last executing test programs:

11.738748991s ago: executing program 4 (id=2124):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="a6af891d142bbbe86c2b6c42ac9eefc3f3124a519189b105d77c5f5267121c170995cd3bb174096f3c", @ANYBLOB="a51b7d19e69bbcb11700c2dcb2d851f79d44e9bb8469d2a5dd66597db213ade6acfaffd88afce31be876c207fb5d362b6e91010b006a4279f2d4d02752a02b76b5413c5e7cd22d3cfad489bd1b84a85aa8ad47cc69d09522d51cf5cf88cf9da13593310d5e0d03a6e17940ddd391c7796ad75f4fa75bd62cb78c43c92e61de110508c5d605a2f981314c38526ac5aac6e4445e32d7cf128b440ca715e901f8b4299226dfd9bfec7a37f3bf63e1906fe520b65051ea9c14827e9cd737a6952d478ff3cb4436a913", @ANYRES8, @ANYRESOCT, @ANYRES64], 0x0, 0x1df, &(0x7f0000000380)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
chdir(0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80205b, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/104, 0x68)
getdents(r0, &(0x7f0000001fc0)=""/182, 0xb6)

11.037004126s ago: executing program 4 (id=2128):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904", @ANYRES64], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_disconnect(r0)

10.279370148s ago: executing program 1 (id=2135):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pselect6(0xfffffffffffffe5e, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5043, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getrlimit(0x2, &(0x7f0000000040))
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x84, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x5)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@empty, @in6=@private1}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0x45)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
getsockopt$bt_hci(r6, 0x0, 0x1, &(0x7f0000000740)=""/242, &(0x7f0000000680)=0xf2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

9.01347583s ago: executing program 1 (id=2137):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

8.807338337s ago: executing program 1 (id=2138):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018510000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='workqueue_activate_work\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

8.385413922s ago: executing program 1 (id=2139):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab87100000e0a01020000000000000000030000063c0a0380100000800c00044000000000000000065402008044020b80100001800b0001007461726765740000440001800c0001007061796c6f61640034000280080003400000000308000240000000020800054000000004080006400000000108000340000000030800034000000097100001800a00010072616e6765000000140001800e000100696d6d656469617465000000100001800b0001006e756d67656e0000100001800b00010072656a6563740000a80101800a00010072616e"], 0x23e80}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000320, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000180)=@in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="ead395f02ac8652dca", 0x9}], 0x1}}], 0x2, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d72", 0x6, 0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
readv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c2100", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)

7.377401109s ago: executing program 4 (id=2140):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="a6af891d142bbbe86c2b6c42ac9eefc3f3124a519189b105d77c5f5267121c170995cd3bb174096f3c", @ANYBLOB="a51b7d19e69bbcb11700c2dcb2d851f79d44e9bb8469d2a5dd66597db213ade6acfaffd88afce31be876c207fb5d362b6e91010b006a4279f2d4d02752a02b76b5413c5e7cd22d3cfad489bd1b84a85aa8ad47cc69d09522d51cf5cf88cf9da13593310d5e0d03a6e17940ddd391c7796ad75f4fa75bd62cb78c43c92e61de110508c5d605a2f981314c38526ac5aac6e4445e32d7cf128b440ca715e901f8b4299226dfd9bfec7a37f3bf63e1906fe520b65051ea9c14827e9cd737a6952d478ff3cb4436a913", @ANYRES8, @ANYRESOCT, @ANYRES64], 0x0, 0x1df, &(0x7f0000000380)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
chdir(0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80205b, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/104, 0x68)
getdents(r0, &(0x7f0000001fc0)=""/182, 0xb6)

7.209452711s ago: executing program 1 (id=2142):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000340)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7}}, 0x30)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet(0x2, 0x80001, 0x84)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="1a010300000000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.968526856s ago: executing program 4 (id=2144):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000400)=[{0x4e2, 0x3, 0x7, 0x8007613}, {0x6, 0x2, 0x10, 0x2b52}, {0x825b, 0x81, 0x2, 0x634}, {0xc0e, 0x3f, 0x55, 0x1f}, {0x7fff, 0x0, 0x7, 0x2}]})
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89001)
fchdir(r0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000000440))
prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xfffffffb, 0x2, 0x10000, 0xf6})
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xd4a4})
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @private1}, 0x1c)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002030102000000000000000000000010080001000100000016c798a7a8be429f266aaa9fc26d5d401e00572f6bbf0e38b11b74fb052adbead0994c7e8c6a24cc5be3479fc2117ee54cc3b0a38ad3b7f90b31dfae64b66dd684f56214dcdc8185e581b1c33f5ad671e8ac18454066395c8eec06f484df86911de70a9410dc9f2a63839212062db703bd9a386bb2ca210a712924631d3923da233f43ce65cff9022548853c33ff260bfd4ca4580f8a1c80d4548497e4b492b934d2052345915c29838b78932aa8abe8c36f053711e5dc0b6a0812"], 0x1c}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x44, 0x9, 0x6, 0xffffff7f}, {0xc, 0x9, 0x0, 0x5}, {0x7, 0x0, 0xb}, {0x20, 0x0, 0xf2}, {0x6, 0x0, 0x5, 0x4000}]})
syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x800002)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10065, 0x0)
close_range(r4, 0xffffffffffffffff, 0x2)

6.237364948s ago: executing program 0 (id=2148):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\b'], 0x2c}}, 0x0)

5.095416606s ago: executing program 0 (id=2150):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

5.07392177s ago: executing program 5 (id=2151):
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0)

3.899819906s ago: executing program 0 (id=2154):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab87100000e0a01020000000000000000030000063c0a0380100000800c00044000000000000000065402008044020b80100001800b0001007461726765740000440001800c0001007061796c6f61640034000280080003400000000308000240000000020800054000000004080006400000000108000340000000030800034000000097100001800a00010072616e6765000000140001800e000100696d6d656469617465000000100001800b0001006e756d67656e0000100001800b00010072656a6563740000a80101800a00010072616e"], 0x23e80}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000320, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000180)=@in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="ead395f02ac8652dca", 0x9}], 0x1}}], 0x2, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d72", 0x6, 0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
readv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c21000800", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)

3.825476402s ago: executing program 4 (id=2155):
socket$netlink(0x10, 0x3, 0x0)
r0 = io_uring_setup(0x17c7, &(0x7f00000002c0))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000002c0)="94", 0x1, 0x0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
dup3(r1, r2, 0x0)
sendmmsg$inet(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c7ad5f300d7561aa60619fc26a1bfe8fa4858b8b4282d0c9a86c8c2eed644303c1213114081f9cd2358f6609ed25113de321db6b3efbfea341c7318fdcf6776383d3329f080e2386a708679852ee2c28c2ab423163be97f818424b862486791ce5b8b25836a4f07079b65c7c3b2e797eee7f267e5cf37fb63bb89f6b15c332da46b2a313ff6cd958152701a73601c7d02b74622ba7ff9c2fccb1826a3238b95163edcf5dbb381c666fcd8f0ce22eb182135bd8a32c627e20354f2253edb77efadbb48d512ca030763df825c1dd71d34295dc2e75e0a3054354ca6674e2d16ae319c8f3bf7a7fe1e1e596cc2679444c2b5e84a5caaa40136a41a3a35e2ca053d8e4ff2134c2bd7dc2c5c7ef55579a7b569b5face778afba93a877b622f473d942fef36d909b7c17e2ba3948fc889f377f0bce583835ce70b86ee8c419f77c9fa9da33d5f3fd2f994c2229b59db0670a15d7ba9b8b3245c7c2f83953c046528db1d9626877752071b0389bb18edd4d3797b6846e8746911526b6cfb1da1a206f5d13f69d7a8a76f5dfaf02abdfde171ed51a80ca2146fe8a181df5f9c9e969c1e2113bb355a956dd0139446d7e5b1ae338513459753977c245177ed5ae398bb23ad503739c2d75b99d70af19a2faf0a6922585378c0c881298f5af7dc63f99b40be3aea8c25bb8f599ffc4d47caec400357f2fa0675c5a81141d6b1697a92f7ab1e465361bdec4bc837595cc257aac0bcd3333eef2199c622268f0aafdccf73b3fda6ddef6102aa03c1a07a85509025be45443e71d63e4a8b54cde98554b1dd9a2f431b62d29f0cf67e069c15988b8b78c6c66f7f1d831e6307473250bf66b88c1c326faa8f093f03824980bbddc34e2324754fdaafa45ea1a1cc4baaef3104108c8e7987696d3634aa61cd9af0f2b5e427eff51cc66792a37a6e09278c6457a92a84d2fd23f7a753120758e5ca80582848d537d2704315ee55374ca8204c427c8f1138c901a29f83c0b63fb00dca30a90aa0b81d09fad2bf556100a3f762dcafd44d89936f8d5e037bff746a3d7f769ef8045ca50b1f7e8b24b723f06b5582564133e8d6b9f78c0e0d19c6808b65aa19e0dbd18527e5cf4f1c2a7e9b9dcf996d781b0851b925a02a02a9ec2887fa049d10bf8e3cf99157df4f6708c9b3673e565ad47f3518d45c69e4c18f511a9973938279a0c607d4d5b010b83b7edf9dc91ac7b9dabcabf45f4abf863c87c9671b22421600e6358ab3798afeabb0021b587e125b4f599271228944365b1333e3a9f5cc7211fde35179bc2237a26d11b9ed5387644e34efbffb54c615c7e52efc06b425d43d85227f73d7d7a7435c4bf35c76be6e5daf24785f197710503a7cf3c6bde5d5f9ac3312f50af0bcd4e05313bf02e8737761c47957cdb07f1efe8468502e58e1ef9d02582fdfe2db9c1300d99d97b2b339b73a78ef91206a8f08a21988076987ca3b6e361bdd86fb74a9184789586a1815935d837fa7590ec4ae4aa838bcc5cc94c9193b4f3084f9854f21223bc2d8fb4cb4f888ebf6dc9daed2b5f36a964955daf5fac1e69e40952b09e3124491d9d6db5eb2529c0d0a6d7a9329a05a9d4d05a9fb55711786daca3519573d1a19c9200561e9e08d74190583fc4127d99ec251cc2597ddfc77562ebcb0c4107ed839e8d4e39cf048f7c3bf4d3af99d32b419f7e46cb70d23039bf965874be68923e7947fcc8f6182f620576221209a1781eb0e490d53831a01e5c3bb406b8004534c5f5c631a6a46a06bbd56c4d309f8e7f1de903dc9561cd23cb9a7ab63db127ab22adf1294aaab41e73bc067935901e66de985aafb506744c96d12af55e5961718a250ccde0db9dc94c5ab817448f193f922361f8d3043d4095ab1bb1126580c094f5f0356773fca30f963c2cf97c033c634a057d376140faeff8e19273749acc9322c94ec87d0f4b70615b76f8e2b256daa5c034382a1b93889081862c20dd2b956566321f69b192fc7f2bc135bdb2bd9575cfff340bfdddc21ce37647f7e34724286e5faf447e039e67fd64938a40151d9aedbb772a059b0ff3d2dd8c2b7f96df3b48f611758e28ad8812fee6708cc39e77bb55743db0df4cc08653c78182adc3a67db7e760d5f3741d6ee241576d0c55d5c40b5932769d80e2a687ec05c7f4c3f137ffdc5abe3e7039fd5a86990374ff0b00192088182e82b970c5bf0cfc054ca99aa225a69df5519a78fa31ca37ced124e84ded418aa9868a5ff95334ada067084fa98e5fdf353285836246154b0eef9ec625c855721a6cd0c649b6d2f72e600ebdbcfc207347a3d083033b03fb233946e9aca086456ef2bb02efff8e7953d833eb986c22afac7fd3753c19a7fd39e4d1f709e70272013b41614df4f1db326250b5588de369c7a8bf3842acf15c78a4d3881a6e092877665ef63e88dc97dd72d38612d5380abc72b9266cd325f05fe16ef0a01799e33adbff1d86d0980d2ed3f496495e5b7f41278c9498d1616db7ba860ffb87aee648df3f19bffa2edafb89940f930fd8beb2825492305b074757730accb8d20c847dd4d8beabc318c78cccfbc406314fea2da4b4cb8a67371bbce9dd7ec2d3c5b4ea21059130fa76fefdb4a7669ee25748468ef2d78088d1b3bb997ae4d51b5b739acfbd3bb1236db07dbcd0c810c07c73e5c6735a0be9d539d5c6caae62b3707d1a18cec5e16cac8575484604ca884e4f91c9bad2476f18be0b873a2cbe9c997335479b8487919a78922fd5175e8dd3b571a7677e6ac9f82e4e7c67cdfcb9ceee59b08a51bbc737bdff9b6e2250877d44a8d8c1d5ef113b2372833307be3cf0db834d043f529db04185b557910009d92cdfaa07c0533483459294a3e3da555c29416e1af2ec90b4b891e028e5af3ff5b274a0dc93ad4a3a33f886675f86bd1573bea665221e6bda9e2682bc00de3e603531f5e7d7a52c5fec65f478414833e22f36fe2b18930be9e4ef6367955623a9b938f79ff7e288678344c378b2bfd168e4c929357ab39640d677bcc17ac12fd999f3d4cd17b25a26e2bf78bcf9f898e89af6af47390908d5ea767f516cd4194165cea481c8f7ab946b66aa3083f21c02e7d61c19a4358c1cc92503c6e3bb1e7bdeb5badafdda9cec995830f5fadfb3fffe12426db1253db1268e4d3a24ca1d3d06822a439d8ccfb26af736751ac2d6dcec3763eba1c56d8a9f0bb66edb73e0dc9d5b56b23058fa9afa3667ac6188027bda68211b45b5451fb5a7e359fc61cdcf13d1f0965d9fddfd3d5d75684353a8687d18c3970b1c89e217b6cc1c7a34cec7c1e667dcd205346c2a8f85835c186811ab1121136ea83d297eb05a9ac1afa3b33346b392c3e9f479a19f7563531d0519f29868015ff20163530ce8d31bb298801b772dbb65d5caeda85982798a5ccdb4576ecc9378dadb21b3bfbb4cc33b3883164fbb6ac1a0401492c453fe2430a9de3b96d445b2c36e9a82200e00df7649544966c8f39a2d173fd8529ff8ac0f068216ae62f68c21485d6a5638f916cb5c27e5b4859c799b0a6786fd48fbacd83a9a472f50e024fa394537b33d3b4f9301266ea5e2462310ee2b862635d32d780d6411e4e6eb49d1e3732d1a0b8", 0xb99}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.754350735s ago: executing program 5 (id=2156):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="a6af891d142bbbe86c2b6c42ac9eefc3f3124a519189b105d77c5f5267121c170995cd3bb174096f3c", @ANYBLOB="a51b7d19e69bbcb11700c2dcb2d851f79d44e9bb8469d2a5dd66597db213ade6acfaffd88afce31be876c207fb5d362b6e91010b006a4279f2d4d02752a02b76b5413c5e7cd22d3cfad489bd1b84a85aa8ad47cc69d09522d51cf5cf88cf9da13593310d5e0d03a6e17940ddd391c7796ad75f4fa75bd62cb78c43c92e61de110508c5d605a2f981314c38526ac5aac6e4445e32d7cf128b440ca715e901f8b4299226dfd9bfec7a37f3bf63e1906fe520b65051ea9c14827e9cd737a6952d478ff3cb4436a913", @ANYRES8, @ANYRESOCT, @ANYRES64], 0x0, 0x1df, &(0x7f0000000380)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
chdir(0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80205b, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/104, 0x68)
getdents(r0, &(0x7f0000001fc0)=""/182, 0xb6)

