last executing test programs:

3m21.105182914s ago: executing program 0 (id=259):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)

3m19.515593408s ago: executing program 0 (id=265):
syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="043e0003"], 0x10)

3m18.716799835s ago: executing program 0 (id=270):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

3m17.931261865s ago: executing program 0 (id=274):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
r0 = syz_clone(0x80002080, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
landlock_restrict_self(0xffffffffffffffff, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)

3m16.922204196s ago: executing program 0 (id=279):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0})

3m16.06377449s ago: executing program 0 (id=284):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

3m13.24558638s ago: executing program 32 (id=284):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

13.450036907s ago: executing program 4 (id=990):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000084"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8b, 0x5, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r1, &(0x7f00000002c0), &(0x7f0000000380)=""/107}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20)

12.538301835s ago: executing program 4 (id=994):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x85, 0xb4, 0x1f, 0x40, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8a, 0x4, 0x0, 0xa2, 0xf1, 0x7d, 0x4}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)

11.510174531s ago: executing program 5 (id=998):
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a201020301090224000100"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x80000)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x0, 0x2, 0x80, 0x5, "76678cdaa2094263be16142ec5fdcc673df9ef5e1ef191ceffa518db1efbc897"})

9.377614295s ago: executing program 4 (id=1001):
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
socketpair(0x1, 0x5, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x10)

8.986070963s ago: executing program 5 (id=1002):
syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b75000905", @ANYRES64], 0x0)

8.530691005s ago: executing program 3 (id=1004):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

8.178784214s ago: executing program 4 (id=1005):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3", 0x5}], 0x1}, 0x48005)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000440)=[{0x0, 0x0, {0x2, 0x1, 0x2}, {0x2, 0xff, 0x2}, 0xfe}, {0x0, 0x2, {0x1, 0x0, 0x1}, {0x2, 0xf0, 0x1}, 0x0, 0xff}], 0x40)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r4, {0xfff8, 0x4}, {0x0, 0xe}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840)

7.785692655s ago: executing program 3 (id=1006):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

7.720574593s ago: executing program 1 (id=1007):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
getxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', 0x0, 0x0)

6.740915313s ago: executing program 3 (id=1008):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000"], 0xfdef)

6.569913162s ago: executing program 2 (id=1009):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x30}}], 0x1, 0x80)

6.516663999s ago: executing program 1 (id=1010):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b", @ANYBLOB="00db00000040000020001280"], 0x40}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240)="02e19d2dfa8f6e35b50f080d91ef49d3d9d43c03e74949522ff7b13a19c3886aaa71445dad1d7c85287332e046c59debce99", 0x0, 0x32})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6.420021108s ago: executing program 4 (id=1011):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b00010000000009040000012e6d0a000905ff276b"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0)

6.037980673s ago: executing program 5 (id=1012):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x4, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
pselect6(0x40, &(0x7f00000002c0)={0x57, 0x9, 0x7fffffff, 0x80000001, 0xca04, 0x5, 0x9, 0x7}, 0x0, &(0x7f0000000440)={0x8, 0x7, 0x101, 0x5, 0x3, 0x1c7, 0x7, 0x5}, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

5.733390688s ago: executing program 2 (id=1013):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x108100, 0x1e8)
mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0x40, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f0000000280)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0)

5.028041683s ago: executing program 5 (id=1014):
syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090500f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

4.795032209s ago: executing program 3 (id=1015):
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$inet(0x2, 0x2, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x10)

4.696534871s ago: executing program 1 (id=1016):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

4.439084089s ago: executing program 2 (id=1017):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1109, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000001100)=""/206, 0xce, 0x0, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

3.889459081s ago: executing program 1 (id=1018):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

3.750131525s ago: executing program 3 (id=1019):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000140)=[@request_death], 0x0, 0x0, 0x0})

3.139190643s ago: executing program 2 (id=1020):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
getxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', 0x0, 0x0)

2.909790102s ago: executing program 1 (id=1021):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3", 0x5}], 0x1}, 0x48005)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000440)=[{0x0, 0x0, {0x2, 0x1, 0x2}, {0x2, 0xff, 0x2}, 0xfe}, {0x0, 0x2, {0x1, 0x0, 0x1}, {0x2, 0xf0, 0x1}, 0x0, 0xff}], 0x40)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r4, {0xfff8, 0x4}, {0x0, 0xe}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840)

2.593757049s ago: executing program 3 (id=1022):
syz_mount_image$ocfs2(&(0x7f0000002800), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x40010003, 0x2, 0xa, 0x1d, "9e959f16b6787b08aa26e66c4056ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d00", "f625c1076e4c36c800def96015e0fb7e904d865c2fdc458ec58d347f41be5a08", [0x4, 0xa]})
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r2, 0x0, 0xee01)

2.400416418s ago: executing program 5 (id=1023):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80)

2.210008034s ago: executing program 4 (id=1024):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000200)={[{@data_checksum={'data_checksum', 0x3d, 'xxhash'}}, {@fsck}, {@journal_flush_disabled}, {@fsck}, {@journal_flush_disabled}, {@ratelimit_errors}, {@compression={'compression', 0x3d, 'gzip'}}, {@reconstruct_alloc}, {@no_data_io}], [{@hash}]}, 0x1, 0x5903, &(0x7f0000010b40)="$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")
truncate(&(0x7f0000000040)='./file1\x00', 0x7fff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x2c)
write$tun(r2, &(0x7f00000002c0)=ANY=[], 0x3000)
write$FUSE_STATFS(r2, &(0x7f0000000400)={0x60, 0xb, 0x0, {{0x4, 0x2, 0xffffffff, 0xfffffffffffffffa, 0x1, 0x5, 0x7fffffff, 0x7}}}, 0x60)

2.096369654s ago: executing program 2 (id=1025):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000"], 0xfdef)

1.23020749s ago: executing program 1 (id=1026):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b", @ANYBLOB="00db00000040000020001280"], 0x40}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240)="02e19d2dfa8f6e35b50f080d91ef49d3d9d43c03e74949522ff7b13a19c3886aaa71445dad1d7c85287332e046c59debce99", 0x0, 0x32})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

310.116554ms ago: executing program 5 (id=1027):
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022d0001000000000904000005030002000921000033012205000905810300000c00070905020300ec00"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2a, @string={0x2a, 0x3, "be8d8d1e519f0d01a3e34ae27031929b265a98bd352b347425ea98eac4a39b5e477658079a8b0ba5"}}, &(0x7f0000000180)=ANY=[@ANYBLOB="0022240000006687157762"], 0x0}, &(0x7f0000000b00)={0x2c, &(0x7f0000000a00)={0x0, 0xe, 0x25, "7f1e9b1a1866f3c72ac997b583ae26b02f7d9d0b94ce8f8d531fda126b90cb57532dafc1a0"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000a80)={0x20, 0x1, 0x13, "121ecacff576b2d6cd5e2e2f0d306bccdae893"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x18}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "629e"}, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x3}})

