}}}, &(0x7f0000000d00)={0x2c, &(0x7f0000000bc0)={0x40, 0x14, 0x2c, "749a83702c3087a78df40c261287506d270f60d5c046d8742501777c87e3fff95375ffff9f1766decc344419"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0xa1}, &(0x7f0000000c40)={0x0, 0x8, 0x1}, &(0x7f0000000c80)=ANY=[@ANYBLOB="2001bffaa62600000085bfc0e56c952b07fcf45f43ea9b2972d50044ee2f4d52a3db5e58f5c677f43c39d0ea"], &(0x7f0000000cc0)={0x20, 0x3, 0x1, 0x81}})
syz_usb_ep_write(r0, 0x81, 0xb8, &(0x7f0000000400)="97ae72ff54b05f523dfbd89511878f1175598c42563d5f9e690600c3e6cd9ec9d9b999d3e0d569a86266ea2b3ff3a128bec3d8ac4d41758617950caf32699636f830ffaf2849b5ed2d14384a003f68cacff4f73d27b5443c79748d20ae1b17d7d905cb366a04000000403613b457638734ac17b11829653ed653cf3a16e93e600625c425bddfe686c2eb1b00774d5e67779f086165a039ad40da4e54be39d2c76774548b2de01f6c452df98931c1a7f3cc650f400321f04f") (async)
syz_usb_ep_write(r0, 0x81, 0xb8, &(0x7f0000000400)="97ae72ff54b05f523dfbd89511878f1175598c42563d5f9e690600c3e6cd9ec9d9b999d3e0d569a86266ea2b3ff3a128bec3d8ac4d41758617950caf32699636f830ffaf2849b5ed2d14384a003f68cacff4f73d27b5443c79748d20ae1b17d7d905cb366a04000000403613b457638734ac17b11829653ed653cf3a16e93e600625c425bddfe686c2eb1b00774d5e67779f086165a039ad40da4e54be39d2c76774548b2de01f6c452df98931c1a7f3cc650f400321f04f")
ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000001140)={0x1, 0x0, 0x10, 0x1b, 0x1ea, &(0x7f0000000d40)}) (async)
ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000001140)={0x1, 0x0, 0x10, 0x1b, 0x1ea, &(0x7f0000000d40)})
r8 = socket(0x2, 0x1, 0x0)
dup(r8)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r10 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
copy_file_range(r10, 0x0, r9, &(0x7f00000000c0), 0x0, 0x2) (async)
copy_file_range(r10, 0x0, r9, &(0x7f00000000c0), 0x0, 0x2)
r11 = syz_open_dev$vcsu(&(0x7f0000001180), 0x1, 0x300)
setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f00000011c0)=@req={0x6, 0x9, 0x6, 0xffffffff}, 0x10) (async)
setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f00000011c0)=@req={0x6, 0x9, 0x6, 0xffffffff}, 0x10)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x25, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000000300)=0x8)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_sctp(0x2, 0x0, 0x84)

1.560458783s ago: executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff720af0ff00ffffff91a4f0ff00000000b7060000ffffffff2d64fdffffffffff64040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e4cc4051ade12f41deff6df6a936b4ec3827cf7deb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609233909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc5348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb33f0040244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90753523529403b81e6373072d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4afd5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680d70acc63ee3bcfdb982a956998df3dce0e9091a4d736db69038061e11b4b48c323efa44af3bcfbf2f404ca2a6d4eee4812f5a1eba66004df8040b9e9c1c709eb96c169b5f945a42aaeca29c50c02ae1cfd5f72afdf8300837103fd0842dfa16a64dded5ba147925446ff931621149dcc625446aad0772d209a4ce43a74478da530a565ddf0f32dc49a5f1c4a2724b8e7b597d4cd5d6a2a18701aaf228e968f3d50ead59d9452f7b740329a49c8f3fb3afbcb1021fa5dd85491b61f64263986d59d4b349d4be4fa97b03c0ae15cd31780925064329cbb0b1b7c8467d04b7284837c1946e8f5388124aefe32ff4077f948ccb26b67a3183a6f5968fa3c8ca996e805cbba86c26d1bd00d77dfa1ee8379350e7e631d1d1bcdfebf0a3635df7f3ce2cf8a720253936d3f46b9c2bb39df87bb562b24c28673c269f0a01a7e56475a1a23ed10ff702e25a145cd9b56e2087186a3fc4d2ea7fa62308000000a0835a9b0b5e"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x90)

1.248770523s ago: executing program 0:
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000540)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xa, 0x0, 0x0, 0x0, 0x0})
io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x104, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe169}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}]}]}]}, 0x104}}, 0x4008010)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44008080)
io_uring_enter(r2, 0x4ac6, 0x0, 0x0, 0x0, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
r9 = dup3(0xffffffffffffffff, r8, 0x0)
preadv(r9, &(0x7f0000000300)=[{&(0x7f0000000000)=""/24, 0x18}, {0x0}], 0x1000000000000374, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000040)={&(0x7f0000001b00), 0x2, 0x400})

1.075640528s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000250000002300000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0)
futex(0x0, 0x0, 0x0, &(0x7f0000002540)={0x0, 0x989680}, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRES64=0x0, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@can_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x24}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a, r7}]}, 0x3c}}, 0x0)

589.414509ms ago: executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$TCSETS(r0, 0x5420, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"})

347.868013ms ago: executing program 2:
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r0=>0x0, @broadcast, @local}, &(0x7f0000000040)=0xc)
r1 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x4, r0, 0x17, r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020) (async)
r3 = openat$mixer(0xffffff9c, &(0x7f0000000180), 0x400400, 0x0)
ioctl$mixer_OSS_ALSAEMULVER(r3, 0x80044df9, &(0x7f00000000c0)) (async)
unshare(0x20000400)
syncfs(r2)

110.744395ms ago: executing program 1:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fsopen(0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@local, 0x800, 0x0, 0x2, 0x1}, 0x20)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4040080)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"/388], 0x7c}}, 0x0)
socket(0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0xe4, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0xe4}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendto(r9, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x3}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)

0s ago: executing program 0:
syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b03afe6f4ff020002004788aa96a13bb1000000000086ddffff", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

kernel console output (not intermixed with test programs):

The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.532722][ T5071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.566894][ T5078] team0: Port device team_slave_1 added
[  212.584011][ T5075] team0: Port device team_slave_1 added
[  212.648905][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.657397][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.665139][ T5085] bridge_slave_0: entered allmulticast mode
[  212.674200][ T5085] bridge_slave_0: entered promiscuous mode
[  212.791508][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.798940][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.806683][ T5085] bridge_slave_1: entered allmulticast mode
[  212.815138][ T5085] bridge_slave_1: entered promiscuous mode
[  212.839858][ T5072] Bluetooth: hci1: command tx timeout
[  212.920308][ T5072] Bluetooth: hci2: command tx timeout
[  212.923232][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.966691][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.974174][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.000504][ T5078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.004734][ T5072] Bluetooth: hci3: command tx timeout
[  213.019241][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.026572][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.052903][ T5078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.067730][ T5075] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.075667][ T5075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.103264][ T5075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.154246][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.206459][ T5075] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.213800][ T5075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.240202][ T5075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.252670][ T5072] Bluetooth: hci4: command tx timeout
[  213.269329][ T5071] hsr_slave_0: entered promiscuous mode
[  213.279821][ T5071] hsr_slave_1: entered promiscuous mode
[  213.330251][ T5085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.382244][ T5085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.514332][ T5081] team0: Port device team_slave_0 added
[  213.537452][ T5081] team0: Port device team_slave_1 added
[  213.595786][ T5085] team0: Port device team_slave_0 added
[  213.740220][ T5085] team0: Port device team_slave_1 added
[  213.749446][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.756757][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.783147][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.835661][ T5078] hsr_slave_0: entered promiscuous mode
[  213.844377][ T5078] hsr_slave_1: entered promiscuous mode
[  213.854694][ T5078] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  213.863933][ T5078] Cannot create hsr debugfs directory
[  213.963892][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.971182][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.997562][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.065025][ T5075] hsr_slave_0: entered promiscuous mode
[  214.074853][ T5075] hsr_slave_1: entered promiscuous mode
[  214.083251][ T5075] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  214.091169][ T5075] Cannot create hsr debugfs directory
[  214.099302][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.106517][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.132993][ T5085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.160287][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.167415][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.193695][ T5085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.523359][ T5072] Bluetooth: hci0: command tx timeout
[  214.537823][ T5081] hsr_slave_0: entered promiscuous mode
[  214.547963][ T5081] hsr_slave_1: entered promiscuous mode
[  214.556311][ T5081] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  214.564169][ T5081] Cannot create hsr debugfs directory
[  214.705233][ T5085] hsr_slave_0: entered promiscuous mode
[  214.715460][ T5085] hsr_slave_1: entered promiscuous mode
[  214.724805][ T5085] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  214.732808][ T5085] Cannot create hsr debugfs directory
[  214.919691][ T5072] Bluetooth: hci1: command tx timeout
[  214.999747][ T5072] Bluetooth: hci2: command tx timeout
[  215.088694][ T5072] Bluetooth: hci3: command tx timeout
[  215.323334][ T5072] Bluetooth: hci4: command tx timeout
[  215.434522][ T5071] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  215.514854][ T5071] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  215.534406][ T5071] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  215.625879][ T5071] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  215.795138][ T5075] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  215.828149][ T5075] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  215.858638][ T5075] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  215.881676][ T5075] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  216.100408][ T5078] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  216.144110][ T5081] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  216.170180][ T5081] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  216.189336][ T5078] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  216.210983][ T5078] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  216.256879][ T5081] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  216.278123][ T5081] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  216.301152][ T5078] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  216.429233][ T5085] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  216.562980][ T5085] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  216.617629][ T5072] Bluetooth: hci0: command tx timeout
[  216.641186][ T5085] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  216.664666][ T5085] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  217.010307][ T5072] Bluetooth: hci1: command tx timeout
[  217.082521][ T5072] Bluetooth: hci2: command tx timeout
[  217.173424][ T5072] Bluetooth: hci3: command tx timeout
[  217.391288][ T5078] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.401215][ T5072] Bluetooth: hci4: command tx timeout
[  217.468922][ T5071] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.644242][ T5071] 8021q: adding VLAN 0 to HW filter on device team0
[  217.699203][ T5075] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.725001][ T5078] 8021q: adding VLAN 0 to HW filter on device team0
[  217.797297][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.805107][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.843451][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.899850][ T5085] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.939972][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.947609][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.963352][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.971096][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.008496][ T5075] 8021q: adding VLAN 0 to HW filter on device team0
[  218.043369][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.051151][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.105980][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.113757][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.206251][ T5081] 8021q: adding VLAN 0 to HW filter on device team0
[  218.226102][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.233881][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.406721][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.414474][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.428640][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.436126][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.473517][ T5085] 8021q: adding VLAN 0 to HW filter on device team0
[  218.629794][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.637279][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.656472][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.664269][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.101017][ T1232] ieee802154 phy0 wpan0: encryption failed: -22
[  219.107680][ T1232] ieee802154 phy1 wpan1: encryption failed: -22
[  220.744167][ T5078] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.792439][ T5071] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.858173][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.022764][ T5075] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.307910][ T5071] veth0_vlan: entered promiscuous mode
[  221.341864][ T5085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.467320][ T5071] veth1_vlan: entered promiscuous mode
[  221.546727][ T5078] veth0_vlan: entered promiscuous mode
[  221.655091][ T5078] veth1_vlan: entered promiscuous mode
[  221.696670][ T5081] veth0_vlan: entered promiscuous mode
[  221.816910][ T5075] veth0_vlan: entered promiscuous mode
[  221.849947][ T5081] veth1_vlan: entered promiscuous mode
[  221.984082][ T5071] veth0_macvtap: entered promiscuous mode
[  222.025083][ T5075] veth1_vlan: entered promiscuous mode
[  222.077454][ T5071] veth1_macvtap: entered promiscuous mode
[  222.160396][ T5078] veth0_macvtap: entered promiscuous mode
[  222.264075][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.309609][ T5081] veth0_macvtap: entered promiscuous mode
[  222.327849][ T5078] veth1_macvtap: entered promiscuous mode
[  222.395751][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.423574][ T5081] veth1_macvtap: entered promiscuous mode
[  222.504492][ T5071] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.514973][ T5071] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.525698][ T5071] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.534872][ T5071] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.577956][ T5075] veth0_macvtap: entered promiscuous mode
[  222.633282][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.645532][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.660530][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.714518][ T5075] veth1_macvtap: entered promiscuous mode
[  222.739010][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.750556][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.760723][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.771483][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.787731][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.807806][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.821571][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.836614][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.990532][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.002402][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.012605][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.023315][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.038018][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.053155][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.064514][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.074638][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.085541][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.095630][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.107714][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.125544][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.165477][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.176223][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.186382][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.197083][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.207353][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.218210][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.233103][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.252235][ T5081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.261459][ T5081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.270614][ T5081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.279707][ T5081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.334160][ T5078] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.343367][ T5078] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.354306][ T5078] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.363491][ T5078] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.488262][ T5075] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.497536][ T5075] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.506766][ T5075] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.516838][ T5075] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.086522][ T5085] veth0_vlan: entered promiscuous mode
[  224.230999][ T5085] veth1_vlan: entered promiscuous mode
[  224.600854][ T5085] veth0_macvtap: entered promiscuous mode
[  224.665994][ T5085] veth1_macvtap: entered promiscuous mode
[  224.859351][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.872496][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.882732][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.893458][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.903542][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.914320][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.926084][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.939374][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.954518][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.113123][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.124737][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.134992][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.145835][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.158218][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.172401][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.183061][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.193789][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.208913][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.288206][ T5085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.301196][ T5085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.311155][ T5085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.320337][ T5085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.978796][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.987244][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.185495][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.194258][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.049806][    T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  230.286454][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.294817][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.428243][ T3406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.436745][ T3406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.453137][    T8] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 22
[  230.465879][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.468080][ T5129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.477849][    T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  230.485809][ T5129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.496310][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  230.517315][    T8] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  230.528602][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.646585][    T8] usb 2-1: config 0 descriptor??
