last executing test programs:

4m6.001884611s ago: executing program 4 (id=123):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000040), 0x0, 0x4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000300)={{&(0x7f0000a92000/0x1000)=nil, 0x1000}})

4m4.087402799s ago: executing program 4 (id=127):
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5b81, 0xc0, 0xffff, 0x9, 0x9, 0x200000000, 0xc, 0xde})
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chroot(&(0x7f0000000000)='./bus\x00')
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)

4m3.291678383s ago: executing program 4 (id=129):
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000))
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0)
write$sequencer(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="8105"], 0x8)
ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xfffff800}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @loopback}, 0x1c)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mlock(&(0x7f0000002000/0x2000)=nil, 0x2000)
read$FUSE(r5, &(0x7f0000002680)={0x2020}, 0x2020)

4m1.97767199s ago: executing program 4 (id=134):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x510, 0x1d8, 0xf8, 0x378, 0x378, 0x378, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x3000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xfff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@init_itable}, {@bsdgroups}, {@norecovery}]}, 0x2, 0x457, &(0x7f0000000d80)="$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")
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000100))
timer_create(0x7, &(0x7f0000000240)={0x0, 0x2000021, 0x0, @thr={&(0x7f0000000480)="6cc56f0fddfcc9a013f62d94b94ef01deb216821c451e4f62131fa85f7512e3fccf5b6c740f9d38f52a8934d4d3b696613142c44f8b03b117c90a73671105a6df0e592627071e567fd7d70a8b1e977df4beed16d05094d52e0cb149f8c", 0x0}}, &(0x7f0000000100))
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
read$FUSE(r1, 0x0, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="e7fdde016e905ecbb909b968", 0xc)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0})

3m59.089075219s ago: executing program 4 (id=140):
capset(0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x44840)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x20, 0x0, 0x1, 0x0, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wlan0\x00'}]}, 0x20}}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

3m57.772243759s ago: executing program 4 (id=141):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"})
syz_open_pts(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000d10ffc)=0x7ffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c)
sendto$inet6(r5, &(0x7f0000000480)='\a', 0x1, 0x40008d0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {}, {0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x800)

3m55.767948485s ago: executing program 32 (id=141):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"})
syz_open_pts(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000d10ffc)=0x7ffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c)
sendto$inet6(r5, &(0x7f0000000480)='\a', 0x1, 0x40008d0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {}, {0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x800)

3m44.001161164s ago: executing program 1 (id=171):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044800}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x248, 0x20a, 0x278, 0x248, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)

3m42.43874732s ago: executing program 1 (id=173):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==")
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001f80)='./bus\x00')
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x7f000}])

3m40.804693662s ago: executing program 1 (id=178):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={0x0, r1}, 0x18)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x32, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0xfffe, 0x1, @mcast2, 0x4}}, {{0xa, 0x0, 0xfffffad8, @dev={0xfe, 0x80, '\x00', 0x38}, 0x3}}}, 0x108)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})

3m39.807763925s ago: executing program 1 (id=181):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000000040)={[{@gquota}, {@uquota}]}, 0x1, 0x980a, &(0x7f00000130c0)="$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")
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000010000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc01110000000000000000000000000000000000ac1414aa000000000000000000000000fe880000000000000000000000000001ac1414aa000000000000000000000000ff030000043500000a000200ffffffff00000000000000000000000020010000000000000000000000000001ac1414aa000000000000000000000000ff02000000000000000000000000000133000000023500000a000a00ac14143c000000000000000000000000000000000000000000000000000000000a010102000000000000000000000000ac14141400000000000000000000000032000000023500000a000a00fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000ac1414aa0000000000000000000000006c01000005350000020002006401010200000000000000000000000064010101000000000000000000000000fc0100000000000000000000000000010a01010100000000000000000000000033010000000000000a000800ffffffff000000000000000000000000e0000001000000000000000000000000ac1414bb000000000000000000000000000000000000000000000000000000493c04000000350000020000000a0010"], 0x268}}, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_VERSION(r1, 0xc0406441, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x9, 0x0)
ptrace$getregs(0xc, r2, 0x25a, &(0x7f0000000200)=""/4096)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

3m37.329278738s ago: executing program 1 (id=184):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file4/file6\x00', 0x104)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0)

3m36.488973793s ago: executing program 1 (id=187):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
r3 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0)
splice(r2, 0x0, r3, 0x0, 0x114, 0x0)
r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setpipe(r4, 0x407, 0x1000000)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0)
vmsplice(r5, &(0x7f0000000240)=[{&(0x7f0000000300)="10", 0x1}], 0x1, 0x0)

3m34.071465437s ago: executing program 33 (id=187):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
r3 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0)
splice(r2, 0x0, r3, 0x0, 0x114, 0x0)
r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setpipe(r4, 0x407, 0x1000000)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0)
vmsplice(r5, &(0x7f0000000240)=[{&(0x7f0000000300)="10", 0x1}], 0x1, 0x0)

1m55.880808173s ago: executing program 3 (id=420):
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x7fe2, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m53.534908876s ago: executing program 3 (id=427):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x810)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000600)='dlm_recv\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r5, 0x1}, 0x1c}}, 0x0)

1m52.557054625s ago: executing program 3 (id=428):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2323, 0x80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x6}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x11}}]}}}]}, 0x44}}, 0xc0)
setsockopt(r0, 0x800000010d, 0x3, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x108, r4, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x108}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000600)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
splice(r5, 0x0, r7, 0x0, 0x1100000000f336, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r7], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0xf, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000b0000"], 0x0, 0x33, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x28)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r8)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x40008400)

1m51.337359604s ago: executing program 3 (id=433):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
getegid()
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
setns(r2, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1m50.089547216s ago: executing program 3 (id=438):
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x9264}, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket(0xa, 0x3, 0x3a)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x200000, 0x1000000}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m48.977159646s ago: executing program 3 (id=442):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
dup(0xffffffffffffffff)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106a0529000000000000010902"], 0x0)
epoll_create(0x1)
r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
writev(r3, &(0x7f0000001400)=[{&(0x7f0000001280)="555a6060d64dc9c3dfb6de66a81485bf508daa16c0de4fda80f5a9b8d54284543cbeec823bab3a1d293005588f66934d7347b0508f6c17d0dcb3d9e34eb7c00ac2a1573009ec6df075a9a8ca16d616b8cbfd74cc549a04015afbe2cea3b9f348835ce7bae3e21b74bb67d5445535fd12ba3e5093402d1b155983d038aa", 0x7d}, {0x0}], 0x2)

1m46.957943396s ago: executing program 34 (id=442):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
dup(0xffffffffffffffff)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106a0529000000000000010902"], 0x0)
epoll_create(0x1)
r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
writev(r3, &(0x7f0000001400)=[{&(0x7f0000001280)="555a6060d64dc9c3dfb6de66a81485bf508daa16c0de4fda80f5a9b8d54284543cbeec823bab3a1d293005588f66934d7347b0508f6c17d0dcb3d9e34eb7c00ac2a1573009ec6df075a9a8ca16d616b8cbfd74cc549a04015afbe2cea3b9f348835ce7bae3e21b74bb67d5445535fd12ba3e5093402d1b155983d038aa", 0x7d}, {0x0}], 0x2)

6.028340458s ago: executing program 6 (id=777):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x200000000000, 0x80000)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x40, 0x0, 0x3014, 0x0, 0xcdc2b354cedf85e3, 0x0, 0x3, 0x300}})

5.976500866s ago: executing program 2 (id=778):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20041)
ioctl$BLKSECDISCARD(r0, 0x127d, 0x0)

5.336999472s ago: executing program 2 (id=782):
quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1000000, &(0x7f0000000180), 0x1, 0xbad, &(0x7f0000002380)="$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")

5.254431483s ago: executing program 6 (id=784):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@delsa={0x34, 0x11, 0x1, 0x70bd25, 0x25dfdbfe, {@in=@multicast1, 0x4d4, 0xa, 0x6c}, [@mark={0xc, 0x15, {0x35075d, 0x4f3}}]}, 0x34}}, 0x0)

4.701854974s ago: executing program 5 (id=786):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000180)=ANY=[@ANYBLOB="636f6465706167653d3835302c757466383d302c747a3d5554432c73686f72746e616d653d6c6f7765722c726f6469722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c646d61736b3d30303030303030303030303030303030303037373737372c757466383d312c696f636861727365743d6d6163726f6d616e69616e2c696f636861727365743d69736f380120d6a4ec3546ac3835392d372c757466383d312c756e695f786c6174653d302c666c7573682c757466383d302c726f6469722c696f636861727365743d63703836332c00"], 0x6, 0x2e8, &(0x7f0000000640)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x26e1, 0x0)

4.701657282s ago: executing program 6 (id=787):
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x10d, 0x10, &(0x7f00000002c0), 0x4)

4.653237434s ago: executing program 7 (id=788):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x47}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)

4.501617273s ago: executing program 0 (id=789):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120000000000000000000000000006000000000000000000000000000000ac1414aa000000000000000000000000e000000200000000000000000000000005000500000000000a00000000000000fc0100000000000000000000000000000000000000000000070019000000000002"], 0xd8}}, 0x0)

4.005998358s ago: executing program 6 (id=790):
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x2}, 0x8)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="e1cdf1c9d746bcaa9854b30731a00f236b0aa22e760f29fc5e15ebe36fbe2e1698", 0x21}], 0x1}}], 0x1, 0x20000050)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a"], 0x64}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={r0})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x10000]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.957150808s ago: executing program 7 (id=791):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x6, 0x8, [0x40, 0x1]})

3.886345349s ago: executing program 2 (id=792):
ioperm(0x0, 0x6, 0x8000000000004)
sysfs$3(0x3)

3.836881924s ago: executing program 5 (id=793):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0xfffffffd, 0x3, 0x100040, 0x0, &(0x7f0000000000), 0x3000000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000000280)="8708a9b9", 0x4, 0x800, &(0x7f0000000380)={0xa, 0x4e24, 0x2, @remote, 0x5}, 0x1c)
setsockopt(r1, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, &(0x7f0000000180)=0x1f00)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0xc6, 0x8, 0xfffa, 0x3, 0x10, 0xfffa, 0x1, {0x0, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x80}}, 0x8, 0x1561, 0x6, 0x5, 0x9}}, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_PIT2(r3, 0xaea2, &(0x7f0000000040)={[{0x3, 0x81, 0x0, 0x3, 0x0, 0xc6, 0x70, 0x0, 0x7, 0xc, 0xda, 0xf6, 0x5}, {0x0, 0xf3f, 0x2, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x6}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0xf, 0x1, 0x10, 0x2, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
getpgid(0x0)

3.57350266s ago: executing program 0 (id=794):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000003c0)="17000000020001000003be8c5e687a8a6a003200020100ecff3f0000000300dc42e67c523e32c466d741ace12647000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000941fc85c2daed74ce39d03000000000200df0180001e00000100000d00000080c457681f009cee4a5acb3dac00001fb7315033a338557d100eda2e36e2b68c8e4bd5bd4e27f0a7072f33ec25a02aff060115000000005c61caf2890100", 0xb8)

3.10475199s ago: executing program 7 (id=795):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0xfffffffc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

2.9925657s ago: executing program 2 (id=796):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(0x0, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
fanotify_init(0x10, 0x2)
r1 = gettid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sync()
sync()
sync()
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x80002)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
preadv(r3, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.713298264s ago: executing program 0 (id=797):
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000300)=ANY=[], 0x1, 0x1cf, &(0x7f0000000780)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

2.565745584s ago: executing program 6 (id=798):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000480)={[{@check_strict}, {@utf8}, {@uid}, {@map_off}, {@map_acorn}, {@check_strict}, {@check_relaxed}, {@cruft}, {@nojoliet}, {@overriderock}, {@nocompress}, {@mode={'mode', 0x3d, 0xfe8}}, {@uid}, {@dmode={'dmode', 0x3d, 0x7}}]}, 0x3f, 0x563, &(0x7f0000001240)="$eJzs3VFv01YbwPHHpYW8eSWEXl4hhAocyiYVqQQngaCIK885SQ8kdmQ7qL1CFU1RRQoTZdLam603bJO2D8HtPsTupn0atI/AZDspDWmaQmhTdf9fBOfUPvZ5jhv5qdv4WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFhuxbbzltSN11pSw7mVwG98+LK79cACudVXHNCviBX/k0xGLqeLLv//w+pL8X9zMpt+NSuZuMjI9n8vXXhwcXqqt/0BAR+Lza3t5yudTvvVpAM5QlfPDV9X054JfdNwalqZ0FflUsm+s1gNVdXUdbgcRrqh3EA7kR+oefeWypfLRaVzy37Lq1Wcuu4tvH+7YNsl9TDX1E4Q+t6dh7nQXTT1uvFqSZt4ddzmfvxGfGQiFWmnodTaeqddHDWAuFH+MI0KoxoV7EIhny8U8qV75Xv3bXt6YIH9ERloMfk3LSbrC569gfFMdfO/1MWIJy1ZErXvy5WKBOJLY8j6rl7+//qOPrDfvfm/l+W7PwfITreck2tp5dqw/D8kluN7bcqWbMtzWZGOdKQtryYe0fG+aqLFEyOh+GKkIU6yRHWXKClLSUpiyxNZlKqEoqQqRuqiJZRlCSUSnbyjXAlEiyOR+BKIknlx5ZYoyUtZylIUJVpysiy+tMSTmlTESfayJuvJcS+KsobFuNsoP3QY2d7bsi2FA0ZL/sf4vuj5GxjH+17+BwAAAAAAp5aV/PY9vv6fkatJrWrq2p50WAAAAAAA4AtK/vI/Gxczce2qWFz/AwAAAABw2ljJPXaWiGTlelpbEyu5XYpfAgAAAAAAcEokf/+/FhfJHCjXxdqdLoXrfwAAAAAATomfR86xHzbPWX/8LZlgxtppLn1lbThxO2fjTLrdmY/3GFWvWOe7O0mKUlpMT7t61sqkjXYnwXzXLdZGxPFnWWQwgB8/JYCL0/Kr3Ejb3FhNy9XemrSXbNXUdc716w/y4jjnpyK9FH33Yv17kSCYsX7xGuctWVvvtHNPX3ZWk1iSuYp3NroTKA7Mo3hALK+T+RaSey72HfFMciNGt99s2q+9d/xT6eZTn9DnG5lL28x1Z7zN9o8/E/eZz/WNPl63G0VG1jvt/JgjfyM30zY352+mxT5RFHLDvgfdY1HYG8VnHYvBKKyPoyj2RWENRlEcMwoAmJS1EVnISs53O2PmnVHZ3bKCePk4P14kZ/T5tM38leTEOn1ln7xij8or9pjZ7feBZyANy7Fxv7/t9ptm1bfxBm+H9hvWC1Z8CM+83vhWLm1ubd9e31h51n7WflEoFEv2Xdu+V5CZZBjdYk+k78+RewAAqdHP2BnZwrqbXlVfENn/qvp/ux8pyMlTeSkdWZWF5G6D5BMH++41u+djCAsjrlqzSZpMn/CycMC15dnkLofefgsHtu2PoXgc3woAAI7N3Ig8fJj8vzDiurs/l/dfHZ+VYW3zx34sAAD4t9DBOysb/WQFgWk+yZfLeSda1Crw3UcqMJWaVsaLdOAuOl5Nq2bgR77r1+PKY1PRoQpbzaYfRKrqB6rph2YpefK76j76PdQNx4uMGzbr2gm1cn0vctxIVUz4H9VsfVM34aIOko3DpnZN1bhOZHxPhX4rcHVOqVDrPQ1NRXuRqZq46qlmYBpOsKwe+/VWQytLLAlMM/LTHfb6Ml7VDxrJbnOTPtgAAJwQm1vbz1c6nfarI6xMeowAAKAfWRoAAAAAAAAAAAAAAAAAAAAAgJPvOO7/o3LKK72poA+31fSJiPkzKtYhB3iSK3/JYRuPPHX8cOQnJwBH6p8AAAD//xdGSyg=")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