0s ago: executing program 2 (id=1028):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, 0x0, 0x10b8}, 0x8000)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts.
[  209.317797][ T5777] cgroup: Unknown subsys name 'net'
[  209.492225][ T5777] cgroup: Unknown subsys name 'cpuset'
[  209.518215][ T5777] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  229.843941][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  229.851064][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  265.388522][ T5777] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  270.188460][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  270.202691][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  270.213082][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  270.222990][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  270.232695][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  270.236547][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  270.251808][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  270.255879][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  270.260269][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  270.270862][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  270.276538][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  270.283356][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  270.291386][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  270.305089][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  270.308769][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  270.322584][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  270.323046][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  270.334294][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  270.348863][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  270.360911][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  270.371446][ T5809] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  270.374035][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  270.383017][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  270.395219][ T5809] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  270.412855][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  270.421791][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  270.423530][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  270.429755][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  270.446392][ T5806] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  270.461528][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  272.206114][ T5794] chnl_net:caif_netlink_parms(): no params data found
[  272.361077][ T5793] chnl_net:caif_netlink_parms(): no params data found
[  272.387143][ T5806] Bluetooth: hci3: command tx timeout
[  272.489649][ T5795] chnl_net:caif_netlink_parms(): no params data found
[  272.533739][ T5806] Bluetooth: hci4: command tx timeout
[  272.539509][ T5806] Bluetooth: hci1: command tx timeout
[  272.546760][ T5809] Bluetooth: hci2: command tx timeout
[  272.552652][ T5806] Bluetooth: hci0: command tx timeout
[  272.575172][ T5802] chnl_net:caif_netlink_parms(): no params data found
[  273.322238][ T5800] chnl_net:caif_netlink_parms(): no params data found
[  273.772461][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.783365][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.791680][ T5794] bridge_slave_0: entered allmulticast mode
[  273.801904][ T5794] bridge_slave_0: entered promiscuous mode
[  273.877435][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.886768][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.894975][ T5794] bridge_slave_1: entered allmulticast mode
[  273.904737][ T5794] bridge_slave_1: entered promiscuous mode
[  274.365314][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.373448][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.384560][ T5793] bridge_slave_0: entered allmulticast mode
[  274.396767][ T5793] bridge_slave_0: entered promiscuous mode
[  274.409256][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.417353][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.425411][ T5802] bridge_slave_0: entered allmulticast mode
[  274.435084][ T5802] bridge_slave_0: entered promiscuous mode
[  274.448202][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.459036][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.466982][ T5793] bridge_slave_1: entered allmulticast mode
[  274.476641][ T5793] bridge_slave_1: entered promiscuous mode
[  274.490078][ T5797] Bluetooth: hci3: command tx timeout
[  274.498275][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.593045][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.601010][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.608895][ T5802] bridge_slave_1: entered allmulticast mode
[  274.617998][ T5797] Bluetooth: hci2: command tx timeout
[  274.621013][ T5802] bridge_slave_1: entered promiscuous mode
[  274.629104][ T5797] Bluetooth: hci0: command tx timeout
[  274.635657][ T5797] Bluetooth: hci1: command tx timeout
[  274.638372][ T5809] Bluetooth: hci4: command tx timeout
[  274.661728][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.739004][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.747275][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.755360][ T5795] bridge_slave_0: entered allmulticast mode
[  274.764951][ T5795] bridge_slave_0: entered promiscuous mode
[  274.782350][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.790685][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.798592][ T5795] bridge_slave_1: entered allmulticast mode
[  274.811269][ T5795] bridge_slave_1: entered promiscuous mode
[  274.953812][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.077757][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.085837][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.093961][ T5800] bridge_slave_0: entered allmulticast mode
[  275.104719][ T5800] bridge_slave_0: entered promiscuous mode
[  275.127570][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.185336][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.206867][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.225217][ T5794] team0: Port device team_slave_0 added
[  275.233664][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.241741][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.249635][ T5800] bridge_slave_1: entered allmulticast mode
[  275.259693][ T5800] bridge_slave_1: entered promiscuous mode
[  275.320960][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.379460][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.442015][ T5794] team0: Port device team_slave_1 added
[  275.635029][ T5793] team0: Port device team_slave_0 added
[  275.651157][ T5795] team0: Port device team_slave_0 added
[  275.707329][ T5802] team0: Port device team_slave_0 added
[  275.804267][ T5795] team0: Port device team_slave_1 added
[  275.819888][ T5793] team0: Port device team_slave_1 added
[  275.875965][ T5802] team0: Port device team_slave_1 added
[  275.886744][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.897213][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.924386][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.949172][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.078371][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.085803][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.112312][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.134736][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  276.183232][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.190767][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.217396][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.277290][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.284732][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.311234][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.390303][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.397798][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.424469][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.438343][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.445935][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.473562][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.488691][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.497572][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.524767][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.540976][ T5806] Bluetooth: hci3: command tx timeout
[  276.580191][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.587582][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.614220][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.697120][ T5806] Bluetooth: hci1: command tx timeout
[  276.705709][ T5806] Bluetooth: hci0: command tx timeout
[  276.706126][ T5809] Bluetooth: hci2: command tx timeout
[  276.713758][ T5797] Bluetooth: hci4: command tx timeout
[  276.734964][ T5800] team0: Port device team_slave_0 added
[  276.861337][ T5800] team0: Port device team_slave_1 added
[  277.014036][ T5794] hsr_slave_0: entered promiscuous mode
[  277.024670][ T5794] hsr_slave_1: entered promiscuous mode
[  277.107532][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0
[  277.116608][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.144652][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  277.172610][ T5793] hsr_slave_0: entered promiscuous mode
[  277.183376][ T5793] hsr_slave_1: entered promiscuous mode
[  277.192393][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  277.200222][ T5793] Cannot create hsr debugfs directory
[  277.336059][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1
[  277.343595][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.370080][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  277.468509][ T5795] hsr_slave_0: entered promiscuous mode
[  277.479579][ T5795] hsr_slave_1: entered promiscuous mode
[  277.488889][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  277.497805][ T5795] Cannot create hsr debugfs directory
[  277.520811][ T5802] hsr_slave_0: entered promiscuous mode
[  277.529948][ T5802] hsr_slave_1: entered promiscuous mode
[  277.539405][ T5802] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  277.547434][ T5802] Cannot create hsr debugfs directory
[  278.029963][ T5800] hsr_slave_0: entered promiscuous mode
[  278.042095][ T5800] hsr_slave_1: entered promiscuous mode
[  278.050639][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  278.058474][ T5800] Cannot create hsr debugfs directory
[  278.612301][ T5806] Bluetooth: hci3: command tx timeout
[  278.790115][ T5806] Bluetooth: hci0: command tx timeout
[  278.796383][ T5806] Bluetooth: hci2: command tx timeout
[  278.802583][ T5806] Bluetooth: hci4: command tx timeout
[  278.808260][ T5806] Bluetooth: hci1: command tx timeout
[  279.059645][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  279.206519][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  279.322723][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  279.348065][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  279.552709][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  279.649142][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  279.723953][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  279.758355][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  279.904229][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  279.956654][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  280.068775][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  280.119180][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  280.161749][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  280.247623][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  280.272612][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  280.310267][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  280.576300][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  280.648662][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  280.741706][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  280.788200][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  280.851341][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.096248][ T5794] 8021q: adding VLAN 0 to HW filter on device team0
[  281.184214][ T3954] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.192224][ T3954] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.344023][ T3954] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.352004][ T3954] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.809315][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.016843][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.158131][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[  282.279612][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.287619][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.411760][ T5795] 8021q: adding VLAN 0 to HW filter on device team0