[  230.734013][    T8] usb-storage 2-1:0.0: USB Mass Storage device detected
[  230.758534][ T5129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.766932][ T5129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.785873][    T8] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  230.830942][   T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.838981][   T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.140148][ T5128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.148284][ T5128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.727885][ T5245] loop1: detected capacity change from 0 to 32768
[  231.775071][ T5245] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5245)
[  231.812013][ T5258] loop0: detected capacity change from 0 to 128
[  231.844350][ T5245] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  231.855073][ T5245] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[  231.866819][ T5245] BTRFS info (device loop1): using free-space-tree
[  232.151362][ T5276] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'.
[  232.182592][ T5258] loop0: detected capacity change from 0 to 256
[  232.227301][ T5258] exfat: Unknown parameter 'cgroup.controllers'
[  232.770281][   T29] audit: type=1800 audit(1717947962.211:2): pid=5245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0
[  232.863896][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.872191][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.134147][ T5128] usb 2-1: USB disconnect, device number 2
[  233.268329][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.277182][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.635926][ T5295] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  233.703232][ T5296] loop3: detected capacity change from 0 to 256
[  234.066211][ T5299] loop2: detected capacity change from 0 to 512
[  234.088935][ T5299] EXT4-fs warning (device loop2): ext4_multi_mount_protect:318: fsck is running on the filesystem
[  234.100364][ T5299] EXT4-fs warning (device loop2): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4
[  234.171053][ T5296] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x12727065, utbl_chksum : 0xe619d30d)
[  234.247972][ T5301] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  234.586545][ T5295] loop0: detected capacity change from 0 to 32768
[  234.604683][ T5295] BTRFS: device /dev/loop0 (7:0) using temp-fsid dc33cf75-6f82-4cde-bff5-39b4627bf5df
[  234.614728][ T5295] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5295)
[  234.737952][ T5295] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  234.748892][ T5295] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[  234.760401][ T5295] BTRFS info (device loop0): using free-space-tree
[  234.845392][ T5071] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  234.948612][ T5306] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  235.918024][ T5326] loop4: detected capacity change from 0 to 32768
[  235.951456][   T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.985641][ T5081] BTRFS info (device loop0): last unmount of filesystem dc33cf75-6f82-4cde-bff5-39b4627bf5df
[  236.069333][ T5326] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  236.219399][   T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.350996][ T5334] loop2: detected capacity change from 0 to 8
[  236.400452][ T5326] XFS (loop4): Ending clean mount
[  236.428749][ T5326] XFS (loop4): Quotacheck needed: Please wait.
[  236.459274][ T5128] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x8 
[  236.471382][ T5128] XFS (loop4): Unmount and run xfs_repair
[  236.477300][ T5128] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  236.477802][   T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.484943][ T5128] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  236.485043][ T5128] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  236.485138][ T5128] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  236.529292][ T5128] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  236.540314][ T5128] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  236.549395][ T5128] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  236.558715][ T5128] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  236.569091][ T5128] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  236.586252][ T2876] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x8 len 8 error 74
[  236.673044][ T5326] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  236.795759][ T5306] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.4'.
[  236.845149][   T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.038221][ T5339] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET)
[  237.225273][   T59] bridge_slave_1: left allmulticast mode
[  237.231431][   T59] bridge_slave_1: left promiscuous mode
[  237.246365][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.281103][ T5085] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  237.315414][   T59] bridge_slave_0: left allmulticast mode
[  237.322407][   T59] bridge_slave_0: left promiscuous mode
[  237.328940][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.364166][ T5085] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  237.417098][   T29] audit: type=1800 audit(1717947966.881:3): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="sda1" ino=1955 res=0 errno=0
[  237.441335][   T29] audit: type=1800 audit(1717947966.881:4): pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1962 res=0 errno=0
[  237.463451][   T29] audit: type=1800 audit(1717947966.891:5): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="sda1" ino=1955 res=0 errno=0
[  238.091226][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.145966][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.198653][   T59] bond0 (unregistering): Released all slaves
[  238.750362][  T780] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  239.001486][ T5354] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  239.036221][ T5357] loop2: detected capacity change from 0 to 128
[  239.210759][  T780] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 22
[  239.223477][  T780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.234005][  T780] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  239.244841][  T780] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  239.258051][  T780] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  239.267461][  T780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.342132][  T780] usb 2-1: config 0 descriptor??
[  239.407422][  T780] usb-storage 2-1:0.0: USB Mass Storage device detected
[  239.517209][  T780] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  239.534672][   T59] hsr_slave_0: left promiscuous mode
[  239.580487][   T59] hsr_slave_1: left promiscuous mode
[  239.664033][ T5373] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  240.363661][ T5350] loop1: detected capacity change from 0 to 32768
[  240.418435][ T5350] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5350)
[  240.447354][ T5374] loop2: detected capacity change from 0 to 32768
[  240.480641][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.488461][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.517399][ T5374] BTRFS: device /dev/loop2 (7:2) using temp-fsid ad54adf7-a569-4ca7-9b33-f2584217f134
[  240.527459][ T5374] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5374)
[  240.548342][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.556816][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  240.566921][ T5350] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  240.577529][ T5350] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[  240.588958][ T5350] BTRFS info (device loop1): using free-space-tree
[  240.631605][ T5079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  240.643162][ T5079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  240.652690][ T5079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  240.701713][ T5079] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  240.728229][   T59] veth1_macvtap: left promiscuous mode
[  240.731615][ T5374] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  240.734081][   T59] veth0_macvtap: left promiscuous mode
[  240.744399][ T5374] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm
[  240.750097][   T59] veth1_vlan: left promiscuous mode
[  240.760895][ T5374] BTRFS info (device loop2): using free-space-tree
[  240.764315][   T59] veth0_vlan: left promiscuous mode
[  240.780863][ T5079] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  240.983919][ T5079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  241.099058][ T5408] loop0: detected capacity change from 0 to 512
[  241.242883][ T5408] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  241.276036][   T29] audit: type=1800 audit(1717947970.771:6): pid=5370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  241.546193][ T4738] usb 2-1: USB disconnect, device number 3
[  241.627533][ T5071] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  241.703102][ T5075] BTRFS info (device loop2): last unmount of filesystem ad54adf7-a569-4ca7-9b33-f2584217f134
[  241.940805][   T59] team0 (unregistering): Port device team_slave_1 removed
[  242.021885][   T59] team0 (unregistering): Port device team_slave_0 removed
[  242.721768][ T5081] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  242.963593][ T5429] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  243.081981][ T5079] Bluetooth: hci2: command tx timeout
[  243.292642][ T5371] chnl_net:caif_netlink_parms(): no params data found
[  243.824052][ T5438] loop4: detected capacity change from 0 to 256
[  243.862015][ T5438] =======================================================
[  243.862015][ T5438] WARNING: The mand mount option has been deprecated and
[  243.862015][ T5438]          and is ignored by this kernel. Remove the mand
[  243.862015][ T5438]          option from the mount to silence this warning.
[  243.862015][ T5438] =======================================================
[  244.020389][ T5442] loop0: detected capacity change from 0 to 512
[  244.111897][ T5442] EXT4-fs error (device loop0): __ext4_fill_super:5464: inode #2: comm syz-executor.0: casefold flag without casefold feature
[  244.146246][ T5438] FAT-fs (loop4): Directory bread(block 64) failed
[  244.154321][ T5438] FAT-fs (loop4): Directory bread(block 65) failed
[  244.161885][ T5438] FAT-fs (loop4): Directory bread(block 66) failed
[  244.168646][ T5438] FAT-fs (loop4): Directory bread(block 67) failed
[  244.175665][ T5438] FAT-fs (loop4): Directory bread(block 68) failed
[  244.182639][ T5438] FAT-fs (loop4): Directory bread(block 69) failed
[  244.189698][ T5438] FAT-fs (loop4): Directory bread(block 70) failed
[  244.201401][ T5438] FAT-fs (loop4): Directory bread(block 71) failed
[  244.211761][ T5438] FAT-fs (loop4): Directory bread(block 72) failed
[  244.218911][ T5438] FAT-fs (loop4): Directory bread(block 73) failed
[  244.252588][ T5128] kernel write not supported for file /sysvipc/shm (pid: 5128 comm: kworker/1:4)
[  244.291264][ T5442] EXT4-fs (loop0): get root inode failed
[  244.300597][ T5442] EXT4-fs (loop0): mount failed
[  244.333588][ T5447] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.2'.
[  244.877478][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  244.892703][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.902302][ T5371] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.910262][ T5371] bridge_slave_0: entered allmulticast mode
[  244.923145][ T5371] bridge_slave_0: entered promiscuous mode
[  244.948757][ T5442] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  244.951334][ T5371] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.965922][ T5371] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.973948][ T5371] bridge_slave_1: entered allmulticast mode
[  244.983055][ T5371] bridge_slave_1: entered promiscuous mode
[  244.995627][ T5438] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  245.166458][ T5079] Bluetooth: hci2: command tx timeout
[  245.255626][ T5371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.282282][ T5371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  245.461586][ T5371] team0: Port device team_slave_0 added
[  245.548975][ T5371] team0: Port device team_slave_1 added
[  245.923429][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.931594][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.958446][ T5371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.056851][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.064196][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.090648][ T5371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.495763][ T5473] loop4: detected capacity change from 0 to 1024
[  246.527314][ T5128] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  246.557904][ T5371] hsr_slave_0: entered promiscuous mode
[  246.577500][ T5371] hsr_slave_1: entered promiscuous mode
[  246.586975][ T5371] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  246.595032][ T5371] Cannot create hsr debugfs directory
[  246.598251][ T5473] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  246.617870][ T5473] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  246.750768][ T5473] JBD2: no valid journal superblock found
[  246.761435][ T5473] EXT4-fs (loop4): Could not load journal inode
[  246.941972][ T5128] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 22
[  246.954871][ T5128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.970748][ T5128] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  246.981591][ T5128] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  246.994826][ T5128] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  247.004281][ T5128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.101733][ T5128] usb 2-1: config 0 descriptor??
[  247.125499][ T5479] loop4: detected capacity change from 0 to 256
[  247.172940][ T5128] usb-storage 2-1:0.0: USB Mass Storage device detected
[  247.188437][ T5479] exfat: Bad value for 'uid'
[  247.228552][ T5128] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  247.252855][ T5079] Bluetooth: hci2: command tx timeout
[  247.314680][ T5483] loop0: detected capacity change from 0 to 256
[  247.378395][ T5483] FAT-fs (loop0): bogus logical sector size 8
[  247.385061][ T5483] FAT-fs (loop0): Can't find a valid FAT filesystem
[  247.942529][   T29] audit: type=1804 audit(1717947977.361:7): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir765232624/syzkaller.JGTFOM/12/file1" dev="sda1" ino=1957 res=1 errno=0
[  248.168503][ T5471] loop1: detected capacity change from 0 to 32768
[  248.194213][ T5486] loop2: detected capacity change from 0 to 1024
[  248.202570][ T5471] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5471)
[  248.253275][ T5471] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  248.263947][ T5471] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[  248.278055][ T5471] BTRFS info (device loop1): using free-space-tree
[  249.254714][   T29] audit: type=1800 audit(1717947978.701:8): pid=5471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0
[  249.321510][ T5079] Bluetooth: hci2: command tx timeout
[  249.340553][   T25] usb 2-1: USB disconnect, device number 4
[  249.413747][ T5371] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  249.524887][ T5371] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  249.612120][ T5371] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  249.674259][ T5371] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  250.231240][ T5524] loop0: detected capacity change from 0 to 256
[  250.370315][ T5524] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  250.427779][ T5071] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  250.447341][ T5524] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  250.458967][ T5524] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  250.466945][ T5524] UDF-fs: Scanning with blocksize 512 failed
[  250.575444][ T5524] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  250.668833][ T5524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  250.908869][ T5371] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.145919][ T5371] 8021q: adding VLAN 0 to HW filter on device team0
[  251.298226][  T780] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.306013][  T780] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.438749][  T780] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.446545][  T780] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.583061][ T5079] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  251.591879][ T5079] Bluetooth: hci3: Injecting HCI hardware error event
[  251.609722][ T5079] Bluetooth: hci3: hardware error 0x00
[  251.974164][ T5528] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'.