3.637244808s ago: executing program 0 (id=2157):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x2}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x18}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x6c}, 0x1, 0xba01}, 0x810)
getsockopt$inet_int(r1, 0x10d, 0xbb, &(0x7f0000000000), &(0x7f0000000080)=0x4)
syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x7c, 0x96, 0x5c, 0x40, 0x2013, 0x251, 0xe86e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "839935191f"}]}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000340)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x1}], 0x0, 0x0, 0x0, 0x2, 0x2}})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000001c0))
ioctl$TUNSETLINK(r6, 0x400454cd, 0x325)

3.540210782s ago: executing program 4 (id=2158):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x4}}, 0x10)

3.370283317s ago: executing program 5 (id=2159):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x453, 0x100, 0x70bd28, 0x25dfdbfb, "61b81849f9e17049ab5f37c499ccf22013aa3d63c605bdfbad74200ad86719162498484677f7fe0ec3e72186fac6f3817dd33c80a896148d9da273f58e7fba33b4f035fc7a8fc8597341b95a11b548", ["", "", "", ""]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x880)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e}, 0x20)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="000010"], 0x0, 0x0, 0x0, 0x0}, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x16, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00', 0xa7, 0x0, 0x0, 0x0, 0x30}, 0x90)
socket(0x2, 0x3, 0x100000001)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r6}, 0x10)

3.244682658s ago: executing program 1 (id=2160):
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000280)={@local, @random="7e4173edf6b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty}, "c6a986aeb3bfab92"}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x0, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

2.830915991s ago: executing program 3 (id=2162):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x47, &(0x7f0000000040)=0x6, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10, 0x2}, 0x10)

2.713561101s ago: executing program 2 (id=2163):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\b'], 0x2c}}, 0x0)

2.500998467s ago: executing program 3 (id=2164):
ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000080)={0x6, 0x101, 0x7fffffff})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), &(0x7f00000001c0)=0x8)

2.479584782s ago: executing program 2 (id=2165):
open$dir(0x0, 0x40, 0x6)

2.313246328s ago: executing program 2 (id=2166):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pselect6(0xfffffffffffffe5e, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5043, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getrlimit(0x2, &(0x7f0000000040))
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x84, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x5)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@empty, @in6=@private1}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0x45)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
getsockopt$bt_hci(r6, 0x0, 0x1, &(0x7f0000000740)=""/242, &(0x7f0000000680)=0xf2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

1.21337376s ago: executing program 0 (id=2167):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000400)=[{0x4e2, 0x3, 0x7, 0x8007613}, {0x6, 0x2, 0x10, 0x2b52}, {0x825b, 0x81, 0x2, 0x634}, {0xc0e, 0x3f, 0x55, 0x1f}, {0x7fff, 0x0, 0x7, 0x2}]})
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89001)
fchdir(r0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000000440))
prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xfffffffb, 0x2, 0x10000, 0xf6})
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xd4a4})
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @private1}, 0x1c)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002030102000000000000000000000010080001000100000016c798a7a8be429f266aaa9fc26d5d401e00572f6bbf0e38b11b74fb052adbead0994c7e8c6a24cc5be3479fc2117ee54cc3b0a38ad3b7f90b31dfae64b66dd684f56214dcdc8185e581b1c33f5ad671e8ac18454066395c8eec06f484df86911de70a9410dc9f2a63839212062db703bd9a386bb2ca210a712924631d3923da233f43ce65cff9022548853c33ff260bfd4ca4580f8a1c80d4548497e4b492b934d2052345915c29838b78932aa8abe8c36f053711e5dc0b6a0812"], 0x1c}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x44, 0x9, 0x6, 0xffffff7f}, {0xc, 0x9, 0x0, 0x5}, {0x7, 0x0, 0xb}, {0x20, 0x0, 0xf2}, {0x6, 0x0, 0x5, 0x4000}]})
syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x800002)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10065, 0x0)
close_range(r4, 0xffffffffffffffff, 0x2)

1.193253129s ago: executing program 3 (id=2168):
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0)

1.118953868s ago: executing program 2 (id=2169):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab87100000e0a01020000000000000000030000063c0a0380100000800c00044000000000000000065402008044020b80100001800b0001007461726765740000440001800c0001007061796c6f61640034000280080003400000000308000240000000020800054000000004080006400000000108000340000000030800034000000097100001800a00010072616e6765000000140001800e000100696d6d656469617465000000100001800b0001006e756d67656e0000100001800b00010072656a6563740000a80101800a00010072616e"], 0x23e80}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000320, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000180)=@in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="ead395f02ac8652dca", 0x9}], 0x1}}], 0x2, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d72", 0x6, 0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
readv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c21000800", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)

973.63914ms ago: executing program 5 (id=2170):
unlink(0x0)
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)
r1 = open$dir(0x0, 0x0, 0x0)
linkat(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x10000000)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x10, 0x2}, 0x10)

874.984936ms ago: executing program 3 (id=2171):
socket$netlink(0x10, 0x3, 0x0)
r0 = io_uring_setup(0x17c7, &(0x7f00000002c0))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000002c0)="94", 0x1, 0x0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
dup3(r1, r2, 0x0)
sendmmsg$inet(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c7ad5f300d7561aa60619fc26a1bfe8fa4858b8b4282d0c9a86c8c2eed644303c1213114081f9cd2358f6609ed25113de321db6b3efbfea341c7318fdcf6776383d3329f080e2386a708679852ee2c28c2ab423163be97f818424b862486791ce5b8b25836a4f07079b65c7c3b2e797eee7f267e5cf37fb63bb89f6b15c332da46b2a313ff6cd958152701a73601c7d02b74622ba7ff9c2fccb1826a3238b95163edcf5dbb381c666fcd8f0ce22eb182135bd8a32c627e20354f2253edb77efadbb48d512ca030763df825c1dd71d34295dc2e75e0a3054354ca6674e2d16ae319c8f3bf7a7fe1e1e596cc2679444c2b5e84a5caaa40136a41a3a35e2ca053d8e4ff2134c2bd7dc2c5c7ef55579a7b569b5face778afba93a877b622f473d942fef36d909b7c17e2ba3948fc889f377f0bce583835ce70b86ee8c419f77c9fa9da33d5f3fd2f994c2229b59db0670a15d7ba9b8b3245c7c2f83953c046528db1d9626877752071b0389bb18edd4d3797b6846e8746911526b6cfb1da1a206f5d13f69d7a8a76f5dfaf02abdfde171ed51a80ca2146fe8a181df5f9c9e969c1e2113bb355a956dd0139446d7e5b1ae338513459753977c245177ed5ae398bb23ad503739c2d75b99d70af19a2faf0a6922585378c0c881298f5af7dc63f99b40be3aea8c25bb8f599ffc4d47caec400357f2fa0675c5a81141d6b1697a92f7ab1e465361bdec4bc837595cc257aac0bcd3333eef2199c622268f0aafdccf73b3fda6ddef6102aa03c1a07a85509025be45443e71d63e4a8b54cde98554b1dd9a2f431b62d29f0cf67e069c15988b8b78c6c66f7f1d831e6307473250bf66b88c1c326faa8f093f03824980bbddc34e2324754fdaafa45ea1a1cc4baaef3104108c8e7987696d3634aa61cd9af0f2b5e427eff51cc66792a37a6e09278c6457a92a84d2fd23f7a753120758e5ca80582848d537d2704315ee55374ca8204c427c8f1138c901a29f83c0b63fb00dca30a90aa0b81d09fad2bf556100a3f762dcafd44d89936f8d5e037bff746a3d7f769ef8045ca50b1f7e8b24b723f06b5582564133e8d6b9f78c0e0d19c6808b65aa19e0dbd18527e5cf4f1c2a7e9b9dcf996d781b0851b925a02a02a9ec2887fa049d10bf8e3cf99157df4f6708c9b3673e565ad47f3518d45c69e4c18f511a9973938279a0c607d4d5b010b83b7edf9dc91ac7b9dabcabf45f4abf863c87c9671b22421600e6358ab3798afeabb0021b587e125b4f599271228944365b1333e3a9f5cc7211fde35179bc2237a26d11b9ed5387644e34efbffb54c615c7e52efc06b425d43d85227f73d7d7a7435c4bf35c76be6e5daf24785f197710503a7cf3c6bde5d5f9ac3312f50af0bcd4e05313bf02e8737761c47957cdb07f1efe8468502e58e1ef9d02582fdfe2db9c1300d99d97b2b339b73a78ef91206a8f08a21988076987ca3b6e361bdd86fb74a9184789586a1815935d837fa7590ec4ae4aa838bcc5cc94c9193b4f3084f9854f21223bc2d8fb4cb4f888ebf6dc9daed2b5f36a964955daf5fac1e69e40952b09e3124491d9d6db5eb2529c0d0a6d7a9329a05a9d4d05a9fb55711786daca3519573d1a19c9200561e9e08d74190583fc4127d99ec251cc2597ddfc77562ebcb0c4107ed839e8d4e39cf048f7c3bf4d3af99d32b419f7e46cb70d23039bf965874be68923e7947fcc8f6182f620576221209a1781eb0e490d53831a01e5c3bb406b8004534c5f5c631a6a46a06bbd56c4d309f8e7f1de903dc9561cd23cb9a7ab63db127ab22adf1294aaab41e73bc067935901e66de985aafb506744c96d12af55e5961718a250ccde0db9dc94c5ab817448f193f922361f8d3043d4095ab1bb1126580c094f5f0356773fca30f963c2cf97c033c634a057d376140faeff8e19273749acc9322c94ec87d0f4b70615b76f8e2b256daa5c034382a1b93889081862c20dd2b956566321f69b192fc7f2bc135bdb2bd9575cfff340bfdddc21ce37647f7e34724286e5faf447e039e67fd64938a40151d9aedbb772a059b0ff3d2dd8c2b7f96df3b48f611758e28ad8812fee6708cc39e77bb55743db0df4cc08653c78182adc3a67db7e760d5f3741d6ee241576d0c55d5c40b5932769d80e2a687ec05c7f4c3f137ffdc5abe3e7039fd5a86990374ff0b00192088182e82b970c5bf0cfc054ca99aa225a69df5519a78fa31ca37ced124e84ded418aa9868a5ff95334ada067084fa98e5fdf353285836246154b0eef9ec625c855721a6cd0c649b6d2f72e600ebdbcfc207347a3d083033b03fb233946e9aca086456ef2bb02efff8e7953d833eb986c22afac7fd3753c19a7fd39e4d1f709e70272013b41614df4f1db326250b5588de369c7a8bf3842acf15c78a4d3881a6e092877665ef63e88dc97dd72d38612d5380abc72b9266cd325f05fe16ef0a01799e33adbff1d86d0980d2ed3f496495e5b7f41278c9498d1616db7ba860ffb87aee648df3f19bffa2edafb89940f930fd8beb2825492305b074757730accb8d20c847dd4d8beabc318c78cccfbc406314fea2da4b4cb8a67371bbce9dd7ec2d3c5b4ea21059130fa76fefdb4a7669ee25748468ef2d78088d1b3bb997ae4d51b5b739acfbd3bb1236db07dbcd0c810c07c73e5c6735a0be9d539d5c6caae62b3707d1a18cec5e16cac8575484604ca884e4f91c9bad2476f18be0b873a2cbe9c997335479b8487919a78922fd5175e8dd3b571a7677e6ac9f82e4e7c67cdfcb9ceee59b08a51bbc737bdff9b6e2250877d44a8d8c1d5ef113b2372833307be3cf0db834d043f529db04185b557910009d92cdfaa07c0533483459294a3e3da555c29416e1af2ec90b4b891e028e5af3ff5b274a0dc93ad4a3a33f886675f86bd1573bea665221e6bda9e2682bc00de3e603531f5e7d7a52c5fec65f478414833e22f36fe2b18930be9e4ef6367955623a9b938f79ff7e288678344c378b2bfd168e4c929357ab39640d677bcc17ac12fd999f3d4cd17b25a26e2bf78bcf9f898e89af6af47390908d5ea767f516cd4194165cea481c8f7ab946b66aa3083f21c02e7d61c19a4358c1cc92503c6e3bb1e7bdeb5badafdda9cec995830f5fadfb3fffe12426db1253db1268e4d3a24ca1d3d06822a439d8ccfb26af736751ac2d6dcec3763eba1c56d8a9f0bb66edb73e0dc9d5b56b23058fa9afa3667ac6188027bda68211b45b5451fb5a7e359fc61cdcf13d1f0965d9fddfd3d5d75684353a8687d18c3970b1c89e217b6cc1c7a34cec7c1e667dcd205346c2a8f85835c186811ab1121136ea83d297eb05a9ac1afa3b33346b392c3e9f479a19f7563531d0519f29868015ff20163530ce8d31bb298801b772dbb65d5caeda85982798a5ccdb4576ecc9378dadb21b3bfbb4cc33b3883164fbb6ac1a0401492c453fe2430a9de3b96d445b2c36e9a82200e00df7649544966c8f39a2d173fd8529ff8ac0f068216ae62f68c21485d6a5638f916cb5c27e5b4859c799b0a6786fd48fbacd83a9a472f50e024fa394537b33d3b4f9301266ea5e2462310ee2b862635d32d780d6411e4e6eb49d1e3732d1a0b8f0aef5bb7fd71cf9f861fad635e321fa146a630ac18d45c425214d79becc8cb97b8cac0ed0155daa9861c57ad549ae9d3cab7259a4b1eeaa72f7fb575f1dfd7268365e194e15518e176a32b82cc13544e75170bccf49161b67f649ebd1b81c85b128312b78e93750bbe9a2c456be9743859c8d80c4ec1dc4fd9d1a059042b058347b8bd02e65d469448953ac787b827fc95071d67ba047ac40ddd8a2503f62bf94457ea53073336cc284b2af1ef5598b0c0a0df3e2d729c43a7307dedb785240ab9cbe89075fb6b7ab8e6482b1ce31332e1bfa3f", 0xc6d}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