[  282.438335][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.446383][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.526053][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.573052][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.612114][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.619973][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.644496][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.652690][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.773607][ T5800] 8021q: adding VLAN 0 to HW filter on device team0
[  282.816607][ T5793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  282.827561][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  283.157697][ T3823] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.165773][ T3823] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.202054][ T5802] 8021q: adding VLAN 0 to HW filter on device team0
[  283.301115][ T3823] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.308964][ T3823] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.503175][ T3823] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.511361][ T3823] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.528413][ T3823] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.536397][ T3823] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.344521][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.093302][ T5794] veth0_vlan: entered promiscuous mode
[  285.231413][ T5794] veth1_vlan: entered promiscuous mode
[  285.409002][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.673128][ T5794] veth0_macvtap: entered promiscuous mode
[  285.852383][ T5794] veth1_macvtap: entered promiscuous mode
[  286.029488][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.118451][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.143463][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.257532][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.268937][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.278618][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.287948][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.345704][ T5793] veth0_vlan: entered promiscuous mode
[  286.437682][ T5793] veth1_vlan: entered promiscuous mode
[  286.538688][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.689555][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.899246][ T5795] veth0_vlan: entered promiscuous mode
[  286.959282][ T5793] veth0_macvtap: entered promiscuous mode
[  287.092594][ T5795] veth1_vlan: entered promiscuous mode
[  287.122236][ T5793] veth1_macvtap: entered promiscuous mode
[  287.424715][ T5800] veth0_vlan: entered promiscuous mode
[  287.435059][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.447148][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.463588][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.533375][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.544603][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.561252][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.618156][ T5795] veth0_macvtap: entered promiscuous mode
[  287.705354][ T5800] veth1_vlan: entered promiscuous mode
[  287.725103][ T5795] veth1_macvtap: entered promiscuous mode
[  287.761610][ T5793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.771477][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.780898][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.789976][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.041866][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.055073][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.065353][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.077363][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.093670][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.205438][ T5800] veth0_macvtap: entered promiscuous mode
[  288.308932][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.319907][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.330273][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.341207][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.357170][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.376768][ T5800] veth1_macvtap: entered promiscuous mode
[  288.577083][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.588339][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.598732][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.609604][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.619887][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.631085][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.647130][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.682449][ T5795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.693170][ T5795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.702609][ T5795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.714425][ T5795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.805100][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.816672][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.827044][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.837937][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.848335][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.860102][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.876800][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.196476][ T5800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.206009][ T5800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.215579][ T5800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.224855][ T5800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.821973][ T5802] veth0_vlan: entered promiscuous mode
[  289.985448][ T5802] veth1_vlan: entered promiscuous mode
[  290.467009][ T5802] veth0_macvtap: entered promiscuous mode
[  290.592821][ T5802] veth1_macvtap: entered promiscuous mode
[  290.846775][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.861318][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.871701][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.882650][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.893031][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.903957][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.914351][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.925273][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.944419][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.997193][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.011166][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.022808][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.034289][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.045924][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.056962][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.067307][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.078315][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.094612][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.223923][ T5802] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.233294][ T5802] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.242713][ T5802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.285021][ T5802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.306515][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  291.313664][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  295.398305][ T4813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.406859][ T4813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.665995][ T4117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.675328][ T4117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.025426][ T5794] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  296.679318][ T4117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.689017][ T4117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.738320][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  297.026887][ T3859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.036414][ T3859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.078276][ T5973] loop0: detected capacity change from 0 to 512
[  297.337270][ T5973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  297.353492][ T5973] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.371925][ T3823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.380061][ T3823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.758352][ T4117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.767513][ T4117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.894463][ T4117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.903405][ T4117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.214467][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'.
[  298.271619][ T3859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.279972][ T3859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.427812][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  298.970084][ T5986] loop3: detected capacity change from 0 to 64
[  299.043124][ T5986] =======================================================
[  299.043124][ T5986] WARNING: The mand mount option has been deprecated and
[  299.043124][ T5986]          and is ignored by this kernel. Remove the mand
[  299.043124][ T5986]          option from the mount to silence this warning.
[  299.043124][ T5986] =======================================================
[  299.296938][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[  299.308592][ T5992] Zero length message leads to an empty skb
[  299.593179][ T5989] loop2: detected capacity change from 0 to 1024
[  299.673677][ T5989] hfsplus: Unknown parameter 'no³ß¼tþJZ�3rt'
[  300.161929][ T5998] loop0: detected capacity change from 0 to 512
[  300.241308][ T3954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.249568][ T3954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.301023][ T5998] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  300.310628][ T5998] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  300.449899][ T5998] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended
[  300.563040][ T5998] EXT4-fs error (device loop0): ext4_orphan_get:1389: comm syz.0.8: inode #15: comm syz.0.8: iget: illegal inode #
[  300.619539][ T5998] EXT4-fs (loop0): Remounting filesystem read-only
[  300.662314][ T5998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.694274][ T3859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.702893][ T3859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.808302][ T6009] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  300.867285][ T6007] warning: `syz.3.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  300.886346][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  300.948832][ T6007] loop3: detected capacity change from 0 to 8
[  301.560095][ T6007] SQUASHFS error: Failed to read block 0x4e8: -5
[  301.726044][   T30] audit: type=1800 audit(1741874567.535:2): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12" name="file1" dev="overlay" ino=5 res=0 errno=0
[  302.351635][ T6007] syz.3.12 (6007) used greatest stack depth: 5280 bytes left
[  302.826297][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.998767][ T6016] loop2: detected capacity change from 0 to 128
[  303.024328][   T30] audit: type=1326 audit(1741874568.955:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7cb8d169 code=0x7ffc0000
[  303.055271][ T6016] adfs: Unknown parameter 'ÿÿÿÿ'
[  303.155894][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'.
[  303.197870][   T30] audit: type=1326 audit(1741874569.045:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f2d7cb8d169 code=0x7ffc0000
[  303.222131][   T30] audit: type=1326 audit(1741874569.045:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7cb8d169 code=0x7ffc0000
[  303.245861][   T30] audit: type=1326 audit(1741874569.045:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7cb8d169 code=0x7ffc0000
[  303.275931][   T30] audit: type=1326 audit(1741874569.085:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d7cb8d169 code=0x7ffc0000
[  303.301374][   T30] audit: type=1326 audit(1741874569.085:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7cb8d169 code=0x7ffc0000
[  303.324450][   T30] audit: type=1326 audit(1741874569.115:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2d7cb8d169 code=0x7ffc0000
[  303.347035][   T30] audit: type=1326 audit(1741874569.155:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7cb8d169 code=0x7ffc0000
[  303.374861][   T30] audit: type=1326 audit(1741874569.155:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7cb8d169 code=0x7ffc0000
[  304.186558][ T6035] overlayfs: failed to resolve './file1': -2
[  305.140150][ T6047] batadv_slave_1: entered promiscuous mode
[  305.147850][ T6047] batadv_slave_1: entered allmulticast mode
[  305.315575][ T6045] loop0: detected capacity change from 0 to 512