[  252.099276][ T5528] loop0: detected capacity change from 0 to 6
[  252.135406][ T5528] Dev loop0: unable to read RDB block 6
[  252.141720][ T5528]  loop0: unable to read partition table
[  252.161679][ T5528] loop0: partition table beyond EOD, truncated
[  252.168261][ T5528] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  252.168261][ T5528] 
) failed (rc=-5)
[  252.687056][ T5532] loop1: detected capacity change from 0 to 256
[  253.042321][ T5532] FAT-fs (loop1): Directory bread(block 64) failed
[  253.049181][ T5532] FAT-fs (loop1): Directory bread(block 65) failed
[  253.058730][ T5532] FAT-fs (loop1): Directory bread(block 66) failed
[  253.065647][ T5532] FAT-fs (loop1): Directory bread(block 67) failed
[  253.072662][ T5532] FAT-fs (loop1): Directory bread(block 68) failed
[  253.079410][ T5532] FAT-fs (loop1): Directory bread(block 69) failed
[  253.086745][ T5532] FAT-fs (loop1): Directory bread(block 70) failed
[  253.093642][ T5532] FAT-fs (loop1): Directory bread(block 71) failed
[  253.100649][ T5532] FAT-fs (loop1): Directory bread(block 72) failed
[  253.112406][ T5532] FAT-fs (loop1): Directory bread(block 73) failed
[  253.724703][ T5079] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  253.786968][ T5371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.314657][ T5371] veth0_vlan: entered promiscuous mode
[  254.403576][ T5371] veth1_vlan: entered promiscuous mode
[  254.453815][ T5549] binder: 5547:5549 ioctl c0306201 20000280 returned -14
[  254.603244][ T5129] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  254.666971][ T5371] veth0_macvtap: entered promiscuous mode
[  254.715282][ T5371] veth1_macvtap: entered promiscuous mode
[  254.869302][ T5554] loop4: detected capacity change from 0 to 128
[  254.872184][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.876546][ T5129] usb 1-1: Using ep0 maxpacket: 32
[  254.886986][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.887052][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.905039][ T5554] vxfs: Unknown parameter ''
[  254.913095][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.913160][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.913245][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.913299][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.913381][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.981079][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.027135][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.038038][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.048206][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.064169][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.075270][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.086177][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.096250][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.109410][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.111476][ T5129] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  255.124310][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.128065][ T5129] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  255.144526][ T5129] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  255.157866][ T5129] usb 1-1: config 1 has no interface number 0
[  255.166454][ T5129] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  255.172821][ T5556] loop1: detected capacity change from 0 to 256
[  255.177705][ T5129] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  255.194137][ T5129] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  255.201426][ T5371] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.207332][ T5129] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  255.216025][ T5371] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.225176][ T5129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.242907][ T5371] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.252200][ T5371] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.253417][ T5556] exFAT-fs (loop1): invalid fs_name
[  255.272544][ T5556] exFAT-fs (loop1): failed to read boot sector
[  255.279019][ T5556] exFAT-fs (loop1): failed to recognize exfat type
[  255.371457][ T5129] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  255.693569][ T5129] snd_usb_pod 1-1:1.1: cannot start listening: -90
[  255.700656][ T5129] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  255.710575][ T5129] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -90
[  255.887655][   T25] usb 1-1: USB disconnect, device number 2
[  256.021535][ T4738] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  256.440809][ T4738] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 22
[  256.453638][ T4738] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.464167][ T4738] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  256.474963][ T4738] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  256.490730][ T4738] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  256.500885][ T4738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.606836][ T4738] usb 3-1: config 0 descriptor??
[  256.725342][ T4738] usb-storage 3-1:0.0: USB Mass Storage device detected
[  257.338103][ T5570] loop4: detected capacity change from 0 to 40427
[  257.419826][ T5570] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  257.427835][ T5570] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  257.559783][ T5573] loop1: detected capacity change from 0 to 1024
[  257.604451][ T5563] loop2: detected capacity change from 0 to 32768
[  257.634818][ T5563] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5563)
[  257.656621][ T5570] F2FS-fs (loop4): Found nat_bits in checkpoint
[  257.697565][ T5573] devpts: called with bogus options
[  257.793270][ T4738] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  257.887272][ T5563] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  257.897860][ T5563] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm
[  257.909175][ T5563] BTRFS info (device loop2): using free-space-tree
[  257.945652][ T5570] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  257.953927][ T5570] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  258.047413][ T3343] hfsplus: b-tree write err: -5, ino 4
[  258.619761][ T5604] loop1: detected capacity change from 0 to 64
[  259.105332][   T29] audit: type=1800 audit(1717947988.491:9): pid=5603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  259.994686][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.003191][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.159533][    C0] hrtimer: interrupt took 191235 ns
[  260.315432][ T3406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.323651][ T3406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.474026][ T4738] usb 3-1: USB disconnect, device number 2
[  260.780329][ T5630] loop4: detected capacity change from 0 to 256
[  260.853500][ T5075] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  260.917624][ T5632] loop0: detected capacity change from 0 to 1024
[  260.981774][ T5630] FAT-fs (loop4): Directory bread(block 64) failed
[  260.992638][ T5630] FAT-fs (loop4): Directory bread(block 65) failed
[  261.001341][ T5630] FAT-fs (loop4): Directory bread(block 66) failed
[  261.008109][ T5630] FAT-fs (loop4): Directory bread(block 67) failed
[  261.015118][ T5630] FAT-fs (loop4): Directory bread(block 68) failed
[  261.022024][ T5630] FAT-fs (loop4): Directory bread(block 69) failed
[  261.028913][ T5630] FAT-fs (loop4): Directory bread(block 70) failed
[  261.038528][ T5630] FAT-fs (loop4): Directory bread(block 71) failed
[  261.041430][ T5129] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  261.047638][ T5630] FAT-fs (loop4): Directory bread(block 72) failed
[  261.063653][ T5630] FAT-fs (loop4): Directory bread(block 73) failed
[  261.281527][ T5123] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  261.475823][ T5129] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  261.487183][ T5129] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00
[  261.496710][ T5129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.527363][ T5129] usb 2-1: config 0 descriptor??
[  261.740198][ T5123] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.751514][ T5123] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  261.761651][ T5123] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  261.971471][ T5123] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  261.981547][ T5123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.989974][ T5123] usb 4-1: Product: syz
[  261.994356][ T5123] usb 4-1: Manufacturer: syz
[  261.999182][ T5123] usb 4-1: SerialNumber: syz
[  262.567136][    C0] net_ratelimit: 44 callbacks suppressed
[  262.567212][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies.
[  262.781657][ T5634] loop3: detected capacity change from 0 to 2048
[  262.868407][ T5639] loop2: detected capacity change from 0 to 32768
[  262.891436][ T5639] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5639)
[  262.963311][ T5639] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  262.974658][ T5639] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm
[  262.985946][ T5639] BTRFS info (device loop2): using free-space-tree
[  263.122365][ T5123] cdc_ncm 4-1:1.0: bind() failure
[  263.192212][ T5123] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71
[  263.273749][ T5123] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71
[  263.338954][ T5123] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[  263.389299][ T5123] usb 4-1: USB disconnect, device number 2
[  263.394594][ T5660] loop4: detected capacity change from 0 to 1024
[  263.451362][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  263.469839][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  263.579839][ T5660] devpts: called with bogus options
[  263.770729][ T5075] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  263.850018][ T4162] hfsplus: b-tree write err: -5, ino 4
[  263.966371][ T5123] usb 2-1: USB disconnect, device number 5
[  264.201878][ T5079] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  264.523531][   T25] IPVS: starting estimator thread 0...
[  264.571357][ T5674] loop3: detected capacity change from 0 to 256
[  264.640202][ T5676] IPVS: using max 240 ests per chain, 12000 per kthread
[  264.977485][ T5371] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  264.991099][ T5371] FAT-fs (loop3): Filesystem has been set read-only
[  265.021833][ T5371] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  265.656324][ T4162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.744494][ T5683] loop2: detected capacity change from 0 to 164
[  265.828240][ T4162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.847969][ T5683] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  265.951022][ T5686] loop4: detected capacity change from 0 to 256
[  265.968018][ T4162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.080105][ T4162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.303860][ T5686] FAT-fs (loop4): Directory bread(block 64) failed
[  266.310953][ T5686] FAT-fs (loop4): Directory bread(block 65) failed
[  266.323827][ T5686] FAT-fs (loop4): Directory bread(block 66) failed
[  266.332332][ T5686] FAT-fs (loop4): Directory bread(block 67) failed
[  266.339232][ T5686] FAT-fs (loop4): Directory bread(block 68) failed
[  266.346158][ T5686] FAT-fs (loop4): Directory bread(block 69) failed
[  266.353245][ T5686] FAT-fs (loop4): Directory bread(block 70) failed
[  266.360131][ T5686] FAT-fs (loop4): Directory bread(block 71) failed
[  266.367044][ T5686] FAT-fs (loop4): Directory bread(block 72) failed
[  266.367710][   T29] audit: type=1800 audit(1717947995.861:10): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1952 res=0 errno=0
[  266.373817][ T5686] FAT-fs (loop4): Directory bread(block 73) failed
[  266.402193][   T29] audit: type=1800 audit(1717947995.881:11): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1952 res=0 errno=0
[  266.497065][ T5689] overlayfs: overlapping lowerdir path
[  266.570765][ T4162] bridge_slave_1: left allmulticast mode
[  266.576670][ T4162] bridge_slave_1: left promiscuous mode
[  266.583389][ T4162] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.697422][ T4162] bridge_slave_0: left allmulticast mode
[  266.703485][ T4162] bridge_slave_0: left promiscuous mode
[  266.710449][ T4162] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.074364][ T5693] loop1: detected capacity change from 0 to 256
[  267.386066][ T4162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  267.503259][ T4162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  267.593076][ T4162] bond0 (unregistering): Released all slaves
[  267.681865][ T5693] FAT-fs (loop1): IO charset cpush not found
[  268.062398][ T5701] smb3: Unexpected value for 'acl'
[  268.323229][ T5079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  268.333265][ T5079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  268.371276][ T5079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  268.389021][ T5079] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  268.434149][ T5079] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  268.452457][ T5079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  269.328177][ T4162] hsr_slave_0: left promiscuous mode
[  269.396894][ T4162] hsr_slave_1: left promiscuous mode
[  269.448974][ T4162] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.454453][ T5712] loop4: detected capacity change from 0 to 32768
[  269.456786][ T4162] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.492556][ T4162] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.500318][ T4162] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.567517][ T4162] veth1_macvtap: left promiscuous mode
[  269.574017][ T4162] veth0_macvtap: left promiscuous mode
[  269.579992][ T4162] veth1_vlan: left promiscuous mode
[  269.585576][ T4162] veth0_vlan: left promiscuous mode
[  270.527419][ T5072] Bluetooth: hci2: command tx timeout
[  270.834154][ T4162] team0 (unregistering): Port device team_slave_1 removed
[  270.863556][ T5728] loop1: detected capacity change from 0 to 2048
[  270.872908][ T4162] team0 (unregistering): Port device team_slave_0 removed
[  270.988143][ T5728] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  271.054960][ T5728] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  271.097825][ T5730] loop2: detected capacity change from 0 to 256
[  271.152325][ T5730] FAT-fs (loop2): Unrecognized mount option "nonumtail��" or missing value
[  272.418813][ T5702] chnl_net:caif_netlink_parms(): no params data found
[  272.602767][ T5072] Bluetooth: hci2: command tx timeout
[  272.609049][ T5743] loop0: detected capacity change from 0 to 256
[  272.913691][ T5746] loop4: detected capacity change from 0 to 164
[  272.962519][ T5743] FAT-fs (loop0): Directory bread(block 64) failed
[  272.974548][ T5743] FAT-fs (loop0): Directory bread(block 65) failed
[  272.983100][ T5743] FAT-fs (loop0): Directory bread(block 66) failed
[  272.989975][ T5743] FAT-fs (loop0): Directory bread(block 67) failed
[  272.996870][ T5743] FAT-fs (loop0): Directory bread(block 68) failed
[  273.003750][ T5743] FAT-fs (loop0): Directory bread(block 69) failed
[  273.010777][ T5743] FAT-fs (loop0): Directory bread(block 70) failed
[  273.017534][ T5743] FAT-fs (loop0): Directory bread(block 71) failed
[  273.024578][ T5743] FAT-fs (loop0): Directory bread(block 72) failed
[  273.031432][ T5743] FAT-fs (loop0): Directory bread(block 73) failed
[  273.081118][ T5746] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  273.532732][ T5751] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  273.592055][ T5751] 8021q: adding VLAN 0 to HW filter on device team0
[  273.606979][ T5751] bond0: (slave team0): Enslaving as an active interface with an up link
[  273.980922][ T5702] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.988648][ T5702] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.002709][ T5702] bridge_slave_0: entered allmulticast mode
[  274.011835][ T5702] bridge_slave_0: entered promiscuous mode
[  274.124128][ T5702] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.132180][ T5702] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.140353][ T5702] bridge_slave_1: entered allmulticast mode
[  274.149602][ T5702] bridge_slave_1: entered promiscuous mode
[  274.476102][ T5702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.562598][ T5702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.718499][ T5072] Bluetooth: hci2: command tx timeout
[  274.961731][ T5765] loop0: detected capacity change from 0 to 2048
[  274.996541][ T5702] team0: Port device team_slave_0 added
[  275.035533][ T5765] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  275.056825][ T5702] team0: Port device team_slave_1 added
[  275.112014][ T5767] loop1: detected capacity change from 0 to 512
[  275.132905][ T5767] EXT4-fs: Ignoring removed mblk_io_submit option
[  275.134539][ T5765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  275.139762][ T5767] EXT4-fs: Ignoring removed orlov option
[  275.284074][ T5773] fuse: Bad value for 'fd'
[  275.289820][ T5767] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13
[  275.337789][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.346349][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.373394][ T5702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.407975][ T5767] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  275.423182][ T5767] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz-executor.1: attempt to clear invalid blocks 33619980 len 1
[  275.462021][   T29] audit: type=1804 audit(1717948004.921:12): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1571553769/syzkaller.1wlXRh/26/file0/bus" dev="loop0" ino=1369 res=1 errno=0
[  275.463928][ T5767] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 0)
[  275.570771][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.580305][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.584343][ T5767] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 1)
[  275.606503][ T5702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.746267][ T4162] IPVS: stop unused estimator thread 0...