715.522643ms ago: executing program 2 (id=2172):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="a6af891d142bbbe86c2b6c42ac9eefc3f3124a519189b105d77c5f5267121c170995cd3bb174096f3c", @ANYBLOB="a51b7d19e69bbcb11700c2dcb2d851f79d44e9bb8469d2a5dd66597db213ade6acfaffd88afce31be876c207fb5d362b6e91010b006a4279f2d4d02752a02b76b5413c5e7cd22d3cfad489bd1b84a85aa8ad47cc69d09522d51cf5cf88cf9da13593310d5e0d03a6e17940ddd391c7796ad75f4fa75bd62cb78c43c92e61de110508c5d605a2f981314c38526ac5aac6e4445e32d7cf128b440ca715e901f8b4299226dfd9bfec7a37f3bf63e1906fe520b65051ea9c14827e9cd737a6952d478ff3cb4436a913", @ANYRES8, @ANYRESOCT, @ANYRES64], 0x0, 0x1df, &(0x7f0000000380)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
chdir(&(0x7f0000000000)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80205b, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(0x0, 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/104, 0x68)
getdents(r0, &(0x7f0000001fc0)=""/182, 0xb6)

570.163887ms ago: executing program 3 (id=2173):
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000180)=0x101, 0x4)
socket$inet6_sctp(0x1c, 0x1, 0x84)

513.69957ms ago: executing program 5 (id=2174):
socket$inet6_tcp(0x1c, 0x1, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000002700)={0x0, 0x10}, 0x8)

423.057298ms ago: executing program 2 (id=2175):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)={0x30, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x30}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe51}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r3}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000ea03010000000000000000000000000a1400000000"], 0x28}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6}]})
socket$inet6_sctp(0xa, 0x0, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = epoll_create1(0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0x6000001f})
read$char_usb(r7, &(0x7f0000000100)=""/169, 0xa9)
getdents64(r7, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0)
epoll_pwait(r6, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
recvmmsg(r8, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400022b0, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xfc}}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

40.146158ms ago: executing program 5 (id=2176):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12060, 0x1, {0x1}})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000640000000f000000b7000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10)
r1 = io_uring_setup(0x5751, &(0x7f0000000100))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x19, &(0x7f0000000300), 0x0)

1.205672ms ago: executing program 3 (id=2177):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 0 (id=2178):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x0, 0x28}}, 0x0)
sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x20000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000440)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