[  305.347124][ T5849] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  305.525495][ T6045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  305.539528][ T6045] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.560836][ T5849] usb 5-1: Using ep0 maxpacket: 16
[  305.583601][ T5849] usb 5-1: unable to read config index 0 descriptor/start: -61
[  305.592299][ T5849] usb 5-1: can't read configurations, error -61
[  305.781770][ T5849] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  306.016399][ T5849] usb 5-1: Using ep0 maxpacket: 16
[  306.047654][ T5849] usb 5-1: unable to read config index 0 descriptor/start: -61
[  306.055939][ T5849] usb 5-1: can't read configurations, error -61
[  306.138743][ T5849] usb usb5-port1: attempt power cycle
[  306.280592][ T6058] loop1: detected capacity change from 0 to 1024
[  306.302679][ T6051] loop3: detected capacity change from 0 to 4096
[  306.410784][ T6058] hfsplus: failed to load root directory
[  306.544993][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  306.561371][ T5849] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  306.632347][ T5849] usb 5-1: Using ep0 maxpacket: 16
[  306.671354][ T5849] usb 5-1: unable to read config index 0 descriptor/start: -61
[  306.679631][ T5849] usb 5-1: can't read configurations, error -61
[  306.884030][ T5849] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  306.965830][ T5849] usb 5-1: Using ep0 maxpacket: 16
[  307.010113][ T5849] usb 5-1: unable to read config index 0 descriptor/start: -61
[  307.018386][ T5849] usb 5-1: can't read configurations, error -61
[  307.086574][ T5849] usb usb5-port1: unable to enumerate USB device
[  308.115731][ T6070] loop1: detected capacity change from 0 to 512
[  308.278383][ T6066] loop2: detected capacity change from 0 to 512
[  308.353706][ T6070] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.25: bg 0: block 288: padding at end of block bitmap is not set
[  308.362072][ T6070] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  308.421249][ T6070] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.25: attempt to clear invalid blocks 1024 len 1
[  308.453998][ T6070] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.25: invalid indirect mapped block 1819239214 (level 0)
[  308.479286][ T6070] EXT4-fs (loop1): 1 truncate cleaned up
[  308.481955][ T6070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.791054][ T6066] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.23: bg 0: block 288: padding at end of block bitmap is not set
[  308.802472][ T6066] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  308.832906][ T6066] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.23: attempt to clear invalid blocks 1024 len 1
[  308.847779][ T6075] loop3: detected capacity change from 0 to 2048
[  308.931589][ T6066] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.23: invalid indirect mapped block 1819239214 (level 0)
[  308.956466][ T6066] EXT4-fs (loop2): 1 truncate cleaned up
[  308.958575][ T6066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.066623][ T6084] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  309.213324][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'.
[  309.308591][ T6083] loop4: detected capacity change from 0 to 128
[  309.312943][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.313227][ T6083] affs: No valid root block on device loop4
[  309.694588][ T6083] loop4: detected capacity change from 0 to 1024
[  309.704588][ T6083] EXT4-fs: Ignoring removed bh option
[  309.870803][ T6083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.457068][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.615103][ T6095] netlink: 176 bytes leftover after parsing attributes in process `syz.3.30'.
[  311.113846][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  311.113941][   T30] audit: type=1800 audit(1741874577.055:13): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.30" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  311.262644][ T6095] capability: warning: `syz.3.30' uses deprecated v2 capabilities in a way that may be insecure
[  311.516643][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.822901][ T6108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.32'.
[  311.835808][ T6108] unsupported nlmsg_type 40
[  311.969769][ T6104] loop4: detected capacity change from 0 to 4096
[  312.142557][ T6104] NILFS (loop4): invalid segment: Checksum error in segment payload
[  312.151235][ T6104] NILFS (loop4): trying rollback from an earlier position
[  312.225045][ T6110] loop2: detected capacity change from 0 to 256
[  312.317520][ T6104] NILFS (loop4): recovery complete
[  312.451825][ T6113] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  312.596106][ T6114] loop1: detected capacity change from 0 to 512
[  312.697256][   T30] audit: type=1326 audit(1741874578.645:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81dd8d169 code=0x7ffc0000
[  312.705033][ T6119] loop3: detected capacity change from 0 to 16
[  312.777144][ T6114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  312.792790][ T6114] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  312.829243][   T30] audit: type=1326 audit(1741874578.715:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc81dd8d169 code=0x7ffc0000
[  312.853776][   T30] audit: type=1326 audit(1741874578.775:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81dd8d169 code=0x7ffc0000
[  312.882421][   T30] audit: type=1326 audit(1741874578.775:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81dd8d169 code=0x7ffc0000
[  312.907046][   T30] audit: type=1326 audit(1741874578.775:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc81dd8d169 code=0x7ffc0000
[  312.929859][   T30] audit: type=1326 audit(1741874578.775:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81dd8d169 code=0x7ffc0000
[  312.952725][   T30] audit: type=1326 audit(1741874578.775:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81dd8d169 code=0x7ffc0000
[  312.981620][   T30] audit: type=1326 audit(1741874578.775:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc81dd8d169 code=0x7ffc0000
[  313.006387][   T30] audit: type=1326 audit(1741874578.775:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81dd8d169 code=0x7ffc0000
[  313.510059][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  319.114456][ T6191] 9pnet_virtio: no channels available for device syz
[  319.161931][ T6192] usb usb8: usbfs: process 6192 (syz.0.64) did not claim interface 0 before use
[  319.356303][ T6194] 9pnet_virtio: no channels available for device syz
[  321.481590][ T5849] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  321.743687][ T5849] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  321.751950][ T5849] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64
[  321.763435][ T5849] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  321.775635][ T5849] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  321.791544][ T5849] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  322.065474][ T5849] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  322.073834][ T5849] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64
[  322.085590][ T5849] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  322.103150][ T5849] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  322.114969][ T5849] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  322.346164][ T5849] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  322.355099][ T5849] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64
[  322.366778][ T5849] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  322.379253][ T5849] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  322.391619][ T5849] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  322.493622][ T6231] binder: Binderfs stats mode cannot be changed during a remount
[  322.589880][ T6232] netlink: 40 bytes leftover after parsing attributes in process `syz.3.78'.
[  322.826163][ T5849] usb 3-1: string descriptor 0 read error: -22
[  322.833434][ T5849] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  322.843251][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.976187][ T5849] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  323.101608][ T5852] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  323.199512][   T45] usb 3-1: USB disconnect, device number 2
[  323.355504][ T5852] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  323.365168][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.439011][ T5852] usb 2-1: config 0 descriptor??
[  323.711216][ T6242] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  323.718144][ T6242] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  323.730676][ T6242] vhci_hcd vhci_hcd.0: Device attached
[  323.951115][ T6245] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5)
[  323.958132][ T6245] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  323.966684][ T6245] vhci_hcd vhci_hcd.0: Device attached
[  323.998195][ T5849] vhci_hcd: vhci_device speed not set
[  324.075039][ T6242] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8)
[  324.081963][ T6242] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  324.091397][ T6242] vhci_hcd vhci_hcd.0: Device attached
[  324.111243][ T5849] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  324.253191][ T6243] vhci_hcd: connection reset by peer
[  324.253440][ T6249] vhci_hcd: connection closed
[  324.281089][ T6251] vhci_hcd: connection closed
[  324.294242][ T4077] vhci_hcd: stop threads
[  324.304714][ T4077] vhci_hcd: release socket
[  324.309493][ T4077] vhci_hcd: disconnect device
[  324.410196][ T4077] vhci_hcd: stop threads
[  324.415224][ T4077] vhci_hcd: release socket
[  324.419976][ T4077] vhci_hcd: disconnect device
[  324.516057][ T4077] vhci_hcd: stop threads
[  324.521040][ T4077] vhci_hcd: release socket
[  324.525791][ T4077] vhci_hcd: disconnect device
[  324.708964][ T5852] usbhid 2-1:0.0: can't add hid device: -71
[  324.715956][ T5852] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  324.785926][ T5852] usb 2-1: USB disconnect, device number 2
[  325.126209][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'.
[  325.135985][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'.
[  326.346697][ T5852] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  326.560994][ T5852] usb 2-1: Using ep0 maxpacket: 16
[  326.585800][ T5852] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  326.602592][ T5852] usb 2-1: config 0 has no interface number 0
[  326.609036][ T5852] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  326.620706][ T5852] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  326.857476][ T5852] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  326.867889][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  326.876802][ T5852] usb 2-1: Product: syz
[  326.881525][ T5852] usb 2-1: SerialNumber: syz
[  327.012811][ T5852] usb 2-1: config 0 descriptor??
[  327.034342][ T5852] cm109 2-1:0.8: invalid payload size 0, expected 4
[  327.125436][ T5852] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input5
[  327.291966][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.299826][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.308244][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.320980][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.330616][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.338512][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.346880][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.354983][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.363097][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.370769][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.373120][ T6285] tipc: Started in network mode
[  327.383698][ T6285] tipc: Node identity ac14142f, cluster identity 4711
[  327.391764][ T6285] tipc: New replicast peer: 0.0.0.0
[  327.401540][ T6285] tipc: Enabled bearer <udp:syz2>, priority 10
[  327.442498][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  327.452079][ T5852] usb 2-1: USB disconnect, device number 3
[  327.486977][ T6288] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[  327.666079][ T5852] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  328.342366][ T6296] syz.2.95 uses obsolete (PF_INET,SOCK_PACKET)
[  328.510835][ T5856] tipc: Node number set to 2886997039
[  328.629528][ T6303] xt_hashlimit: size too large, truncated to 1048576
[  329.308442][ T5849] vhci_hcd: vhci_device speed not set
[  331.761400][ T5849] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  331.812974][ T5806] Bluetooth: hci0: command 0x0406 tx timeout
[  332.186521][ T5849] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  332.199516][ T5849] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  332.210209][ T5849] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  332.219972][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.304672][ T6327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  332.387198][ T5849] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  332.831720][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'.