2.246163216s ago: executing program 5 (id=799):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "cfc5879863ab6455bf351ca78bbfd7335a"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8f"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0)

2.112622298s ago: executing program 7 (id=800):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

1.812242291s ago: executing program 0 (id=801):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001680)=@filter={'filter\x00', 0x2, 0x4, 0x638, 0xffffffff, 0x138, 0x498, 0x498, 0xfeffffff, 0xffffffff, 0x568, 0x568, 0x568, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x110, 0x138, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x959}, {0x9}], 0x2, 0x1}}, @common=@unspec=@cluster={{0x30}, {0x5, 0xc, 0xffff00bc}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x318, 0x360, 0x0, {}, [@common=@rt={{0x138}, {0xd81, [0x1, 0x800], 0x3, 0x8, 0x1, [@ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x6}}, @common=@rt={{0x138}, {0x1ff, [0x545e], 0x6, 0x4, 0x6, [@ipv4={'\x00', '\xff\xff', @multicast2}, @local, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', @mcast1, @empty, @mcast1, @private0, @private1, @local, @empty, @loopback, @mcast2], 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698)

1.568968319s ago: executing program 6 (id=802):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

1.393739508s ago: executing program 2 (id=803):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c10, &(0x7f0000000040)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_strict}, {@check_relaxed}, {@overriderock}, {@map_acorn}, {@hide}, {}, {@overriderock}, {@mode={'mode', 0x3d, 0xc}}, {@check_relaxed}, {@map_normal}]}, 0x1, 0xa15, &(0x7f0000000f40)="$eJzs3UtsXfWdB/Dv8SMxBiUBMgyDgNyESTDgcWxnSCZiwST2dWLGj5HtSESzIAxxRpl4hhnSSoAqEaSqq6JWatVFu0NdtRskNmVTsWt37aqLShWr7lFX6crVufc6vn5cX9v4EcLnY53c8/id//93nv/43uP7D18vi4dXTC0u1oZtTl/5xR5kzH3s4ugXH3/yUTl8eCcH0pmXi18lPUkqSVeSJ5PukdGZ6ck2Bd1KriX5PCmSHEz9dVOupfhBHlme/jzFz8p6Wzqw2ZJpZ5FvtP0+/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H5UjIwODg4VBzI+deX1Sl1SWWNkdGa6yOLi2iVL69R9Vuv1u/isbb1JUQ7p6Vnq6vvJo8uLn0hSOZGn61NP1zokT0/ef/iJI6883tWxtH6rbL6Sg5sv9vZ77996c2Fh/p3WIYsf1LdhZ3K7z1yqTo3PTo9PXrhUrYzPTlfOnz07ePry2GxlbHyiOnt1dq46WRmZqV6Ym56p9I28UBk6f/5MpTpwdfrK1KXRgYnq0sxz/zQ8OHi28trAv1cvzMxOT51+bWB25PL4xMT41KVaTLm4jDlXnoj/Nj5XmatemKxUbtxcmD+zKqfO1Tu7DBpqtyVl0HC7oOHB4eGhoeHhoQ8bvWffm3H25fMvnxsc7BpcJWsidumk5f7yUOvDvMN3cNi+jnr7n/+eyHimciWvp7Luz0hGM5PpTLZY3rDU/p88Xd2w3ub2v9HKdzUtfqr850SebUz2tGj/W+Sydz+3817ez628mYUsZD7vbKeU2obv95Zs7+dSqpnKeGYznfFM5kJtTqUxp5LzOZuzGcwbuZxjmU0lYxnPRKqZzdXMZi7V2hk1kplUcyFzmc5MKunLSF5IJUM5n/M5k0qqGcjVTOdKpnIpo7lQK+VGbtb2+5kNcrwXNLSZoOENglY35uW5vrX2v/qg/k+QTdvxezhs12Kj/T/QPrRvZC8SAgAAAHbcP/w2h44+9ps/JUWeqb0vPzY+UX11v9MCAAAAdlDtcb2ny5fucuyZnoyNd2dwv9MCAAAAdlBR+xu7IklvjtXHlv4SypsAAAAA8ICoff7/bIpjyzP8/g8AAAAPmPbfsd82ouhf+vrfyvX66/VGRH2q6B0bn6gOjExPvDKUU7VvGUjyzNrSOpOiu4wdfDHH61HHe+uvvcsllnX2lFFDA68M5cWcaGxI33Ply3N960QO1yOfr0c+3xzZmRWRZ8pIAHjQndigPd5s+/9i+usR/U/Vmvyup9Zpgwe1rABwv7jXx85fG12ardP+NyKebdX+//MGv/+XEY/lxrH6IwUDeStvZyHX05/GEwfH1it1qTeC+mMI/W3eDehtPLLw+3Md6V/zfkDPvW1tjp3PcPrXfUegqdxiKYcz9bjO3TkGALDXTmzYDm+u/e9v8/t/r0cKAeC+cq8H+y2MfLCV4Pl3bu/3NgIAK2mlAQAAAAAAAAAAAAAAAAAAAAAAAAAAYOdt6gv8f3cqWViYT7bRWcC2R3q2kuHGIx3Zo5yXRg7u5Y5qHulMsueVNkZezZbXKo/xV6j0lw81Vv/zPm3ygzyyzzcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9kSRdK43vyM5mGQwyem9z2r33NnvBHZK5cC2Vivu5m7ezaEdzwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Buu8f3/Ham/Plyfla6O5GSSa0n+Y79z3El39zuB3VG0D/mfeuDy9/93JN1ZLNJVP+wpukdGZ6Yny6KKg+XyLz7+5KNyaF/22l4VygLKGlZ0LtGooWlO98q1Hq2t1Ts6f/vWt97+v8roxdqJeXFubGJ08tLMvy4HPlF8mlRSH5Ys5fudk7/+YdPsRkcJxafllq5vdb1jtXpH19b79+ut3aLeTbi5MD9c1jRXfX3u2/97892mRY/lePJcX9K3sqb/KocWNR1fvT9XKr4svlccyk9yrXb8y71RLBblITpc2/6HbtxcmB946+2F6/dy+mBFTkdyLMn1pGfzOR1rfW7WzrqO7rLWwVpQ+c/RNuVtqKnEoRb79dHaKdO7pW2otLm+2uz3RkZn1s3oR///eE5t+UifalPjuooviz8Wl/OHfLep/4+O8vifzLpX5zpF1CKbzpTmZSsur456ZG3Lh5sXvLG6zJZXJbvg+/nP/Mu949/RdP+vHaul02q370dNV+r610Wy9evi54fXtCjLai3S0VUtUuPu02qdRp5H61Et8vy7vFQvcwt3lJfatdi7dP3/tOjLX3JH/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD9r0g615vfkZxMciTJ4XK6kiyujrmzjfo6eovtpLljtpPz10/RckOLu7mbd3NorzMCAAAAAAAAYHdcHP3i408+Kofa5/Gd+ceOxpJK0pXkSPHj7pHRmenJNgV1J9eWPtLv2VoO18pVHlme/jx5JE+2WWl/Hx8AgK+1vwUAAP//onRsNA==")
openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0)

1.317229651s ago: executing program 5 (id=804):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000110001000000000000000000ac141400000000020000000000000000000000000a00000014000d00200100000000000000000000000000000c0015"], 0x48}}, 0x0)

1.25146447s ago: executing program 7 (id=805):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000014000000020a050000000000000000000000000020000000020a0108000000000000000001"], 0x7c}}, 0x0)

1.127432565s ago: executing program 0 (id=806):
ioperm(0x6, 0x4, 0x10003)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

713.145614ms ago: executing program 5 (id=807):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
syz_mount_image$bfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x1000000, &(0x7f00000000c0)=ANY=[], 0x3, 0xb5, &(0x7f0000000280)="$eJzs1z9KA0EUBvBvF3W10QNYeABh7+BRxFI7K8XCC6XPKXKEQA6QIl1Is2Gzf9g6xQbC7wczw+ObgQdTvdVh8ZzHpHnKSTPx/fP7+f7V7suM7sIVKZNUSe77v2/r7VuXFa/dud79fQxr8vTmIg0DAABnK1MneegngfyXqesu2Yx3XtpZYN8Xt0kxBNXc3QIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM7xgAAP//x5IlZA==")

485.902275ms ago: executing program 7 (id=808):
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x2}, 0x8)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="e1cdf1c9d746bcaa9854b30731a00f236b0aa22e760f29fc5e15ebe36fbe2e1698", 0x21}], 0x1}}], 0x1, 0x20000050)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a"], 0x64}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={r0})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x10000]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

425.371389ms ago: executing program 0 (id=809):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0xfffffffd, 0x3, 0x100040, 0x0, &(0x7f0000000000), 0x3000000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000000280)="8708a9b9", 0x4, 0x800, &(0x7f0000000380)={0xa, 0x4e24, 0x2, @remote, 0x5}, 0x1c)
setsockopt(r1, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, &(0x7f0000000180)=0x1f00)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0xc6, 0x8, 0xfffa, 0x3, 0x10, 0xfffa, 0x1, {0x0, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x80}}, 0x8, 0x1561, 0x6, 0x5, 0x9}}, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_PIT2(r3, 0xaea2, &(0x7f0000000040)={[{0x3, 0x81, 0x0, 0x3, 0x0, 0xc6, 0x70, 0x0, 0x7, 0xc, 0xda, 0xf6, 0x5}, {0x0, 0xf3f, 0x2, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x6}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0xf, 0x1, 0x10, 0x2, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
getpgid(0x0)

285.107617ms ago: executing program 2 (id=810):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})

0s ago: executing program 5 (id=811):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