[ T9788] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  466.435948][ T9788] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  466.466781][ T9788] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  466.468946][T10507] loop5: detected capacity change from 0 to 164
[  466.484964][ T9788] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  466.493715][ T9788] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving
[  466.594476][ T9788] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  466.704772][ T9788] usb 4-1: USB disconnect, device number 14
[  466.953829][T10489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.965013][T10489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.980659][T10393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.005833][T10489] binder: BINDER_SET_CONTEXT_MGR already set
[  467.054632][T10489] binder: 10488:10489 ioctl 4018620d 200001c0 returned -16
[  467.344628][ T5290] usbhid 5-1:0.0: can't add hid device: -71
[  467.350682][ T5290] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  467.395167][ T5290] usb 5-1: USB disconnect, device number 12
[  467.448552][T10393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.565174][ T5229] Bluetooth: hci3: command tx timeout
[  467.749657][T10531] loop3: detected capacity change from 0 to 128
[  468.027321][T10540] input: syz0 as /devices/virtual/input/input16
[  468.259854][T10393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.664752][T10393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.270624][T10393] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  469.341287][T10393] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  469.377545][T10393] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  469.477020][T10393] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  469.567938][ T9753] kmmpd-loop4: attempt to access beyond end of device
[  469.567938][ T9753] loop4: rw=14337, sector=256, nr_sectors = 4 limit=11
[  469.637043][ T9753] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  469.644489][ T5229] Bluetooth: hci3: command tx timeout
[  469.925034][ T5290] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  469.958113][T10393] 8021q: adding VLAN 0 to HW filter on device bond0
[  470.038878][T10393] 8021q: adding VLAN 0 to HW filter on device team0
[  470.146598][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  470.146628][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.164714][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  470.184589][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  470.208412][ T5290] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  470.247421][ T5290] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  470.268009][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.275224][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  470.293093][ T5290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.320286][ T5290] usb 5-1: config 0 descriptor??
[  470.747305][ T2976] bridge_slave_1: left allmulticast mode
[  470.753044][ T2976] bridge_slave_1: left promiscuous mode
[  470.813752][ T2976] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.889749][ T5290] plantronics 0003:047F:FFFF.0016: unbalanced collection at end of report description
[  470.901960][ T2976] bridge_slave_0: left allmulticast mode
[  470.915179][ T2976] bridge_slave_0: left promiscuous mode
[  470.933904][ T5290] plantronics 0003:047F:FFFF.0016: parse failed
[  470.942712][ T2976] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.973128][ T5290] plantronics 0003:047F:FFFF.0016: probe with driver plantronics failed with error -22
[  471.103403][ T5289] usb 5-1: USB disconnect, device number 13
[  471.215756][ T9503] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  471.440080][T10569] loop5: detected capacity change from 0 to 32768
[  471.468616][ T9503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.489875][ T9503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  471.530847][ T9503] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  471.566631][ T9503] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  471.584238][T10569] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  471.613566][ T9503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.665261][ T9503] usb 4-1: config 0 descriptor??
[  471.685502][T10569] XFS (loop5): Ending clean mount
[  471.924752][T10062] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  471.932379][T10591] input: syz0 as /devices/virtual/input/input17
[  472.105588][ T9503] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[  472.164490][ T9503] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  472.189259][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  472.302592][T10578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.333278][T10578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.418651][ T2976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  472.437853][T10578] binder: BINDER_SET_CONTEXT_MGR already set
[  472.443947][T10578] binder: 10577:10578 ioctl 4018620d 200001c0 returned -16
[  472.499815][ T2976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  472.546625][ T2976] bond0 (unregistering): Released all slaves
[  472.647447][ T5289] usb 4-1: USB disconnect, device number 15
[  472.753391][T10603] pimreg: entered allmulticast mode
[  472.832378][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  472.861402][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  472.872501][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  472.883035][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  472.900404][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  472.915628][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  473.053950][   T58] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  473.084339][T10393] 8021q: adding VLAN 0 to HW filter on device batadv0
[  473.244885][   T58] usb 3-1: Using ep0 maxpacket: 8
[  473.262589][   T58] usb 3-1: config 0 has an invalid interface number: 255 but max is 12
[  473.292558][   T58] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13
[  473.318064][   T58] usb 3-1: config 0 has no interface number 0
[  473.324297][   T58] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  473.347683][   T58] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  473.431235][   T58] usb 3-1: config 0 interface 255 has no altsetting 0
[  473.456512][   T58] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  473.480656][   T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.515105][   T58] usb 3-1: Product: syz
[  473.519313][   T58] usb 3-1: Manufacturer: syz
[  473.535505][   T58] usb 3-1: SerialNumber: syz
[  473.562402][   T58] usb 3-1: config 0 descriptor??
[  473.601269][   T58] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  474.099179][ T2976] hsr_slave_0: left promiscuous mode
[  474.133560][ T2976] hsr_slave_1: left promiscuous mode
[  474.165458][ T2976] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  474.186132][ T2976] batman_adv: batadv0: Removing interface: batadv_slave_0
[  474.226578][ T2976] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  474.256499][ T2976] batman_adv: batadv0: Removing interface: batadv_slave_1
[  474.343080][ T2976] veth1_macvtap: left promiscuous mode
[  474.366375][ T2976] veth0_macvtap: left promiscuous mode
[  474.372158][ T2976] veth1_vlan: left promiscuous mode
[  474.384971][ T2976] veth0_vlan: left promiscuous mode
[  474.404481][ T9788] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  474.438244][   T58] gspca_zc3xx: reg_w_i err -71
[  474.607385][ T9753] kmmpd-loop4: attempt to access beyond end of device
[  474.607385][ T9753] loop4: rw=14337, sector=256, nr_sectors = 4 limit=11
[  474.620801][ T9788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.651699][ T9753] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  474.664427][ T9788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.674177][ T9788] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  474.734728][ T9788] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  474.743879][ T9788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.756365][T10617] loop3: detected capacity change from 0 to 32768
[  474.763610][T10617] XFS: ikeep mount option is deprecated.
[  474.805617][ T9788] usb 6-1: config 0 descriptor??
[  474.861625][T10617] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  475.004819][ T5229] Bluetooth: hci4: command tx timeout
[  475.026394][T10617] XFS (loop3): Ending clean mount
[  475.064509][   T58] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  475.070859][   T58] gspca_zc3xx 3-1:0.255: probe with driver gspca_zc3xx failed with error -71
[  475.107542][T10617] XFS (loop3): Quotacheck needed: Please wait.
[  475.144096][T10617] XFS (loop3): Quotacheck: Done.
[  475.216600][   T58] usb 3-1: USB disconnect, device number 13
[  475.362266][ T9788] plantronics 0003:047F:FFFF.0018: unbalanced collection at end of report description
[  475.394006][ T9788] plantronics 0003:047F:FFFF.0018: parse failed
[  475.416246][ T9788] plantronics 0003:047F:FFFF.0018: probe with driver plantronics failed with error -22
[  475.637790][ T5292] usb 6-1: USB disconnect, device number 13
[  475.769922][ T8795] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  476.514152][T10642] input: syz0 as /devices/virtual/input/input18
[  476.724165][ T2976] team0 (unregistering): Port device team_slave_1 removed
[  476.824575][   T58] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  476.902332][ T2976] team0 (unregistering): Port device team_slave_0 removed
[  477.049369][   T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.085761][ T5229] Bluetooth: hci4: command tx timeout
[  477.096946][   T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  477.134590][   T58] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  477.180818][   T58] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  477.224500][   T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.294258][   T58] usb 6-1: config 0 descriptor??
[  477.748768][   T58] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  477.763532][   T58] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving
[  477.790331][   T58] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  479.171679][ T5229] Bluetooth: hci4: command tx timeout
[  479.199657][T10393] veth0_vlan: entered promiscuous mode
[  479.292465][T10393] veth1_vlan: entered promiscuous mode
[  479.447634][T10393] veth0_macvtap: entered promiscuous mode
[  479.494678][T10609] chnl_net:caif_netlink_parms(): no params data found
[  479.648436][ T9753] kmmpd-loop4: attempt to access beyond end of device
[  479.648436][ T9753] loop4: rw=14337, sector=256, nr_sectors = 4 limit=11
[  479.662649][T10393] veth1_macvtap: entered promiscuous mode
[  479.723271][ T9753] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  479.842801][T10671] loop5: detected capacity change from 0 to 128
[  479.897183][  T938] usb 6-1: USB disconnect, device number 14
[  479.910487][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.108847][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.184531][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.238891][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.478597][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.724558][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.764423][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.824449][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.893411][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.944724][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.000378][T10393] batman_adv: batadv0: Interface activated: batadv_slave_0
[  481.018631][T10677] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1649'.
[  481.196659][T10679] input: syz0 as /devices/virtual/input/input19
[  481.245252][ T5229] Bluetooth: hci4: command tx timeout
[  481.372770][ T2976] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.404781][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1651'.
[  481.461149][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.491493][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.510648][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.524287][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.562185][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.592047][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.622343][   T29] audit: type=1326 audit(1723361614.379:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10680 comm="syz.2.1651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f158eb779f9 code=0x0
[  481.669162][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.686631][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.699126][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.710267][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.774323][T10393] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.783917][T10609] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.814235][T10609] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.839048][T10609] bridge_slave_0: entered allmulticast mode
[  481.882370][T10609] bridge_slave_0: entered promiscuous mode
[  482.121895][ T2976] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.267900][T10393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.314747][T10393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.323500][T10393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.364208][T10393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  482.397752][T10609] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.414701][T10609] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.422176][T10609] bridge_slave_1: entered allmulticast mode
[  482.454753][T10609] bridge_slave_1: entered promiscuous mode
[  482.617132][ T2976] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.766629][T10609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  482.875833][ T2976] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.965655][T10609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  483.264494][ T5292] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  483.282491][T10609] team0: Port device team_slave_0 added
[  483.297640][T10691] loop5: detected capacity change from 0 to 32768
[  483.316470][T10609] team0: Port device team_slave_1 added
[  483.375947][T10691] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  483.469299][ T5292] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  483.484520][ T5292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.500380][ T5292] usb 4-1: Product: syz
[  483.500920][T10691] XFS (loop5): Ending clean mount
[  483.505109][ T5292] usb 4-1: Manufacturer: syz
[  483.525937][ T5292] usb 4-1: SerialNumber: syz
[  483.540994][T10609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.555994][ T5292] usb 4-1: config 0 descriptor??
[  483.566044][T10609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.634456][T10609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.659458][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.704544][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.731919][T10062] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  483.767160][T10609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.817268][T10609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.860324][ T5292] usb 4-1: Firmware version (0.0) predates our first public release.
[  483.878827][ T5292] usb 4-1: Please update to version 0.2 or newer
[  483.915221][T10609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  484.260722][T10712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1661'.
[  484.353320][ T2517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  484.394598][ T2517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  484.422312][ T5292] usb 4-1: USB disconnect, device number 16
[  484.618408][T10609] hsr_slave_0: entered promiscuous mode
[  484.661627][T10609] hsr_slave_1: entered promiscuous mode
[  484.694593][ T9753] kmmpd-loop4: attempt to access beyond end of device
[  484.694593][ T9753] loop4: rw=14337, sector=256, nr_sectors = 4 limit=11
[  484.716172][T10609] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  484.723834][T10609] Cannot create hsr debugfs directory
[  484.758234][T10719] loop5: detected capacity change from 0 to 128
[  484.770780][ T9753] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  485.159092][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  485.177449][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  485.188556][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  485.209452][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  485.245898][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  485.262702][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  485.928954][ T2976] bridge_slave_1: left allmulticast mode
[  485.964556][ T2976] bridge_slave_1: left promiscuous mode
[  486.005549][ T2976] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.054574][T10736] loop0: detected capacity change from 0 to 2048
[  486.119764][T10736] EXT4-fs: Ignoring removed nomblk_io_submit option
[  486.143160][T10736] EXT4-fs: Ignoring removed nomblk_io_submit option
[  486.202802][ T2976] bridge_slave_0: left allmulticast mode
[  486.215767][ T2976] bridge_slave_0: left promiscuous mode
[  486.247281][ T2976] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.267705][T10736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.183417][T10615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.209927][ T9753] kmmpd-loop4: attempt to access beyond end of device
[  487.209927][ T9753] loop4: rw=14337, sector=256, nr_sectors = 4 limit=11
[  487.234026][ T9753] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  487.484992][ T5240] Bluetooth: hci2: command tx timeout
[  487.526690][   T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  487.632216][ T2976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  487.674423][ T2976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  487.705559][ T2976] bond0 (unregistering): Released all slaves
[  487.730085][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.749199][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.788847][   T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  487.838713][   T46] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  487.882557][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.915938][   T46] usb 3-1: config 0 descriptor??
[  488.079611][T10762] input: syz0 as /devices/virtual/input/input20
[  488.525259][T10748] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  488.574612][T10759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.585076][T10759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.705393][T10759] binder: BINDER_SET_CONTEXT_MGR already set
[  488.711453][T10759] binder: 10758:10759 ioctl 4018620d 200001c0 returned -16
[  488.792565][T10767] overlayfs: failed to resolve './file0/../file0': -2
[  488.884758][   T46] usbhid 3-1:0.0: can't add hid device: -71
[  488.890789][   T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  488.901577][ T2976] hsr_slave_0: left promiscuous mode
[  488.920791][ T2976] hsr_slave_1: left promiscuous mode
[  488.955825][   T46] usb 3-1: USB disconnect, device number 14
[  488.973358][ T2976] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  488.991223][ T2976] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.029562][ T2976] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.054623][ T2976] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.113887][ T2976] veth1_macvtap: left promiscuous mode
[  489.129735][ T2976] veth0_macvtap: left promiscuous mode
[  489.144709][ T2976] veth1_vlan: left promiscuous mode
[  489.165777][ T2976] veth0_vlan: left promiscuous mode
[  489.212754][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1675'.
[  489.336781][T10764] loop5: detected capacity change from 0 to 32768