[  275.754796][ T5767] EXT4-fs (loop1): 1 truncate cleaned up
[  275.761153][ T5767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.832798][ T5081] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh
[  275.902091][ T5081] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh
[  276.014889][ T5702] hsr_slave_0: entered promiscuous mode
[  276.036219][ T5767] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value out of bounds
[  276.059254][ T5702] hsr_slave_1: entered promiscuous mode
[  276.094315][ T5702] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  276.102511][ T5702] Cannot create hsr debugfs directory
[  276.117507][ T5781] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value out of bounds
[  276.233632][ T5767] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value out of bounds
[  276.487504][   T70] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.585929][ T5784] nvme_fabrics: missing parameter 'transport=%s'
[  276.594281][ T5784] nvme_fabrics: missing parameter 'nqn=%s'
[  276.653013][   T70] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.678312][ T5785] nvme_fabrics: missing parameter 'transport=%s'
[  276.685348][ T5071] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.698466][ T5785] nvme_fabrics: missing parameter 'nqn=%s'
[  276.763621][ T5072] Bluetooth: hci2: command tx timeout
[  276.866544][   T70] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.142341][   T70] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.524374][   T70] bridge_slave_1: left allmulticast mode
[  277.530553][   T70] bridge_slave_1: left promiscuous mode
[  277.537243][   T70] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.591356][   T70] bridge_slave_0: left allmulticast mode
[  277.597370][   T70] bridge_slave_0: left promiscuous mode
[  277.604102][   T70] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.618763][ T5799] loop2: detected capacity change from 0 to 256
[  277.822981][ T5799] FAT-fs (loop2): Directory bread(block 64) failed
[  277.830135][ T5799] FAT-fs (loop2): Directory bread(block 65) failed
[  277.837038][ T5799] FAT-fs (loop2): Directory bread(block 66) failed
[  277.843919][ T5799] FAT-fs (loop2): Directory bread(block 67) failed
[  277.850918][ T5799] FAT-fs (loop2): Directory bread(block 68) failed
[  277.857662][ T5799] FAT-fs (loop2): Directory bread(block 69) failed
[  277.864688][ T5799] FAT-fs (loop2): Directory bread(block 70) failed
[  277.871621][ T5799] FAT-fs (loop2): Directory bread(block 71) failed
[  277.878517][ T5799] FAT-fs (loop2): Directory bread(block 72) failed
[  277.890629][ T5799] FAT-fs (loop2): Directory bread(block 73) failed
[  278.281243][   T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  278.381491][   T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  278.431368][   T70] bond0 (unregistering): Released all slaves
[  278.456375][ T5801] loop4: detected capacity change from 0 to 4096
[  278.461995][ T5803] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  279.444584][ T5801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  279.475413][ T5702] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  279.629014][   T70] hsr_slave_0: left promiscuous mode
[  279.650965][   T70] hsr_slave_1: left promiscuous mode
[  279.678147][   T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.686023][   T70] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.701536][ T5801] Zero length message leads to an empty skb
[  279.724301][   T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.736345][   T70] batman_adv: batadv0: Removing interface: batadv_slave_1
[  279.806210][   T70] veth1_macvtap: left promiscuous mode
[  279.812216][   T70] veth0_macvtap: left promiscuous mode
[  279.818101][   T70] veth1_vlan: left promiscuous mode
[  279.823889][   T70] veth0_vlan: left promiscuous mode
[  279.869869][ T5079] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  279.893178][ T5079] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  279.902762][ T5079] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  279.916119][ T5079] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  279.927259][ T5079] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  279.938502][ T5079] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  280.542478][ T1232] ieee802154 phy0 wpan0: encryption failed: -22
[  280.550811][ T1232] ieee802154 phy1 wpan1: encryption failed: -22
[  280.888269][   T70] team0 (unregistering): Port device team_slave_1 removed
[  280.917430][   T70] team0 (unregistering): Port device team_slave_0 removed
[  281.281707][ T5702] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  281.373821][ T5702] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  281.482731][   T29] audit: type=1326 audit(1717948010.971:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28bd47cf69 code=0x0
[  281.491438][ T5702] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  281.866913][ T5828] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  282.203769][ T5079] Bluetooth: hci3: command tx timeout
[  282.807071][ T5702] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.960483][ T5702] 8021q: adding VLAN 0 to HW filter on device team0
[  283.014870][  T788] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.022692][  T788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.042260][ T5836] 9pnet_fd: Insufficient options for proto=fd
[  283.127232][  T788] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.135031][  T788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.242199][ T5815] chnl_net:caif_netlink_parms(): no params data found
[  283.615606][   T29] audit: type=1326 audit(1717948013.021:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a607cf69 code=0x7fc00000
[  284.286702][ T5079] Bluetooth: hci3: command tx timeout
[  284.864662][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.872597][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.882963][ T5815] bridge_slave_0: entered allmulticast mode
[  284.892262][ T5815] bridge_slave_0: entered promiscuous mode
[  284.994409][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.005879][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.014546][ T5815] bridge_slave_1: entered allmulticast mode
[  285.023658][ T5815] bridge_slave_1: entered promiscuous mode
[  285.292404][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.415374][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.651904][ T5815] team0: Port device team_slave_0 added
[  285.730559][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.738404][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.746630][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.754430][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.762243][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.772146][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.780494][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.781714][ T5702] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.788055][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.802680][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.810511][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.818168][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.825893][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.833807][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.834905][  T788] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  285.841427][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.841574][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.841716][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.841866][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.857305][ T5815] team0: Port device team_slave_1 added
[  285.864512][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.898355][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.906078][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.913836][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.921650][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.929316][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.937056][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.944788][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.952532][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.960287][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.967940][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.977697][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.986065][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  285.993819][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  286.001528][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  286.009180][ T5152] hid-generic 0007:0001:0008.0001: unknown main item tag 0x0
[  286.055153][ T5152] hid-generic 0007:0001:0008.0001: hidraw0: <UNKNOWN> HID v0.07 Device [syz0] on syz1
[  286.161956][  T788] usb 5-1: Using ep0 maxpacket: 16
[  286.195089][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.202681][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.229006][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.313709][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.322347][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.348907][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.362545][  T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  286.374215][  T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  286.387983][  T788] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  286.398509][  T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.416329][ T5079] Bluetooth: hci3: command tx timeout
[  286.428161][ T5863] loop2: detected capacity change from 0 to 512
[  286.553210][  T788] usb 5-1: config 0 descriptor??
[  286.611805][ T5863] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.2: corrupted in-inode xattr: bad e_name length
[  286.630473][ T5867] loop1: detected capacity change from 0 to 256
[  286.655688][ T5702] veth0_vlan: entered promiscuous mode
[  286.686393][ T5815] hsr_slave_0: entered promiscuous mode
[  286.697294][ T5863] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  286.713745][ T5815] hsr_slave_1: entered promiscuous mode
[  286.723304][ T5863] EXT4-fs (loop2): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.736945][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  286.745634][ T5815] Cannot create hsr debugfs directory
[  286.771653][ T5863] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.2: corrupted in-inode xattr: bad e_name length
[  286.802373][ T5702] veth1_vlan: entered promiscuous mode
[  286.827660][ T5867] FAT-fs (loop1): Directory bread(block 64) failed
[  286.834813][ T5867] FAT-fs (loop1): Directory bread(block 65) failed
[  286.841817][ T5867] FAT-fs (loop1): Directory bread(block 66) failed
[  286.848583][ T5867] FAT-fs (loop1): Directory bread(block 67) failed
[  286.855836][ T5867] FAT-fs (loop1): Directory bread(block 68) failed
[  286.862716][ T5867] FAT-fs (loop1): Directory bread(block 69) failed
[  286.869741][ T5867] FAT-fs (loop1): Directory bread(block 70) failed
[  286.875822][ T5861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.876407][ T5867] FAT-fs (loop1): Directory bread(block 71) failed
[  286.885344][ T5861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.891709][ T5867] FAT-fs (loop1): Directory bread(block 72) failed
[  286.908158][ T5867] FAT-fs (loop1): Directory bread(block 73) failed
[  286.917792][ T5861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.927651][ T5861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.149248][ T5863] EXT4-fs warning (device loop2): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  287.160945][ T5863] EXT4-fs warning (device loop2): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  287.173346][ T5863] EXT4-fs warning (device loop2): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  287.250853][  T788] usbhid 5-1:0.0: can't add hid device: -71
[  287.257479][  T788] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  287.294832][ T5863] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 312: padding at end of block bitmap is not set
[  287.325279][  T788] usb 5-1: USB disconnect, device number 2
[  287.384492][ T5863] overlayfs: failed to verify upper root origin
[  287.437070][ T5702] veth0_macvtap: entered promiscuous mode
[  287.491080][ T5702] veth1_macvtap: entered promiscuous mode
[  287.653819][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.665457][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.676695][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.688283][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.700986][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.711722][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.734976][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.745106][ T5075] EXT4-fs (loop2): unmounting filesystem 00000004-0000-0000-0000-000000000000.