8736][ T6487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.496228][ T6424] usb 4-1: 0:2 : does not exist
[  309.599863][ T6424] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  309.927828][ T6424] usb 4-1: USB disconnect, device number 5
[  310.715403][ T5796] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  310.847242][ T5796] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15
[  310.996461][ T5796] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15
[  311.449351][ T6245] udevd[6245]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  311.508911][ T6503] loop0: detected capacity change from 0 to 1024
[  311.893909][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.951194][ T6424] IPVS: starting estimator thread 0...
[  312.973000][ T3910] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.041485][ T6514] IPVS: using max 240 ests per chain, 12000 per kthread
[  313.179653][ T3910] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.325067][ T3910] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.445546][ T3910] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.104696][ T3910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.128317][ T3910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  314.142922][ T3910] bond0 (unregistering): Released all slaves
[  314.674869][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'.
[  315.341145][ T3910] hsr_slave_0: left promiscuous mode
[  315.391490][ T3910] hsr_slave_1: left promiscuous mode
[  315.399417][ T3910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.407597][ T3910] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.467281][ T3910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.475696][ T3910] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.491397][ T3910] veth1_macvtap: left promiscuous mode
[  315.497453][ T3910] veth0_macvtap: left promiscuous mode
[  316.012268][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  316.031512][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  316.053580][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  316.087098][   T29] audit: type=1326 audit(1739554705.668:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  316.110555][   T29] audit: type=1326 audit(1739554705.728:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  316.133414][   T29] audit: type=1326 audit(1739554705.728:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  316.156101][   T29] audit: type=1326 audit(1739554705.728:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  316.182002][   T29] audit: type=1326 audit(1739554705.728:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  316.205740][   T29] audit: type=1326 audit(1739554705.778:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  316.228469][   T29] audit: type=1326 audit(1739554705.778:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  316.251207][   T29] audit: type=1326 audit(1739554705.778:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  316.281948][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  316.470717][   T29] audit: type=1326 audit(1739554706.068:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  316.497787][   T29] audit: type=1326 audit(1739554706.068:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  316.549624][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  316.603198][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  316.614429][ T3910] team0 (unregistering): Port device team_slave_1 removed
[  316.639162][ T3910] team0 (unregistering): Port device team_slave_0 removed
[  317.481169][ T6424] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  317.651509][ T6424] usb 2-1: Using ep0 maxpacket: 16
[  317.690342][ T6424] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  317.704460][ T6424] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  317.753085][ T6548] netfs: Couldn't get user pages (rc=-14)
[  318.130525][ T6424] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  318.140276][ T6424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.149229][ T6424] usb 2-1: Product: syz
[  318.153685][ T6424] usb 2-1: Manufacturer: syz
[  318.158491][ T6424] usb 2-1: SerialNumber: syz
[  318.256371][ T6424] usb 2-1: config 0 descriptor??
[  318.284070][ T6424] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  318.293787][ T6424] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  318.784186][ T5792] Bluetooth: hci3: command tx timeout
[  319.091565][ T6424] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  319.191149][ T6424] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  319.974485][ T6424] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[  320.003410][ T6424] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  320.793302][ T6533] chnl_net:caif_netlink_parms(): no params data found
[  320.848317][ T6424] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  320.858188][ T6424] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  320.872576][ T5797] Bluetooth: hci3: command tx timeout
[  320.898091][ T6424] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  320.956363][ T6424] usb 2-1: USB disconnect, device number 3
[  321.914479][ T6582] netlink: 'syz.2.159': attribute type 10 has an invalid length.
[  321.923196][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.932862][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.959208][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.967057][ T6582] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.975877][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.983695][ T6582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.009411][ T6582] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  322.062169][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'.
[  322.155259][ T6583] bridge_slave_1: left allmulticast mode
[  322.163333][ T6583] bridge_slave_1: left promiscuous mode
[  322.170004][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.227739][ T6583] bridge_slave_0: left allmulticast mode
[  322.235456][ T6583] bridge_slave_0: left promiscuous mode
[  322.242549][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.386170][ T6578] loop0: detected capacity change from 0 to 8192
[  322.431183][ T6583] bond0: (slave bridge0): Releasing backup interface
[  322.815347][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  322.815421][   T29] audit: type=1804 audit(1739554712.458:85): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.158" name="/newroot/29/bus/bus" dev="loop0" ino=3 res=1 errno=0
[  322.849417][   T29] audit: type=1804 audit(1739554712.458:86): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.158" name="/newroot/29/bus/bus" dev="loop0" ino=3 res=1 errno=0
[  322.890775][ T6594] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  322.899708][ T6594] FAT-fs (loop0): Filesystem has been set read-only
[  322.941389][ T5797] Bluetooth: hci3: command tx timeout
[  323.280028][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.287812][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.295865][ T6533] bridge_slave_0: entered allmulticast mode
[  323.304911][ T6533] bridge_slave_0: entered promiscuous mode
[  323.465534][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.475806][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.485641][ T6533] bridge_slave_1: entered allmulticast mode
[  323.494979][ T6533] bridge_slave_1: entered promiscuous mode
[  323.910137][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.997862][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.109402][ T6603] loop1: detected capacity change from 0 to 128
[  324.188562][ T6603] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  324.224315][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'.
[  324.264309][ T6609] netlink: 'syz.0.163': attribute type 1 has an invalid length.
[  324.287723][ T6603] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  324.332485][ T6533] team0: Port device team_slave_0 added
[  324.431555][ T6603] ext2 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.531813][ T6533] team0: Port device team_slave_1 added
[  324.646937][ T6609] 8021q: adding VLAN 0 to HW filter on device bond1
[  324.731316][   T29] audit: type=1326 audit(1739554714.368:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3055b8cde9 code=0x7ffc0000
[  324.819478][   T29] audit: type=1326 audit(1739554714.428:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3055b8cde9 code=0x7ffc0000
[  324.983945][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.991918][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.018502][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.029952][ T5792] Bluetooth: hci3: command tx timeout
[  325.105275][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  325.175149][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.185287][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.213064][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.585894][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'.
[  325.751610][ T6533] hsr_slave_0: entered promiscuous mode
[  325.761689][ T6533] hsr_slave_1: entered promiscuous mode
[  325.770239][ T6533] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.778132][ T6533] Cannot create hsr debugfs directory
[  325.786344][ T6631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  325.793870][ T6631] IPv6: NLM_F_CREATE should be set when creating new route
[  325.794892][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  325.837126][ T6635] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  325.844691][ T6635] IPv6: NLM_F_CREATE should be set when creating new route
[  325.966127][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'.
[  326.022365][   T10] usb 1-1: Using ep0 maxpacket: 16
[  326.077058][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  326.087684][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  326.205691][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  326.215411][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.223944][   T10] usb 1-1: Product: syz
[  326.228326][   T10] usb 1-1: Manufacturer: syz
[  326.233348][   T10] usb 1-1: SerialNumber: syz
[  326.753709][   T10] usb 1-1: 0:2 : does not exist
[  326.772969][   T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  326.991634][ T6641] xt_TCPMSS: Only works on TCP SYN packets
[  327.004572][   T10] usb 1-1: USB disconnect, device number 5
[  327.386190][ T6245] udevd[6245]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  327.427630][ T6644] loop3: detected capacity change from 0 to 2048
[  327.505259][ T6644] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  327.575708][ T6644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  327.930376][ T6647] loop1: detected capacity change from 0 to 256
[  328.004606][ T6651] __vm_enough_memory: pid: 6651, comm: syz.3.172, bytes: 21199812030464 not enough memory for the allocation
[  328.201888][ T6533] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  328.281609][ T6647] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  328.332743][ T6533] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  328.388804][ T6533] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  328.398296][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  328.431675][ T6533] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  328.612551][   T10] usb 3-1: Using ep0 maxpacket: 8
[  328.676821][   T10] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  328.686460][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.695193][   T10] usb 3-1: Product: syz
[  328.699579][   T10] usb 3-1: Manufacturer: syz
[  328.704509][   T10] usb 3-1: SerialNumber: syz
[  328.853730][   T10] usb 3-1: config 0 descriptor??
[  328.909754][   T10] gspca_main: se401-2.14.0 probing 047d:5003
[  328.949256][ T6660] loop0: detected capacity change from 0 to 1024
[  329.283703][   T10] gspca_se401: ExtraFeatures: 110
[  329.537445][   T10] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6
[  329.716378][   T10] usb 3-1: USB disconnect, device number 2
[  329.945292][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.208913][ T6533] 8021q: adding VLAN 0 to HW filter on device team0
[  330.320667][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.328424][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.422068][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  330.478384][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.486085][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.831233][ T6675] kvm: pic: non byte read
[  330.909648][ T6675] kvm: pic: level sensitive irq not supported
[  330.909943][ T6675] kvm: pic: non byte read
[  331.053086][ T6675] kvm: pic: level sensitive irq not supported
[  331.053380][ T6675] kvm: pic: non byte read
[  331.089792][ T6533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  331.101007][ T6533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  331.463394][ T6679] loop1: detected capacity change from 0 to 32768
[  331.507042][   T10] usb 4-1: Using ep0 maxpacket: 16
[  331.557068][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  331.569000][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  331.580675][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  331.593048][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  331.606813][   T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  331.616426][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.720032][ T6679] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  331.794164][   T10] usb 4-1: config 0 descriptor??
[  331.801929][ T6673] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  331.839466][   T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7
[  332.036120][ T6684] loop2: detected capacity change from 0 to 1024
[  332.124572][    C0] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19
[  332.133195][   T10] usb 4-1: USB disconnect, device number 6
[  332.145317][ T5129] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[  332.368410][ T6679] XFS (loop1): Ending clean mount
[  332.405756][ T6679] XFS (loop1): Quotacheck needed: Please wait.
[  332.514076][ T6679] XFS (loop1): Quotacheck: Done.
[  333.312717][ T6699] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  333.481231][ T4865] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.664726][ T4865] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.813774][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.916857][ T4865] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.182863][ T4865] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.352650][ T4865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.388192][ T4865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.412957][ T4865] bond0 (unregistering): Released all slaves
[  335.586374][ T4865] tipc: Left network mode
[  336.684188][ T4865] hsr_slave_0: left promiscuous mode
[  336.778409][ T4865] hsr_slave_1: left promiscuous mode
[  336.784905][ T6728] loop2: detected capacity change from 0 to 1024
[  336.786761][ T4865] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.799345][ T4865] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.927726][ T4865] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.935705][ T4865] batman_adv: batadv0: Removing interface: batadv_slave_1
[  337.107856][ T4865] veth1_macvtap: left promiscuous mode
[  337.113978][ T4865] veth0_macvtap: left promiscuous mode
[  337.119862][ T4865] veth1_vlan: left promiscuous mode
[  337.125886][ T4865] veth0_vlan: left promiscuous mode
[  337.755478][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  337.766420][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  337.789696][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  337.843460][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  337.860678][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  337.873950][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  338.513097][ T4865] team0 (unregistering): Port device team_slave_1 removed
[  338.622327][ T4865] team0 (unregistering): Port device team_slave_0 removed
[  339.435900][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'.
[  339.744480][ T6533] veth0_vlan: entered promiscuous mode
[  339.991736][ T5797] Bluetooth: hci0: command tx timeout
[  340.442051][ T6533] veth1_vlan: entered promiscuous mode
[  340.661010][ T6533] veth0_macvtap: entered promiscuous mode
[  340.763840][ T6533] veth1_macvtap: entered promiscuous mode
[  340.854258][ T6533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.866415][ T6533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.877074][ T6533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.887945][ T6533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.913753][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.030728][ T6533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.042957][ T6533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.060980][ T6533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.072097][ T6533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.082401][ T6533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.093329][ T6533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.109272][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.207551][ T6533] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.216773][ T6533] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.226064][ T6533] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.235314][ T6533] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.630395][ T6760] sp0: Synchronizing with TNC
[  342.054674][ T6760] tipc: Started in network mode
[  342.060048][ T6760] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[  342.061214][ T5797] Bluetooth: hci0: command tx timeout
[  342.072093][ T6760] tipc: Enabled bearer <eth:geneve1>, priority 10
[  342.672666][ T6737] chnl_net:caif_netlink_parms(): no params data found
[  342.750615][ T6774] geneve0: entered allmulticast mode
[  343.184453][ T5865] tipc: Node number set to 15444650
[  344.141094][ T5797] Bluetooth: hci0: command tx timeout
[  344.548166][ T6791] loop2: detected capacity change from 0 to 2048
[  344.697222][ T6791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.429190][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.437251][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.445185][ T6737] bridge_slave_0: entered allmulticast mode
[  345.459702][ T6737] bridge_slave_0: entered promiscuous mode
[  345.583122][ T6800] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  345.933009][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.941611][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.949396][ T6737] bridge_slave_1: entered allmulticast mode
[  345.958611][ T6737] bridge_slave_1: entered promiscuous mode
[  346.061293][ T5865] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  346.080778][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.239607][ T5797] Bluetooth: hci0: command tx timeout
[  346.263941][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  346.278610][ T5865] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  346.289388][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.480655][ T5865] usb 1-1: config 0 descriptor??