[  489.487242][   T29] audit: type=1326 audit(1723361622.229:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.3.1675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33c4b779f9 code=0x0
[  489.564898][ T5240] Bluetooth: hci2: command tx timeout
[  489.778455][ T2976] pimreg (unregistering): left allmulticast mode
[  491.644693][ T5240] Bluetooth: hci2: command tx timeout
[  492.171468][ T2976] team0 (unregistering): Port device team_slave_1 removed
[  492.235681][ T5289] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  492.284611][ T2976] team0 (unregistering): Port device team_slave_0 removed
[  492.315096][T10793] input: syz0 as /devices/virtual/input/input21
[  492.425639][ T5289] usb 6-1: Using ep0 maxpacket: 16
[  492.433093][ T5289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  492.451672][ T5289] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  492.474102][ T5289] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  492.499811][ T5289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.531188][ T5289] usb 6-1: config 0 descriptor??
[  492.549107][ T5289] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  492.581203][T10797] overlayfs: failed to resolve './file1': -2
[  493.505900][ T5348] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  493.706921][ T5348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  493.724543][ T5240] Bluetooth: hci2: command tx timeout
[  493.730040][ T5348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  493.754965][ T5348] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  493.767986][ T5348] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  493.777136][ T5348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.814503][ T5348] usb 3-1: config 0 descriptor??
[  493.830657][T10820] loop3: detected capacity change from 0 to 2048
[  493.860140][T10820] EXT4-fs: Ignoring removed nomblk_io_submit option
[  493.866959][T10820] EXT4-fs: Ignoring removed nomblk_io_submit option
[  493.916063][T10820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.034548][T10825] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  494.118712][T10726] chnl_net:caif_netlink_parms(): no params data found
[  494.191553][ T5289] usb 6-1: USB disconnect, device number 15
[  494.352453][T10837] overlayfs: failed to resolve './file1': -2
[  494.356371][ T2976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.403175][T10835] input: syz0 as /devices/virtual/input/input22
[  494.440207][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  494.465836][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  494.559257][T10806] binder: BINDER_SET_CONTEXT_MGR already set
[  494.594591][T10806] binder: 10804:10806 ioctl 4018620d 200001c0 returned -16
[  494.812865][ T5348] usbhid 3-1:0.0: can't add hid device: -71
[  494.827587][ T2976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.838062][ T5348] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  494.861545][ T5348] usb 3-1: USB disconnect, device number 15
[  495.119600][ T2976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.231357][T10862] program syz.5.1703 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  495.428679][T10866] overlayfs: failed to resolve './file1': -2
[  495.553131][T10726] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.577714][T10726] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.604679][T10726] bridge_slave_0: entered allmulticast mode
[  495.616498][T10726] bridge_slave_0: entered promiscuous mode
[  495.640822][T10726] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.654581][T10726] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.679570][T10726] bridge_slave_1: entered allmulticast mode
[  495.690522][T10726] bridge_slave_1: entered promiscuous mode
[  495.694007][T10872] input: syz0 as /devices/virtual/input/input23
[  495.711006][T10609] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  495.725946][  T938] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  496.214844][  T938] usb 6-1: Using ep0 maxpacket: 16
[  496.407977][  T938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.440804][  T938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  496.461236][  T938] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  496.485523][  T938] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  496.502309][  T938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.551974][  T938] usb 6-1: config 0 descriptor??
[  497.046509][T10609] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  497.096396][T10609] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  497.140516][T10726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  497.193907][T10726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  497.213981][T10609] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  497.279594][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1712'.
[  497.293897][   T29] audit: type=1326 audit(1723361630.049:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.3.1711" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33c4b779f9 code=0x0
[  497.444883][  T938] usbhid 6-1:0.0: can't add hid device: -71
[  497.458536][  T938] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  497.510555][  T938] usb 6-1: USB disconnect, device number 16
[  497.546077][T10726] team0: Port device team_slave_0 added
[  497.623972][T10726] team0: Port device team_slave_1 added
[  497.791410][T10726] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.802482][T10726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.841456][T10726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.899788][ T2976] bridge_slave_1: left allmulticast mode
[  497.907879][ T2976] bridge_slave_1: left promiscuous mode
[  497.916103][ T2976] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.939686][ T2976] bridge_slave_0: left promiscuous mode
[  497.959424][ T2976] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.022614][T10881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  498.142979][T10894] fuse: Unknown parameter 'grou00000000000000000000'
[  499.016666][ T9788] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  499.090908][ T2976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  499.359052][ T2976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  499.482662][ T2976] bond0 (unregistering): Released all slaves
[  499.681316][T10726] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.699735][T10726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.748484][T10726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.903780][ T2976] tipc: Disabling bearer <udp:syz1>
[  499.924965][ T2976] tipc: Left network mode
[  500.010402][ T9788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.044633][ T9788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.057552][ T9788] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  500.071054][ T9788] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  500.100781][ T9788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.129499][ T9788] usb 3-1: config 0 descriptor??
[  500.184599][T10912] input: syz0 as /devices/virtual/input/input24
[  500.347760][T10726] hsr_slave_0: entered promiscuous mode
[  500.407942][T10726] hsr_slave_1: entered promiscuous mode
[  500.437706][T10726] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  500.445948][T10921] fuse: Unknown parameter 'grou00000000000000000000'
[  500.464093][T10726] Cannot create hsr debugfs directory
[  500.594656][  T938] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  500.771737][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1727'.
[  500.774926][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.800090][  T938] usb 4-1: Using ep0 maxpacket: 16
[  500.817977][  T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.834339][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.859961][  T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.884637][T10904] binder: BINDER_SET_CONTEXT_MGR already set
[  500.891948][  T938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  500.919126][T10904] binder: 10902:10904 ioctl 4018620d 200001c0 returned -16
[  500.940210][  T938] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  500.951820][  T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.985565][  T938] usb 4-1: config 0 descriptor??
[  501.059934][ T2976] hsr_slave_0: left promiscuous mode
[  501.074997][ T2976] hsr_slave_1: left promiscuous mode
[  501.088200][ T2976] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  501.097468][ T9788] usbhid 3-1:0.0: can't add hid device: -71
[  501.103575][ T9788] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  501.109250][ T2976] batman_adv: batadv0: Removing interface: batadv_slave_0
[  501.131189][ T9788] usb 3-1: USB disconnect, device number 16
[  501.176611][ T2976] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.196102][ T2976] batman_adv: batadv0: Removing interface: batadv_slave_1
[  501.253880][ T2976] veth1_macvtap: left promiscuous mode
[  501.262298][ T2976] veth0_macvtap: left promiscuous mode
[  501.278445][ T2976] veth1_vlan: left promiscuous mode
[  501.294059][ T2976] veth0_vlan: left promiscuous mode
[  501.422639][  T938] usbhid 4-1:0.0: can't add hid device: -71
[  501.437271][  T938] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  501.464854][  T938] usb 4-1: USB disconnect, device number 17
[  501.873390][ T2976] pimreg (unregistering): left allmulticast mode
[  503.595079][ T9788] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  503.907076][ T2976] team0 (unregistering): Port device team_slave_1 removed
[  504.059890][ T2976] team0 (unregistering): Port device team_slave_0 removed
[  504.339340][ T9788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  504.367404][ T9788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  504.408128][ T9788] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  504.441860][ T9788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  504.464480][ T9788] usb 4-1: SerialNumber: syz
[  504.722704][ T9788] usb 4-1: 0:2 : does not exist
[  504.736034][ T9788] usb 4-1: unit 5: unexpected type 0x03
[  504.792119][ T9788] usb 4-1: USB disconnect, device number 18
[  505.067091][ T8525] udevd[8525]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  505.516384][T10609] 8021q: adding VLAN 0 to HW filter on device bond0
[  505.636995][T10609] 8021q: adding VLAN 0 to HW filter on device team0
[  505.768946][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'.
[  505.835110][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.842356][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  505.864963][ T5289] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  505.976326][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.983516][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  506.094737][ T5289] usb 4-1: Using ep0 maxpacket: 16
[  506.106517][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  506.118084][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  506.128895][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  506.178853][ T5289] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  506.225306][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.271626][ T5289] usb 4-1: config 0 descriptor??
[  506.295217][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  506.301628][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  506.623016][T10726] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  506.805021][T10726] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  506.909711][ T5289] usbhid 4-1:0.0: can't add hid device: -71
[  506.915816][ T5289] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  506.926729][T10726] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  506.927027][ T5289] usb 4-1: USB disconnect, device number 19
[  507.539011][T10726] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  508.038485][   T29] audit: type=1107 audit(1723361640.799:110): pid=11059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>ג[f����H$��s�v�͘N#�P�Y�{n��I�߲����R��'
[  508.122401][T10609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  508.155300][ T5290] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  508.197097][T10726] 8021q: adding VLAN 0 to HW filter on device bond0
[  508.251867][T10726] 8021q: adding VLAN 0 to HW filter on device team0
[  508.290371][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.297623][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state
[  508.323939][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.331137][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.344740][ T5234] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  508.390392][ T5290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  508.427730][ T5290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  508.455304][ T5290] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  508.487507][T10609] veth0_vlan: entered promiscuous mode
[  508.509813][ T5290] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  508.545676][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.564811][ T5234] usb 6-1: Using ep0 maxpacket: 16
[  508.577402][T10609] veth1_vlan: entered promiscuous mode
[  508.584095][ T5234] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  508.603237][ T5290] usb 1-1: config 0 descriptor??
[  508.628853][ T5234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.670910][ T5234] usb 6-1: Product: syz
[  508.692858][ T5234] usb 6-1: Manufacturer: syz
[  508.710002][ T5234] usb 6-1: SerialNumber: syz
[  508.733024][ T5234] usb 6-1: config 0 descriptor??
[  508.751264][T10609] veth0_macvtap: entered promiscuous mode
[  508.753669][ T5234] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  508.789298][T10609] veth1_macvtap: entered promiscuous mode
[  508.888270][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  508.924868][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.954403][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  508.993829][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  509.031168][ T5290] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x4
[  509.038769][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  509.070382][ T5290] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0
[  509.077952][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  509.102756][ T5290] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0
[  509.107467][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  509.120884][ T5290] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0
[  509.120935][ T5290] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0
[  509.121898][ T5290] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving
[  509.174026][ T5290] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  509.448072][ T5234] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110
[  509.497762][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.966935][T10609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  511.049627][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.062953][   T58] usb 1-1: reset high-speed USB device number 10 using dummy_hcd
[  511.174484][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.208244][T11098] loop5: detected capacity change from 0 to 2364
[  511.247476][   T29] audit: type=1326 audit(1723361644.009:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11099 comm="syz.3.1765" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33c4b779f9 code=0x0
[  511.255074][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.284948][T11098] iso9660: Bad value for 'check'
[  511.333642][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.373987][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.395090][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.427848][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.457204][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.492168][T10609] batman_adv: batadv0: Interface activated: batadv_slave_1
[  511.549066][T10609] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  511.698414][T10609] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  511.714197][T10609] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  511.730689][T10609] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  511.914948][T11106] __vm_enough_memory: pid: 11106, comm: syz.0.1766, bytes: 549488386048 not enough memory for the allocation
[  511.974870][   T25] usb 1-1: USB disconnect, device number 10
[  512.000162][T11099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  512.099215][T11123] netlink: 'syz.2.1769': attribute type 1 has an invalid length.
[  512.333369][T11125] fuse: Unknown parameter 'group_id00000000000000000000'
[  512.350509][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.372407][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.428644][T10726] 8021q: adding VLAN 0 to HW filter on device batadv0
[  512.486336][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.540960][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.203818][ T5292] usb 6-1: USB disconnect, device number 17
[  514.952574][ T9503] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  515.517561][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1775'.
[  515.521948][   T58] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  515.588733][ T9503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  515.630793][   T29] audit: type=1326 audit(1723361648.389:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.5.1775" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67fef779f9 code=0x0
[  515.635166][ T9503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  515.655234][T10726] veth0_vlan: entered promiscuous mode
[  515.685368][ T9503] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  515.734760][ T9503] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  515.773653][ T9503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.779408][T10726] veth1_vlan: entered promiscuous mode
[  515.803613][ T9503] usb 1-1: config 0 descriptor??
[  515.840336][   T58] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  515.859240][   T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.900318][T11163] fuse: Unknown parameter 'group_id00000000000000000000'
[  515.915413][   T58] usb 2-1: Product: syz
[  515.925562][   T58] usb 2-1: Manufacturer: syz
[  515.956236][   T58] usb 2-1: SerialNumber: syz
[  515.957029][T10726] veth0_macvtap: entered promiscuous mode
[  516.006547][T10726] veth1_macvtap: entered promiscuous mode
[  516.007952][   T58] usb 2-1: config 0 descriptor??
[  516.082358][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.150559][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.174418][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.203479][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.235604][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.259739][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.279893][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.317161][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.339816][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  516.371823][ T9503] plantronics 0003:047F:FFFF.001B: unbalanced collection at end of report description
[  516.382994][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.400350][   T29] audit: type=1326 audit(1723361649.159:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.2.1784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f158eb779f9 code=0x0
[  516.427396][T10726] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.439452][ T9503] plantronics 0003:047F:FFFF.001B: parse failed
[  516.452942][ T9503] plantronics 0003:047F:FFFF.001B: probe with driver plantronics failed with error -22
[  516.480998][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.619921][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.668133][   T58] usb 2-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (1)