[  287.883207][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.895270][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.906589][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.918392][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.929618][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.945508][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.964474][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.196425][ T5702] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.210729][ T5702] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.223084][ T5702] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.236529][ T5702] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.249980][ T5876] loop2: detected capacity change from 0 to 256
[  288.287222][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  288.292305][ T5876] FAT-fs (loop2): Unrecognized mount option "���#�̉d=���8����J��0�G֚��d�K]/�\�k��˱K��L$9)~�X��$3}��L���"Bw�Æ#�7��W�r3�T��]�žL9do�8��0x0000000000000000" or missing value
[  288.376477][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  288.404365][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  288.426941][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  288.450049][ T5079] Bluetooth: hci3: command tx timeout
[  288.570054][ T5876] loop2: detected capacity change from 0 to 256
[  288.579748][ T5876] FAT-fs (loop2): Unrecognized mount option "���#�̉d=���8����J��0�G֚��d�K]/�\�k��˱K��L$9)~�X��$3}��L���"Bw�Æ#�7��W�r3�T��]�žL9do�8��0x0000000000000000" or missing value
[  288.695606][ T5882] loop1: detected capacity change from 0 to 64
[  288.713634][ T5876] loop2: detected capacity change from 0 to 256
[  288.729693][ T5876] FAT-fs (loop2): Unrecognized mount option "���#�̉d=���8����J��0�G֚��d�K]/�\�k��˱K��L$9)~�X��$3}��L���"Bw�Æ#�7��W�r3�T��]�žL9do�8��0x0000000000000000" or missing value
[  288.888865][ T5876] loop2: detected capacity change from 0 to 256
[  288.922732][ T5876] FAT-fs (loop2): Unrecognized mount option "���#�̉d=���8����J��0�G֚��d�K]/�\�k��˱K��L$9)~�X��$3}��L���"Bw�Æ#�7��W�r3�T��]�žL9do�8��0x0000000000000000" or missing value
[  289.037802][ T5876] loop2: detected capacity change from 0 to 256
[  289.060335][ T5876] FAT-fs (loop2): Unrecognized mount option "���#�̉d=���8����J��0�G֚��d�K]/�\�k��˱K��L$9)~�X��$3}��L���"Bw�Æ#�7��W�r3�T��]�žL9do�8��0x0000000000000000" or missing value
[  289.085900][ T5882] hfs: unable to load codepage "iso8859#9"
[  289.092721][ T5882] hfs: unable to parse mount options
[  289.281662][ T5876] loop2: detected capacity change from 0 to 256
[  289.344048][ T5876] FAT-fs (loop2): Unrecognized mount option "���#�̉d=���8����J��0�G֚��d�K]/�\�k��˱K��L$9)~�X��$3}��L���"Bw�Æ#�7��W�r3�T��]�žL9do�8��0x0000000000000000" or missing value
[  289.378102][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.555611][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[  289.557827][ T5876] loop2: detected capacity change from 0 to 256
[  289.581199][ T5079] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  289.589957][ T5079] Bluetooth: hci1: Injecting HCI hardware error event
[  289.596982][ T5876] FAT-fs (loop2): Unrecognized mount option "���#�̉d=���8����J��0�G֚��d�K]/�\�k��˱K��L$9)~�X��$3}��L���"Bw�Æ#�7��W�r3�T��]�žL9do�8��0x0000000000000000" or missing value
[  289.597570][ T5079] Bluetooth: hci1: hardware error 0x00
[  289.674010][  T780] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.681773][  T780] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.736635][ T5876] loop2: detected capacity change from 0 to 256
[  289.755702][ T5876] FAT-fs (loop2): Unrecognized mount option "���#�̉d=���8����J��0�G֚��d�K]/�\�k��˱K��L$9)~�X��$3}��L���"Bw�Æ#�7��W�r3�T��]�žL9do�8��0x0000000000000000" or missing value
[  289.787516][  T780] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.795284][  T780] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.940876][ T5876] loop2: detected capacity change from 0 to 256
[  289.954660][ T5876] FAT-fs (loop2): Unrecognized mount option "���#�̉d=���8����J��0�G֚��d�K]/�\�k��˱K��L$9)~�X��$3}��L���"Bw�Æ#�7��W�r3�T��]�žL9do�8��0x0000000000000000" or missing value
[  290.133913][ T5876] loop2: detected capacity change from 0 to 256
[  290.185106][ T5876] FAT-fs (loop2): Unrecognized mount option "���#�̉d=���8����J��0�G֚��d�K]/�\�k��˱K��L$9)~�X��$3}��L���"Bw�Æ#�7��W�r3�T��]�žL9do�8��0x0000000000000000" or missing value
[  290.421630][ T5876] loop2: detected capacity change from 0 to 256
[  290.442575][ T5876] FAT-fs (loop2): Unrecognized mount option "���#�̉d=���8����J��0�G֚��d�K]/�\�k��˱K��L$9)~�X��$3}��L���"Bw�Æ#�7��W�r3�T��]�žL9do�8��0x0000000000000000" or missing value
[  290.646677][ T5876] loop2: detected capacity change from 0 to 256
[  290.672129][ T5876] FAT-fs (loop2): Unrecognized mount option "���#�̉d=���8����J��0�G֚��d�K]/�\�k��˱K��L$9)~�X��$3}��L���"Bw�Æ#�7��W�r3�T��]�žL9do�8��0x0000000000000000" or missing value
[  290.682185][ T5906] loop4: detected capacity change from 0 to 64
[  290.811308][ T5876] loop2: detected capacity change from 0 to 256
[  290.827014][ T5876] FAT-fs (loop2): Unrecognized mount option "���#�̉d=���8����J��0�G֚��d�K]/�\�k��˱K��L$9)~�X��$3}��L���"Bw�Æ#�7��W�r3�T��]�žL9do�8��0x0000000000000000" or missing value
[  290.976193][ T5876] loop2: detected capacity change from 0 to 256
[  291.012168][ T5876] FAT-fs (loop2): Unrecognized mount option "���#�̉d=���8����J��0�G֚��d�K]/�\�k��˱K��L$9)~�X��$3}��L���"Bw�Æ#�7��W�r3�T��]�žL9do�8��0x0000000000000000" or missing value
[  291.061000][ T5906] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.4'.
[  291.103151][ T5908] loop1: detected capacity change from 0 to 2048
[  291.256227][ T5908] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 218103810)!
[  291.269145][ T5908] EXT4-fs (loop1): group descriptors corrupted!
[  291.642528][ T5079] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  291.668793][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.145703][ T5815] veth0_vlan: entered promiscuous mode
[  292.227502][ T5815] veth1_vlan: entered promiscuous mode
[  292.391383][ T5922] netlink: 'syz-executor.1': attribute type 30 has an invalid length.
[  292.400276][ T5922] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  292.409704][ T5922] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  292.417542][ T5921] loop2: detected capacity change from 0 to 64
[  292.601369][ T5815] veth0_macvtap: entered promiscuous mode
[  292.686818][ T5815] veth1_macvtap: entered promiscuous mode
[  292.724250][ T5925] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  292.935447][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.951516][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.962751][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.973484][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.983889][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.994666][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.004835][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.015778][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.031099][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.653456][ T5925] loop1: detected capacity change from 0 to 40427
[  293.795213][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.806128][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.816240][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.826971][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.837069][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.847840][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.857996][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.873105][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.889342][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.238187][ T5925] loop1: detected capacity change from 0 to 1024
[  294.250753][ T5925] hfsplus: unable to parse mount options
[  294.250996][ T5930] loop2: detected capacity change from 0 to 256
[  294.444740][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.455769][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.465734][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.476983][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.508497][ T5930] FAT-fs (loop2): Directory bread(block 64) failed
[  294.515531][ T5930] FAT-fs (loop2): Directory bread(block 65) failed
[  294.522735][ T5930] FAT-fs (loop2): Directory bread(block 66) failed
[  294.529731][ T5930] FAT-fs (loop2): Directory bread(block 67) failed
[  294.536654][ T5930] FAT-fs (loop2): Directory bread(block 68) failed
[  294.543577][ T5930] FAT-fs (loop2): Directory bread(block 69) failed
[  294.550590][ T5930] FAT-fs (loop2): Directory bread(block 70) failed
[  294.557356][ T5930] FAT-fs (loop2): Directory bread(block 71) failed
[  294.564401][ T5930] FAT-fs (loop2): Directory bread(block 72) failed
[  294.571311][ T5930] FAT-fs (loop2): Directory bread(block 73) failed
[  295.607594][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.615909][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.706681][ T5947] loop4: detected capacity change from 0 to 1024
[  295.717996][  T780] kernel read not supported for file syzkaller-testdir4253199056/syzkaller.7U78rS/35/file0 (pid: 780 comm: kworker/0:2)
[  295.881528][ T4162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.891107][ T4162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.098784][ T4162] hfsplus: b-tree write err: -5, ino 4
[  296.470013][  T780] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  296.632031][ T5956] loop3: detected capacity change from 0 to 1024
[  296.700077][  T780] usb 3-1: device descriptor read/64, error -71
[  296.755365][ T5956] devpts: called with bogus options
[  296.951016][ T4162] hfsplus: b-tree write err: -5, ino 4
[  296.967138][ T5963] loop1: detected capacity change from 0 to 256
[  296.996376][ T5963] exfat: Bad value for 'uid'
[  297.042101][  T780] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  297.259698][  T780] usb 3-1: device descriptor read/64, error -71
[  297.411888][  T780] usb usb3-port1: attempt power cycle
[  297.794481][ T5970] loop1: detected capacity change from 0 to 2048
[  297.858148][  T780] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  297.867767][ T5970] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 218103810)!
[  297.879219][ T5970] EXT4-fs (loop1): group descriptors corrupted!
[  297.972014][  T780] usb 3-1: device descriptor read/8, error -71
[  298.270672][  T780] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  298.393045][  T780] usb 3-1: device descriptor read/8, error -71
[  298.558744][  T780] usb usb3-port1: unable to enumerate USB device
[  298.964430][ T5976] loop3: detected capacity change from 0 to 32768
[  299.053226][ T5976] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  299.232272][ T5980] loop1: detected capacity change from 0 to 2048
[  299.273486][ T5980] udf: Unknown parameter 'ioF��set'
[  299.554528][ T5976] XFS (loop3): Ending clean mount
[  299.638970][ T5976] XFS (loop3): Quotacheck needed: Please wait.
[  299.779117][ T5976] XFS (loop3): Quotacheck: Done.
[  299.976726][   T29] audit: type=1800 audit(1717948029.341:15): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=9291 res=0 errno=0
[  300.144642][ T5702] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  300.331371][ T5980] loop1: detected capacity change from 0 to 32768
[  300.481262][ T5980] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  301.264572][ T4162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.273085][ T4162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.374848][ T5980] XFS (loop1): Ending clean mount
[  301.399047][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.407865][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.499407][ T5980] XFS (loop1): Quotacheck needed: Please wait.
[  301.653374][ T5980] XFS (loop1): Quotacheck: Done.
[  301.970150][ T5071] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  302.221706][ T6014] loop2: detected capacity change from 0 to 1024
[  302.299955][ T6014] devpts: called with bogus options
[  302.388941][ T6016] loop3: detected capacity change from 0 to 256
[  302.558925][ T3343] hfsplus: b-tree write err: -5, ino 4
[  302.627034][ T6021] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0
[  302.710842][ T6016] FAT-fs (loop3): Directory bread(block 64) failed
[  302.717636][ T6016] FAT-fs (loop3): Directory bread(block 65) failed
[  302.724736][ T6016] FAT-fs (loop3): Directory bread(block 66) failed
[  302.731599][ T6016] FAT-fs (loop3): Directory bread(block 67) failed
[  302.738513][ T6016] FAT-fs (loop3): Directory bread(block 68) failed
[  302.745474][ T6016] FAT-fs (loop3): Directory bread(block 69) failed
[  302.752693][ T6016] FAT-fs (loop3): Directory bread(block 70) failed
[  302.759625][ T6016] FAT-fs (loop3): Directory bread(block 71) failed
[  302.766586][ T6016] FAT-fs (loop3): Directory bread(block 72) failed
[  302.778403][ T6016] FAT-fs (loop3): Directory bread(block 73) failed
[  303.286860][ T6027] loop2: detected capacity change from 0 to 2048
[  303.328117][ T6027] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 218103810)!
[  303.339854][ T6027] EXT4-fs (loop2): group descriptors corrupted!
[  303.370034][ T5123] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  303.830357][ T5123] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=f0.a0
[  303.840909][ T5123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.974204][ T5123] usb 1-1: config 0 descriptor??
[  304.077609][ T5123] kl5kusb105 1-1:0.0: KL5KUSB105D / PalmConnect converter detected
[  304.175678][ T5123] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  304.424260][ T6038] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
[  304.469077][ T6032] loop1: detected capacity change from 0 to 32768
[  304.483149][ T6032] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6032)
[  304.552537][ T6032] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  304.563182][ T6032] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  304.573383][ T6032] BTRFS info (device loop1): using free-space-tree
[  304.826751][ T6058] loop4: detected capacity change from 0 to 128
[  304.848288][ T6052] loop3: detected capacity change from 0 to 164
[  304.871324][ T6058] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  304.999319][ T6052] Unable to read rock-ridge attributes
[  305.069030][ T6052] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  305.077591][ T6052] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  305.090992][ T6052] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  305.099389][ T6052] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  305.232731][ T6064] Unable to read rock-ridge attributes
[  305.257325][ T6047] loop2: detected capacity change from 0 to 2048
[  305.363496][ T6047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  305.538607][ T5071] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  305.989367][ T2920] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  306.001394][ T6069] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  306.009867][ T6069] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'.