[  346.539321][ T5865] pwc: Askey VC010 type 2 USB webcam detected.
[  346.740498][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.877649][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.071637][ T5865] pwc: recv_control_msg error -32 req 02 val 2b00
[  347.105448][ T5865] pwc: recv_control_msg error -32 req 02 val 2700
[  347.161885][ T5865] pwc: recv_control_msg error -32 req 02 val 2c00
[  347.188792][ T5865] pwc: recv_control_msg error -32 req 04 val 1000
[  347.299660][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  347.306697][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  347.403082][ T6737] team0: Port device team_slave_0 added
[  347.412980][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'.
[  347.430498][ T6737] team0: Port device team_slave_1 added
[  347.438696][ T5865] pwc: recv_control_msg error -32 req 04 val 1400
[  347.458271][ T5865] pwc: recv_control_msg error -32 req 02 val 2000
[  347.493686][ T5865] pwc: recv_control_msg error -32 req 02 val 2100
[  347.510474][ T5865] pwc: recv_control_msg error -32 req 04 val 1500
[  347.530532][ T5865] pwc: recv_control_msg error -32 req 02 val 2500
[  347.554069][ T5865] pwc: recv_control_msg error -32 req 02 val 2400
[  347.697217][ T6814] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  347.709366][ T6814] batadv_slave_0: entered promiscuous mode
[  347.780170][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.788167][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.818239][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.842869][ T5865] pwc: recv_control_msg error -71 req 02 val 2900
[  347.857823][ T5865] pwc: recv_control_msg error -71 req 02 val 2800
[  347.888232][ T5865] pwc: recv_control_msg error -71 req 04 val 1100
[  347.931420][ T5865] pwc: recv_control_msg error -71 req 04 val 1200
[  347.941895][ T5865] pwc: Registered as video103.
[  347.950088][ T5865] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8
[  347.995186][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.002677][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.032727][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.079006][ T5865] usb 1-1: USB disconnect, device number 6
[  348.669725][ T6737] hsr_slave_0: entered promiscuous mode
[  348.679487][ T6737] hsr_slave_1: entered promiscuous mode
[  348.766757][ T6830] kvm: pic: level sensitive irq not supported
[  348.783833][ T6830] kvm: pic: non byte write
[  348.795083][ T6830] kvm: pic: non byte write
[  348.799963][ T6830] kvm: pic: non byte write
[  348.806710][ T6830] kvm: pic: non byte read
[  348.820049][ T6830] kvm: pic: single mode not supported
[  348.820127][ T6830] kvm: pic: level sensitive irq not supported
[  348.827689][ T6830] kvm: pic: non byte write
[  348.841382][ T6830] kvm: pic: non byte write
[  348.846248][ T6830] kvm: pic: non byte write
[  348.852949][ T6830] kvm: pic: non byte write
[  348.857864][ T6830] kvm: pic: non byte write
[  348.862968][ T6830] kvm: pic: non byte write
[  348.869576][ T6830] kvm: pic: non byte write
[  349.348817][ T5082] Bluetooth: hci2: command 0x0406 tx timeout
[  349.349366][ T5797] Bluetooth: hci4: command 0x0406 tx timeout
[  349.355298][ T5082] Bluetooth: hci1: command 0x0406 tx timeout
[  350.636610][ T6737] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  350.695120][   T29] audit: type=1326 audit(1739554740.338:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3055b8cde9 code=0x7ffc0000
[  350.718219][   T29] audit: type=1326 audit(1739554740.348:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f3055b8cde9 code=0x7ffc0000
[  350.741124][   T29] audit: type=1326 audit(1739554740.348:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3055b8cde9 code=0x7ffc0000
[  350.763831][   T29] audit: type=1326 audit(1739554740.358:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3055b8cde9 code=0x7ffc0000
[  350.789347][   T29] audit: type=1326 audit(1739554740.358:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3055b8cde9 code=0x7ffc0000
[  350.813110][   T29] audit: type=1326 audit(1739554740.378:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3055b8cde9 code=0x7ffc0000
[  350.913641][ T4865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.921868][ T4865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.970268][ T6737] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  351.215428][ T6737] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  351.304566][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.312942][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.326300][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'.
[  351.361457][ T6737] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  355.058485][ T6883] loop3: detected capacity change from 0 to 128
[  355.469318][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0
[  355.761187][   T29] audit: type=1804 audit(1739554745.368:95): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.220" name="/newroot/50/file0/bus" dev="loop3" ino=15 res=1 errno=0
[  355.783031][   T29] audit: type=1800 audit(1739554745.368:96): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.220" name="bus" dev="loop3" ino=15 res=0 errno=0
[  355.856639][ T6737] 8021q: adding VLAN 0 to HW filter on device team0
[  355.980787][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.985676][ T6883] syz.3.220: attempt to access beyond end of device
[  355.985676][ T6883] loop3: rw=0, sector=121, nr_sectors = 920 limit=128
[  355.988445][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  356.174913][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.222'.
[  356.215701][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.223468][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  356.388942][ T6895] bond0: (slave bond_slave_0): Releasing backup interface
[  356.428162][ T6897] loop5: detected capacity change from 0 to 16
[  356.473712][ T6897] erofs: Unknown parameter 'ac'
[  356.543878][ T6895] bond0: (slave bond_slave_1): Releasing backup interface
[  356.645363][ T6895] team0: Port device team_slave_0 removed
[  356.808487][ T6895] team0: Port device team_slave_1 removed
[  356.826286][ T6895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.834248][ T6895] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.874391][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'.
[  357.570563][ T6288] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  357.723577][ T6907] loop3: detected capacity change from 0 to 512
[  357.734296][ T6899] vlan0: entered promiscuous mode
[  357.777245][ T6288] usb 1-1: Using ep0 maxpacket: 32
[  357.809108][ T6737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  357.885654][ T6288] usb 1-1: config 2 has an invalid interface number: 157 but max is 0
[  357.895617][ T6288] usb 1-1: config 2 has an invalid descriptor of length 36, skipping remainder of the config
[  357.908287][ T6288] usb 1-1: config 2 has no interface number 0
[  357.989192][ T6288] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  358.000139][ T6288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.009424][ T6288] usb 1-1: Product: syz
[  358.013938][ T6288] usb 1-1: Manufacturer: syz
[  358.018757][ T6288] usb 1-1: SerialNumber: syz
[  358.088188][ T6907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.101465][ T6907] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  358.220225][ T6288] imon 1-1:2.157: unable to register, err -19
[  358.554765][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.798522][ T6288] usb 1-1: USB disconnect, device number 7
[  359.203003][   T29] audit: type=1326 audit(1739554748.838:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.5.227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f500af8cde9 code=0x0
[  359.425629][ T6930] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  359.434928][ T6930] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  359.444230][ T6930] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  359.453389][ T6930] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  359.470164][ T6930] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  359.746390][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.381892][ T6940] capability: warning: `syz.0.231' uses deprecated v2 capabilities in a way that may be insecure
[  361.375903][ T6952] netlink: 'syz.2.236': attribute type 1 has an invalid length.
[  361.521098][ T6952] 8021q: adding VLAN 0 to HW filter on device bond1
[  361.745723][ T6960] bond1: (slave ip6gretap1): making interface the new active one
[  361.758286][ T6960] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  361.877852][ T6962] vlan2: entered promiscuous mode
[  361.883277][ T6962] bond1: entered promiscuous mode
[  361.888542][ T6962] ip6gretap1: entered promiscuous mode
[  361.898053][ T6962] vlan2: entered allmulticast mode
[  361.903722][ T6962] bond1: entered allmulticast mode
[  361.909062][ T6962] ip6gretap1: entered allmulticast mode
[  362.969102][ T6737] veth0_vlan: entered promiscuous mode
[  363.185254][ T6737] veth1_vlan: entered promiscuous mode
[  363.550911][ T6737] veth0_macvtap: entered promiscuous mode
[  363.596220][ T6983] loop2: detected capacity change from 0 to 1024
[  363.671792][ T6737] veth1_macvtap: entered promiscuous mode
[  364.260619][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.272632][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.283590][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.297617][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.316406][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.729310][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.740368][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.750555][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.761462][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.771702][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.782501][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.797510][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.192443][ T6737] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.201714][ T6737] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.210713][ T6737] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.222114][ T6737] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.345245][ T6996] loop3: detected capacity change from 0 to 40427
[  366.373365][ T6996] F2FS-fs (loop3): invalid crc value
[  367.018959][ T6996] F2FS-fs (loop3): Found nat_bits in checkpoint
[  367.814686][ T6996] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  368.122169][   T29] audit: type=1800 audit(1739554757.708:98): pid=6996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.243" name="file1" dev="loop3" ino=10 res=0 errno=0
[  368.316610][ T6996] syz.3.243: attempt to access beyond end of device
[  368.316610][ T6996] loop3: rw=2049, sector=77824, nr_sectors = 2048 limit=40427
[  368.348835][ T6996] syz.3.243: attempt to access beyond end of device
[  368.348835][ T6996] loop3: rw=2049, sector=79872, nr_sectors = 520 limit=40427
[  368.511406][ T6423] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  369.729679][ T6977] Set syz1 is full, maxelem 65536 reached
[  369.811383][ T6423] usb 6-1: Using ep0 maxpacket: 16
[  369.838784][ T6423] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  369.852475][ T6423] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  369.859851][ T4110] hfsplus: b-tree write err: -5, ino 4
[  369.918979][ T6423] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  369.930373][ T6423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.939248][ T6423] usb 6-1: Product: syz
[  369.943717][ T6423] usb 6-1: Manufacturer: syz
[  369.948537][ T6423] usb 6-1: SerialNumber: syz
[  370.033818][ T6423] usb 6-1: config 0 descriptor??
[  370.115064][ T6423] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  370.125021][ T6423] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  370.614767][ T5799] syz-executor: attempt to access beyond end of device
[  370.614767][ T5799] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  370.631634][ T5799] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  370.675460][ T6423] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  370.685397][ T6423] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  371.302980][ T6423] em28xx 6-1:0.0: Unknown AC97 audio processor detected!
[  371.390221][ T6423] em28xx 6-1:0.0: couldn't setup AC97 register 2
[  371.433657][ T6423] em28xx 6-1:0.0: couldn't setup AC97 register 4
[  371.471441][ T6423] em28xx 6-1:0.0: couldn't setup AC97 register 6
[  371.508585][ T6423] em28xx 6-1:0.0: couldn't setup AC97 register 54
[  371.576364][ T6423] em28xx 6-1:0.0: couldn't setup AC97 register 56
[  371.798438][ T6423] em28xx 6-1:0.0: couldn't setup AC97 register 2
[  371.806952][ T6423] em28xx 6-1:0.0: couldn't setup AC97 register 4
[  371.813820][ T6423] em28xx 6-1:0.0: couldn't setup AC97 register 6
[  371.820400][ T6423] em28xx 6-1:0.0: couldn't setup AC97 register 54
[  371.827318][ T6423] em28xx 6-1:0.0: couldn't setup AC97 register 56
[  371.951317][ T6423] usb 6-1: USB disconnect, device number 2
[  372.106223][ T7031] delete_channel: no stack
[  373.527333][ T7048] mmap: syz.5.255 (7048) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  373.695881][ T7048] loop5: detected capacity change from 0 to 128
[  373.821792][ T7048] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  374.037697][ T7048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  374.941814][ T6423] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  375.163375][ T6423] usb 3-1: config 0 has no interfaces?
[  375.217844][ T6423] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  375.228627][ T6423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.237781][ T6423] usb 3-1: Product: syz
[  375.242400][ T6423] usb 3-1: Manufacturer: syz
[  375.247224][ T6423] usb 3-1: SerialNumber: syz
[  375.392302][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'.
[  375.399274][ T6423] usb 3-1: config 0 descriptor??
[  375.695376][ T7060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.705716][ T7060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.882469][ T7060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.892419][ T7060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.043075][ T7060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.053688][ T7060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.302090][ T2157] usb 3-1: USB disconnect, device number 3
[  377.631328][ T3806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.639671][ T3806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.005855][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.015654][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.202389][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.266'.
[  378.805389][ T5792] Bluetooth: hci1: unexpected event for opcode 0x0405
[  379.520540][ T7121] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  380.282789][   T29] audit: type=1326 audit(1739554769.908:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6b18cde9 code=0x7ffc0000
[  380.306142][   T29] audit: type=1326 audit(1739554769.928:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6b18cde9 code=0x7ffc0000
[  380.773597][ T7138] ipvlan2: entered promiscuous mode
[  381.307880][ T5792] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11
[  381.474462][ T6426] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  381.550214][ T6426] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  381.801535][ T6426] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  381.994202][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'.
[  382.001535][ T6426] usb 6-1: Using ep0 maxpacket: 16
[  382.004196][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'.
[  382.084765][ T6426] usb 6-1: config 0 has no interfaces?
[  382.090569][ T6426] usb 6-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[  382.100166][ T6426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.230285][ T6426] usb 6-1: config 0 descriptor??
[  382.283057][ T7159] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  382.473129][ T2157] usb 6-1: USB disconnect, device number 3
[  382.535160][ T7163] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  382.862646][ T5792] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  382.871504][ T5792] Bluetooth: hci1: Injecting HCI hardware error event
[  382.879403][ T5792] Bluetooth: hci1: hardware error 0x00
[  383.583987][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'.
[  384.001050][ T7183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  384.453142][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'.
[  384.666598][ T7191] loop3: detected capacity change from 0 to 1024
[  384.713685][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'.
[  384.811541][ T6423] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  384.955002][ T5792] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  384.991656][ T7191] hfsplus: request for non-existent node 33423360 in B*Tree
[  384.999213][ T7191] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.038712][ T7193] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.046860][ T7193] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.089001][ T6423] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.101501][ T6423] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.112548][ T6423] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  385.125948][ T6423] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  385.135530][ T6423] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.224751][ T7191] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.232680][ T7191] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.284378][ T6423] usb 7-1: config 0 descriptor??
[  385.320441][ T7193] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.328356][ T7193] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.449705][ T7198] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.457569][ T7198] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.561143][ T7191] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.568678][ T7191] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.709658][ T7191] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.721911][ T7191] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.777552][ T6423] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  385.796657][ T6423] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  385.877801][ T7193] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.885859][ T7193] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.896577][ T6423] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  385.948377][ T7191] hfsplus: request for non-existent node 33423360 in B*Tree
[  385.956283][ T7191] hfsplus: request for non-existent node 33423360 in B*Tree
[  386.026864][ T7193] hfsplus: request for non-existent node 33423360 in B*Tree
[  386.035066][ T7193] hfsplus: request for non-existent node 33423360 in B*Tree
[  386.187411][ T7191] hfsplus: request for non-existent node 33423360 in B*Tree