[  516.704406][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.770223][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.831128][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.860519][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.901550][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.013816][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.088905][T11170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  517.179619][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.346159][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.405608][T10726] batman_adv: batadv0: Interface activated: batadv_slave_1
[  517.471525][T10726] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  517.514478][T10726] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  517.548814][T10726] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  517.583281][T10726] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  517.793360][ T9788] usb 1-1: USB disconnect, device number 11
[  517.806839][   T58] usb 2-1: failed to fetch extended address, random address set
[  517.941048][T11193] loop5: detected capacity change from 0 to 8
[  518.017048][   T58] usb 2-1: USB disconnect, device number 9
[  518.306776][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.354444][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.471727][ T9788] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  518.493502][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.503342][T11203] program syz.0.1794 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  518.553057][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.666938][ T9788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.731096][ T9788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  518.791816][ T9788] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  518.835507][ T9788] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  518.887931][ T9788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.936270][ T9788] usb 3-1: config 0 descriptor??
[  520.346458][ T9788] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving
[  520.362178][ T9788] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  520.949577][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  521.045230][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  521.062857][T11231] loop4: detected capacity change from 0 to 8
[  521.177699][T11199] binder: BINDER_SET_CONTEXT_MGR already set
[  521.267279][T11199] binder: 11198:11199 ioctl 4018620d 200001c0 returned -16
[  521.409193][ T9788] usb 3-1: USB disconnect, device number 17
[  521.789900][T11246] program syz.3.1810 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  521.810498][T11242] block device autoloading is deprecated and will be removed.
[  522.163832][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'.
[  523.220560][   T29] audit: type=1326 audit(1723361655.979:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11218 comm="syz.0.1800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12f47779f9 code=0x0
[  523.441533][T11266] pimreg: entered allmulticast mode
[  523.734521][   T58] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  524.747442][T11288] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1825'.
[  524.776533][   T58] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  524.794403][   T58] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  524.846142][   T58] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  524.865304][   T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  524.873462][   T58] usb 6-1: SerialNumber: syz
[  524.958929][T11293] program syz.2.1829 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  525.004709][ T5289] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  525.262913][    C1] hrtimer: interrupt took 140171 ns
[  525.852243][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  525.878852][   T58] usb 6-1: 0:2 : does not exist
[  525.883797][   T58] usb 6-1: unit 5 not found!
[  525.941158][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  525.974623][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  526.005000][   T58] usb 6-1: USB disconnect, device number 18
[  526.033862][ T5289] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  526.051360][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.107489][ T5289] usb 2-1: config 0 descriptor??
[  526.145577][T11280] loop4: detected capacity change from 0 to 32768
[  526.153150][T11280] XFS: ikeep mount option is deprecated.
[  526.209424][T11280] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  526.288763][ T8525] udevd[8525]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  526.554025][ T5289] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving
[  526.912066][   T29] audit: type=1326 audit(1723361659.639:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.0.1837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12f47779f9 code=0x0
[  528.042437][T11280] XFS (loop4): Ending clean mount
[  528.070252][ T5289] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  528.290836][T11280] XFS (loop4): Quotacheck needed: Please wait.
[  528.388783][ T5289] usb 2-1: USB disconnect, device number 10
[  528.640250][T11280] XFS (loop4): Quotacheck: Done.
[  528.807194][T10726] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  528.852382][T11341] netlink: 'syz.1.1844': attribute type 4 has an invalid length.
[  528.918159][   T29] audit: type=1326 audit(1723361661.669:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11337 comm="syz.5.1843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67fef779f9 code=0x0
[  528.949963][ T9503] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  529.164539][ T9503] usb 4-1: Using ep0 maxpacket: 8
[  529.178568][ T9503] usb 4-1: config 0 has an invalid interface number: 255 but max is 12
[  529.207994][ T9503] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  529.244488][ T9503] usb 4-1: config 0 has no interface number 0
[  529.274075][ T9503] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  529.323011][ T9503] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  529.428649][ T9503] usb 4-1: config 0 interface 255 has no altsetting 0
[  529.447559][ T9503] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  529.462641][ T9503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.492210][ T9503] usb 4-1: Product: syz
[  529.499160][ T9503] usb 4-1: Manufacturer: syz
[  529.513969][ T9503] usb 4-1: SerialNumber: syz
[  529.530201][ T9503] usb 4-1: config 0 descriptor??
[  529.558220][ T9503] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  529.717258][T11337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  529.735005][ T5348] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  530.177398][ T5348] usb 1-1: Using ep0 maxpacket: 16
[  530.203470][ T5348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  530.244105][ T5348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  530.264903][ T5348] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  530.303708][ T5348] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  530.355625][ T5348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.433887][ T5348] usb 1-1: config 0 descriptor??
[  530.894447][ T9503] gspca_zc3xx: reg_w_i err -71
[  531.019000][   T29] audit: type=1804 audit(1723361663.779:117): pid=11382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1860" name="/newroot/208/bus/bus" dev="overlay" ino=1154 res=1 errno=0
[  531.063452][T11382] evm: overlay not supported
[  531.084927][ T5348] usbhid 1-1:0.0: can't add hid device: -71
[  531.097195][T11382] Invalid ELF header magic: != ELF
[  531.114079][ T5348] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  531.152087][ T5348] usb 1-1: USB disconnect, device number 12
[  531.431520][T11392] loop4: detected capacity change from 0 to 1024
[  531.544447][ T9503] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  531.550940][ T9503] gspca_zc3xx 4-1:0.255: probe with driver gspca_zc3xx failed with error -71
[  531.594083][ T9503] usb 4-1: USB disconnect, device number 20
[  531.628347][T11376] loop5: detected capacity change from 0 to 32768
[  531.635931][T11376] XFS: ikeep mount option is deprecated.
[  531.680827][T11376] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  531.784666][ T5289] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  531.956509][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1869'.
[  532.012419][ T5289] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  532.028625][   T29] audit: type=1326 audit(1723361664.789:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.0.1869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12f47779f9 code=0x0
[  532.050219][ T5289] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  532.083768][T11376] XFS (loop5): Ending clean mount
[  532.124316][ T5289] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  532.142794][T11376] XFS (loop5): Quotacheck needed: Please wait.
[  532.152682][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  532.179013][ T5289] usb 3-1: SerialNumber: syz
[  532.239142][T11376] XFS (loop5): Quotacheck: Done.
[  532.418099][ T5289] usb 3-1: 0:2 : does not exist
[  532.439353][ T5289] usb 3-1: unit 5 not found!
[  532.481338][ T5289] usb 3-1: USB disconnect, device number 18
[  532.484529][ T5290] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  532.591316][T10062] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  532.724957][ T8525] udevd[8525]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  532.759203][ T5290] usb 5-1: Using ep0 maxpacket: 8
[  532.794843][ T5290] usb 5-1: config 0 has an invalid interface number: 255 but max is 12
[  532.819554][ T5290] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13
[  532.846050][ T5290] usb 5-1: config 0 has no interface number 0
[  532.858801][ T5290] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  532.892843][ T5290] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  532.939391][ T5290] usb 5-1: config 0 interface 255 has no altsetting 0
[  532.949402][ T5290] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  532.961727][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.994487][ T5290] usb 5-1: Product: syz
[  532.998670][ T5290] usb 5-1: Manufacturer: syz
[  533.003280][ T5290] usb 5-1: SerialNumber: syz
[  533.043916][ T5290] usb 5-1: config 0 descriptor??
[  533.054515][ T5289] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  533.234108][T11436] loop5: detected capacity change from 0 to 8
[  533.276001][T11436] overlayfs: missing 'lowerdir'
[  533.286493][ T5289] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  533.309307][ T5289] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  533.325839][ T5290] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  533.340769][ T5289] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  533.369726][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.396385][ T5289] usb 1-1: Product: syz
[  533.414475][ T5289] usb 1-1: Manufacturer: syz
[  533.423182][ T5289] usb 1-1: SerialNumber: syz
[  533.678683][ T5289] usb 1-1: 0:2 : does not exist
[  533.722639][ T5290] gspca_zc3xx: reg_w_i err -71
[  533.729080][  T938] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  533.763226][T11446] loop5: detected capacity change from 0 to 2048
[  533.764465][ T5289] usb 1-1: USB disconnect, device number 13
[  533.914516][  T938] usb 4-1: Using ep0 maxpacket: 16
[  533.994109][T11446] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  534.134804][  T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.310629][T11446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  534.340817][  T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  534.354783][ T5290] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  534.392173][ T5290] gspca_zc3xx 5-1:0.255: probe with driver gspca_zc3xx failed with error -71
[  534.424470][  T938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  534.514734][ T5290] usb 5-1: USB disconnect, device number 14
[  534.576170][  T938] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  534.618249][ T5750] udevd[5750]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  534.674610][  T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.749207][T10062] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh
[  534.776324][  T938] usb 4-1: config 0 descriptor??
[  534.801771][T10062] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh
[  534.919705][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1889'.
[  535.082158][   T29] audit: type=1326 audit(1723361667.839:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.2.1889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f158eb779f9 code=0x0
[  535.284668][ T5289] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  535.420758][  T938] usbhid 4-1:0.0: can't add hid device: -71
[  535.442660][  T938] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  535.477268][ T1066] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.485223][  T938] usb 4-1: USB disconnect, device number 21
[  535.516386][ T5289] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  535.546468][ T5289] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  535.591287][ T5289] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  535.624594][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  535.650136][ T5289] usb 2-1: SerialNumber: syz
[  535.791584][ T1066] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.936021][ T5289] usb 2-1: 0:2 : does not exist
[  535.944939][ T5289] usb 2-1: unit 5 not found!
[  535.960801][ T1066] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.982841][ T5289] usb 2-1: USB disconnect, device number 11
[  536.133342][T11471] overlayfs: missing 'lowerdir'
[  536.163605][ T1066] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.308721][ T8525] udevd[8525]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  536.836594][ T1066] bridge_slave_1: left allmulticast mode
[  536.842288][ T1066] bridge_slave_1: left promiscuous mode
[  536.964596][  T938] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  537.271450][ T1066] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.364849][  T938] usb 4-1: Using ep0 maxpacket: 8
[  537.406359][  T938] usb 4-1: config 0 has an invalid interface number: 255 but max is 12
[  537.470149][  T938] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  537.565466][ T1066] bridge_slave_0: left allmulticast mode
[  537.571129][ T1066] bridge_slave_0: left promiscuous mode
[  537.583637][  T938] usb 4-1: config 0 has no interface number 0
[  537.630454][  T938] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  537.682577][ T1066] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.714529][  T938] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  537.771900][  T938] usb 4-1: config 0 interface 255 has no altsetting 0
[  537.809044][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  537.817619][  T938] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  537.822794][T11498] Bluetooth: MGMT ver 1.23
[  537.834970][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  537.842577][  T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.842939][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  537.868146][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  537.881040][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  537.891784][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  537.943386][  T938] usb 4-1: Product: syz
[  537.982464][T11506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1909'.
[  538.004031][  T938] usb 4-1: Manufacturer: syz
[  538.023888][  T938] usb 4-1: SerialNumber: syz
[  538.048882][  T938] usb 4-1: config 0 descriptor??
[  538.098194][ T5348] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  538.166583][   T29] audit: type=1326 audit(1723361670.929:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.2.1909" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f158eb779f9 code=0x0
[  538.315028][ T5348] usb 2-1: Using ep0 maxpacket: 16
[  538.343122][ T5348] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  538.371467][  T938] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  538.383207][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.426323][ T5348] usb 2-1: Product: syz
[  538.453600][ T5348] usb 2-1: Manufacturer: syz
[  538.473410][ T5348] usb 2-1: SerialNumber: syz
[  538.522389][ T5348] usb 2-1: config 0 descriptor??
[  538.570688][ T5348] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  538.617572][  T938] gspca_zc3xx: reg_w_i err -71
[  538.817636][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  538.873653][T11523] overlayfs: missing 'lowerdir'
[  538.979649][ T5348] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71
[  539.005832][ T5348] usb 2-1: USB disconnect, device number 12
[  539.016723][    T9] usb 5-1: Using ep0 maxpacket: 16
[  539.030897][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  539.051338][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  539.071754][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  539.110156][    T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  539.125166][ T1066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  539.141263][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.161365][    T9] usb 5-1: config 0 descriptor??
[  539.167236][ T1066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  539.198574][ T1066] bond0 (unregistering): Released all slaves
[  539.245074][  T938] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  539.251513][  T938] gspca_zc3xx 4-1:0.255: probe with driver gspca_zc3xx failed with error -71
[  539.316961][  T938] usb 4-1: USB disconnect, device number 22
[  539.809249][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  539.827821][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  539.864494][ T5348] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  539.926845][    T9] usb 5-1: USB disconnect, device number 15
[  539.966361][ T5240] Bluetooth: hci0: command tx timeout
[  540.096575][ T5348] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  540.120731][ T5348] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  540.147991][ T5348] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  540.184495][ T5348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  540.202839][ T5348] usb 1-1: SerialNumber: syz
[  540.306065][ T1066] hsr_slave_0: left promiscuous mode
[  540.505083][ T5348] usb 1-1: 0:2 : does not exist
[  540.510034][ T5348] usb 1-1: unit 5 not found!
[  540.543281][ T1066] hsr_slave_1: left promiscuous mode
[  540.617385][ T1066] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  540.623507][T11563] fuse: Invalid rootmode
[  540.650359][ T5348] usb 1-1: USB disconnect, device number 14
[  540.674140][ T1066] batman_adv: batadv0: Removing interface: batadv_slave_0
[  540.735071][ T1066] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.742480][ T1066] batman_adv: batadv0: Removing interface: batadv_slave_1
[  540.912097][ T1066] veth1_macvtap: left promiscuous mode
[  540.930268][ T1066] veth0_macvtap: left promiscuous mode
[  540.939414][T11572] overlayfs: missing 'lowerdir'
[  540.948661][ T8525] udevd[8525]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  540.965730][ T1066] veth1_vlan: left promiscuous mode
[  540.985307][ T1066] veth0_vlan: left promiscuous mode
[  541.557629][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1929'.
[  541.671600][   T29] audit: type=1326 audit(1723361674.419:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11579 comm="syz.2.1927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f158eb779f9 code=0x0
[  542.052562][ T5240] Bluetooth: hci0: command tx timeout
[  542.541308][   T29] audit: type=1326 audit(1723361675.299:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.0.1929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12f47779f9 code=0x0