[  306.070550][ T5123] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  306.372234][ T5123] usb 4-1: Using ep0 maxpacket: 16
[  306.510242][ T5123] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  306.519215][ T5123] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  306.529787][ T5123] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  306.638204][  T788] usb 1-1: USB disconnect, device number 3
[  306.698001][  T788] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  306.709410][  T788] kl5kusb105 1-1:0.0: device disconnected
[  306.789999][ T5123] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  306.799351][ T5123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.807787][ T5123] usb 4-1: Product: syz
[  306.813582][ T5123] usb 4-1: Manufacturer: ᱐ꕪ㬺ꮞ⭥ꌧ밌ᜋ䌪鱝청뫨畂휣☔坣댝䗐쳅裂樌⭃ҟ漰䇛둳朸뺗㹤闧襏關禝꓂ꞛ鬿㙕涟ꌔ霨烼憻ꏠꝟ䏮윯嬴焁⒭俁䪌꘤臠盠녥Ⱬჟ荙궊ᠩᒼ嘸疭㧭鰭㶱〠먶䶯맕ｽꌣ႖ꍔ谖阦廖娾줱艙ꏏଙ馔零厲腿観譼韼⩡ܸ㺹迷
[  306.846931][ T5123] usb 4-1: SerialNumber: syz
[  306.889947][ T5128] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  307.180311][ T5128] usb 5-1: Using ep0 maxpacket: 16
[  307.244398][ T6079] loop0: detected capacity change from 0 to 1024
[  307.358755][ T6079] devpts: called with bogus options
[  307.382971][ T5123] usb 4-1: 0:2 : does not exist
[  307.471179][ T5128] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  307.484897][ T5128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.487398][ T5123] usb 4-1: USB disconnect, device number 3
[  307.494348][ T5128] usb 5-1: Product: syz
[  307.504203][ T5128] usb 5-1: Manufacturer: syz
[  307.509021][ T5128] usb 5-1: SerialNumber: syz
[  307.663631][   T70] hfsplus: b-tree write err: -5, ino 4
[  307.691378][ T5128] r8152-cfgselector 5-1: Unknown version 0x0000
[  307.697921][ T5128] r8152-cfgselector 5-1: config 0 descriptor??
[  307.778803][ T6088] loop1: detected capacity change from 0 to 256
[  308.047219][ T6075] loop4: detected capacity change from 0 to 256
[  308.122945][ T6075] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  308.140025][ T6075] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  308.150384][ T6075] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  308.158243][ T6075] UDF-fs: Scanning with blocksize 512 failed
[  308.191351][ T6088] FAT-fs (loop1): Directory bread(block 64) failed
[  308.203254][ T6088] FAT-fs (loop1): Directory bread(block 65) failed
[  308.212124][ T6088] FAT-fs (loop1): Directory bread(block 66) failed
[  308.218889][ T6088] FAT-fs (loop1): Directory bread(block 67) failed
[  308.226034][ T6088] FAT-fs (loop1): Directory bread(block 68) failed
[  308.232938][ T6088] FAT-fs (loop1): Directory bread(block 69) failed
[  308.238659][ T6075] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  308.239850][ T6088] FAT-fs (loop1): Directory bread(block 70) failed
[  308.256336][ T6088] FAT-fs (loop1): Directory bread(block 71) failed
[  308.263312][ T6088] FAT-fs (loop1): Directory bread(block 72) failed
[  308.270189][ T6088] FAT-fs (loop1): Directory bread(block 73) failed
[  308.307255][ T6090] loop0: detected capacity change from 0 to 2048
[  308.334842][ T6075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  308.358722][ T6090] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 218103810)!
[  308.370261][ T6090] EXT4-fs (loop0): group descriptors corrupted!
[  309.207073][ T6096] loop2: detected capacity change from 0 to 32768
[  309.250007][ T6096] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6096)
[  309.278682][ T6096] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  309.290598][ T6096] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  309.302984][ T6096] BTRFS info (device loop2): using free-space-tree
[  309.752072][ T5128] r8152-cfgselector 5-1: USB disconnect, device number 3
[  309.767558][ T6117] loop3: detected capacity change from 0 to 2048
[  309.780135][ T6119] loop0: detected capacity change from 0 to 512
[  309.816216][ T6119] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  309.904717][ T6119] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value out of bounds
[  309.956004][ T6119] EXT4-fs (loop0): Remounting filesystem read-only
[  309.965674][ T6119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.967151][ T6117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.097969][ T5815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.182851][ T5702] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.225663][ T5075] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  310.272920][ T6126] loop4: detected capacity change from 0 to 16
[  310.298629][ T6126] erofs: (device loop4): mounted with root inode @ nid 36.
[  310.324035][ T6126] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36
[  310.358811][ T6126] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36
[  310.396198][ T6126] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36
[  310.468561][ T6130] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36
[  310.688901][ T6128] loop1: detected capacity change from 0 to 8192
[  310.811341][ T6128] REISERFS warning (device loop1): super-6519 read_super_block: Unfinished reiserfsck --rebuild-tree run detected. Please run
[  310.811341][ T6128] reiserfsck --rebuild-tree and wait for a completion. If that fails
[  310.811341][ T6128] get newer reiserfsprogs package
[  311.735974][ T6142] loop1: detected capacity change from 0 to 1024
[  311.775222][ T6126] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  311.839005][ T6142] devpts: called with bogus options
[  312.137668][ T2876] hfsplus: b-tree write err: -5, ino 4
[  312.493309][ T6154] loop4: detected capacity change from 0 to 2048
[  312.592460][ T6154] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 218103810)!
[  312.608528][ T6154] EXT4-fs (loop4): group descriptors corrupted!
[  312.824109][ T6162] loop2: detected capacity change from 0 to 256
[  312.973777][ T6162] FAT-fs (loop2): Directory bread(block 64) failed
[  312.981053][ T6162] FAT-fs (loop2): Directory bread(block 65) failed
[  312.987952][ T6162] FAT-fs (loop2): Directory bread(block 66) failed
[  312.995176][ T6162] FAT-fs (loop2): Directory bread(block 67) failed
[  313.002241][ T6162] FAT-fs (loop2): Directory bread(block 68) failed
[  313.013897][ T6162] FAT-fs (loop2): Directory bread(block 69) failed
[  313.022232][ T6162] FAT-fs (loop2): Directory bread(block 70) failed
[  313.028995][ T6162] FAT-fs (loop2): Directory bread(block 71) failed
[  313.036058][ T6162] FAT-fs (loop2): Directory bread(block 72) failed
[  313.043004][ T6162] FAT-fs (loop2): Directory bread(block 73) failed
[  313.312652][ T6169] loop3: detected capacity change from 0 to 1764
[  314.395565][ T6177] loop4: detected capacity change from 0 to 32768
[  314.413850][ T6177] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6177)
[  314.454570][ T6177] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  314.465202][ T6177] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm
[  314.476487][ T6177] BTRFS info (device loop4): disk space caching is enabled
[  314.566655][ T6185] loop3: detected capacity change from 0 to 1024
[  314.718269][ T6177] BTRFS info (device loop4): rebuilding free space tree
[  314.721272][ T6185] devpts: called with bogus options
[  314.775169][ T6177] BTRFS info (device loop4): disabling free space tree
[  314.782517][ T6177] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  314.792509][ T6177] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  315.035559][ T1090] hfsplus: b-tree write err: -5, ino 4
[  315.335779][ T6209] loop2: detected capacity change from 0 to 2048
[  315.381572][ T6210] loop1: detected capacity change from 0 to 2048
[  315.435163][ T5085] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  315.473102][ T6212] loop3: detected capacity change from 0 to 128
[  315.517316][ T6215] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  315.541083][ T6209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.564852][ T6212] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  315.632289][ T6212] ext4 filesystem being mounted at /root/syzkaller-testdir2188528275/syzkaller.0aXahr/13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  315.792771][ T6221] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz-executor.2: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  315.871014][ T6221] EXT4-fs (loop2): Remounting filesystem read-only
[  316.072509][ T5702] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  316.175643][ T5075] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.701462][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  316.729217][ T6233] loop0: detected capacity change from 0 to 256
[  316.751446][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  317.221239][ T6233] FAT-fs (loop0): Directory bread(block 64) failed
[  317.228127][ T6233] FAT-fs (loop0): Directory bread(block 65) failed
[  317.235213][ T6233] FAT-fs (loop0): Directory bread(block 66) failed
[  317.242174][ T6233] FAT-fs (loop0): Directory bread(block 67) failed
[  317.249092][ T6233] FAT-fs (loop0): Directory bread(block 68) failed
[  317.256020][ T6233] FAT-fs (loop0): Directory bread(block 69) failed
[  317.263036][ T6233] FAT-fs (loop0): Directory bread(block 70) failed
[  317.270221][ T6233] FAT-fs (loop0): Directory bread(block 71) failed
[  317.277135][ T6233] FAT-fs (loop0): Directory bread(block 72) failed
[  317.284017][ T6233] FAT-fs (loop0): Directory bread(block 73) failed
[  317.490600][ T6244] loop2: detected capacity change from 0 to 1024
[  317.560934][ T6244] devpts: called with bogus options
[  317.789252][   T70] hfsplus: b-tree write err: -5, ino 4
[  318.083759][ T6257] loop1: detected capacity change from 0 to 128
[  318.159189][ T6259] usb usb5: usbfs: process 6259 (syz-executor.2) did not claim interface 0 before use
[  318.167420][ T6257] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  318.190825][ T6257] ext4 filesystem being mounted at /root/syzkaller-testdir4253199056/syzkaller.7U78rS/52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  318.330551][ T5123] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  318.875084][ T5123] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  318.885735][ T5123] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  318.895168][ T5123] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  319.182936][ T5071] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  319.241814][ T5123] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  319.251398][ T5123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.252119][ T6264] loop0: detected capacity change from 0 to 40427
[  319.264047][ T5123] usb 4-1: Product: syz
[  319.264156][ T5123] usb 4-1: Manufacturer: syz
[  319.264263][ T5123] usb 4-1: SerialNumber: syz
[  319.402164][ T6264] F2FS-fs (loop0): Found nat_bits in checkpoint
[  319.404580][ T5123] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  319.415802][ T5123] cdc_ncm 4-1:1.0: bind() failure
[  319.622010][   T29] audit: type=1804 audit(1717948049.081:16): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir765232624/syzkaller.JGTFOM/51/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0
[  319.661120][ T5123] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  319.728449][ T6275] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  319.739953][ T6264] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  319.742460][  T780] usb 4-1: USB disconnect, device number 4
[  319.980092][ T5123] usb 5-1: Using ep0 maxpacket: 32
[  320.192672][ T5123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.207021][ T5123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.218197][ T5123] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  320.227623][ T5123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.372519][ T5123] usb 5-1: config 0 descriptor??
[  320.432689][ T5123] hub 5-1:0.0: USB hub found
[  320.805414][ T6280] loop1: detected capacity change from 0 to 40427
[  320.838773][ T6280] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  320.848746][ T6280] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  320.960330][ T6280] F2FS-fs (loop1): Found nat_bits in checkpoint
[  321.450662][ T6280] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  321.457973][ T6280] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  321.505097][ T6280] syz-executor.1: attempt to access beyond end of device
[  321.505097][ T6280] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  321.540427][ T6280] syz-executor.1: attempt to access beyond end of device
[  321.540427][ T6280] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  321.601091][ T5123] hub 5-1:0.0: 1 port detected
[  321.980351][ T6292] loop3: detected capacity change from 0 to 1024
[  322.038085][ T6292] devpts: called with bogus options
[  322.445900][   T59] hfsplus: b-tree write err: -5, ino 4
[  322.464775][ T6294] loop2: detected capacity change from 0 to 256
[  322.570105][  T780] hub 5-1:0.0: activate --> -90
[  322.813348][ T6298] ��������: entered promiscuous mode
[  322.824423][ T6294] FAT-fs (loop2): Directory bread(block 64) failed
[  322.831544][ T6294] FAT-fs (loop2): Directory bread(block 65) failed
[  322.843404][ T6294] FAT-fs (loop2): Directory bread(block 66) failed
[  322.851776][ T6294] FAT-fs (loop2): Directory bread(block 67) failed
[  322.858673][ T6294] FAT-fs (loop2): Directory bread(block 68) failed
[  322.865514][ T6294] FAT-fs (loop2): Directory bread(block 69) failed
[  322.872542][ T6294] FAT-fs (loop2): Directory bread(block 70) failed
[  322.879298][ T6294] FAT-fs (loop2): Directory bread(block 71) failed
[  322.886335][ T6294] FAT-fs (loop2): Directory bread(block 72) failed
[  322.893242][ T6294] FAT-fs (loop2): Directory bread(block 73) failed
[  323.617442][  T788] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  323.629878][ T5123] usb 5-1: USB disconnect, device number 4
[  323.700100][  T780] usb 5-1.1: new full-speed USB device number 5 using dummy_hcd
[  323.708059][  T780] usb 5-1.1: parent hub has no TT
[  323.714618][  T780] usb 5-1-port1: attempt power cycle
[  323.870688][  T788] usb 1-1: Using ep0 maxpacket: 32
[  323.893226][ T6308] loop3: detected capacity change from 0 to 128
[  323.941881][ T6308] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  323.991636][ T6308] ext4 filesystem being mounted at /root/syzkaller-testdir2188528275/syzkaller.0aXahr/21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  324.030882][  T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.043770][  T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.054496][  T788] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  324.063943][  T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.140910][  T788] usb 1-1: config 0 descriptor??