[  333.058724][ T5849] usb 3-1: USB disconnect, device number 3
[  333.611048][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  333.633577][ T6343] process 'syz.3.111' launched './file0' with NULL argv: empty string added
[  334.898166][ T6362] netlink: 48 bytes leftover after parsing attributes in process `syz.1.117'.
[  337.331973][ T5797] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  337.341106][ T5797] Bluetooth: hci2: Injecting HCI hardware error event
[  337.355375][ T5797] Bluetooth: hci2: hardware error 0x00
[  338.124476][ T5849] IPVS: starting estimator thread 0...
[  338.241665][ T6391] IPVS: using max 240 ests per chain, 12000 per kthread
[  339.421102][ T5797] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  340.562633][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'.
[  341.207337][ T4117] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2
[  342.851528][ T5852] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  343.127349][ T5852] usb 3-1: Using ep0 maxpacket: 16
[  343.167030][ T5852] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  343.175820][ T5852] usb 3-1: config 0 has no interface number 0
[  343.186894][ T5852] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  343.203176][ T5852] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  343.334492][ T6448] xt_hashlimit: size too large, truncated to 1048576
[  343.371492][ T5852] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  343.382359][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  343.395600][ T5852] usb 3-1: Product: syz
[  343.400075][ T5852] usb 3-1: SerialNumber: syz
[  343.463970][ T5852] usb 3-1: config 0 descriptor??
[  343.547576][ T5852] cm109 3-1:0.8: invalid payload size 0, expected 4
[  343.558584][ T5852] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input6
[  343.780087][    C1] cm109_urb_ctl_callback: 146 callbacks suppressed
[  343.780205][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  343.799372][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  343.811662][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  343.819369][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  343.830566][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  343.838256][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  343.847554][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  343.855929][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  343.864806][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  343.874053][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  343.887826][ T5852] usb 3-1: USB disconnect, device number 4
[  343.888092][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  343.950556][ T5852] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  347.040334][    C1] hrtimer: interrupt took 324831 ns
[  348.091954][ T5852] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  348.311001][ T5852] usb 5-1: Using ep0 maxpacket: 16
[  348.380011][ T5852] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  348.392659][ T5852] usb 5-1: config 0 has no interface number 0
[  348.399148][ T5852] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  348.415265][ T5852] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  348.560113][ T5852] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  348.570252][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  348.578967][ T5852] usb 5-1: Product: syz
[  348.583850][ T5852] usb 5-1: SerialNumber: syz
[  348.678801][ T5852] usb 5-1: config 0 descriptor??
[  348.729982][ T5852] cm109 5-1:0.8: invalid payload size 0, expected 4
[  348.741416][ T5852] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input7
[  348.955811][    C1] cm109_urb_ctl_callback: 13 callbacks suppressed
[  348.955942][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  348.975263][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  348.991002][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  348.998847][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  349.010651][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  349.019326][ T5852] usb 5-1: USB disconnect, device number 6
[  349.030020][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  349.030167][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  349.075669][ T5852] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  352.713642][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  352.721021][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  352.870679][ T5852] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  353.110656][ T5852] usb 3-1: Using ep0 maxpacket: 16
[  353.162422][ T5852] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  353.171094][ T5852] usb 3-1: config 0 has no interface number 0
[  353.177511][ T5852] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  353.189284][ T5852] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  353.306417][ T5852] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  353.316408][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  353.329279][ T5852] usb 3-1: Product: syz
[  353.340830][ T5852] usb 3-1: SerialNumber: syz
[  353.575199][ T5852] usb 3-1: config 0 descriptor??
[  353.606659][ T5852] cm109 3-1:0.8: invalid payload size 0, expected 4
[  353.617958][ T5852] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input8
[  353.837279][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  353.845557][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  353.853421][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  353.861498][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  353.960351][    C1] cm109_urb_ctl_callback: 189 callbacks suppressed
[  353.960469][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  353.977492][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  353.986402][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  353.994280][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  354.002258][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  354.009935][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  354.018128][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  354.026947][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  354.034625][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  354.046061][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  354.084523][ T5852] usb 3-1: USB disconnect, device number 5
[  354.084794][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  354.124405][ T5852] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  354.979088][ T6565] can0: slcan on ptm0.
[  356.710993][ T6563] can0 (unregistered): slcan off ptm0.
[  357.792635][ T6592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.210'.
[  358.482155][ T6602] netlink: 48 bytes leftover after parsing attributes in process `syz.1.214'.
[  361.156211][ T5849] IPVS: starting estimator thread 0...
[  361.260750][ T6638] IPVS: using max 192 ests per chain, 9600 per kthread
[  362.112111][ T6647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.225'.
[  365.853909][ T5852] IPVS: starting estimator thread 0...
[  365.960890][ T6681] IPVS: using max 192 ests per chain, 9600 per kthread
[  366.434017][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'.
[  366.444346][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'.
[  366.453921][ T6683] netlink: 'syz.0.238': attribute type 1 has an invalid length.
[  366.462179][ T6683] nbd: error processing sock list
[  366.946354][ T6689] macvlan0: entered allmulticast mode
[  366.952303][ T6689] veth1_vlan: entered allmulticast mode
[  367.072244][ T6689] netlink: 128 bytes leftover after parsing attributes in process `syz.1.239'.
[  369.324356][ T6714] ISOFS: Unable to identify CD-ROM format.
[  373.021249][ T6735] 9pnet_virtio: no channels available for device syz
[  374.664500][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'.
[  374.675305][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'.
[  374.684944][ T6755] netlink: 46 bytes leftover after parsing attributes in process `syz.2.261'.
[  377.051547][ T6784] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  377.812762][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'.
[  377.822332][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'.
[  377.831850][ T6796] netlink: 46 bytes leftover after parsing attributes in process `syz.2.277'.
[  378.423814][ T3592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.641172][ T6805] usb usb9: usbfs: process 6805 (syz.4.282) did not claim interface 0 before use
[  378.692922][ T3592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.854439][ T3592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.110863][ T3592] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.792271][ T3592] bridge_slave_1: left allmulticast mode
[  379.798289][ T3592] bridge_slave_1: left promiscuous mode
[  379.805383][ T3592] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.866227][ T3592] bridge_slave_0: left allmulticast mode
[  379.872565][ T3592] bridge_slave_0: left promiscuous mode
[  379.879592][ T3592] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.589220][ T3592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.611269][ T3592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.632041][ T3592] bond0 (unregistering): Released all slaves
[  380.812960][ T3592] tipc: Disabling bearer <udp:syz2>
[  380.818982][ T3592] tipc: Left network mode
[  381.290572][ T3592] hsr_slave_0: left promiscuous mode
[  381.299365][ T3592] hsr_slave_1: left promiscuous mode
[  381.308351][ T3592] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  381.317131][ T3592] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.334567][ T3592] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  381.342886][ T3592] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.471103][ T3592] veth1_macvtap: left promiscuous mode
[  381.477019][ T3592] veth0_macvtap: left promiscuous mode
[  381.488214][ T3592] veth1_vlan: left promiscuous mode
[  381.494734][ T3592] veth0_vlan: left promiscuous mode
[  383.062516][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  383.129611][ T3592] team0 (unregistering): Port device team_slave_1 removed
[  383.170157][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  383.205032][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  383.215710][ T3592] team0 (unregistering): Port device team_slave_0 removed
[  383.422557][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  383.446197][ T5806] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  383.456183][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  383.933016][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'.
[  383.944488][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'.
[  383.954472][ T6840] netlink: 46 bytes leftover after parsing attributes in process `syz.3.293'.
[  384.846660][ T3592] IPVS: stop unused estimator thread 0...
[  385.662218][ T5806] Bluetooth: hci2: command tx timeout
[  385.942211][ T6833] chnl_net:caif_netlink_parms(): no params data found
[  387.730804][ T5806] Bluetooth: hci2: command tx timeout
[  387.852445][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'.
[  387.861846][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'.
[  387.871291][ T6884] netlink: 'syz.1.307': attribute type 1 has an invalid length.
[  387.879216][ T6884] nbd: error processing sock list
[  388.257595][ T6891] binder_alloc: 6889: binder_alloc_buf, no vma
[  388.294297][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.307917][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.316225][ T6833] bridge_slave_0: entered allmulticast mode
[  388.326176][ T6833] bridge_slave_0: entered promiscuous mode
[  388.483728][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.491895][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.499898][ T6833] bridge_slave_1: entered allmulticast mode
[  388.510055][ T6833] bridge_slave_1: entered promiscuous mode
[  389.109795][ T6833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  389.262809][ T6833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.789482][ T6833] team0: Port device team_slave_0 added
[  389.824168][ T5806] Bluetooth: hci2: command tx timeout
[  389.902323][ T6833] team0: Port device team_slave_1 added
[  390.165965][ T6833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.175379][ T6833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.206327][ T6833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.436753][ T6833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.444181][ T6833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.471743][ T6833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.327636][ T6833] hsr_slave_0: entered promiscuous mode
[  391.339984][ T6833] hsr_slave_1: entered promiscuous mode
[  391.821847][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  391.892069][ T5806] Bluetooth: hci2: command tx timeout
[  392.094615][ T6931] binder_alloc: 6929: binder_alloc_buf, no vma