[  542.754741][   T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  542.932834][   T29] audit: type=1804 audit(1723361675.689:123): pid=11597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1931" name="/newroot/135/bus/bus" dev="overlay" ino=738 res=1 errno=0
[  542.984430][   T25] usb 5-1: Using ep0 maxpacket: 8
[  542.991616][   T25] usb 5-1: config 0 has an invalid interface number: 255 but max is 12
[  543.004689][   T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13
[  543.020373][   T25] usb 5-1: config 0 has no interface number 0
[  543.030129][   T25] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  543.048381][   T25] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  543.064209][   T25] usb 5-1: config 0 interface 255 has no altsetting 0
[  543.084891][   T25] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  543.094296][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.102820][   T25] usb 5-1: Product: syz
[  543.107473][   T25] usb 5-1: Manufacturer: syz
[  543.114686][   T25] usb 5-1: SerialNumber: syz
[  543.145806][   T25] usb 5-1: config 0 descriptor??
[  543.347907][ T1066] team0 (unregistering): Port device team_slave_1 removed
[  543.386544][   T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  543.412234][ T1066] team0 (unregistering): Port device team_slave_0 removed
[  543.611889][   T25] gspca_zc3xx: reg_w_i err -71
[  543.908585][   T58] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  544.009370][T11588] pimreg: entered allmulticast mode
[  544.124522][ T5240] Bluetooth: hci0: command tx timeout
[  544.200485][T11615] fuse: Invalid rootmode
[  544.228267][   T58] usb 4-1: Using ep0 maxpacket: 16
[  544.240558][   T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  544.264530][   T25] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  544.279841][   T25] gspca_zc3xx 5-1:0.255: probe with driver gspca_zc3xx failed with error -71
[  544.299626][   T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  544.340390][   T25] usb 5-1: USB disconnect, device number 16
[  544.356722][   T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  544.571509][   T58] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  544.584472][   T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.595702][   T58] usb 4-1: config 0 descriptor??
[  546.204535][ T5240] Bluetooth: hci0: command tx timeout
[  546.807601][T11621] loop4: detected capacity change from 0 to 8
[  546.918047][T11621] overlayfs: missing 'lowerdir'
[  547.072959][   T58] usbhid 4-1:0.0: can't add hid device: -71
[  547.092863][T11626] loop1: detected capacity change from 0 to 2048
[  547.101140][   T58] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  547.164923][   T58] usb 4-1: USB disconnect, device number 23
[  547.178772][T11626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  547.252521][   T29] audit: type=1804 audit(1723361680.009:124): pid=11636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1943" name="/newroot/29/bus/bus" dev="overlay" ino=182 res=1 errno=0
[  547.353614][T11495] chnl_net:caif_netlink_parms(): no params data found
[  547.445261][T10609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.762571][T11632] Invalid ELF header magic: != ELF
[  548.330150][   T29] audit: type=1326 audit(1723361680.999:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11645 comm="syz.1.1947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8a35779f9 code=0x0
[  548.389527][T11655] program syz.3.1948 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  548.671865][T11658] pimreg: entered allmulticast mode
[  548.689088][T11495] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.724998][    T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  548.754090][T11495] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.786778][T11495] bridge_slave_0: entered allmulticast mode
[  548.833160][T11495] bridge_slave_0: entered promiscuous mode
[  548.875974][T11495] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.913453][T11495] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.946092][T11495] bridge_slave_1: entered allmulticast mode
[  548.964723][    T9] usb 5-1: Using ep0 maxpacket: 8
[  548.998683][    T9] usb 5-1: config 0 has an invalid interface number: 255 but max is 12
[  549.016115][T11495] bridge_slave_1: entered promiscuous mode
[  549.040252][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13
[  549.108260][    T9] usb 5-1: config 0 has no interface number 0
[  550.369037][    T9] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  550.467345][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1952'.
[  550.507165][    T9] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  550.558669][    T9] usb 5-1: config 0 interface 255 has no altsetting 0
[  550.597254][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  550.612063][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.620202][    T9] usb 5-1: Product: syz
[  550.631678][    T9] usb 5-1: Manufacturer: syz
[  550.661021][    T9] usb 5-1: SerialNumber: syz
[  550.665762][T11495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.669779][T11495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.721519][   T29] audit: type=1326 audit(1723361683.469:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.1952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f158eb779f9 code=0x0
[  550.768656][    T9] usb 5-1: config 0 descriptor??
[  550.799584][T11684] overlayfs: missing 'lowerdir'
[  551.018166][    T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  551.082821][T11495] team0: Port device team_slave_0 added
[  551.149732][T11495] team0: Port device team_slave_1 added
[  551.168609][T11693] fuse: Bad value for 'rootmode'
[  551.248290][    T9] gspca_zc3xx: reg_w_i err -71
[  551.373983][T11495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  551.389597][T11495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.394601][  T938] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  551.421916][T11495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.453253][T11495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.463223][T11495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.491824][T11495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.654534][ T9503] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  551.667687][T11495] hsr_slave_0: entered promiscuous mode
[  551.675087][T11495] hsr_slave_1: entered promiscuous mode
[  551.718792][  T938] usb 4-1: Using ep0 maxpacket: 8
[  551.851517][ T9503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.922267][ T9503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  551.983982][ T9503] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  551.990948][  T938] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  552.014442][    T9] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  552.024093][    T9] gspca_zc3xx 5-1:0.255: probe with driver gspca_zc3xx failed with error -71
[  552.041202][  T938] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  552.050779][  T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.065034][    T9] usb 5-1: USB disconnect, device number 17
[  552.081719][  T938] usb 4-1: Product: syz
[  552.164762][   T29] audit: type=1326 audit(1723361684.889:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.2.1964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f158eb779f9 code=0x0
[  552.190061][  T938] usb 4-1: Manufacturer: syz
[  552.394094][  T938] usb 4-1: SerialNumber: syz
[  552.576765][  T938] usb 4-1: config 0 descriptor??
[  552.628425][  T938] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  552.833657][ T9503] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  552.843856][ T9503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.862569][ T9503] usb 1-1: config 0 descriptor??
[  553.398704][T11736] overlayfs: failed to resolve './file0/../file0': -2
[  553.469247][ T9503] plantronics 0003:047F:FFFF.001E: unbalanced collection at end of report description
[  553.529310][ T9503] plantronics 0003:047F:FFFF.001E: parse failed
[  553.529431][ T9503] plantronics 0003:047F:FFFF.001E: probe with driver plantronics failed with error -22
[  553.697677][ T9503] usb 1-1: USB disconnect, device number 15
[  553.734956][  T938] gspca_zc3xx: reg_w_i err -71
[  554.084545][T11495] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  554.104064][T11495] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  554.136104][T11495] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  554.158610][T11495] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  554.354758][  T938] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  554.362685][T11752] fuse: Bad value for 'rootmode'
[  554.381214][  T938] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  554.454577][  T938] usb 4-1: USB disconnect, device number 24
[  554.547372][T11495] 8021q: adding VLAN 0 to HW filter on device bond0
[  554.688162][T11495] 8021q: adding VLAN 0 to HW filter on device team0
[  554.764139][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.771346][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  554.837500][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.844720][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  555.044536][ T5348] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  555.084582][  T938] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  555.247373][ T5348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  555.268942][ T5348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  555.286709][  T938] usb 1-1: Using ep0 maxpacket: 8
[  555.311037][  T938] usb 1-1: config 0 has an invalid interface number: 255 but max is 12
[  555.324970][ T5348] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  555.344474][  T938] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[  555.367978][  T938] usb 1-1: config 0 has no interface number 0
[  555.374297][ T5348] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  555.383622][ T5348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.392703][  T938] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  555.417994][  T938] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  555.463645][ T5348] usb 4-1: config 0 descriptor??
[  555.475573][  T938] usb 1-1: config 0 interface 255 has no altsetting 0
[  555.508911][  T938] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  555.529057][  T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.539081][  T938] usb 1-1: Product: syz
[  555.544031][  T938] usb 1-1: Manufacturer: syz
[  555.549441][  T938] usb 1-1: SerialNumber: syz
[  555.575266][  T938] usb 1-1: config 0 descriptor??
[  555.635325][T11495] 8021q: adding VLAN 0 to HW filter on device batadv0
[  555.816429][  T938] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  555.918778][ T5348] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving
[  555.968197][ T5348] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  556.033032][  T938] gspca_zc3xx: reg_w_i err -71
[  556.130734][T11768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.144987][T11768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.242889][T11768] binder: BINDER_SET_CONTEXT_MGR already set
[  556.252006][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1982'.
[  556.274657][T11768] binder: 11767:11768 ioctl 4018620d 200001c0 returned -16
[  556.413273][   T29] audit: type=1326 audit(1723361689.169:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.1.1982" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8a35779f9 code=0x0
[  556.532813][ T5289] usb 4-1: USB disconnect, device number 25
[  556.664178][T11495] veth0_vlan: entered promiscuous mode
[  556.677618][  T938] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  556.699795][  T938] gspca_zc3xx 1-1:0.255: probe with driver gspca_zc3xx failed with error -71
[  556.995335][  T938] usb 1-1: USB disconnect, device number 16
[  557.367553][T11495] veth1_vlan: entered promiscuous mode
[  557.718732][T11495] veth0_macvtap: entered promiscuous mode
[  557.752802][T11824] Invalid ELF header magic: != ELF
[  557.766851][T11495] veth1_macvtap: entered promiscuous mode
[  557.822635][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.882684][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.911404][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.922490][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.960875][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.975384][ T5289] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  557.991032][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.020570][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.044108][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.073181][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.093964][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.128531][T11495] batman_adv: batadv0: Interface activated: batadv_slave_0
[  558.186582][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  558.199331][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  558.200642][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.219197][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  558.256748][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.274035][ T5289] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  558.294447][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.312113][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.324587][ T5289] usb 4-1: config 0 descriptor??
[  558.352888][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.373243][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.384452][  T938] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  558.403907][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.416098][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.427396][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.437701][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.455594][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.483070][T11495] batman_adv: batadv0: Interface activated: batadv_slave_1
[  558.514407][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1991'.
[  558.542262][T11495] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  558.561059][T11495] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  558.590062][  T938] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  558.609457][T11495] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  558.620792][  T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.634725][T11495] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  558.646365][  T938] usb 2-1: Product: syz
[  558.650539][  T938] usb 2-1: Manufacturer: syz
[  558.686316][  T938] usb 2-1: SerialNumber: syz
[  558.722160][  T938] usb 2-1: config 0 descriptor??
[  558.839540][ T5289] plantronics 0003:047F:FFFF.0020: unbalanced collection at end of report description
[  558.898242][ T5289] plantronics 0003:047F:FFFF.0020: parse failed
[  558.923504][ T5289] plantronics 0003:047F:FFFF.0020: probe with driver plantronics failed with error -22
[  558.938112][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.968757][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.052537][ T5289] usb 4-1: USB disconnect, device number 26
[  559.061944][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.102220][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.128442][ T5292] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  559.189539][  T938] usb 2-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0)
[  559.354498][ T5292] usb 1-1: Using ep0 maxpacket: 8
[  559.383637][ T5292] usb 1-1: config 0 has an invalid interface number: 255 but max is 12
[  559.401652][ T5292] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[  559.412334][ T5292] usb 1-1: config 0 has no interface number 0
[  559.420575][ T5292] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  559.439514][  T938] usb 2-1: failed to fetch extended address, random address set
[  559.657091][ T5292] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  559.673177][ T5292] usb 1-1: config 0 interface 255 has no altsetting 0
[  559.886778][ T5292] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  559.938922][ T5292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.073259][  T938] usb 2-1: USB disconnect, device number 13
[  560.118246][ T5292] usb 1-1: Product: syz
[  560.305270][ T5292] usb 1-1: Manufacturer: syz
[  560.309908][ T5292] usb 1-1: SerialNumber: syz
[  560.495616][ T5292] usb 1-1: config 0 descriptor??
[  560.846228][ T5292] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  560.882898][ T5292] gspca_zc3xx: reg_w_i err -71
[  562.326480][ T5292] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  562.332807][ T5292] gspca_zc3xx 1-1:0.255: probe with driver gspca_zc3xx failed with error -71
[  562.370544][ T5292] usb 1-1: USB disconnect, device number 17
[  562.665986][T11896] program syz.0.1999 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  562.823861][T11898] fuse: Unknown parameter 'use00000000000000000000'
[  563.325633][T11915] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2006'.
[  563.397331][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'.
[  564.044854][  T938] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  564.266772][  T938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  564.305725][  T938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  564.337580][  T938] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  564.401467][  T938] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  564.448873][  T938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.549407][  T938] usb 6-1: config 0 descriptor??
[  565.177695][  T938] plantronics 0003:047F:FFFF.0021: unbalanced collection at end of report description
[  565.251121][  T938] plantronics 0003:047F:FFFF.0021: parse failed
[  565.284597][  T938] plantronics 0003:047F:FFFF.0021: probe with driver plantronics failed with error -22
[  565.424496][ T5348] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  565.505100][  T938] usb 6-1: USB disconnect, device number 19
[  565.662846][ T5348] usb 4-1: Using ep0 maxpacket: 8
[  565.704870][ T5348] usb 4-1: config 0 has an invalid interface number: 255 but max is 12
[  565.745298][ T5348] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  565.789525][ T5348] usb 4-1: config 0 has no interface number 0
[  565.819807][ T5348] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  565.872956][ T5348] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  565.905811][ T5348] usb 4-1: config 0 interface 255 has no altsetting 0
[  565.933316][ T5348] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  565.960031][ T5348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.983044][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  565.997208][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  566.006955][ T5229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  566.009707][ T5348] usb 4-1: Product: syz
[  566.019916][ T5229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  566.035926][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  566.049194][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  566.098896][ T5348] usb 4-1: Manufacturer: syz
[  566.123430][ T5348] usb 4-1: SerialNumber: syz
[  566.127978][T11955] program syz.2.2015 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  566.177972][ T5348] usb 4-1: config 0 descriptor??
[  566.345224][ T9503] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  566.481348][ T5348] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  566.510772][ T5348] gspca_zc3xx: reg_w_i err -71
[  566.577362][ T9503] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  566.617707][T11966] fuse: Unknown parameter 'use00000000000000000000'
[  566.635113][ T9503] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.670718][T11970] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2020'.