[  324.294310][ T5702] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  324.404423][ T5128] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  324.658918][  T788] hid-rmi 0003:0461:4E72.0002: unknown main item tag 0x0
[  324.667045][  T788] hid-rmi 0003:0461:4E72.0002: unknown main item tag 0x0
[  324.752890][  T788] hid-rmi 0003:0461:4E72.0002: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0
[  324.820473][ T5128] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  324.830661][ T5128] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  324.865950][  T788] usb 1-1: USB disconnect, device number 4
[  325.050545][ T5128] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  325.053967][ T6324] loop3: detected capacity change from 0 to 256
[  325.060016][ T5128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.074875][ T5128] usb 3-1: Product: syz
[  325.079351][ T5128] usb 3-1: Manufacturer: syz
[  325.084425][ T5128] usb 3-1: SerialNumber: syz
[  325.090596][ T5123] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  325.121303][ T5128] usb 3-1: config 0 descriptor??
[  325.141044][ T6312] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  325.155062][ T6312] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  325.218877][ T6324] FAT-fs (loop3): Directory bread(block 64) failed
[  325.226144][ T6324] FAT-fs (loop3): Directory bread(block 65) failed
[  325.233606][ T6324] FAT-fs (loop3): Directory bread(block 66) failed
[  325.240500][ T6324] FAT-fs (loop3): Directory bread(block 67) failed
[  325.247396][ T6324] FAT-fs (loop3): Directory bread(block 68) failed
[  325.247739][ T6326] mmap: syz-executor.1 (6326): VmData 175796224 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[  325.254148][ T6324] FAT-fs (loop3): Directory bread(block 69) failed
[  325.254419][ T6324] FAT-fs (loop3): Directory bread(block 70) failed
[  325.281575][ T6324] FAT-fs (loop3): Directory bread(block 71) failed
[  325.288482][ T6324] FAT-fs (loop3): Directory bread(block 72) failed
[  325.300734][ T6324] FAT-fs (loop3): Directory bread(block 73) failed
[  325.355151][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  325.387848][ T6312] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  325.397752][ T6312] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  325.461820][ T5123] usb 5-1: Using ep0 maxpacket: 16
[  325.608499][ T5123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.620059][ T5123] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  325.633625][ T5123] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  325.645012][ T5123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.694667][ T5123] usb 5-1: config 0 descriptor??
[  325.889175][   T29] audit: type=1800 audit(1717948055.411:17): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="sda1" ino=1945 res=0 errno=0
[  325.915471][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  326.120690][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  326.228048][ T5128] dm9601: No valid MAC address in EEPROM, using 56:c0:43:f7:69:95
[  326.315760][ T5123] HID 045e:07da: Invalid code 65791 type 1
[  326.351973][ T5123] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input6
[  326.464813][ T5123] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  326.593319][ T6335] loop3: detected capacity change from 0 to 1024
[  326.684511][ T6335] devpts: called with bogus options
[  326.711775][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  326.721238][ T5128] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  326.734423][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  326.737800][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  326.953790][   T59] hfsplus: b-tree write err: -5, ino 4
[  327.143625][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  327.154678][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  327.841439][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  328.620055][ T6407] loop3: detected capacity change from 0 to 256
[  328.976220][ T5128] usb 5-1: USB disconnect, device number 9
[  329.017858][ T5123] usb 3-1: USB disconnect, device number 7
[  329.219075][ T6413] loop1: detected capacity change from 0 to 128
[  329.842785][ T6446] loop0: detected capacity change from 0 to 64
[  329.899148][ T6446] hfs: unable to parse mount options
[  331.433424][ T6446] loop0: detected capacity change from 0 to 65536
[  331.448656][ T6413] EXT4-fs: error -4 creating inode table initialization thread
[  331.530454][ T6413] EXT4-fs (loop1): mount failed
[  331.898234][ T6446] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  331.981910][ T6407] FAT-fs (loop3): Directory bread(block 64) failed
[  331.988783][ T6407] FAT-fs (loop3): Directory bread(block 65) failed
[  331.996080][ T6407] FAT-fs (loop3): Directory bread(block 66) failed
[  332.003717][ T6407] FAT-fs (loop3): Directory bread(block 67) failed
[  332.010784][ T6407] FAT-fs (loop3): Directory bread(block 68) failed
[  332.017537][ T6407] FAT-fs (loop3): Directory bread(block 69) failed
[  332.024551][ T6407] FAT-fs (loop3): Directory bread(block 70) failed
[  332.031961][ T6407] FAT-fs (loop3): Directory bread(block 71) failed
[  332.038852][ T6407] FAT-fs (loop3): Directory bread(block 72) failed
[  332.047770][ T6407] FAT-fs (loop3): Directory bread(block 73) failed
[  332.492115][ T6470] loop1: detected capacity change from 0 to 2048
[  332.540954][ T6446] XFS (loop0): Ending clean mount
[  332.550733][ T6446] XFS (loop0): Quotacheck needed: Please wait.
[  332.618831][ T6446] XFS (loop0): Quotacheck: Done.
[  332.639161][ T6446] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  332.685216][ T6470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.698239][ T6470] ext4 filesystem being mounted at /root/syzkaller-testdir4253199056/syzkaller.7U78rS/59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.848362][ T6470] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 16: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  332.915635][ T6479] loop4: detected capacity change from 0 to 64
[  333.093324][ T6470] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 16: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  333.460697][ T5071] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.800827][ T5082] Bluetooth: hci0: command 0x0406 tx timeout
[  333.807093][ T5082] Bluetooth: hci4: command 0x0406 tx timeout
[  333.894025][   T29] audit: type=1800 audit(1717948063.281:18): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1951 res=0 errno=0
[  333.958619][   T29] audit: type=1804 audit(1717948063.481:19): pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4253199056/syzkaller.7U78rS/60/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0
[  334.487596][ T6502] loop2: detected capacity change from 0 to 128
[  334.563746][ T6502] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  334.666048][ T6507] loop4: detected capacity change from 0 to 256
[  334.666270][ T6502] ext4 filesystem being mounted at /root/syzkaller-testdir765232624/syzkaller.JGTFOM/58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  334.787606][ T6504] loop3: detected capacity change from 0 to 1024
[  334.912908][ T6507] FAT-fs (loop4): Directory bread(block 64) failed
[  334.920041][ T6507] FAT-fs (loop4): Directory bread(block 65) failed
[  334.932026][ T6507] FAT-fs (loop4): Directory bread(block 66) failed
[  334.940304][ T6507] FAT-fs (loop4): Directory bread(block 67) failed
[  334.947201][ T6507] FAT-fs (loop4): Directory bread(block 68) failed
[  334.954151][ T6507] FAT-fs (loop4): Directory bread(block 69) failed
[  334.961229][ T6507] FAT-fs (loop4): Directory bread(block 70) failed
[  334.967975][ T6507] FAT-fs (loop4): Directory bread(block 71) failed
[  334.975051][ T6507] FAT-fs (loop4): Directory bread(block 72) failed
[  334.981912][ T6507] FAT-fs (loop4): Directory bread(block 73) failed
[  335.162987][ T6504] vlan2: entered promiscuous mode
[  335.168274][ T6504] veth0_virt_wifi: entered promiscuous mode
[  335.175397][ T6504] vlan2: entered allmulticast mode
[  335.180877][ T6504] veth0_virt_wifi: entered allmulticast mode
[  335.199277][ T5075] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  335.216517][ T6512] loop1: detected capacity change from 0 to 256
[  335.527477][ T6512] FAT-fs (loop1): Directory bread(block 64) failed
[  335.534528][ T6512] FAT-fs (loop1): Directory bread(block 65) failed
[  335.546380][ T6512] FAT-fs (loop1): Directory bread(block 66) failed
[  335.554754][ T6512] FAT-fs (loop1): Directory bread(block 67) failed
[  335.561928][ T6512] FAT-fs (loop1): Directory bread(block 68) failed
[  335.568700][ T6512] FAT-fs (loop1): Directory bread(block 69) failed
[  335.575747][ T6512] FAT-fs (loop1): Directory bread(block 70) failed
[  335.582673][ T6512] FAT-fs (loop1): Directory bread(block 71) failed
[  335.589762][ T6512] FAT-fs (loop1): Directory bread(block 72) failed
[  335.596527][ T6512] FAT-fs (loop1): Directory bread(block 73) failed
[  336.515832][ T6523] loop0: detected capacity change from 0 to 1024
[  336.539700][ T5123] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  336.877492][   T11] hfsplus: b-tree write err: -5, ino 4
[  336.930448][ T5123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.941807][ T5123] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  336.951258][ T5123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.990021][ T5123] usb 3-1: config 0 descriptor??
[  337.295466][   T29] audit: type=1800 audit(1717948066.761:20): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1968 res=0 errno=0
[  337.774925][ T5123] usbhid 3-1:0.0: can't add hid device: -71
[  337.782014][ T5123] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  337.867931][ T5123] usb 3-1: USB disconnect, device number 8
[  338.052937][   T11] =====================================================
[  338.060263][   T11] BUG: KMSAN: uninit-value in virtqueue_add+0x1e86/0x65c0
[  338.067582][   T11]  virtqueue_add+0x1e86/0x65c0
[  338.072547][   T11]  virtqueue_add_sgs+0x186/0x1b0
[  338.077677][   T11]  virtscsi_add_cmd+0x838/0xad0
[  338.082705][   T11]  virtscsi_queuecommand+0x898/0xa60
[  338.088176][   T11]  scsi_queue_rq+0x4cc7/0x5a80
[  338.093112][   T11]  blk_mq_dispatch_rq_list+0x79b/0x3440
2024/06/09 15:47:47 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  338.098873][   T11]  __blk_mq_sched_dispatch_requests+0x11b7/0x26e0
[  338.105503][   T11]  blk_mq_sched_dispatch_requests+0x12f/0x270
[  338.111787][   T11]  blk_mq_run_hw_queue+0x6e4/0xbc0
[  338.117094][   T11]  blk_mq_flush_plug_list+0x1683/0x2b20
[  338.122848][   T11]  blk_add_rq_to_plug+0x2c6/0x970
[  338.128066][   T11]  blk_mq_submit_bio+0x26e8/0x3390
[  338.133381][   T11]  __submit_bio+0x3b9/0xb60
[  338.138038][   T11]  submit_bio_noacct_nocheck+0x148c/0x1800
[  338.144047][   T11]  submit_bio_noacct+0x1bd8/0x27f0
[  338.149353][   T11]  submit_bio+0x58a/0x5b0
[  338.153961][   T11]  ext4_bio_write_folio+0x1e76/0x2e40
[  338.159542][   T11]  mpage_submit_folio+0x351/0x4a0
[  338.164748][   T11]  ext4_do_writepages+0x3733/0x62e0
[  338.170104][   T11]  ext4_writepages+0x312/0x830
[  338.175042][   T11]  do_writepages+0x427/0xc30
[  338.179784][   T11]  __writeback_single_inode+0x10d/0x12c0
[  338.185584][   T11]  writeback_sb_inodes+0xc95/0x1e00
[  338.190940][   T11]  wb_writeback+0x4df/0xea0
[  338.195597][   T11]  wb_workfn+0x40b/0x1940
[  338.200115][   T11]  process_scheduled_works+0xa81/0x1bd0
[  338.205845][   T11]  worker_thread+0xea5/0x1560
[  338.210696][   T11]  kthread+0x3e2/0x540
[  338.214942][   T11]  ret_from_fork+0x6d/0x90
[  338.219525][   T11]  ret_from_fork_asm+0x1a/0x30
[  338.224476][   T11] 
[  338.226881][   T11] Uninit was stored to memory at:
[  338.232225][   T11]  copy_page_from_iter_atomic+0x12b7/0x2ae0
[  338.238335][   T11]  generic_perform_write+0x4c1/0xc60
[  338.243843][   T11]  ext4_buffered_write_iter+0x564/0xaa0
[  338.249551][   T11]  ext4_file_write_iter+0x208/0x3450
[  338.254981][   T11]  __kernel_write_iter+0x64d/0xc80
[  338.260273][   T11]  dump_user_range+0x8dc/0xee0
[  338.265210][   T11]  elf_core_dump+0x57c7/0x5ae0
[  338.270158][   T11]  do_coredump+0x32d5/0x4920
[  338.274903][   T11]  get_signal+0x267e/0x2d00
[  338.279559][   T11]  arch_do_signal_or_restart+0x53/0xcb0
[  338.285302][   T11]  irqentry_exit_to_user_mode+0xa6/0x160
[  338.291125][   T11]  irqentry_exit+0x16/0x60
[  338.295697][   T11]  exc_page_fault+0x515/0x6f0
[  338.300539][   T11]  asm_exc_page_fault+0x2b/0x30
[  338.305572][   T11] 
[  338.307967][   T11] Uninit was created at:
[  338.312403][   T11]  __alloc_pages+0x9d6/0xe70
[  338.317134][   T11]  alloc_pages_mpol+0x299/0x990
[  338.322139][   T11]  alloc_pages+0x1bf/0x1e0
[  338.326706][   T11]  dump_user_range+0x4a/0xee0
[  338.331548][   T11]  elf_core_dump+0x57c7/0x5ae0
[  338.336484][   T11]  do_coredump+0x32d5/0x4920
[  338.341229][   T11]  get_signal+0x267e/0x2d00
[  338.345876][   T11]  arch_do_signal_or_restart+0x53/0xcb0
[  338.351615][   T11]  irqentry_exit_to_user_mode+0xa6/0x160
[  338.357421][   T11]  irqentry_exit+0x16/0x60
[  338.361998][   T11]  exc_page_fault+0x515/0x6f0
[  338.366836][   T11]  asm_exc_page_fault+0x2b/0x30
[  338.371856][   T11] 
[  338.374245][   T11] Bytes 0-4095 of 4096 are uninitialized
[  338.379968][   T11] Memory access of size 4096 starts at ffff88811f256000
[  338.386999][   T11] 
[  338.389403][   T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0
[  338.399361][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  338.409554][   T11] Workqueue: writeback wb_workfn (flush-8:0)
[  338.415759][   T11] =====================================================
[  338.422772][   T11] Disabling lock debugging due to kernel taint
[  338.429005][   T11] Kernel panic - not syncing: kmsan.panic set ...