[  393.721299][ T6833] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  393.780966][ T6833] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  393.833878][ T6833] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  393.929385][ T6833] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  395.733513][ T5801] Bluetooth: hci0: command 0x0406 tx timeout
[  395.740048][ T5801] Bluetooth: hci3: command 0x0406 tx timeout
[  395.747193][ T5809] Bluetooth: hci1: command 0x0406 tx timeout
[  396.057741][ T6833] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.341148][ T6833] 8021q: adding VLAN 0 to HW filter on device team0
[  396.403533][ T6971] binder_alloc: 6969: binder_alloc_buf, no vma
[  396.437388][ T5852] IPVS: starting estimator thread 0...
[  396.488895][ T4077] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.497094][ T4077] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.580927][ T6976] IPVS: using max 192 ests per chain, 9600 per kthread
[  396.676516][ T4077] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.684447][ T4077] bridge0: port 2(bridge_slave_1) entered forwarding state
[  399.158598][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  399.168190][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  400.040230][ T6833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.424696][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  402.107830][ T7036] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  403.953072][ T6833] veth0_vlan: entered promiscuous mode
[  404.185052][ T6833] veth1_vlan: entered promiscuous mode
[  404.598959][ T6833] veth0_macvtap: entered promiscuous mode
[  404.659245][ T6833] veth1_macvtap: entered promiscuous mode
[  404.975251][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  404.988071][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.999731][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  405.011664][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.021892][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  405.036927][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.048371][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  405.059414][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.077262][ T6833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  405.204991][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  405.216057][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.226993][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  405.242002][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.253932][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  405.264926][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.281649][ T6833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  405.728348][ T6833] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.738057][ T6833] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.752299][ T6833] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  405.762873][ T6833] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.022844][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'.
[  408.033957][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'.
[  408.043265][ T7100] netlink: 46 bytes leftover after parsing attributes in process `syz.2.372'.
[  409.144184][ T7116] binder: 7115:7116 ioctl c00c620f 400000000000 returned -22
[  410.863937][ T7136] binder: BINDER_SET_CONTEXT_MGR already set
[  410.873975][ T7136] binder: 7134:7136 ioctl 4018620d 400000000040 returned -16
[  411.741320][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'.
[  411.751304][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'.
[  411.760629][ T7145] netlink: 46 bytes leftover after parsing attributes in process `syz.1.386'.
[  414.175789][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  414.182729][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  414.853607][ T7179] binder: BINDER_SET_CONTEXT_MGR already set
[  414.859949][ T7179] binder: 7177:7179 ioctl 4018620d 400000000040 returned -16
[  415.517217][ T3592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.525830][ T3592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.934838][ T3823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.943367][ T3823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.166842][ T7233] syz.3.414 (7233): drop_caches: 2
[  423.824545][ T7280] xt_hashlimit: size too large, truncated to 1048576
[  424.535471][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.435'.
[  424.547132][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.435'.
[  424.556562][ T7289] netlink: 'syz.5.435': attribute type 1 has an invalid length.
[  424.564716][ T7289] nbd: error processing sock list
[  428.172660][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.448'.
[  428.188790][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.448'.
[  428.198126][ T7322] netlink: 'syz.5.448': attribute type 1 has an invalid length.
[  428.206397][ T7322] nbd: error processing sock list
[  429.105798][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.453'.
[  429.115697][ T7334] netlink: 'syz.1.453': attribute type 7 has an invalid length.
[  429.124596][ T7334] netlink: 'syz.1.453': attribute type 8 has an invalid length.
[  429.132762][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'.
[  429.159478][ T7334] ip6gretap0: entered promiscuous mode
[  429.172059][ T7334] syz_tun: entered promiscuous mode
[  429.181280][ T7334] gretap0: entered promiscuous mode
[  430.109265][ T5806] Bluetooth: hci0: SCO packet for unknown connection handle 201
[  430.691464][ T5806] Bluetooth: hci3: command 0x0406 tx timeout
[  430.788875][ T7358] overlayfs: failed to resolve './file1': -2
[  431.752630][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.465'.
[  431.767591][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.465'.
[  431.778432][ T7370] netlink: 'syz.5.465': attribute type 1 has an invalid length.
[  431.786579][ T7370] nbd: error processing sock list
[  432.413661][ T5806] Bluetooth: hci1: unexpected event for opcode 0x2029
[  433.222716][ T5806] Bluetooth: hci0: SCO packet for unknown connection handle 201
[  433.550085][ T7379] syz.4.469 (7379) used greatest stack depth: 4712 bytes left
[  433.872019][ T7394] macvlan0: entered allmulticast mode
[  433.877780][ T7394] veth1_vlan: entered allmulticast mode
[  434.082851][ T7394] netlink: 128 bytes leftover after parsing attributes in process `syz.5.475'.
[  434.205690][ T7400] overlayfs: failed to resolve './file1': -2
[  435.487812][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'.
[  435.497213][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'.
[  435.506764][ T7409] netlink: 'syz.1.481': attribute type 1 has an invalid length.
[  435.515062][ T7409] nbd: error processing sock list
[  435.762531][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  435.762628][   T30] audit: type=1326 audit(1741874701.695:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz.3.483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efee218d169 code=0x0
[  436.474591][ T5806] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  436.484217][ T5806] Bluetooth: hci1: Injecting HCI hardware error event
[  436.493105][ T5806] Bluetooth: hci1: hardware error 0x00
[  437.101334][ T7429] usb usb9: usbfs: process 7429 (syz.2.488) did not claim interface 0 before use
[  438.266862][ T7441] overlayfs: failed to resolve './file1': -2
[  438.531036][ T5806] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  439.352308][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'.
[  439.363388][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'.
[  439.372972][ T7453] netlink: 'syz.4.497': attribute type 1 has an invalid length.
[  439.381150][ T7453] nbd: error processing sock list
[  440.348189][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'.
[  440.407912][ T7468] syz_tun: entered promiscuous mode
[  440.414115][ T7468] macvtap1: entered promiscuous mode
[  440.421192][ T7468] macvtap1: entered allmulticast mode
[  440.426881][ T7468] syz_tun: entered allmulticast mode
[  440.541252][ T7473] usb usb9: usbfs: process 7473 (syz.3.505) did not claim interface 0 before use
[  440.876238][ T7477] binder: 7476:7477 ioctl 4018620d 0 returned -22
[  441.349759][ T7482] overlayfs: failed to resolve './file0': -2
[  441.719916][ T7488] binder: 7487:7488 ioctl c00c620f 0 returned -14
[  441.892121][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'.
[  442.788591][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.513'.
[  442.798394][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.513'.
[  442.807884][ T7500] netlink: 'syz.5.513': attribute type 1 has an invalid length.
[  442.816328][ T7500] nbd: error processing sock list
[  443.198005][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'.
[  444.102006][ T7515] binder: 7513:7515 ioctl 4018620d 0 returned -22
[  444.119794][ T7514] usb usb9: usbfs: process 7514 (syz.2.520) did not claim interface 0 before use
[  444.220224][ T7517] overlayfs: failed to resolve './file0': -2
[  444.621636][ T5797] Bluetooth: hci2: command 0x0405 tx timeout
[  445.081367][ T7528] binder: 7527:7528 ioctl c00c620f 0 returned -14
[  445.546671][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'.
[  446.154676][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'.
[  446.164244][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'.
[  446.174025][ T7541] netlink: 'syz.3.529': attribute type 1 has an invalid length.
[  446.182239][ T7541] nbd: error processing sock list
[  447.058851][ T7551] binder: 7550:7551 ioctl 4018620d 0 returned -22
[  447.671990][ T7560] usb usb9: usbfs: process 7560 (syz.1.536) did not claim interface 0 before use
[  448.145605][ T7564] overlayfs: failed to resolve './file0': -2
[  449.432535][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'.
[  449.442210][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'.
[  449.451539][ T7582] netlink: 'syz.2.543': attribute type 1 has an invalid length.
[  449.459453][ T7582] nbd: error processing sock list
[  451.741548][ T7612] overlayfs: failed to resolve './file0': -2
[  452.731184][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'.
[  452.742307][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'.
[  452.756199][ T7622] netlink: 'syz.4.558': attribute type 1 has an invalid length.
[  452.765945][ T7622] nbd: error processing sock list
[  455.267111][ T7657] overlayfs: failed to resolve './file0': -2
[  455.784582][ T7661] binder: 7660:7661 ioctl 400454de 0 returned -22
[  455.903611][ T7663] 9pnet_virtio: no channels available for device syz
[  456.271019][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'.
[  456.280619][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'.
[  456.289698][ T7668] netlink: 'syz.1.573': attribute type 1 has an invalid length.
[  456.297933][ T7668] nbd: error processing sock list
[  456.374643][ T7661] binder: 7660:7661 ioctl c0306201 400000003b00 returned -11
[  459.074158][ T7703] overlayfs: failed to resolve './file0': -2
[  460.094501][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'.
[  460.105442][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'.
[  460.114855][ T7715] netlink: 'syz.1.589': attribute type 1 has an invalid length.
[  460.128996][ T7715] nbd: error processing sock list
[  460.295372][ T7717] batman_adv: batadv0: Adding interface: dummy0
[  460.302340][ T7717] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.333217][ T7717] batman_adv: batadv0: Interface activated: dummy0
[  460.464672][ T7717] batadv0: mtu less than device minimum
[  460.472690][ T7717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  460.485516][ T7717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  460.498240][ T7717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  460.511062][ T7717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  460.523789][ T7717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  460.536459][ T7717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  460.549189][ T7717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  460.561961][ T7717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  460.574609][ T7717] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  460.962684][ T7727] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  462.279593][ T7741] overlayfs: failed to resolve './file1': -2
[  462.291732][ T5806] Bluetooth: hci4: command 0x0406 tx timeout
[  464.055785][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'.
[  464.065340][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'.
[  464.074971][ T7764] netlink: 'syz.3.604': attribute type 1 has an invalid length.
[  464.083128][ T7764] nbd: error processing sock list
[  464.349491][ T7761] kvm: kvm [7759]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xeb
[  464.461516][ T7761] kvm: kvm [7759]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x40eb
[  464.529999][ T7761] kvm: kvm [7759]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1a