[  386.195260][ T7191] hfsplus: request for non-existent node 33423360 in B*Tree
[  387.174853][ T7219] batman_adv: batadv0: Adding interface: dummy0
[  387.181725][ T7219] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.208230][ T7219] batman_adv: batadv0: Interface activated: dummy0
[  387.295675][ T7221] batadv0: mtu less than device minimum
[  387.303223][ T7221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.315561][ T7221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.327913][ T7221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.340321][ T7221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.352658][ T7221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.364997][ T7221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.377266][ T7221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.389589][ T7221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.402014][ T7221] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.770613][ T7223] loop3: detected capacity change from 0 to 2048
[  387.799279][ T6423] usb 7-1: USB disconnect, device number 2
[  387.837779][ T7227] loop5: detected capacity change from 0 to 1024
[  387.979781][ T7223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  388.090126][ T7227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.215355][ T7223] EXT4-fs error (device loop3): ext4_ext_precache:648: inode #2: comm syz.3.297: pblk 31 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4)
[  388.216023][   T29] audit: type=1326 audit(1739554777.858:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.5.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500af8cde9 code=0x7ffc0000
[  388.263024][   T29] audit: type=1326 audit(1739554777.858:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.5.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500af8cde9 code=0x7ffc0000
[  388.288454][   T29] audit: type=1326 audit(1739554777.858:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.5.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f500af8cde9 code=0x7ffc0000
[  388.312197][   T29] audit: type=1326 audit(1739554777.858:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.5.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500af8cde9 code=0x7ffc0000
[  388.334901][   T29] audit: type=1326 audit(1739554777.858:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.5.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500af8cde9 code=0x7ffc0000
[  388.372785][ T7223] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.297: pblk 31 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4)
[  388.469304][ T7223] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.297: pblk 31 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4)
[  388.525779][   T29] audit: type=1326 audit(1739554778.008:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.5.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f500af8cde9 code=0x7ffc0000
[  388.548753][   T29] audit: type=1326 audit(1739554778.008:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.5.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500af8cde9 code=0x7ffc0000
[  388.574019][   T29] audit: type=1326 audit(1739554778.038:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.5.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f500af8cde9 code=0x7ffc0000
[  388.597475][   T29] audit: type=1326 audit(1739554778.038:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.5.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500af8cde9 code=0x7ffc0000
[  388.621278][   T29] audit: type=1326 audit(1739554778.048:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.5.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f500af8b750 code=0x7ffc0000
[  388.892073][ T6288] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  389.219928][ T6288] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  389.233949][ T6288] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  389.243551][ T6288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.490660][ T7246] loop6: detected capacity change from 0 to 32768
[  389.499869][ T7246] btrfs: Deprecated parameter 'usebackuproot'
[  389.507283][ T7246] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  389.522819][ T7246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.302 (7246)
[  389.564542][ T6288] usb 4-1: config 0 descriptor??
[  389.643749][ T7246] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  389.654515][ T7246] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm
[  389.660010][ T6288] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  389.663755][ T7246] BTRFS info (device loop6): using free-space-tree
[  389.879449][ T7246] BTRFS info (device loop6): rebuilding free space tree
[  390.652604][ T6737] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  390.692365][ T6533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.943956][ T6288] usb 4-1: USB disconnect, device number 7
[  390.971854][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.552690][ T6423] IPVS: starting estimator thread 0...
[  391.609383][ T7282] bond_slave_0: entered promiscuous mode
[  391.615494][ T7282] bond_slave_1: entered promiscuous mode
[  391.622238][ T7282] macsec1: entered promiscuous mode
[  391.627764][ T7282] bond0: entered promiscuous mode
[  391.643324][ T7282] macsec1: entered allmulticast mode
[  391.648884][ T7282] bond0: entered allmulticast mode
[  391.654567][ T7282] bond_slave_0: entered allmulticast mode
[  391.660519][ T7282] bond_slave_1: entered allmulticast mode
[  391.681406][ T7285] IPVS: using max 240 ests per chain, 12000 per kthread
[  391.695804][ T7282] bond0: left allmulticast mode
[  391.701740][ T7282] bond_slave_0: left allmulticast mode
[  391.707582][ T7282] bond_slave_1: left allmulticast mode
[  391.713549][ T7282] bond0: left promiscuous mode
[  391.721430][ T7282] bond_slave_0: left promiscuous mode
[  391.727120][ T7282] bond_slave_1: left promiscuous mode
[  391.996040][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[  392.006353][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.019985][ T7287] vlan2: entered promiscuous mode
[  392.025541][ T7287] dummy0: entered promiscuous mode
[  392.040148][ T7287] dummy0: left promiscuous mode
[  392.236740][ T7281] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  392.243495][ T7281] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  392.314329][ T7281] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  392.321126][ T7281] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  392.417539][ T7281] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  392.424160][ T7281] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  392.461825][ T7281] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  392.478949][ T7281] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  392.485639][ T7281] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  392.624555][ T7281] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  392.970309][ T7293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  392.977972][ T7293] IPv6: NLM_F_CREATE should be set when creating new route
[  393.073222][ T7299] netlink: 'syz.6.314': attribute type 1 has an invalid length.
[  393.113526][ T7293] lo: entered allmulticast mode
[  393.128329][ T7293] tunl0: entered allmulticast mode
[  393.140445][ T7293] gre0: entered allmulticast mode
[  393.332953][ T7293] gretap0: entered allmulticast mode
[  393.345319][ T7305] netlink: 28 bytes leftover after parsing attributes in process `syz.5.316'.
[  393.354714][ T7305] netlink: 28 bytes leftover after parsing attributes in process `syz.5.316'.
[  393.431123][ T5792] Bluetooth: hci2: command 0x0406 tx timeout
[  393.476680][ T7293] erspan0: entered allmulticast mode
[  393.498912][ T7293] ip_vti0: entered allmulticast mode
[  393.511413][ T7293] ip6_vti0: entered allmulticast mode
[  393.527281][ T7293] sit0: entered allmulticast mode
[  393.546097][ T7293] ip6tnl0: entered allmulticast mode
[  393.561602][ T7293] ip6gre0: entered allmulticast mode
[  393.732107][ T7293] syz_tun: entered allmulticast mode
[  393.825491][ T7293] ip6gretap0: entered allmulticast mode
[  393.841684][ T7293] vcan0: entered allmulticast mode
[  393.850180][ T7293] bond0: entered allmulticast mode
[  393.855745][ T7293] vxlan0: entered allmulticast mode
[  393.871081][ T7293] dummy0: entered allmulticast mode
[  394.024667][ T7293] nlmon0: entered allmulticast mode
[  394.036703][ T7293] caif0: entered allmulticast mode
[  394.043179][ T7293] batadv0: entered allmulticast mode
[  394.058435][ T7293] vxcan0: entered allmulticast mode
[  394.066746][ T7293] vxcan1: entered allmulticast mode
[  394.075083][ T7293] veth0: entered allmulticast mode
[  394.089956][ T7293] veth1: entered allmulticast mode
[  394.110675][ T7293] veth0_to_bridge: entered allmulticast mode
[  394.126150][ T7293] bridge_slave_0: entered allmulticast mode
[  394.139072][ T7293] veth1_to_bridge: entered allmulticast mode
[  394.155273][ T7293] bridge_slave_1: entered allmulticast mode
[  394.326290][ T7293] veth0_to_bond: entered allmulticast mode
[  394.341645][ T7293] bond_slave_0: entered allmulticast mode
[  394.383753][ T5792] Bluetooth: hci4: command 0x0406 tx timeout
[  394.466716][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout
[  394.483197][ T7293] veth1_to_bond: entered allmulticast mode
[  394.497876][ T7293] bond_slave_1: entered allmulticast mode
[  394.541551][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout
[  394.681448][ T7293] veth0_to_team: entered allmulticast mode
[  394.696324][ T7293] team_slave_0: entered allmulticast mode
[  394.777946][ T7293] veth1_to_team: entered allmulticast mode
[  394.792904][ T7293] team_slave_1: entered allmulticast mode
[  394.799995][ T7293] veth1_to_batadv: entered allmulticast mode
[  394.818788][ T7293] batadv_slave_1: entered allmulticast mode
[  394.834644][ T7293] xfrm0: entered allmulticast mode
[  394.846995][ T7293] veth0_to_hsr: entered allmulticast mode
[  394.861488][ T7293] hsr_slave_0: entered allmulticast mode
[  394.873217][ T7293] veth1_to_hsr: entered allmulticast mode
[  394.887980][ T7293] hsr_slave_1: entered allmulticast mode
[  394.907251][ T7293] hsr0: entered allmulticast mode
[  394.924372][ T7293] veth1_virt_wifi: entered allmulticast mode
[  394.938500][ T7293] veth0_virt_wifi: entered allmulticast mode
[  394.952550][ T7293] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  394.963404][ T7293] veth1_vlan: entered allmulticast mode
[  394.977671][ T7293] veth0_vlan: entered allmulticast mode
[  395.006073][ T7293] vlan0: left promiscuous mode
[  395.011229][ T7293] vlan0: entered allmulticast mode
[  395.021586][ T7293] vlan1: entered allmulticast mode
[  395.056141][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'.
[  395.183443][ T7293] macvlan0: entered allmulticast mode
[  395.291736][ T7293] macvlan1: entered allmulticast mode
[  395.305159][ T7293] ipvlan0: entered allmulticast mode
[  395.311707][ T7293] ipvlan1: entered allmulticast mode
[  395.318467][ T7293] veth1_macvtap: entered allmulticast mode
[  395.338171][ T7293] veth0_macvtap: entered allmulticast mode
[  395.404099][ T7293] macvtap0: entered allmulticast mode
[  395.417474][ T7293] macsec0: entered allmulticast mode
[  395.454602][ T7293] geneve0: entered allmulticast mode
[  395.467793][ T7293] tipc: Resetting bearer <eth:geneve1>
[  395.501964][ T5792] Bluetooth: hci2: command 0x0406 tx timeout
[  395.518939][ T7293] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.536804][ T7293] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.546308][ T7293] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.555752][ T7293] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.612054][ T7293] geneve1: entered allmulticast mode
[  395.649030][ T7293] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  395.679801][ T7293] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  395.719323][ T7293] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  395.762257][ T7293] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  395.826597][ T7293] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  395.889713][ T7293] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  395.907346][ T7293] bridge0: entered allmulticast mode
[  395.915487][ T7293] bridge1: entered allmulticast mode
[  395.952284][ T7293] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.962139][ T7293] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.971820][ T7293] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.981117][ T7293] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.010302][ T7293] bond1: left promiscuous mode
[  396.015524][ T7293] ip6gretap1: left promiscuous mode
[  396.036783][ T7293] vlan2: left promiscuous mode
[  396.246263][ T7307] veth3: entered promiscuous mode
[  396.384914][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[  396.395115][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.406160][ T7305] dummy0: entered promiscuous mode
[  396.417067][ T7305] batadv_slave_1: entered promiscuous mode
[  396.473134][ T7326] bond_slave_0: entered promiscuous mode
[  396.479141][ T7326] bond_slave_1: entered promiscuous mode
[  396.485435][ T7326] team_slave_0: entered promiscuous mode
[  396.491546][ T7326] team_slave_1: entered promiscuous mode
[  396.497987][ T7326] macvtap1: entered promiscuous mode
[  396.503723][ T7326] bond0: entered promiscuous mode
[  396.511007][ T7326] team0: entered promiscuous mode
[  396.520076][ T7326] macvtap1: entered allmulticast mode
[  396.525919][ T7326] bond0: entered allmulticast mode
[  396.532207][ T7326] bond_slave_0: entered allmulticast mode
[  396.538147][ T7326] bond_slave_1: entered allmulticast mode
[  396.542023][ T5792] Bluetooth: hci4: command 0x0406 tx timeout
[  396.546549][ T7326] team0: entered allmulticast mode
[  396.555810][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout
[  396.559061][ T7326] team_slave_0: entered allmulticast mode
[  396.572881][ T7326] team_slave_1: entered allmulticast mode
[  396.584124][ T7326] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  396.623745][ T5793] Bluetooth: hci0: command 0x0c1a tx timeout
[  396.634181][ T7327] bond0: left allmulticast mode
[  396.639288][ T7327] bond_slave_0: left allmulticast mode
[  396.645916][ T7327] bond_slave_1: left allmulticast mode
[  396.659402][ T7327] team0: left allmulticast mode
[  396.665254][ T7327] team_slave_0: left allmulticast mode
[  396.671116][ T7327] team_slave_1: left allmulticast mode
[  396.683716][ T7327] bond0: left promiscuous mode
[  396.690551][ T7327] team0: left promiscuous mode
[  396.699563][ T7327] bond_slave_0: left promiscuous mode
[  396.705346][ T7327] bond_slave_1: left promiscuous mode
[  396.711071][ T7327] team_slave_0: left promiscuous mode
[  396.716688][ T7327] team_slave_1: left promiscuous mode
[  397.420153][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.319'.
[  397.429628][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.319'.
[  397.453119][ T7334] syz_tun: entered promiscuous mode
[  397.462911][ T7334] batadv_slave_1: entered promiscuous mode
[  397.476897][ T7334] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  397.484897][ T7334] Cannot create hsr debugfs directory
[  397.491077][ T7334] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[  397.501507][ T7334] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  398.284526][ T7340] loop6: detected capacity change from 0 to 32768
[  398.301863][ T7340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.321 (7340)
[  398.412709][ T7340] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  398.423469][ T7340] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm
[  398.432889][ T7340] BTRFS info (device loop6): using free-space-tree
[  398.671250][ T5793] Bluetooth: hci3: command 0x0c1a tx timeout
[  398.705000][ T5793] Bluetooth: hci0: command 0x0c1a tx timeout
[  398.983507][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  398.983667][   T29] audit: type=1800 audit(1739554788.628:129): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.321" name="bus" dev="loop6" ino=263 res=0 errno=0
[  399.591100][ T7372] loop3: detected capacity change from 0 to 256
[  399.629492][ T7372] vfat: Unknown parameter '0xffffffffffffffff'
[  399.744485][ T7372] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  399.753853][ T7372] overlayfs: missing 'lowerdir'
[  399.824614][ T6737] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  399.885588][ T7372] Bluetooth: MGMT ver 1.23
[  399.947142][ T7372] loop3: detected capacity change from 0 to 256
[  400.597312][ T7372] FAT-fs (loop3): Directory bread(block 64) failed
[  400.604456][ T7372] FAT-fs (loop3): Directory bread(block 65) failed
[  400.612227][ T7372] FAT-fs (loop3): Directory bread(block 66) failed
[  400.619001][ T7372] FAT-fs (loop3): Directory bread(block 67) failed
[  400.626155][ T7372] FAT-fs (loop3): Directory bread(block 68) failed
[  400.633463][ T7372] FAT-fs (loop3): Directory bread(block 69) failed
[  400.640482][ T7372] FAT-fs (loop3): Directory bread(block 70) failed
[  400.651776][ T7372] FAT-fs (loop3): Directory bread(block 71) failed
[  400.658686][ T7372] FAT-fs (loop3): Directory bread(block 72) failed
[  400.665757][ T7372] FAT-fs (loop3): Directory bread(block 73) failed
[  403.623918][ T7405] loop6: detected capacity change from 0 to 40427
[  403.647252][ T7405] F2FS-fs (loop6): Wrong SSA boundary, start(3584) end(4096) blocks(32768)
[  403.656285][ T7405] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  403.665865][ T7405] F2FS-fs (loop6): build fault injection attr: rate: 19, type: 0x1fffff
[  403.674850][ T7405] F2FS-fs (loop6): Image doesn't support compression
[  405.352287][ T7405] loop6: detected capacity change from 0 to 164
[  405.384203][ T7405] ISOFS: Bad logical zone size 2055
[  405.512498][ T7421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.341'.
[  407.728735][ T2157] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  407.782359][ T2157] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  408.012421][ T5865] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  408.064229][ T7449] loop3: detected capacity change from 0 to 256
[  408.242495][ T5865] usb 1-1: Using ep0 maxpacket: 16
[  408.402489][ T5865] usb 1-1: config 0 has no interfaces?
[  408.408287][ T5865] usb 1-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[  408.418751][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.545955][ T5865] usb 1-1: config 0 descriptor??
[  408.743963][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  408.750642][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  408.782010][ T1894] usb 1-1: USB disconnect, device number 8
[  408.972758][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.350'.
[  409.848927][ T7469] vlan2: entered promiscuous mode
[  409.854516][ T7469] batadv0: entered promiscuous mode
[  409.873051][ T7469] batadv0: left promiscuous mode
[  410.113856][ T1894] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  410.312428][ T1894] usb 1-1: Using ep0 maxpacket: 16