[  338.435515][   T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Tainted: G    B              6.9.0-syzkaller-02707-g614da38e2f7a #0
[  338.446774][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  338.456952][   T11] Workqueue: writeback wb_workfn (flush-8:0)
[  338.463160][   T11] Call Trace:
[  338.466534][   T11]  <TASK>
[  338.469561][   T11]  dump_stack_lvl+0x216/0x2d0
[  338.474438][   T11]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  338.480420][   T11]  dump_stack+0x1e/0x30
[  338.484750][   T11]  panic+0x4e2/0xcd0
[  338.488817][   T11]  ? kmsan_get_metadata+0xf1/0x1d0
[  338.494102][   T11]  kmsan_report+0x2d5/0x2e0
[  338.498754][   T11]  ? stack_depot_save_flags+0x66d/0x6e0
[  338.504457][   T11]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[  338.510909][   T11]  ? kmsan_internal_check_memory+0x48c/0x560
[  338.517094][   T11]  ? kmsan_handle_dma+0xac/0xc0
[  338.522090][   T11]  ? virtqueue_add+0x1e86/0x65c0
[  338.527195][   T11]  ? virtqueue_add_sgs+0x186/0x1b0
[  338.532475][   T11]  ? virtscsi_add_cmd+0x838/0xad0
[  338.537673][   T11]  ? virtscsi_queuecommand+0x898/0xa60
[  338.543293][   T11]  ? scsi_queue_rq+0x4cc7/0x5a80
[  338.548397][   T11]  ? blk_mq_dispatch_rq_list+0x79b/0x3440
[  338.554316][   T11]  ? __blk_mq_sched_dispatch_requests+0x11b7/0x26e0
[  338.561120][   T11]  ? blk_mq_sched_dispatch_requests+0x12f/0x270
[  338.567567][   T11]  ? blk_mq_run_hw_queue+0x6e4/0xbc0
[  338.573036][   T11]  ? blk_mq_flush_plug_list+0x1683/0x2b20
[  338.578955][   T11]  ? blk_add_rq_to_plug+0x2c6/0x970
[  338.584334][   T11]  ? blk_mq_submit_bio+0x26e8/0x3390
[  338.589832][   T11]  ? __submit_bio+0x3b9/0xb60
[  338.594658][   T11]  ? submit_bio_noacct_nocheck+0x148c/0x1800
[  338.600843][   T11]  ? submit_bio_noacct+0x1bd8/0x27f0
[  338.606316][   T11]  ? submit_bio+0x58a/0x5b0
[  338.611013][   T11]  ? ext4_bio_write_folio+0x1e76/0x2e40
[  338.616775][   T11]  ? mpage_submit_folio+0x351/0x4a0
[  338.622148][   T11]  ? ext4_do_writepages+0x3733/0x62e0
[  338.627673][   T11]  ? ext4_writepages+0x312/0x830
[  338.632778][   T11]  ? do_writepages+0x427/0xc30
[  338.637690][   T11]  ? __writeback_single_inode+0x10d/0x12c0
[  338.643657][   T11]  ? writeback_sb_inodes+0xc95/0x1e00
[  338.649202][   T11]  ? wb_writeback+0x4df/0xea0
[  338.654125][   T11]  ? wb_workfn+0x40b/0x1940
[  338.658819][   T11]  ? process_scheduled_works+0xa81/0x1bd0
[  338.664710][   T11]  ? worker_thread+0xea5/0x1560
[  338.669722][   T11]  ? kthread+0x3e2/0x540
[  338.674134][   T11]  ? ret_from_fork+0x6d/0x90
[  338.678873][   T11]  ? ret_from_fork_asm+0x1a/0x30
[  338.683985][   T11]  ? ext4_do_writepages+0x3733/0x62e0
[  338.689514][   T11]  ? ext4_writepages+0x312/0x830
[  338.694625][   T11]  ? do_writepages+0x427/0xc30
[  338.699530][   T11]  ? __writeback_single_inode+0x10d/0x12c0
[  338.705499][   T11]  ? writeback_sb_inodes+0xc95/0x1e00
[  338.711026][   T11]  ? wb_writeback+0x4df/0xea0
[  338.715847][   T11]  ? wb_workfn+0x40b/0x1940
[  338.720619][   T11]  ? process_scheduled_works+0xa81/0x1bd0
[  338.726505][   T11]  ? worker_thread+0xea5/0x1560
[  338.731778][   T11]  ? kthread+0x3e2/0x540
[  338.736180][   T11]  ? ret_from_fork+0x6d/0x90
[  338.740914][   T11]  ? ret_from_fork_asm+0x1a/0x30
[  338.746031][   T11]  ? should_fail_ex+0x4a/0x800
[  338.750951][   T11]  ? kmsan_get_metadata+0x146/0x1d0
[  338.756307][   T11]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  338.762283][   T11]  kmsan_internal_check_memory+0x48c/0x560
[  338.768305][   T11]  kmsan_handle_dma+0xac/0xc0
[  338.773138][   T11]  virtqueue_add+0x1e86/0x65c0
[  338.778069][   T11]  ? kmsan_get_metadata+0x146/0x1d0
[  338.783418][   T11]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  338.789386][   T11]  ? kmsan_get_metadata+0x146/0x1d0
[  338.794741][   T11]  ? kmsan_get_metadata+0x146/0x1d0
[  338.800099][   T11]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  338.806092][   T11]  virtqueue_add_sgs+0x186/0x1b0
[  338.811213][   T11]  virtscsi_add_cmd+0x838/0xad0
[  338.816232][   T11]  ? kmsan_get_metadata+0x146/0x1d0
[  338.821636][   T11]  virtscsi_queuecommand+0x898/0xa60
[  338.827108][   T11]  ? __pfx_virtscsi_queuecommand+0x10/0x10
[  338.833081][   T11]  scsi_queue_rq+0x4cc7/0x5a80
[  338.838035][   T11]  ? __pfx_scsi_queue_rq+0x10/0x10
[  338.843304][   T11]  blk_mq_dispatch_rq_list+0x79b/0x3440
[  338.849044][   T11]  ? sbitmap_get+0x430/0x670
[  338.853797][   T11]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  338.859796][   T11]  ? dd_dispatch_request+0x9a1/0xa20
[  338.865268][   T11]  __blk_mq_sched_dispatch_requests+0x11b7/0x26e0
[  338.871909][   T11]  ? __blk_mq_sched_dispatch_requests+0x1031/0x26e0
[  338.878703][   T11]  blk_mq_sched_dispatch_requests+0x12f/0x270
[  338.884972][   T11]  blk_mq_run_hw_queue+0x6e4/0xbc0
[  338.890277][   T11]  ? __pfx_dd_insert_requests+0x10/0x10
[  338.896007][   T11]  blk_mq_flush_plug_list+0x1683/0x2b20
[  338.901751][   T11]  ? kmsan_get_metadata+0x146/0x1d0
[  338.907129][   T11]  blk_add_rq_to_plug+0x2c6/0x970
[  338.912343][   T11]  blk_mq_submit_bio+0x26e8/0x3390
[  338.917685][   T11]  __submit_bio+0x3b9/0xb60
[  338.922342][   T11]  ? kmsan_get_metadata+0x146/0x1d0
[  338.927704][   T11]  submit_bio_noacct_nocheck+0x148c/0x1800
[  338.933727][   T11]  ? kmsan_get_metadata+0x146/0x1d0
[  338.939078][   T11]  ? kmsan_get_metadata+0x146/0x1d0
[  338.944426][   T11]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  338.950402][   T11]  submit_bio_noacct+0x1bd8/0x27f0
[  338.955732][   T11]  submit_bio+0x58a/0x5b0
[  338.960237][   T11]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  338.966215][   T11]  ext4_bio_write_folio+0x1e76/0x2e40
[  338.971813][   T11]  mpage_submit_folio+0x351/0x4a0
[  338.977017][   T11]  ext4_do_writepages+0x3733/0x62e0
[  338.982390][   T11]  ? cfg80211_inform_single_bss_data+0x2a14/0x3100
[  338.989190][   T11]  ext4_writepages+0x312/0x830
[  338.994134][   T11]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  339.000103][   T11]  ? __pfx_ext4_writepages+0x10/0x10
[  339.005558][   T11]  do_writepages+0x427/0xc30
[  339.010299][   T11]  ? stack_depot_save_flags+0x2c/0x6e0
[  339.015908][   T11]  ? kmsan_get_metadata+0x146/0x1d0
[  339.021273][   T11]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  339.027246][   T11]  __writeback_single_inode+0x10d/0x12c0
[  339.033040][   T11]  ? _raw_spin_unlock+0x30/0x50
[  339.038047][   T11]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  339.044106][   T11]  writeback_sb_inodes+0xc95/0x1e00
[  339.049553][   T11]  wb_writeback+0x4df/0xea0
[  339.054203][   T11]  ? kmsan_get_metadata+0x146/0x1d0
[  339.059558][   T11]  ? kmsan_get_metadata+0x146/0x1d0
[  339.064908][   T11]  ? queue_io+0x481/0x780
[  339.069392][   T11]  wb_workfn+0x40b/0x1940
[  339.073901][   T11]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  339.079890][   T11]  ? __pfx_wb_workfn+0x10/0x10
[  339.084827][   T11]  process_scheduled_works+0xa81/0x1bd0
[  339.090576][   T11]  worker_thread+0xea5/0x1560
[  339.095436][   T11]  kthread+0x3e2/0x540
[  339.099762][   T11]  ? __pfx_worker_thread+0x10/0x10
[  339.105041][   T11]  ? __pfx_kthread+0x10/0x10
[  339.109798][   T11]  ret_from_fork+0x6d/0x90
[  339.114363][   T11]  ? __pfx_kthread+0x10/0x10
[  339.119122][   T11]  ret_from_fork_asm+0x1a/0x30
[  339.124078][   T11]  </TASK>
[  339.127493][   T11] Kernel Offset: disabled
[  339.131875][   T11] Rebooting in 86400 seconds..