[  464.539652][ T7761] kvm: kvm [7759]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x401a
[  465.335469][ T7783] overlayfs: failed to resolve './file1': -2
[  467.533133][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.620'.
[  467.542814][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.620'.
[  467.552419][ T7810] netlink: 46 bytes leftover after parsing attributes in process `syz.5.620'.
[  468.143972][ T7816] binder: 7815:7816 ioctl 4018620d 0 returned -22
[  468.594274][ T7821] overlayfs: failed to resolve './file1': -2
[  469.683923][ T7838] fuse: Bad value for 'fd'
[  470.327100][ T7831] syz.2.628 (7831) used greatest stack depth: 4544 bytes left
[  471.028519][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'.
[  472.976865][ T7878] fuse: Bad value for 'fd'
[  474.847783][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'.
[  475.319348][ T7907] 9pnet_fd: Insufficient options for proto=fd
[  475.613292][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  475.620086][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  477.174298][ T7928] binder: 7925:7928 ioctl c0306201 0 returned -14
[  478.079375][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.667'.
[  478.920840][ T7951] 9pnet_fd: Insufficient options for proto=fd
[  480.266027][ T7970] binder: 7966:7970 ioctl c0306201 0 returned -14
[  481.809607][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'.
[  482.086113][ T7993] 9pnet_fd: Insufficient options for proto=fd
[  483.539422][ T8012] netlink: 128 bytes leftover after parsing attributes in process `syz.5.690'.
[  485.652064][ T8032] binder_alloc: 8030: binder_alloc_buf, no vma
[  485.793452][ T8038] xt_hashlimit: size too large, truncated to 1048576
[  486.588741][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'.
[  489.133084][ T8074] overlayfs: failed to resolve './file0': -2
[  489.908043][ T8084] binder_alloc: 8082: binder_alloc_buf, no vma
[  490.815788][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'.
[  491.097089][ T8102] xt_hashlimit: size too large, truncated to 1048576
[  492.509991][ T8119] overlayfs: failed to resolve './file0': -2
[  494.431783][ T8136] binder: 8135:8136 ioctl 4018620d 0 returned -22
[  495.113083][ T8146] overlayfs: failed to resolve './file0': -2
[  495.192061][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'.
[  496.484220][ T8164] xt_hashlimit: size too large, truncated to 1048576
[  498.774473][ T8189] binder: 8188:8189 ioctl 4018620d 0 returned -22
[  499.285658][ T8194] overlayfs: failed to resolve './file1': -2
[  500.053283][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'.
[  502.442498][ T8235] binder: 8234:8235 ioctl 4018620d 0 returned -22
[  502.581005][ T8237] xt_hashlimit: size too large, truncated to 1048576
[  502.902587][ T8242] overlayfs: failed to resolve './file1': -2
[  504.234726][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.768'.
[  506.234004][ T8280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.774'.
[  506.588415][ T8284] binder: BINDER_SET_CONTEXT_MGR already set
[  506.595251][ T8284] binder: 8282:8284 ioctl 4018620d 400000000040 returned -16
[  507.355691][ T8288] overlayfs: failed to resolve './file1': -2
[  507.813874][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'.
[  508.371320][ T5806] Bluetooth: hci2: command 0x0405 tx timeout
[  508.585587][ T8313] xt_hashlimit: size too large, truncated to 1048576
[  510.156963][ T8326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.788'.
[  510.744796][ T8334] binder: BINDER_SET_CONTEXT_MGR already set
[  510.751878][ T8334] binder: 8333:8334 ioctl 4018620d 400000000040 returned -16
[  511.468303][ T8342] overlayfs: failed to resolve './file1': -2
[  512.547168][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'.
[  514.053527][ T8377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.802'.
[  514.055660][ T8375] tipc: Started in network mode
[  514.068424][ T8375] tipc: Node identity f65d31552e0f, cluster identity 4711
[  514.078621][ T8375] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  514.206300][ T8374] tipc: Disabling bearer <eth:syzkaller0>
[  514.343363][ T8383] binder: BINDER_SET_CONTEXT_MGR already set
[  514.349666][ T8383] binder: 8382:8383 ioctl 4018620d 400000000040 returned -16
[  514.526473][ T8386] xt_hashlimit: size too large, truncated to 1048576
[  515.702485][ T8397] overlayfs: failed to resolve './file1': -2
[  517.605423][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'.
[  518.261635][ T8426] netlink: 40 bytes leftover after parsing attributes in process `syz.5.816'.
[  518.387183][ T8430] macvlan0: entered allmulticast mode
[  518.401244][ T8430] veth1_vlan: entered allmulticast mode
[  518.612771][ T8430] netlink: 128 bytes leftover after parsing attributes in process `syz.3.817'.
[  518.835314][ T8433] binder: 8432:8433 ioctl c0306201 0 returned -14
[  519.689258][ T8444] overlayfs: failed to resolve './file1': -2
[  520.181284][ T8453] xt_hashlimit: size too large, truncated to 1048576
[  522.006910][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.830'.
[  522.214159][ T8474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.831'.
[  522.518984][ T8478] netlink: 128 bytes leftover after parsing attributes in process `syz.3.832'.
[  523.232205][ T8481] binder: 8480:8481 ioctl c0306201 0 returned -14
[  523.580737][ T8489] overlayfs: failed to resolve './file0': -2
[  525.002267][ T8503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.843'.
[  525.591104][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.845'.
[  525.704757][ T8508] netlink: 128 bytes leftover after parsing attributes in process `syz.1.844'.
[  526.031219][ T8516] xt_hashlimit: size too large, truncated to 1048576
[  526.445759][ T8522] binder: 8521:8522 ioctl c0306201 0 returned -14
[  527.711252][ T8530] netlink: 128 bytes leftover after parsing attributes in process `syz.3.851'.
[  529.044730][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.857'.
[  529.198097][ T8547] macvlan0: entered allmulticast mode
[  529.204375][ T8547] veth1_vlan: entered allmulticast mode
[  529.418814][ T8548] netlink: 128 bytes leftover after parsing attributes in process `syz.2.859'.
[  529.662507][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'.
[  530.913516][ T8568] netlink: 128 bytes leftover after parsing attributes in process `syz.5.865'.
[  531.124767][ T8572] xt_hashlimit: size too large, truncated to 1048576
[  531.334742][ T8573] syzkaller0: entered promiscuous mode
[  531.340906][ T8573] syzkaller0: entered allmulticast mode
[  533.182240][ T8588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.872'.
[  533.712151][ T8595] netlink: 128 bytes leftover after parsing attributes in process `syz.5.874'.
[  534.279823][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'.
[  535.423557][ T8617] netlink: 128 bytes leftover after parsing attributes in process `syz.5.880'.
[  536.407172][ T8628] xt_hashlimit: size too large, truncated to 1048576
[  536.597396][ T8630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.887'.
[  537.054177][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  537.061208][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  537.699755][ T8641] netlink: 128 bytes leftover after parsing attributes in process `syz.1.890'.
[  538.646170][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'.
[  539.772879][ T8664] netlink: 128 bytes leftover after parsing attributes in process `syz.1.898'.
[  540.064802][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.901'.
[  540.890978][ T8680] overlayfs: failed to resolve './file1': -2
[  540.902384][ T8681] netlink: 128 bytes leftover after parsing attributes in process `syz.5.904'.
[  541.268007][ T8684] xt_hashlimit: size too large, truncated to 1048576
[  542.566607][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.911'.
[  542.673075][ T8699] netlink: 128 bytes leftover after parsing attributes in process `syz.1.913'.
[  543.871405][ T8712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.916'.
[  544.795317][ T8722] overlayfs: failed to resolve './file1': -2
[  544.995299][ T8724] netlink: 128 bytes leftover after parsing attributes in process `syz.3.921'.
[  545.880567][ T8732] netlink: 128 bytes leftover after parsing attributes in process `syz.1.926'.
[  546.533673][ T8740] netlink: 20 bytes leftover after parsing attributes in process `syz.5.930'.
[  546.617878][ T8743] xt_hashlimit: size too large, truncated to 1048576
[  548.263129][ T8757] binder_alloc: 8756: binder_alloc_buf size 16408 failed, no address space
[  548.273557][ T8757] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  548.298467][ T8759] overlayfs: failed to resolve './file1': -2
[  549.419247][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.943'.
[  551.761469][ T8801] overlayfs: failed to resolve './file0': -2
[  552.188182][ T8808] xt_hashlimit: size too large, truncated to 1048576
[  553.217509][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'.
[  554.954964][ T8838] syz.1.964 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  555.498630][ T8848] overlayfs: failed to resolve './file0': -2
[  556.934221][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'.
[  557.838194][ T8878] xt_hashlimit: size too large, truncated to 1048576
[  559.316085][ T8892] overlayfs: failed to resolve './file0': -2
[  561.082205][ T8911] binder: 8908:8911 ioctl 4018620d 0 returned -22
[  561.773726][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'.
[  562.701436][   T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  562.958314][   T45] usb 5-1: config 128 has an invalid interface number: 138 but max is 0
[  562.967471][   T45] usb 5-1: config 128 has no interface number 0
[  562.978301][   T45] usb 5-1: config 128 interface 138 has no altsetting 0
[  563.118885][   T45] usb 5-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00
[  563.128866][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.142750][   T45] usb 5-1: Product: syz
[  563.147239][   T45] usb 5-1: Manufacturer: syz
[  563.153828][   T45] usb 5-1: SerialNumber: syz
[  563.714726][ T5852] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  563.731880][ T5859] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  563.972082][ T5859] usb 4-1: Using ep0 maxpacket: 16
[  563.998842][ T5852] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  564.010024][ T5852] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  564.051306][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  564.067709][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  564.079670][ T5859] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[  564.089472][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.167996][ T5852] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  564.177791][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.186596][ T5852] usb 6-1: Product: syz
[  564.191528][ T5852] usb 6-1: Manufacturer: syz
[  564.196633][ T5852] usb 6-1: SerialNumber: syz
[  564.228925][   T45] usb-storage 5-1:128.138: USB Mass Storage device detected
[  564.242459][ T5859] usb 4-1: config 0 descriptor??
[  564.256248][ T5852] usb 6-1: config 0 descriptor??
[  564.392395][   T45] usb 5-1: USB disconnect, device number 7
[  564.548839][ T5852] usb 6-1: USB disconnect, device number 2
[  564.622050][ T5854] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  564.831093][ T5859] input: HID 28bd:0905 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0905.0001/input/input9
[  564.921090][ T5854] usb 3-1: config 16 has an invalid interface number: 11 but max is 0
[  564.929669][ T5854] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  564.940628][ T5854] usb 3-1: config 16 has no interface number 0
[  565.016445][ T5854] usb 3-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.e2
[  565.026107][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.034843][ T5854] usb 3-1: Product: syz
[  565.039310][ T5854] usb 3-1: Manufacturer: syz
[  565.044439][ T5854] usb 3-1: SerialNumber: syz
[  565.064606][ T5859] uclogic 0003:28BD:0905.0001: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0905] on usb-dummy_hcd.3-1/input0
[  565.156138][ T5859] usb 4-1: USB disconnect, device number 2
[  565.428133][ T5854] usb 3-1: Found UVC 0.00 device syz (1871:0306)
[  565.435893][ T5854] usb 3-1: No valid video chain found.
[  565.488066][ T5854] usb 3-1: USB disconnect, device number 6
[  565.979965][ T5854] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  566.247707][ T5854] usb 3-1: config 16 has an invalid interface number: 11 but max is 0
[  566.256831][ T5854] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  566.267713][ T5854] usb 3-1: config 16 has no interface number 0
[  566.322067][ T5854] usb 3-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.e2
[  566.331834][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.340580][ T5854] usb 3-1: Product: syz
[  566.345053][ T5854] usb 3-1: Manufacturer: syz
[  566.350019][ T5854] usb 3-1: SerialNumber: syz