[  410.358465][ T1894] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  410.371504][ T1894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  410.459809][ T1894] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  410.471005][ T1894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.482115][ T1894] usb 1-1: Product: syz
[  410.486537][ T1894] usb 1-1: Manufacturer: syz
[  410.492443][ T1894] usb 1-1: SerialNumber: syz
[  410.667872][ T1894] usb 1-1: config 0 descriptor??
[  410.729955][ T1894] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  410.739779][ T1894] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  411.339834][ T1894] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  411.415867][ T1894] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  412.241782][ T1894] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  412.261372][ T7495] loop3: detected capacity change from 0 to 512
[  412.288216][ T1894] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  412.304743][ T7495] EXT4-fs: Ignoring removed i_version option
[  412.352377][ T1894] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  412.381433][ T1894] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  412.429742][ T1894] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  412.498113][ T1894] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  412.513800][ T7495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.530340][ T7495] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  412.814324][ T7495] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.091637][ T1894] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  413.098268][ T1894] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  413.105084][ T1894] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  413.111727][ T1894] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  413.118467][ T1894] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  413.507787][ T1894] usb 1-1: USB disconnect, device number 9
[  414.083008][ T7513] bond0: (slave bond_slave_0): Releasing backup interface
[  414.209960][ T7513] bond0: (slave bond_slave_1): Releasing backup interface
[  416.159072][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'.
[  416.252344][ T7513] team0: Port device team_slave_0 removed
[  416.427107][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'.
[  416.706681][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'.
[  416.752838][ T7513] team0: Port device team_slave_1 removed
[  416.764170][ T7513] batman_adv: batadv0: Removing interface: batadv_slave_0
[  417.097096][ T7513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  417.105218][ T7513] batman_adv: batadv0: Removing interface: batadv_slave_1
[  417.695147][ T7517] team0: Mode changed to "loadbalance"
[  417.911336][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  418.613697][ T7518] bond0 (unregistering): (slave vxlan0): Releasing backup interface
[  418.681736][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805f155a00: rx timeout, send abort
[  418.764139][ T7518] bond0 (unregistering): Released all slaves
[  418.805677][ T7521] vlan0: entered promiscuous mode
[  418.819275][ T7521] syz_tun: entered promiscuous mode
[  418.837541][ T7521] team0: Port device vlan0 added
[  418.923393][ T7525] syz_tun: left promiscuous mode
[  418.940697][ T7525] team0 (unregistering): Port device vlan0 removed
[  419.192942][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805f155a00: abort rx timeout. Force session deactivation
[  419.861816][ T7504] net_ratelimit: 10 callbacks suppressed
[  419.861895][ T7504] Set syz1 is full, maxelem 65536 reached
[  419.951008][ T1894] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  420.010295][ T7538] loop6: detected capacity change from 0 to 1024
[  420.200351][ T1894] usb 1-1: Using ep0 maxpacket: 16
[  420.277747][ T1894] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  420.286152][ T1894] usb 1-1: config 0 has no interface number 0
[  420.383983][ T1894] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  420.393468][ T1894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.402009][ T1894] usb 1-1: Product: syz
[  420.406410][ T1894] usb 1-1: Manufacturer: syz
[  420.414011][ T1894] usb 1-1: SerialNumber: syz
[  420.545334][ T1894] usb 1-1: config 0 descriptor??
[  420.594894][ T1894] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  421.004885][ T7538] EXT4-fs (loop6): Test dummy encryption mode enabled
[  421.058299][ T7538] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  421.151447][ T7545] kvm: kvm [7543]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x800000837
[  421.196495][ T7533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.206522][ T7533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.259728][ T7545] kvm: kvm [7543]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x41200005651
[  421.294970][ T7538] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  421.303710][ T1894] gspca_spca1528: reg_w err -71
[  421.340166][ T1894] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[  421.342201][ T7545] kvm: kvm [7543]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000
[  421.417442][ T1894] usb 1-1: USB disconnect, device number 10
[  421.429690][ T6245] udevd[6245]: setting owner of /dev/bus/usb/001/010 to uid=0, gid=0 failed: No such file or directory
[  422.164390][ T6737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.340656][ T7579] picdev_write: 2 callbacks suppressed
[  423.340731][ T7579] kvm: pic: non byte write
[  423.416835][ T7569] syz.5.377 (7569) used greatest stack depth: 5160 bytes left
[  424.503866][ T7597] kvm_intel: kvm [7595]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x38010060f2
[  424.544435][ T7597] kvm: kvm [7595]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x5b01007573
[  424.602706][ T7597] kvm_intel: kvm [7595]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x7301000359
[  424.652067][ T7597] kvm: kvm [7595]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x8e010012f2
[  426.871486][ T2157] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  427.091557][ T2157] usb 1-1: Using ep0 maxpacket: 16
[  427.263556][ T2157] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  427.274670][ T2157] usb 1-1: config 0 has no interface number 0
[  427.343249][ T2157] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  427.352738][ T2157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.361280][ T2157] usb 1-1: Product: syz
[  427.365677][ T2157] usb 1-1: Manufacturer: syz
[  427.370532][ T2157] usb 1-1: SerialNumber: syz
[  427.443665][ T2157] usb 1-1: config 0 descriptor??
[  427.492563][ T2157] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  428.404824][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.415756][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.540628][ T2157] gspca_spca1528: reg_w err -71
[  428.553054][ T7651] netdevsim netdevsim3 : renamed from netdevsim3 (while UP)
[  428.593185][ T2157] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[  428.689554][ T2157] usb 1-1: USB disconnect, device number 11
[  428.740855][    C1] hrtimer: interrupt took 251829 ns
[  429.594072][ T7657] loop5: detected capacity change from 0 to 32768
[  431.326297][ T7671] loop5: detected capacity change from 0 to 736
[  432.179198][ T7683] netlink: 76 bytes leftover after parsing attributes in process `syz.0.410'.
[  432.193540][ T7683] netlink: 76 bytes leftover after parsing attributes in process `syz.0.410'.
[  434.051357][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.417'.
[  434.523972][ T7710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.418'.
[  434.553085][ T7710] batadv0: entered promiscuous mode
[  434.564147][ T7710] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  434.576363][ T7710] batadv0: left promiscuous mode
[  436.635156][ T2157] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  436.742999][ T2157] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  436.911524][ T5865] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  437.131265][ T5865] usb 6-1: Using ep0 maxpacket: 16
[  437.180566][ T5865] usb 6-1: config 0 has no interfaces?
[  437.188242][ T5865] usb 6-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[  437.197981][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.347435][ T5865] usb 6-1: config 0 descriptor??
[  437.375905][ T7736] loop6: detected capacity change from 0 to 32768
[  437.387993][ T7736] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.425 (7736)
[  437.479693][ T7736] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  437.490408][ T7736] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm
[  437.499734][ T7736] BTRFS info (device loop6): using free-space-tree
[  437.606974][ T5865] usb 6-1: USB disconnect, device number 4
[  437.952221][ T7736] unsupported nlmsg_type 40
[  437.975570][ T7764] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  438.208056][ T7764] netlink: 204 bytes leftover after parsing attributes in process `syz.3.428'.
[  438.370331][ T6737] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  438.975146][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.432'.
[  438.999427][ T7773] ipvlan2: entered promiscuous mode
[  439.009600][ T7773] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  439.371437][ T5865] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  439.479258][ T5865] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  439.711390][ T1894] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  439.931369][ T1894] usb 1-1: Using ep0 maxpacket: 16
[  439.957992][ T1894] usb 1-1: config 0 has no interfaces?
[  439.963963][ T1894] usb 1-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[  439.976119][ T1894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.104812][ T1894] usb 1-1: config 0 descriptor??
[  440.381405][ T5865] usb 1-1: USB disconnect, device number 12
[  441.770503][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'.
[  443.310039][ T7817] syz.2.447: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  443.325653][ T7817] CPU: 1 UID: 0 PID: 7817 Comm: syz.2.447 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0
[  443.325801][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  443.325889][ T7817] Call Trace:
[  443.325944][ T7817]  <TASK>
[  443.325991][ T7817]  dump_stack_lvl+0x216/0x2d0
[  443.326151][ T7817]  dump_stack+0x1e/0x24
[  443.326262][ T7817]  warn_alloc+0x455/0x650
[  443.326437][ T7817]  ? __schedule+0x21a9/0x6c00
[  443.326611][ T7817]  ? __vmalloc_node_range_noprof+0xd6/0x26b0
[  443.326803][ T7817]  __vmalloc_node_range_noprof+0x130/0x26b0
[  443.326978][ T7817]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  443.327148][ T7817]  ? kmsan_get_metadata+0x13e/0x1c0
[  443.327310][ T7817]  ? kmsan_get_metadata+0x13e/0x1c0
[  443.327472][ T7817]  ? kmsan_get_metadata+0x13e/0x1c0
[  443.327645][ T7817]  ? __kmalloc_cache_noprof+0x932/0xdf0
[  443.327797][ T7817]  ? kmsan_get_metadata+0x13e/0x1c0
[  443.327956][ T7817]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  443.328120][ T7817]  vmalloc_user_noprof+0x90/0xb0
[  443.328284][ T7817]  ? xskq_create+0x105/0x270
[  443.328413][ T7817]  xskq_create+0x105/0x270
[  443.328531][ T7817]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  443.328711][ T7817]  xsk_init_queue+0x115/0x1f0
[  443.328840][ T7817]  xsk_setsockopt+0x924/0xd10
[  443.329017][ T7817]  ? kmsan_get_metadata+0x120/0x1c0
[  443.329187][ T7817]  do_sock_setsockopt+0x4bb/0x7d0
[  443.329361][ T7817]  ? __pfx_xsk_setsockopt+0x10/0x10
[  443.329565][ T7817]  __x64_sys_setsockopt+0x33d/0x4f0
[  443.329758][ T7817]  x64_sys_call+0x30b9/0x3c30
[  443.329896][ T7817]  do_syscall_64+0xcd/0x1e0
[  443.330019][ T7817]  ? clear_bhb_loop+0x25/0x80
[  443.330182][ T7817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.330349][ T7817] RIP: 0033:0x7ff79398cde9
[  443.330458][ T7817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  443.330574][ T7817] RSP: 002b:00007ff7947e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  443.330701][ T7817] RAX: ffffffffffffffda RBX: 00007ff793ba5fa0 RCX: 00007ff79398cde9
[  443.330809][ T7817] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[  443.330885][ T7817] RBP: 00007ff793a0e2a0 R08: 0000000000000004 R09: 0000000000000000
[  443.330968][ T7817] R10: 0000400000000900 R11: 0000000000000246 R12: 0000000000000000
[  443.331051][ T7817] R13: 0000000000000000 R14: 00007ff793ba5fa0 R15: 00007fffd197d7b8
[  443.331154][ T7817]  </TASK>
[  443.579702][ T7817] Mem-Info:
[  443.584450][ T7817] active_anon:11395 inactive_anon:0 isolated_anon:0
[  443.584450][ T7817]  active_file:11641 inactive_file:38383 isolated_file:0
[  443.584450][ T7817]  unevictable:768 dirty:135 writeback:0
[  443.584450][ T7817]  slab_reclaimable:5119 slab_unreclaimable:26351
[  443.584450][ T7817]  mapped:25463 shmem:5602 pagetables:955
[  443.584450][ T7817]  sec_pagetables:0 bounce:0
[  443.584450][ T7817]  kernel_misc_reclaimable:0
[  443.584450][ T7817]  free:376250 free_pcp:10214 free_cma:0
[  443.630527][ T7817] Node 0 active_anon:45580kB inactive_anon:0kB active_file:46500kB inactive_file:153456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101808kB dirty:540kB writeback:0kB shmem:20872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5616kB pagetables:3820kB sec_pagetables:0kB all_unreclaimable? no
[  443.666493][ T7817] Node 1 active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  443.698277][ T7817] Node 0 DMA free:4096kB boost:0kB min:160kB low:200kB high:240kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  443.726199][ T7817] lowmem_reserve[]: 0 928 1241 0 0
[  443.732026][ T7817] Node 0 DMA32 free:535112kB boost:0kB min:36108kB low:45132kB high:54156kB reserved_highatomic:0KB active_anon:25124kB inactive_anon:0kB active_file:41868kB inactive_file:70976kB unevictable:0kB writepending:300kB present:3129332kB managed:951184kB mlocked:0kB bounce:0kB free_pcp:31244kB local_pcp:17904kB free_cma:0kB
[  443.765653][ T7817] lowmem_reserve[]: 0 0 312 0 0
[  443.772037][ T7817] Node 0 Normal free:15800kB boost:0kB min:12708kB low:15884kB high:19060kB reserved_highatomic:0KB active_anon:20592kB inactive_anon:0kB active_file:4632kB inactive_file:82480kB unevictable:1536kB writepending:240kB present:1048580kB managed:320496kB mlocked:0kB bounce:0kB free_pcp:5652kB local_pcp:5344kB free_cma:0kB
[  443.802813][ T7817] lowmem_reserve[]: 0 0 0 0 0
[  443.808185][ T7817] Node 1 Normal free:949992kB boost:0kB min:41128kB low:51408kB high:61688kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:1037028kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  443.837766][ T7817] lowmem_reserve[]: 0 0 0 0 0
[  443.843297][ T7817] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB
[  443.856754][ T7817] Node 0 DMA32: 246*4kB (UME) 209*8kB (UME) 133*16kB (UM) 241*32kB (UME) 267*64kB (UME) 85*128kB (UME) 14*256kB (UM) 23*512kB (UME) 12*1024kB (UME) 8*2048kB (UME) 110*4096kB (UM) = 535056kB
[  443.882621][ T7817] Node 0 Normal: 8*4kB (UE) 5*8kB (UME) 7*16kB (ME) 6*32kB (UME) 5*64kB (UME) 8*128kB (UE) 3*256kB (UM) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 1*4096kB (M) = 15800kB
[  443.901657][ T7817] Node 1 Normal: 2*4kB (ME) 10*8kB (UE) 11*16kB (UE) 21*32kB (UME) 15*64kB (UE) 7*128kB (UM) 8*256kB (UME) 4*512kB (UM) 5*1024kB (UME) 4*2048kB (UM) 227*4096kB (UM) = 949992kB
[  443.921813][ T7817] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  443.931781][ T7817] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  443.941447][ T7817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  443.951555][ T7817] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  443.964257][ T7817] 56147 total pagecache pages
[  443.969141][ T7817] 0 pages in swap cache
[  443.974396][ T7817] Free swap  = 124492kB
[  443.978748][ T7817] Total swap = 124996kB
[  443.983208][ T7817] 2097051 pages RAM
[  443.987190][ T7817] 0 pages HighMem/MovableOnly
[  443.992201][ T7817] 1518850 pages reserved
[  443.996636][ T7817] 0 pages cma reserved
[  445.555477][ T7817] x_tables: duplicate underflow at hook 2
[  446.812653][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  446.833061][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  446.844168][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  446.867072][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  446.882407][ T5792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  446.896881][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  447.338616][ T7835] loop6: detected capacity change from 0 to 1024
[  447.472118][ T7835] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  447.482319][ T7835] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  447.599629][ T7835] EXT4-fs (loop6): invalid journal inode
[  447.605872][ T7835] EXT4-fs (loop6): can't get journal size
[  447.752640][ T7835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  447.884354][ T5865] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  447.914573][ T5865] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  448.151638][ T2157] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  448.423058][ T2157] usb 6-1: Using ep0 maxpacket: 16
[  448.444339][ T6737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.463311][ T2157] usb 6-1: config 0 has no interfaces?
[  448.477550][ T2157] usb 6-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[  448.487214][ T2157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.582655][ T2157] usb 6-1: config 0 descriptor??
[  448.882499][ T2157] usb 6-1: USB disconnect, device number 5
[  448.947594][ T5792] Bluetooth: hci4: command tx timeout
[  450.162638][ T7836] chnl_net:caif_netlink_parms(): no params data found
[  451.021303][ T5792] Bluetooth: hci4: command tx timeout
[  451.049306][ T7868] netlink: 16 bytes leftover after parsing attributes in process `syz.5.456'.
[  451.942568][ T7881] 9pnet_fd: Insufficient options for proto=fd
[  452.005186][ T7883] lo: entered promiscuous mode
[  452.010325][ T7883] lo: left allmulticast mode
[  452.016195][ T7883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  452.560164][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.572067][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.579925][ T7836] bridge_slave_0: entered allmulticast mode
[  452.589145][ T7836] bridge_slave_0: entered promiscuous mode
[  452.702540][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.710425][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.718766][ T7836] bridge_slave_1: entered allmulticast mode
[  452.728085][ T7836] bridge_slave_1: entered promiscuous mode
[  453.141137][ T5792] Bluetooth: hci4: command tx timeout
[  453.189497][ T7891] loop5: detected capacity change from 0 to 32768
[  453.208047][ T7891] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.464 (7891)
[  453.273330][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.304533][ T7891] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  453.315200][ T7891] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm
[  453.324515][ T7891] BTRFS info (device loop5): using free-space-tree
[  453.382212][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.819953][ T7836] team0: Port device team_slave_0 added
[  453.841676][ T6533] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  453.910126][ T7836] team0: Port device team_slave_1 added
[  454.157136][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.161899][ T7920] fuse: Unknown parameter 'group_00000000000000000000'
[  454.164555][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.207641][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.385495][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.392849][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.422111][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.545387][ T7925] netlink: 'syz.6.470': attribute type 32 has an invalid length.
[  454.811609][ T2157] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  455.028195][ T2157] usb 6-1: config 0 has no interfaces?
[  455.034491][ T2157] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6
[  455.043981][ T2157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.141623][ T2157] usb 6-1: config 0 descriptor??
[  455.183122][ T5792] Bluetooth: hci4: command tx timeout
[  455.216379][ T7836] hsr_slave_0: entered promiscuous mode
[  455.231529][ T7836] hsr_slave_1: entered promiscuous mode
[  455.240007][ T7836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  455.248018][ T7836] Cannot create hsr debugfs directory
[  455.656548][ T7930] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  455.663623][ T7930] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  455.670326][ T7930] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  455.677180][ T7930] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  455.683572][ T7930] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  455.832706][ T7930] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  455.874703][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.885332][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.903418][ T7941] xt_recent: Unsupported userspace flags (00000042)
[  456.215178][ T2157] usb 6-1: USB disconnect, device number 6
[  456.743083][ T7946] input: syz0 as /devices/virtual/input/input9
[  456.951440][ T5792] Bluetooth: hci2: command 0x0406 tx timeout
[  457.107991][ T7836] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  457.239587][ T7836] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  457.373818][ T7836] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  457.469405][ T7836] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  457.741267][ T5792] Bluetooth: hci4: command 0x0c1a tx timeout
[  457.748429][ T5793] Bluetooth: hci0: command 0x0c1a tx timeout
[  457.756687][ T5082] Bluetooth: hci3: command 0x0c1a tx timeout
[  458.239496][ T7954] lo speed is unknown, defaulting to 1000
[  458.245666][ T7954] lo speed is unknown, defaulting to 1000
[  458.252532][ T7954] lo speed is unknown, defaulting to 1000
[  458.269941][ T7954] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  458.316687][ T7954] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  458.365475][ T7954] lo speed is unknown, defaulting to 1000
[  458.374271][ T7954] lo speed is unknown, defaulting to 1000
[  458.382679][ T7954] lo speed is unknown, defaulting to 1000
[  458.391381][ T7954] lo speed is unknown, defaulting to 1000
[  458.403679][ T7954] lo speed is unknown, defaulting to 1000
[  458.413130][ T7954] lo speed is unknown, defaulting to 1000
[  459.824115][ T5792] Bluetooth: hci4: command 0x0c1a tx timeout
[  460.109598][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'.
[  460.643604][ T7974] siw: device registration error -23
[  460.684401][ T7975] netlink: 'syz.5.482': attribute type 32 has an invalid length.
[  460.700546][ T7974] smc: removing ib device s
[  460.879117][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.368294][ T7970] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  461.449563][ T7836] 8021q: adding VLAN 0 to HW filter on device team0
[  461.673325][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.681191][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.931842][ T5792] Bluetooth: hci4: command 0x0c1a tx timeout
[  462.036615][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.044347][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.178251][ T7988] 9pnet_fd: Insufficient options for proto=fd
[  465.325766][ T8019] netlink: 'syz.0.493': attribute type 32 has an invalid length.
[  465.809832][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  469.296915][ T8065] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  469.399349][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'.
[  470.191215][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  470.198118][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  470.317375][ T7836] veth0_vlan: entered promiscuous mode
[  470.486865][ T7836] veth1_vlan: entered promiscuous mode
[  471.313356][ T7836] veth0_macvtap: entered promiscuous mode
[  471.553846][ T7836] veth1_macvtap: entered promiscuous mode
[  471.922987][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.934027][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.944352][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.955079][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.965195][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.975930][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.991505][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  472.133652][ T8083] IPv6: Can't replace route, no match found
[  472.176134][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.187377][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.198430][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.198524][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.198609][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.198695][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.203481][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  472.400146][ T8083] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  472.588042][ T7836] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.597452][ T7836] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.606645][ T7836] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.615893][ T7836] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.073839][ T8098] netlink: 'syz.5.510': attribute type 10 has an invalid length.
[  474.099516][ T8098] 8021q: adding VLAN 0 to HW filter on device team0
[  474.114735][ T8098] bond0: (slave team0): Enslaving as an active interface with an up link
[  474.134851][ T8098] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:e8b2:5bff:feff:b80a error=-28
[  474.673058][ T8098] infiniband syz1: set active
[  474.673513][ T8113] loop6: detected capacity change from 0 to 8
[  474.677913][ T8098] infiniband syz1: added team_slave_0
[  474.686841][ T8098] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  474.695732][ T8098] infiniband syz1: Couldn't open port 1
[  474.761284][ T8098] RDS/IB: syz1: added
[  474.765533][ T8098] smc: adding ib device syz1 with port count 1
[  474.767044][ T8113] SQUASHFS error: lzo decompression failed, data probably corrupt
[  474.772035][ T8098] smc:    ib device syz1 port 1 has pnetid 
[  474.789243][ T8113] SQUASHFS error: Failed to read block 0x91: -5
[  474.798840][ T8113] SQUASHFS error: Unable to read metadata cache entry [8f]
[  474.808057][ T8113] SQUASHFS error: Unable to read inode 0x11f
[  477.272067][   T29] audit: type=1326 audit(1739554866.908:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  477.294913][   T29] audit: type=1326 audit(1739554866.908:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  477.317923][   T29] audit: type=1326 audit(1739554866.908:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  477.340604][   T29] audit: type=1326 audit(1739554866.918:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  477.685702][   T29] audit: type=1326 audit(1739554867.008:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  477.708852][   T29] audit: type=1326 audit(1739554867.008:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  477.731984][   T29] audit: type=1326 audit(1739554867.008:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  477.757548][   T29] audit: type=1326 audit(1739554867.058:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  477.781024][   T29] audit: type=1326 audit(1739554867.058:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79398cde9 code=0x7ffc0000
[  477.803767][   T29] audit: type=1326 audit(1739554867.058:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff79398b750 code=0x7ffc0000
[  479.138133][ T8147] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  479.534666][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  479.744016][   T10] usb 6-1: Using ep0 maxpacket: 8
[  479.793209][   T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  479.805225][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.814471][   T10] usb 6-1: Product: syz
[  479.818863][   T10] usb 6-1: Manufacturer: syz
[  479.824025][   T10] usb 6-1: SerialNumber: syz
[  479.968012][   T10] usb 6-1: config 0 descriptor??
[  480.237188][   T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  481.168913][ T8176] vlan2: entered promiscuous mode
[  481.177243][ T8176] team_slave_0: entered promiscuous mode
[  481.183387][ T8176] team_slave_1: entered promiscuous mode
[  481.190869][ T8176] team0: entered promiscuous mode
[  481.208559][ T8176] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  481.672214][ T8185] siw: device registration error -23
[  482.060218][ T8180] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  482.991061][   T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  483.086731][   T10] usb 6-1: USB disconnect, device number 7
[  483.366873][ T8197] loop6: detected capacity change from 0 to 2048
[  483.457910][ T8197] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  485.195892][ T5793] Bluetooth: hci3: unexpected event for opcode 0x200d
[  485.837807][ T4006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.848364][ T4006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.601471][ T8232] loop6: detected capacity change from 0 to 32768
[  486.922681][ T8232] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  486.945569][ T8232] bcachefs (loop6): recovering from clean shutdown, journal seq 10
[  486.955122][ T8232] bcachefs (loop6): Version upgrade required:
[  486.955122][ T8232] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  486.955122][ T8232] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  486.955122][ T8232]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  487.031297][ T8232] bcachefs (loop6): dropping and reconstructing all alloc info
[  487.246143][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.254716][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.491937][ T8232] bcachefs (loop6): accounting_read... done
[  487.499878][ T8232] bcachefs (loop6): alloc_read... done
[  487.506207][ T8232] bcachefs (loop6): stripes_read... done
[  487.512365][ T8232] bcachefs (loop6): snapshots_read... done
[  487.521805][ T8232] bcachefs (loop6): done starting filesystem
[  487.600380][ T8234] loop5: detected capacity change from 0 to 256
[  487.609386][ T8229] netlink: 4344 bytes leftover after parsing attributes in process `syz.0.540'.
[  489.027396][ T6737] bcachefs (loop6): shutting down
[  489.219755][ T6737] bcachefs (loop6): shutdown complete
[  489.262135][ T5793] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  489.271664][ T5793] Bluetooth: hci3: Injecting HCI hardware error event
[  489.279527][ T5793] Bluetooth: hci3: hardware error 0x00
[  490.369935][ T8268] netlink: 'syz.0.546': attribute type 11 has an invalid length.
[  490.456810][ T8268] netlink: 'syz.0.546': attribute type 9 has an invalid length.
[  490.466650][ T8268] netlink: 'syz.0.546': attribute type 6 has an invalid length.
[  491.351866][ T5793] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  492.182601][ T8281] loop7: detected capacity change from 0 to 4096
[  492.235741][ T8281] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  492.332105][ T8281] ntfs3(loop7): Failed to load $MFTMirr (-22).
[  493.553061][ T8300] loop7: detected capacity change from 0 to 512
[  493.562297][ T8300] EXT4-fs: Ignoring removed orlov option
[  493.568540][ T8300] EXT4-fs: Ignoring removed nomblk_io_submit option
[  493.790096][ T8300] EXT4-fs error (device loop7): ext4_init_orphan_info:586: comm syz.7.557: inode #0: comm syz.7.557: iget: illegal inode #
[  493.942512][ T8300] EXT4-fs (loop7): Remounting filesystem read-only
[  493.949291][ T8300] EXT4-fs (loop7): get orphan inode failed
[  494.025313][ T8300] EXT4-fs (loop7): mount failed
[  494.251673][ T8309] netlink: 'syz.5.561': attribute type 11 has an invalid length.
[  494.840184][ T8318] loop7: detected capacity change from 0 to 512
[  495.103735][ T8318] EXT4-fs error (device loop7): __ext4_fill_super:5497: inode #2: comm syz.7.563: iget: bogus i_mode (177777)
[  495.207281][ T8318] EXT4-fs (loop7): get root inode failed
[  495.213455][ T8318] EXT4-fs (loop7): mount failed
[  496.101750][ T8327] loop6: detected capacity change from 0 to 32768
[  496.112941][ T8327] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.544 (8327)
[  496.137034][ T8327] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  496.148865][ T8327] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm
[  496.158282][ T8327] BTRFS info (device loop6): using free-space-tree
[  498.154948][ T6737] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  498.557218][ T8368] netlink: 'syz.2.574': attribute type 11 has an invalid length.
[  499.223407][ T5793] Bluetooth: hci4: unexpected event 0x2c length: 28 > 17
[  500.707263][ T8393] loop6: detected capacity change from 0 to 512
[  500.782314][ T8395] loop7: detected capacity change from 0 to 64
[  500.878201][ T8393] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  500.956520][ T8395] hfs: request for non-existent node 1061 in B*Tree
[  500.963674][ T8395] hfs: request for non-existent node 1061 in B*Tree
[  500.970623][ T8395] hfs: get root inode failed
[  501.088659][ T8393] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.584: bad orphan inode 15
[  501.131521][ T8393] ext4_test_bit(bit=14, block=18) = 1
[  501.137306][ T8393] is_bad_inode(inode)=0
[  501.141968][ T8393] NEXT_ORPHAN(inode)=1023
[  501.146482][ T8393] max_ino=32
[  501.149863][ T8393] i_nlink=0
[  501.336663][ T8393] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.584: corrupted xattr block 19: bad e_name length
[  501.411482][ T8393] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117)
[  501.422835][ T8393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  501.435768][ T8393] ext2 filesystem being mounted at /59/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  502.103549][ T6737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  502.303683][ T8411] loop7: detected capacity change from 0 to 128
[  502.927244][ T8419] loop6: detected capacity change from 0 to 256
[  503.112190][ T8419] exFAT-fs (loop6): Invalid boot checksum (boot checksum : 0x0003ac00, checksum : 0x1119ac00)
[  503.123123][ T8419] exFAT-fs (loop6): invalid boot region
[  503.128867][ T8419] exFAT-fs (loop6): failed to recognize exfat type
[  503.307750][ T8422] loop7: detected capacity change from 0 to 64
[  503.430229][ T8422] hfs: bad allocation block size 0
[  503.436392][ T8422] hfs: can't find a HFS filesystem on dev loop7
[  504.442593][ T5793] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  504.715970][ T8434] loop7: detected capacity change from 0 to 2048
[  504.743961][ T8434] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=26504, location=26504
[  504.937149][ T8434] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 1312: 0xb3 != 0x04
[  504.948238][ T8434] UDF-fs: error (device loop7): udf_read_inode: (ino 1312) failed !bh
[  505.086062][ T8434] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=26504, location=26504
[  505.180637][ T8434] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  505.275605][ T8434] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=26504, location=26504
[  505.366438][ T8434] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  505.447675][ T8434] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  505.513138][ T8434] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=26504, location=26504
[  505.524243][ T8434] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  505.640974][ T8434] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  505.699091][ T8434] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  505.713467][ T8434] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1)
[  506.812716][ T8460] loop6: detected capacity change from 0 to 2048
[  506.901634][ T8460] NILFS (loop6): invalid segment: Checksum error in super root
[  506.909703][ T8460] NILFS (loop6): error -22 while loading super root
[  508.033521][ T5793] Bluetooth: hci0: unexpected event 0x03 length: 17 > 11
[  508.863860][   T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  509.161474][   T10] usb 7-1: Using ep0 maxpacket: 8
[  509.252178][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  509.325361][   T10] usb 7-1: config 64 has an invalid interface number: 28 but max is 0
[  509.334004][   T10] usb 7-1: config 64 has no interface number 0
[  509.340420][   T10] usb 7-1: config 64 interface 28 has no altsetting 0
[  509.448783][   T10] usb 7-1: language id specifier not provided by device, defaulting to English
[  509.516230][ T8495] loop7: detected capacity change from 0 to 8
[  509.604184][ T8495] cramfs: root is not a directory
[  509.613767][   T10] usb 7-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=e7.49
[  509.623467][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.632062][   T10] usb 7-1: SerialNumber: 띛閐଱⠿᳟줷襉⵾譂୬쎸铄駨췏輝ᨧ⯈骖㸚ᚮ婄諎ㄪ䩾甆驷ﮞ᭵枚﷑抒鎯ꔍ늳肸⽪珚琹՟拏飒』⬚듦ྦ막᭎伋僭齈꽐䟎ꄺၑ贉￮诚膨航賋妦賝페㟮瞲糰흄䃴Ƴ䏷䒈ᨥᡐ펅翹請氣틭鸣嘎셩虆鵻춈愢쫟鞼Ԇጻ肀狼먤
[  510.367482][ T8503] loop7: detected capacity change from 0 to 128
[  510.426348][   T10] usb 7-1: USB disconnect, device number 3
[  510.453437][ T8503] ufs: You didn't specify the type of your ufs filesystem
[  510.453437][ T8503] 
[  510.453437][ T8503] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  510.453437][ T8503] 
[  510.453437][ T8503] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  510.616038][ T8503] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  510.786865][ T7852] udevd[7852]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:64.28/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  511.674039][ T8519] loop6: detected capacity change from 0 to 128
[  512.853482][ T8532] loop6: detected capacity change from 0 to 1024
[  514.052945][ T5793] Bluetooth: hci4: unexpected event for opcode 0x2028
[  514.852413][ T8558] loop7: detected capacity change from 0 to 256
[  514.912904][ T8550] loop6: detected capacity change from 0 to 4096
[  514.993963][ T8550] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  515.638196][ T8550] ntfs3(loop6): ino=1a, mi_enum_attr
[  515.648457][ T8550] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  515.742134][ T8550] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  516.391803][   T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  516.631343][   T10] usb 8-1: config index 0 descriptor too short (expected 32820, got 52)