[  566.358025][ T5859] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  566.382795][ T8956] binder: 8955:8956 ioctl 4018620d 0 returned -22
[  566.562737][ T5859] usb 6-1: Using ep0 maxpacket: 16
[  566.641486][ T5859] usb 6-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  566.653981][ T5859] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  566.665949][ T5859] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  566.678020][ T5859] usb 6-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  566.691822][ T5859] usb 6-1: config 0 interface 0 has no altsetting 0
[  566.768426][ T5854] usb 3-1: Found UVC 0.00 device syz (1871:0306)
[  566.775374][ T5854] usb 3-1: No valid video chain found.
[  566.879415][ T5859] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  566.889876][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.899132][ T5859] usb 6-1: Product: syz
[  566.903791][ T5859] usb 6-1: Manufacturer: syz
[  566.908909][ T5859] usb 6-1: SerialNumber: syz
[  566.965230][ T5854] usb 3-1: USB disconnect, device number 7
[  567.035963][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'.
[  567.074240][ T5859] usb 6-1: config 0 descriptor??
[  567.083681][ T8954] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  567.164075][ T5859] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input10
[  567.397306][ T8969] overlayfs: missing 'lowerdir'
[  567.455593][ T5849] usb 6-1: USB disconnect, device number 3
[  568.861550][ T5849] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  569.114413][ T5849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  569.125616][ T5849] usb 5-1: config 0 has no interfaces?
[  569.131825][ T5849] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  569.141534][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.434165][ T5849] usb 5-1: config 0 descriptor??
[  569.712764][ T8981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  569.723233][ T8981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  569.762826][ T5849] usb 5-1: USB disconnect, device number 8
[  570.201427][ T5859] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  570.311960][ T5849] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  570.457101][ T5859] usb 6-1: unable to get BOS descriptor or descriptor too short
[  570.508097][ T5859] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  570.571254][ T5849] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  570.583763][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  570.595555][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 107, setting to 64
[  570.643931][ T5859] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  570.649892][ T9001] binder: 8999:9001 ioctl 4018620d 0 returned -22
[  570.654021][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.654172][ T5859] usb 6-1: Product: syz
[  570.654282][ T5859] usb 6-1: Manufacturer: syz
[  570.654393][ T5859] usb 6-1: SerialNumber: syz
[  570.759831][ T5859] smsusb:smsusb_probe: board id=8, interface number 0
[  570.767360][ T5859] smsusb:smsusb_probe: Device initialized with return code -19
[  570.851670][ T5849] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  570.861889][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.870476][ T5849] usb 5-1: Product: syz
[  570.874968][ T5849] usb 5-1: Manufacturer: syz
[  570.879878][ T5849] usb 5-1: SerialNumber: syz
[  570.909562][ T5849] usb 5-1: config 0 descriptor??
[  570.939889][ T5849] hub 5-1:0.0: bad descriptor, ignoring hub
[  570.946457][ T5849] hub 5-1:0.0: probe with driver hub failed with error -5
[  570.965471][ T5849] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11
[  570.998619][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.007166][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.016116][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.027703][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.038175][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.046494][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.054386][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.066174][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.080737][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.090620][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.098576][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.110482][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.118549][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.135242][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.152025][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.160542][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.168413][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.176309][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.184585][ T5137] usb 5-1: control msg error: -71
[  571.190521][    C1] usb 5-1: pegasus_irq - urb shutting down with status: -2
[  571.235359][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.243698][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.257081][ T5137] usb 5-1: control msg error: -71
[  571.262713][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.272191][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.280768][    C1] usb 5-1: pegasus_irq - urb shutting down with status: -2
[  571.348738][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.358225][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.367538][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.381056][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.390529][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.398411][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  571.398557][ T5849] usb 5-1: USB disconnect, device number 9
[  571.405719][    C1] usb 5-1: pegasus_irq - usb_submit_urb failed with result -19
[  571.419344][ T5137] usb 5-1: control msg error: -71
[  571.532235][ T5859] usb 6-1: USB disconnect, device number 4
[  571.833506][ T9008] overlayfs: missing 'lowerdir'
[  572.157079][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'.
[  573.718593][ T9022] loop4: detected capacity change from 0 to 32768
[  574.098991][ T9022] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,journal_flush_disabled,fsck,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  574.122096][ T9022] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  574.132157][ T9022] bcachefs (loop4): Version upgrade required:
[  574.132157][ T9022] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  574.132157][ T9022] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  574.132157][ T9022]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  574.312025][ T9022] bcachefs (loop4): dropping and reconstructing all alloc info
[  574.534638][ T9022] bcachefs (loop4): accounting_read... done
[  574.543030][ T9022] bcachefs (loop4): alloc_read... done
[  574.549241][ T9022] bcachefs (loop4): stripes_read... done
[  574.555766][ T9022] bcachefs (loop4): snapshots_read... done
[  574.562552][ T9022] bcachefs (loop4): check_allocations... done
[  574.746435][ T9022] bcachefs (loop4): going read-write
[  574.783296][ T9022] bcachefs (loop4): journal_replay...
[  575.010599][ T4813] =====================================================
[  575.028202][ T4813] BUG: KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined+0x8d0/0xd50
[  575.041902][ T4813]  bch2_bkey_cmp_packed_inlined+0x8d0/0xd50
[  575.048129][ T4813]  bch2_sort_keys_keep_unwritten_whiteouts+0xebd/0x1840
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  575.055750][ T4813]  __bch2_btree_node_write+0x3b3f/0x6870
[  575.061837][ T4813]  bch2_btree_node_write_trans+0xd7/0x890
[  575.068415][ T4813]  btree_interior_update_work+0x3eac/0x4830
[  575.074988][ T4813]  process_scheduled_works+0xc1a/0x1e80
[  575.080992][ T4813]  worker_thread+0xea7/0x14f0
[  575.085910][ T4813]  kthread+0x6b9/0xef0
[  575.090431][ T4813]  ret_from_fork+0x6d/0x90
[  575.095113][ T4813]  ret_from_fork_asm+0x1a/0x30
[  575.100147][ T4813] 
[  575.103443][ T4813] Uninit was created at:
[  575.108013][ T4813]  ___kmalloc_large_node+0x22c/0x370
[  575.115583][ T4813]  __kmalloc_large_node_noprof+0x3f/0x1e0
[  575.126417][ T4813]  __kmalloc_node_noprof+0xc96/0x1250
[  575.133672][ T4813]  __kvmalloc_node_noprof+0xc0/0x2d0
[  575.139258][ T4813]  __bch2_btree_node_mem_alloc+0x2be/0xa80
[  575.145900][ T4813]  bch2_fs_btree_cache_init+0x4f0/0xb60
[  575.151965][ T4813]  bch2_fs_open+0x4d84/0x5ba0
[  575.156929][ T4813]  bch2_fs_get_tree+0x98a/0x24e0
[  575.162335][ T4813]  vfs_get_tree+0xb1/0x5a0
[  575.167019][ T4813]  do_new_mount+0x71f/0x15e0
[  575.172093][ T4813]  path_mount+0x742/0x1f10
[  575.176758][ T4813]  __se_sys_mount+0x71f/0x800
[  575.181888][ T4813]  __x64_sys_mount+0xe4/0x150
[  575.186829][ T4813]  x64_sys_call+0x39bf/0x3c30
[  575.192380][ T4813]  do_syscall_64+0xcd/0x1e0
[  575.197172][ T4813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.203452][ T4813] 
[  575.205916][ T4813] CPU: 1 UID: 0 PID: 4813 Comm: kworker/u8:31 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0
[  575.217287][ T4813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  575.232501][ T4813] Workqueue: btree_update btree_interior_update_work
[  575.239506][ T4813] =====================================================
[  575.248057][ T4813] Disabling lock debugging due to kernel taint
[  575.254534][ T4813] Kernel panic - not syncing: kmsan.panic set ...
[  575.261231][ T4813] CPU: 1 UID: 0 PID: 4813 Comm: kworker/u8:31 Tainted: G    B              6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0
[  575.274107][ T4813] Tainted: [B]=BAD_PAGE
[  575.278417][ T4813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  575.288777][ T4813] Workqueue: btree_update btree_interior_update_work
[  575.295790][ T4813] Call Trace:
[  575.299209][ T4813]  <TASK>
[  575.302287][ T4813]  dump_stack_lvl+0x216/0x2d0
[  575.307177][ T4813]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  575.313283][ T4813]  dump_stack+0x1e/0x24
[  575.317732][ T4813]  panic+0x4e2/0xcf0
[  575.321970][ T4813]  ? kmsan_get_metadata+0x61/0x1c0
[  575.327633][ T4813]  kmsan_report+0x2c7/0x2d0
[  575.332393][ T4813]  ? filter_irq_stacks+0x60/0x1a0
[  575.337662][ T4813]  ? __msan_warning+0x95/0x120
[  575.342658][ T4813]  ? bch2_bkey_cmp_packed_inlined+0x8d0/0xd50
[  575.349040][ T4813]  ? bch2_sort_keys_keep_unwritten_whiteouts+0xebd/0x1840
[  575.356490][ T4813]  ? __bch2_btree_node_write+0x3b3f/0x6870
[  575.362579][ T4813]  ? bch2_btree_node_write_trans+0xd7/0x890
[  575.368749][ T4813]  ? btree_interior_update_work+0x3eac/0x4830
[  575.375099][ T4813]  ? process_scheduled_works+0xc1a/0x1e80
[  575.381107][ T4813]  ? worker_thread+0xea7/0x14f0
[  575.386156][ T4813]  ? kthread+0x6b9/0xef0
[  575.390637][ T4813]  ? ret_from_fork+0x6d/0x90
[  575.395451][ T4813]  ? ret_from_fork_asm+0x1a/0x30
[  575.400613][ T4813]  ? kmsan_get_metadata+0x13e/0x1c0
[  575.406078][ T4813]  ? kmsan_get_metadata+0x13e/0x1c0
[  575.411529][ T4813]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  575.417615][ T4813]  ? bch2_bkey_cmp_packed_inlined+0x43/0xd50
[  575.423942][ T4813]  ? filter_irq_stacks+0x60/0x1a0
[  575.429236][ T4813]  ? stack_depot_save_flags+0x2c/0x750
[  575.434960][ T4813]  ? kmsan_get_metadata+0x13e/0x1c0
[  575.440435][ T4813]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  575.447022][ T4813]  ? kmsan_get_metadata+0x13e/0x1c0
[  575.452476][ T4813]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  575.458553][ T4813]  __msan_warning+0x95/0x120
[  575.463387][ T4813]  bch2_bkey_cmp_packed_inlined+0x8d0/0xd50
[  575.469533][ T4813]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  575.475621][ T4813]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  575.481701][ T4813]  bch2_sort_keys_keep_unwritten_whiteouts+0xebd/0x1840
[  575.488941][ T4813]  __bch2_btree_node_write+0x3b3f/0x6870
[  575.494919][ T4813]  ? try_to_wake_up+0xacd/0x1b70
[  575.500099][ T4813]  ? kmsan_get_metadata+0x13e/0x1c0
[  575.505556][ T4813]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  575.511698][ T4813]  bch2_btree_node_write_trans+0xd7/0x890
[  575.517672][ T4813]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  575.523751][ T4813]  btree_interior_update_work+0x3eac/0x4830
[  575.529972][ T4813]  ? btree_interior_update_work+0x3c6f/0x4830
[  575.536324][ T4813]  ? __pfx_btree_interior_update_work+0x10/0x10
[  575.542836][ T4813]  process_scheduled_works+0xc1a/0x1e80
[  575.548723][ T4813]  worker_thread+0xea7/0x14f0
[  575.553606][ T4813]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  575.559703][ T4813]  kthread+0x6b9/0xef0
[  575.564012][ T4813]  ? __pfx_worker_thread+0x10/0x10
[  575.569365][ T4813]  ? __pfx_kthread+0x10/0x10
[  575.574177][ T4813]  ret_from_fork+0x6d/0x90
[  575.578822][ T4813]  ? __pfx_kthread+0x10/0x10
[  575.583643][ T4813]  ret_from_fork_asm+0x1a/0x30
[  575.588647][ T4813]  </TASK>
[  575.592217][ T4813] Kernel Offset: disabled
[  575.596658][ T4813] Rebooting in 86400 seconds..