[  516.639995][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  516.650645][   T10] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  516.661913][   T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  516.676971][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  516.688133][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  517.013286][   T10] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97
[  517.023619][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.032099][   T10] usb 8-1: Product: syz
[  517.036485][   T10] usb 8-1: Manufacturer: syz
[  517.041444][   T10] usb 8-1: SerialNumber: syz
[  517.171923][   T10] usb 8-1: config 0 descriptor??
[  517.251965][   T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  517.393905][ T8583] loop6: detected capacity change from 0 to 2048
[  517.520198][ T8583] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  517.557610][   T10] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -2
[  517.617905][ T8583] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  517.653601][   T10] usb 8-1: USB disconnect, device number 2
[  517.909875][ T7833] udevd[7833]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  519.339729][ T5793] Bluetooth: hci0: unexpected event for opcode 0x080c
[  520.086091][ T5793] Bluetooth: hci0: unexpected event for opcode 0x1003
[  520.523212][ T8625] netlink: 20 bytes leftover after parsing attributes in process `syz.7.669'.
[  521.405355][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[  521.415664][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.428843][ T8640] vlan2: entered promiscuous mode
[  524.466454][ T8687] loop6: detected capacity change from 0 to 128
[  524.525804][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[  524.536923][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.557328][ T8688] vlan2: entered promiscuous mode
[  524.585123][ T8687] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  524.696249][ T8687] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  524.891382][ T8690] loop7: detected capacity change from 0 to 1024
[  525.772349][ T1069] hfsplus: b-tree write err: -5, ino 4
[  527.834470][ T8716] loop6: detected capacity change from 0 to 2048
[  527.881693][ T8716] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  528.131235][ T8726] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  528.807112][ T8733] loop7: detected capacity change from 0 to 764
[  529.141404][ T8733] Symlink component flag not implemented
[  529.245738][ T8733] Symlink component flag not implemented (101)
[  529.697798][ T8742] loop6: detected capacity change from 0 to 128
[  529.783210][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[  529.793475][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  529.806121][ T8740] vlan2: entered promiscuous mode
[  530.137112][ T8742] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #2: comm syz.6.709: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 257(4), depth 0(0)
[  530.338473][ T8742] EXT4-fs (loop6): get root inode failed
[  530.348139][ T8742] EXT4-fs (loop6): mount failed
[  531.269048][ T8754] loop6: detected capacity change from 0 to 1024
[  531.328039][ T8754] EXT4-fs: Ignoring removed orlov option
[  531.335210][ T8754] EXT4-fs: Ignoring removed nomblk_io_submit option
[  531.442203][ T8754] EXT4-fs (loop6): #clusters per group too big: 4294647808
[  531.637745][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  531.644673][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  532.286110][ T5793] Bluetooth: hci4: ACL packet too small
[  533.324842][ T8778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[  533.335009][ T8778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.348278][ T8778] vlan2: entered promiscuous mode
[  533.859883][ T5793] Bluetooth: hci2: unexpected event for opcode 0x080f
[  535.134589][ T8796] loop6: detected capacity change from 0 to 64
[  536.205317][ T8816] netlink: 'syz.6.738': attribute type 32 has an invalid length.
[  536.333111][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[  536.344546][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.357890][ T8817] vlan2: entered promiscuous mode
[  536.938708][ T8816] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  536.949617][ T8816] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  536.957713][ T8816] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  537.493336][ T1894] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  537.691402][ T1894] usb 8-1: Using ep0 maxpacket: 8
[  537.742738][ T1894] usb 8-1: config 0 has an invalid interface number: 150 but max is 0
[  537.751650][ T1894] usb 8-1: config 0 has an invalid interface number: 112 but max is 0
[  537.763936][ T1894] usb 8-1: config 0 has an invalid interface number: 3 but max is 0
[  537.773345][ T1894] usb 8-1: config 0 has 3 interfaces, different from the descriptor's value: 1
[  537.782771][ T1894] usb 8-1: config 0 has no interface number 0
[  537.789080][ T1894] usb 8-1: config 0 has no interface number 1
[  537.795802][ T1894] usb 8-1: config 0 has no interface number 2
[  537.802226][ T1894] usb 8-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  537.815616][ T1894] usb 8-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30
[  537.827646][ T1894] usb 8-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104
[  537.841462][ T1894] usb 8-1: config 0 interface 150 has no altsetting 0
[  537.848570][ T1894] usb 8-1: config 0 interface 112 has no altsetting 0
[  537.855948][ T1894] usb 8-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  537.868754][ T1894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.984327][ T1894] usb 8-1: config 0 descriptor??
[  538.442223][ T1894] usb 8-1: string descriptor 0 read error: -71
[  538.467375][ T5793] Bluetooth: hci2: command 0x0406 tx timeout
[  538.499488][ T1894] usb 8-1: USB disconnect, device number 3
[  538.526139][ T8846] loop6: detected capacity change from 0 to 256
[  538.759634][ T8846] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9d80cab, utbl_chksum : 0xe619d30d)
[  538.825113][ T7833] udevd[7833]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  538.874389][ T8846] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008)
[  539.021866][ T5793] Bluetooth: hci4: command 0x0c1a tx timeout
[  539.028799][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout
[  539.192276][ T1894] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  539.310520][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[  539.320681][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.333892][ T8853] vlan2: entered promiscuous mode
[  539.451485][ T1894] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  539.461249][ T1894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.469496][ T1894] usb 1-1: Product: syz
[  539.474104][ T1894] usb 1-1: Manufacturer: syz
[  539.478936][ T1894] usb 1-1: SerialNumber: syz
[  539.598989][ T1894] usb 1-1: config 0 descriptor??
[  539.855874][ T1894] hso 1-1:0.0: Can't find BULK IN endpoint
[  539.869200][ T1894] usb-storage 1-1:0.0: USB Mass Storage device detected
[  539.881102][   T10] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  540.078055][ T2157] usb 1-1: USB disconnect, device number 13
[  540.154278][   T10] usb 7-1: config 0 has an invalid interface number: 29 but max is 0
[  540.163052][   T10] usb 7-1: config 0 has no interface number 0
[  540.169454][   T10] usb 7-1: config 0 interface 29 has no altsetting 0
[  540.281410][   T10] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  540.291260][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.299522][   T10] usb 7-1: Product: syz
[  540.304313][   T10] usb 7-1: Manufacturer: syz
[  540.309129][   T10] usb 7-1: SerialNumber: syz
[  540.348003][   T10] usb 7-1: config 0 descriptor??
[  540.611437][   T10] peak_usb 7-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[  540.808196][   T10] peak_usb 7-1:0.29 can0: unable to request usb[type=2 value=5] err=-71
[  540.817106][   T10] peak_usb 7-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71)
[  541.012830][   T10] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -71
[  541.142606][   T10] usb 7-1: USB disconnect, device number 4
[  541.161730][ T7852] udevd[7852]: setting mode of /dev/bus/usb/007/004 to 020664 failed: No such file or directory
[  541.245391][ T7852] udevd[7852]: setting owner of /dev/bus/usb/007/004 to uid=0, gid=0 failed: No such file or directory
[  542.229744][ T8893] loop6: detected capacity change from 0 to 1024
[  542.395578][ T1894] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  542.457225][ T8893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  542.567173][ T8893] EXT4-fs warning (device loop6): ext4_empty_dir:3114: inode #11: comm syz.6.766: directory missing '..'
[  542.741837][ T1894] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[  542.750504][ T1894] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50172, setting to 1024
[  542.762291][ T1894] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  542.865053][ T1894] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  542.875259][ T1894] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  542.887116][ T1894] usb 8-1: Manufacturer: syz
[  542.899582][ T6737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.972656][ T1894] usb 8-1: config 0 descriptor??
[  542.980527][ T8894] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  543.050991][ T1894] igorplugusb 8-1:0.0: endpoint incorrect
[  543.287937][ T1894] usb 8-1: USB disconnect, device number 4
[  543.515170][ T8916] loop6: detected capacity change from 0 to 128
[  547.905003][ T8981] loop6: detected capacity change from 0 to 164
[  548.018627][ T8981] iso9660: Corrupted directory entry in block 0 of inode 1792
[  548.543378][ T8989] xt_connbytes: Forcing CT accounting to be enabled
[  549.101421][   T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  549.175164][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.7.805'.
[  549.322483][   T10] usb 7-1: Using ep0 maxpacket: 8
[  549.364962][   T10] usb 7-1: config 2 has an invalid interface number: 31 but max is 0
[  549.373841][   T10] usb 7-1: config 2 has no interface number 0
[  549.380237][   T10] usb 7-1: config 2 interface 31 has no altsetting 0
[  549.425873][   T10] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  549.438605][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.448058][   T10] usb 7-1: Product: syz
[  549.452544][   T10] usb 7-1: Manufacturer: syz
[  549.457618][   T10] usb 7-1: SerialNumber: syz
[  550.022029][   T10] =====================================================
[  550.035957][   T10] BUG: KMSAN: uninit-value in mii_nway_restart+0x119/0x1e0
[  550.043910][   T10]  mii_nway_restart+0x119/0x1e0
[  550.053917][   T10]  ch9200_bind+0x238/0xeb0
[  550.058566][   T10]  usbnet_probe+0xdb0/0x3eb0
[  550.064913][   T10]  usb_probe_interface+0xd33/0x12e0
[  550.070336][   T10]  really_probe+0x4dc/0xd90
[  550.075801][   T10]  __driver_probe_device+0x2ab/0x5d0
[  550.081467][   T10]  driver_probe_device+0x72/0x890
[  550.086703][   T10]  __device_attach_driver+0x568/0x9e0
[  550.092421][   T10]  bus_for_each_drv+0x403/0x620
[  550.097451][   T10]  __device_attach+0x3c1/0x650
[  550.102554][   T10]  device_initial_probe+0x32/0x40
[  550.107780][   T10]  bus_probe_device+0x3dc/0x5c0
[  550.112969][   T10]  device_add+0x13aa/0x1ba0
[  550.117661][   T10]  usb_set_configuration+0x31c9/0x38d0
[  550.125417][   T10]  usb_generic_driver_probe+0x109/0x2a0
[  550.131504][   T10]  usb_probe_device+0x3a7/0x690
[  550.136567][   T10]  really_probe+0x4dc/0xd90
[  550.141498][   T10]  __driver_probe_device+0x2ab/0x5d0
[  550.147012][   T10]  driver_probe_device+0x72/0x890
[  550.157337][   T10]  __device_attach_driver+0x568/0x9e0
[  550.164355][   T10]  bus_for_each_drv+0x403/0x620
[  550.169401][   T10]  __device_attach+0x3c1/0x650
[  550.174599][   T10]  device_initial_probe+0x32/0x40
[  550.179845][   T10]  bus_probe_device+0x3dc/0x5c0
[  550.185057][   T10]  device_add+0x13aa/0x1ba0
[  550.189761][   T10]  usb_new_device+0x15f0/0x2470
[  550.194942][   T10]  hub_event+0x4ffb/0x72d0
[  550.199549][   T10]  process_scheduled_works+0xc1a/0x1e80
[  550.205491][   T10]  worker_thread+0xea7/0x14f0
[  550.210332][   T10]  kthread+0x6b9/0xef0
[  550.214916][   T10]  ret_from_fork+0x6d/0x90
[  550.219520][   T10]  ret_from_fork_asm+0x1a/0x30
[  550.226286][   T10] 
[  550.228728][   T10] Local variable buff created at:
[  550.234030][   T10]  ch9200_mdio_read+0x3c/0x100
[  550.238963][   T10]  mii_nway_restart+0x8a/0x1e0
[  550.244184][   T10] 
[  550.246613][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0
[  550.262394][   T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  550.274233][   T10] Workqueue: usb_hub_wq hub_event
[  550.279505][   T10] =====================================================
[  550.286691][   T10] Disabling lock debugging due to kernel taint
[  550.293102][   T10] Kernel panic - not syncing: kmsan.panic set ...
[  550.299665][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G    B              6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0
[  550.311950][   T10] Tainted: [B]=BAD_PAGE
[  550.316209][   T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  550.326423][   T10] Workqueue: usb_hub_wq hub_event
[  550.331675][   T10] Call Trace:
[  550.335066][   T10]  <TASK>
[  550.338111][   T10]  dump_stack_lvl+0x216/0x2d0
[  550.342985][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  550.349040][   T10]  dump_stack+0x1e/0x24
[  550.353381][   T10]  panic+0x4e2/0xcf0
[  550.357499][   T10]  ? kmsan_get_metadata+0x121/0x1c0
[  550.362934][   T10]  kmsan_report+0x2c7/0x2d0
[  550.367644][   T10]  ? __device_attach+0x3c1/0x650
[  550.372797][   T10]  ? worker_thread+0xea7/0x14f0
[  550.377854][   T10]  ? __switch_to_asm+0x50/0x60
[  550.382840][   T10]  ? __msan_warning+0x95/0x120
[  550.387802][   T10]  ? mii_nway_restart+0x119/0x1e0
[  550.393052][   T10]  ? ch9200_bind+0x238/0xeb0
[  550.397882][   T10]  ? usbnet_probe+0xdb0/0x3eb0
[  550.402870][   T10]  ? usb_probe_interface+0xd33/0x12e0
[  550.408469][   T10]  ? really_probe+0x4dc/0xd90
[  550.413371][   T10]  ? __driver_probe_device+0x2ab/0x5d0
[  550.419052][   T10]  ? driver_probe_device+0x72/0x890
[  550.424823][   T10]  ? __device_attach_driver+0x568/0x9e0
[  550.430606][   T10]  ? bus_for_each_drv+0x403/0x620
[  550.435814][   T10]  ? __device_attach+0x3c1/0x650
[  550.440963][   T10]  ? device_initial_probe+0x32/0x40
[  550.446385][   T10]  ? bus_probe_device+0x3dc/0x5c0
[  550.451596][   T10]  ? device_add+0x13aa/0x1ba0
[  550.456470][   T10]  ? usb_set_configuration+0x31c9/0x38d0
[  550.462318][   T10]  ? usb_generic_driver_probe+0x109/0x2a0
[  550.468241][   T10]  ? usb_probe_device+0x3a7/0x690
[  550.473489][   T10]  ? really_probe+0x4dc/0xd90
[  550.478390][   T10]  ? __driver_probe_device+0x2ab/0x5d0
[  550.484065][   T10]  ? driver_probe_device+0x72/0x890
[  550.489485][   T10]  ? __device_attach_driver+0x568/0x9e0
[  550.495435][   T10]  ? bus_for_each_drv+0x403/0x620
[  550.500659][   T10]  ? __device_attach+0x3c1/0x650
[  550.505803][   T10]  ? device_initial_probe+0x32/0x40
[  550.511215][   T10]  ? bus_probe_device+0x3dc/0x5c0
[  550.516433][   T10]  ? device_add+0x13aa/0x1ba0
[  550.521307][   T10]  ? usb_new_device+0x15f0/0x2470
[  550.526519][   T10]  ? hub_event+0x4ffb/0x72d0
[  550.531295][   T10]  ? process_scheduled_works+0xc1a/0x1e80
[  550.537252][   T10]  ? worker_thread+0xea7/0x14f0
[  550.542267][   T10]  ? kthread+0x6b9/0xef0
[  550.546687][   T10]  ? ret_from_fork+0x6d/0x90
[  550.551459][   T10]  ? ret_from_fork_asm+0x1a/0x30
[  550.556587][   T10]  ? control_read+0x25b/0x2d0
[  550.561446][   T10]  ? kmsan_get_metadata+0x13e/0x1c0
[  550.566868][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  550.572927][   T10]  __msan_warning+0x95/0x120
[  550.577897][   T10]  mii_nway_restart+0x119/0x1e0
[  550.582999][   T10]  ch9200_bind+0x238/0xeb0
[  550.588174][   T10]  ? __pfx_ch9200_bind+0x10/0x10
[  550.593339][   T10]  usbnet_probe+0xdb0/0x3eb0
[  550.598133][   T10]  ? pm_runtime_enable+0x3bb/0x3f0
[  550.603557][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  550.609617][   T10]  ? __pfx_usbnet_probe+0x10/0x10
[  550.614862][   T10]  usb_probe_interface+0xd33/0x12e0
[  550.620320][   T10]  ? __pfx_usb_probe_interface+0x10/0x10
[  550.626177][   T10]  really_probe+0x4dc/0xd90
[  550.630911][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  550.636943][   T10]  __driver_probe_device+0x2ab/0x5d0
[  550.642474][   T10]  driver_probe_device+0x72/0x890
[  550.647719][   T10]  ? kmsan_get_metadata+0x13e/0x1c0
[  550.653127][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  550.659164][   T10]  __device_attach_driver+0x568/0x9e0
[  550.664788][   T10]  bus_for_each_drv+0x403/0x620
[  550.669831][   T10]  ? __pfx___device_attach_driver+0x10/0x10
[  550.675978][   T10]  __device_attach+0x3c1/0x650
[  550.680966][   T10]  device_initial_probe+0x32/0x40
[  550.686204][   T10]  bus_probe_device+0x3dc/0x5c0
[  550.691261][   T10]  device_add+0x13aa/0x1ba0
[  550.695998][   T10]  usb_set_configuration+0x31c9/0x38d0
[  550.701684][   T10]  ? usb_set_configuration+0x8d1/0x38d0
[  550.707500][   T10]  usb_generic_driver_probe+0x109/0x2a0
[  550.713254][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  550.719283][   T10]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  550.725559][   T10]  usb_probe_device+0x3a7/0x690
[  550.730637][   T10]  ? __pfx_usb_probe_device+0x10/0x10
[  550.736227][   T10]  really_probe+0x4dc/0xd90
[  550.740960][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  550.746990][   T10]  __driver_probe_device+0x2ab/0x5d0
[  550.752512][   T10]  driver_probe_device+0x72/0x890
[  550.757772][   T10]  ? kmsan_get_metadata+0x13e/0x1c0
[  550.763187][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  550.769233][   T10]  __device_attach_driver+0x568/0x9e0
[  550.774862][   T10]  bus_for_each_drv+0x403/0x620
[  550.779907][   T10]  ? __pfx___device_attach_driver+0x10/0x10
[  550.786050][   T10]  __device_attach+0x3c1/0x650
[  550.791071][   T10]  device_initial_probe+0x32/0x40
[  550.796325][   T10]  bus_probe_device+0x3dc/0x5c0
[  550.801381][   T10]  device_add+0x13aa/0x1ba0
[  550.806107][   T10]  usb_new_device+0x15f0/0x2470
[  550.811178][   T10]  hub_event+0x4ffb/0x72d0
[  550.815861][   T10]  ? __pfx_hub_event+0x10/0x10
[  550.820825][   T10]  process_scheduled_works+0xc1a/0x1e80
[  550.826640][   T10]  worker_thread+0xea7/0x14f0
[  550.831488][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  550.837537][   T10]  kthread+0x6b9/0xef0
[  550.841790][   T10]  ? __pfx_worker_thread+0x10/0x10
[  550.847090][   T10]  ? __pfx_kthread+0x10/0x10
[  550.851951][   T10]  ret_from_fork+0x6d/0x90
[  550.856574][   T10]  ? __pfx_kthread+0x10/0x10
[  550.861362][   T10]  ret_from_fork_asm+0x1a/0x30
[  550.866332][   T10]  </TASK>
[  550.869765][   T10] Kernel Offset: disabled
[  550.874165][   T10] Rebooting in 86400 seconds..