[  566.679194][ T9503] usb 1-1: Product: syz
[  566.683830][ T9503] usb 1-1: Manufacturer: syz
[  566.729849][ T9503] usb 1-1: SerialNumber: syz
[  566.766814][ T9503] usb 1-1: config 0 descriptor??
[  566.862899][T11980] loop5: detected capacity change from 0 to 8
[  566.920902][T11980] overlayfs: missing 'workdir'
[  567.159676][ T5348] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  567.210492][ T5348] gspca_zc3xx 4-1:0.255: probe with driver gspca_zc3xx failed with error -71
[  567.237863][T11948] chnl_net:caif_netlink_parms(): no params data found
[  567.253318][   T58] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  567.290205][ T5348] usb 4-1: USB disconnect, device number 27
[  567.502800][   T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  567.550402][   T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  567.596009][   T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  567.609698][   T58] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  567.619214][   T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.643325][   T58] usb 2-1: config 0 descriptor??
[  567.704507][ T9503] usb 1-1: Firmware version (0.0) predates our first public release.
[  567.729600][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  567.736100][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  567.748895][ T9503] usb 1-1: Please update to version 0.2 or newer
[  567.766271][T11948] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.803904][T11948] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.844698][T11948] bridge_slave_0: entered allmulticast mode
[  567.903192][T11948] bridge_slave_0: entered promiscuous mode
[  567.960081][T11948] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.998659][ T9503] usb 1-1: USB disconnect, device number 18
[  567.999547][T11948] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.034819][T11948] bridge_slave_1: entered allmulticast mode
[  568.056303][T11948] bridge_slave_1: entered promiscuous mode
[  568.124805][ T5240] Bluetooth: hci5: command tx timeout
[  568.132035][   T58] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving
[  568.165812][T12003] program syz.2.2028 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  568.213331][   T58] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  568.279830][T11948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  568.352384][T11948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  568.382394][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  568.424089][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  568.458721][T12009] fuse: Unknown parameter 'use00000000000000000000'
[  568.551778][T11969] binder: BINDER_SET_CONTEXT_MGR already set
[  568.584994][T11969] binder: 11968:11969 ioctl 4018620d 200001c0 returned -16
[  568.732870][T12013] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2033'.
[  568.863758][T11948] team0: Port device team_slave_0 added
[  568.931349][T11948] team0: Port device team_slave_1 added
[  568.968965][ T5348] usb 2-1: USB disconnect, device number 14
[  569.123320][T12018] overlayfs: failed to resolve './file0/../file0': -2
[  569.125602][T11948] batman_adv: batadv0: Adding interface: batadv_slave_0
[  569.158702][T11948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.227745][T11948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  569.270569][T11948] batman_adv: batadv0: Adding interface: batadv_slave_1
[  569.293830][T11948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.354451][T11948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  569.553583][T11948] hsr_slave_0: entered promiscuous mode
[  569.581931][T11948] hsr_slave_1: entered promiscuous mode
[  569.590323][T12025] loop5: detected capacity change from 0 to 4096
[  569.605288][T11948] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  569.628108][T11948] Cannot create hsr debugfs directory
[  569.648395][T12025] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[  569.768472][T12037] program syz.0.2044 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  569.984246][T12042] fuse: root generation should be zero
[  570.138075][T11948] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.204737][ T5240] Bluetooth: hci5: command tx timeout
[  570.308989][T11948] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.356059][T12051] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2048'.
[  570.541662][T11948] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.836761][T11948] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.387230][T11948] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  571.455957][T11948] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  571.549496][T11948] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  571.597202][T11948] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  571.836871][T12072] program syz.3.2057 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  572.092451][T11948] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.222922][T11948] 8021q: adding VLAN 0 to HW filter on device team0
[  572.284545][ T5240] Bluetooth: hci5: command tx timeout
[  572.531860][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.539038][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state
[  572.641332][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.648535][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.833242][T11948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  573.435747][T12087] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2061'.
[  573.747192][T11948] 8021q: adding VLAN 0 to HW filter on device batadv0
[  574.191829][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'.
[  574.364514][ T5240] Bluetooth: hci5: command tx timeout
[  574.644328][   T29] audit: type=1326 audit(1723361707.349:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.3.2066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33c4b779f9 code=0x0
[  574.988090][T12116] program syz.2.2069 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  575.073370][T12120] fuse: Unknown parameter 'n�'
[  575.169231][T11948] veth0_vlan: entered promiscuous mode
[  575.223738][T11948] veth1_vlan: entered promiscuous mode
[  575.352828][T11948] veth0_macvtap: entered promiscuous mode
[  575.377927][T11948] veth1_macvtap: entered promiscuous mode
[  575.471495][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.506178][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.516376][ T5289] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  575.532493][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.543081][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.561893][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.583074][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.601022][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.623262][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.633305][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.658079][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.680730][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.701412][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.718712][T11948] batman_adv: batadv0: Interface activated: batadv_slave_0
[  575.739550][ T5289] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  575.754452][ T5289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.762466][ T5289] usb 6-1: Product: syz
[  575.772804][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  575.793524][ T5289] usb 6-1: Manufacturer: syz
[  575.798546][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.810579][ T5289] usb 6-1: SerialNumber: syz
[  575.819033][ T5289] usb 6-1: config 0 descriptor??
[  575.824270][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  575.841787][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.860743][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  575.880861][T12132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2075'.
[  575.921513][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.964681][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  575.994491][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.034381][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.073787][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.115286][T11948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.134530][T11948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.182889][T11948] batman_adv: batadv0: Interface activated: batadv_slave_1
[  576.379043][T11948] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  576.438990][T11948] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  576.488303][T11948] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  576.499499][ T5289] usb 6-1: Firmware: major: 215, minor: 149, hardware type: HULUSB (4)
[  576.521888][T12136] Invalid ELF header magic: != ELF
[  576.543992][T11948] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  576.553894][T12141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2080'.
[  576.711886][ T5289] usb 6-1: failed to fetch extended address, random address set
[  576.862809][ T5289] usb 6-1: USB disconnect, device number 20
[  576.938878][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  576.961192][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  577.129109][ T6429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  577.152495][ T6429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  577.184684][   T58] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  577.410783][   T58] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  577.444074][   T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.473390][   T58] usb 3-1: Product: syz
[  577.480635][   T58] usb 3-1: Manufacturer: syz
[  577.497405][   T58] usb 3-1: SerialNumber: syz
[  577.521526][   T58] usb 3-1: config 0 descriptor??
[  577.544715][ T9503] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  577.593109][T12163] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2089'.
[  577.765369][ T9503] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  577.793736][ T9503] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  577.842652][ T9503] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  577.876884][ T9503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  577.898497][ T9503] usb 4-1: SerialNumber: syz
[  578.035857][   T58] usb 3-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0)
[  578.066424][T12172] loop1: detected capacity change from 0 to 4096
[  578.095004][T12172] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  578.398268][ T9503] usb 4-1: 0:2 : does not exist
[  578.403221][ T9503] usb 4-1: unit 5 not found!
[  578.620668][ T9503] usb 4-1: USB disconnect, device number 28
[  579.195803][   T58] usb 3-1: failed to fetch extended address, random address set
[  579.399373][   T58] usb 3-1: USB disconnect, device number 19
[  579.424594][   T29] audit: type=1804 audit(1723361712.169:130): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2094" name="/newroot/58/file1/bus" dev="loop1" ino=33 res=1 errno=0
[  579.451986][T12172] Invalid ELF header magic: != ELF
[  579.478704][ T5750] udevd[5750]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  579.733416][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'.
[  579.955464][   T29] audit: type=1326 audit(1723361712.719:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.4.2098" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff27a3779f9 code=0x0
[  580.028992][T12198] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2103'.
[  580.478525][T12209] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.2107'.
[  580.759595][T12214] loop4: detected capacity change from 0 to 128
[  580.841510][T12183] loop5: detected capacity change from 0 to 32768
[  581.969651][T12226] loop1: detected capacity change from 0 to 8
[  582.467364][T12232] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2118'.
[  582.494779][  T938] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  582.504475][ T5348] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  582.748441][ T5348] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  582.768252][  T938] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  582.784440][ T5348] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  582.814413][  T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.822434][  T938] usb 3-1: Product: syz
[  582.834615][ T5348] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  582.851458][  T938] usb 3-1: Manufacturer: syz
[  582.867420][ T5348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  582.885770][  T938] usb 3-1: SerialNumber: syz
[  582.896016][ T5348] usb 5-1: SerialNumber: syz
[  582.935940][  T938] usb 3-1: config 0 descriptor??
[  582.967802][T12236] loop5: detected capacity change from 0 to 1024
[  583.045758][T12236] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869)
[  583.059663][T12236] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  583.074511][T12236] EXT4-fs (loop5): invalid journal inode
[  583.172059][   T29] audit: type=1326 audit(1723361715.929:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.1.2119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8a35779f9 code=0x0
[  583.972851][ T5348] usb 5-1: 0:2 : does not exist
[  583.979555][ T5348] usb 5-1: unit 5 not found!
[  583.994892][  T938] usb 3-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0)
[  584.034792][T12236] loop5: detected capacity change from 0 to 4096
[  584.036203][ T5348] usb 5-1: USB disconnect, device number 18
[  584.185354][T12248] loop4: detected capacity change from 0 to 8
[  584.204526][T12246] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.2122'.
[  584.245943][  T938] usb 3-1: failed to fetch extended address, random address set
[  584.337350][ T8525] udevd[8525]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  584.368858][  T938] usb 3-1: USB disconnect, device number 20
[  584.370580][T12254] SQUASHFS error: Unable to read directory block [631:72]
[  584.390997][T12253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2123'.
[  584.476432][T12254] SQUASHFS error: Unable to read directory block [631:72]
[  584.565288][   T29] audit: type=1326 audit(1723361717.319:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.0.2123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12f47779f9 code=0x0
[  585.169728][ T5229] Bluetooth: hci3: command 0x0406 tx timeout
[  585.256948][ T9788] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  585.296467][T12272] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2131'.
[  585.465230][ T9788] usb 5-1: Using ep0 maxpacket: 8
[  585.498362][ T9788] usb 5-1: config 0 has an invalid interface number: 255 but max is 12
[  585.524457][ T9788] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13
[  585.549524][ T9788] usb 5-1: config 0 has no interface number 0
[  585.573561][ T9788] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  585.624860][ T9788] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  585.654410][ T9788] usb 5-1: config 0 interface 255 has no altsetting 0
[  585.673108][ T9788] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  585.712971][ T9788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.729492][ T9788] usb 5-1: Product: syz
[  585.738594][ T9788] usb 5-1: Manufacturer: syz
[  585.743210][ T9788] usb 5-1: SerialNumber: syz
[  585.777472][ T9788] usb 5-1: config 0 descriptor??
[  585.974846][   T58] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  586.022279][   T29] audit: type=1326 audit(1723361718.779:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12280 comm="syz.1.2135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8a35779f9 code=0x0
[  586.114663][ T9503] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  586.277803][   T58] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  586.409456][   T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  586.516972][   T58] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  586.531635][ T9503] usb 4-1: Using ep0 maxpacket: 8
[  586.554478][ T9503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  586.584231][ T9503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  586.615329][   T58] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  586.637501][ T9503] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  586.654597][   T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.673029][ T9503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.681207][   T58] usb 1-1: Product: syz
[  586.702203][   T58] usb 1-1: Manufacturer: syz
[  586.714625][   T58] usb 1-1: SerialNumber: syz
[  586.741056][ T9503] usb 4-1: config 0 descriptor??
[  586.806201][ T9788] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  586.820988][ T9788] gspca_zc3xx: reg_w_i err -71
[  586.954512][ T5290] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  587.148489][ T5290] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  587.164864][ T5290] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  587.262605][ T5290] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  587.292280][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  587.314388][ T5290] usb 3-1: SerialNumber: syz
[  587.445613][ T9788] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  587.477909][ T9788] gspca_zc3xx 5-1:0.255: probe with driver gspca_zc3xx failed with error -71
[  587.549839][ T9503] hid-picolcd 0003:04D8:F002.0023: unknown main item tag 0x0
[  587.567978][ T9503] hid-picolcd 0003:04D8:F002.0023: item fetching failed at offset 5/7
[  587.579535][ T9503] hid-picolcd 0003:04D8:F002.0023: device report parse failed
[  587.589476][ T5290] usb 3-1: 0:2 : does not exist
[  587.594511][ T9503] hid-picolcd 0003:04D8:F002.0023: probe with driver hid-picolcd failed with error -22
[  587.598171][ T9788] usb 5-1: USB disconnect, device number 19
[  587.777464][ T9503] usb 4-1: USB disconnect, device number 29
[  588.354460][ T5290] usb 3-1: unit 5 not found!
[  588.464705][ T5290] usb 3-1: USB disconnect, device number 21
[  588.524776][T12300] loop4: detected capacity change from 0 to 8
[  588.647444][T12302] 9pnet_fd: p9_fd_create_unix (12302): problem connecting socket: ./file0: -111
[  588.668975][T12300] SQUASHFS error: Unable to read directory block [631:72]
[  588.702902][T12300] SQUASHFS error: Unable to read directory block [631:72]
[  588.736115][ T8525] udevd[8525]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  588.995461][ T9503] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  589.034027][T12312] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2145'.
[  589.570544][   T58] cdc_ncm 1-1:1.0: bind() failure
[  590.266517][   T58] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  590.274261][   T58] cdc_ncm 1-1:1.1: bind() failure
[  590.295394][   T58] usb 1-1: USB disconnect, device number 19
[  590.326393][ T9503] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  590.356194][T12316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2144'.
[  590.369678][ T9503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.396056][ T9503] usb 2-1: Product: syz
[  590.400236][ T9503] usb 2-1: Manufacturer: syz
[  590.427563][ T9503] usb 2-1: SerialNumber: syz
[  590.455521][ T9503] usb 2-1: config 0 descriptor??
[  590.545316][   T29] audit: type=1326 audit(1723361723.299:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.4.2144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff27a3779f9 code=0x0
[  591.055706][ T9503] usb 2-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0)
[  591.282950][T12329] pimreg: entered allmulticast mode
[  591.842937][   T29] audit: type=1326 audit(1723361723.889:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12322 comm="syz.3.2149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33c4b779f9 code=0x0
[  591.932581][T12333] program syz.5.2151 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  591.967381][ T9503] usb 2-1: failed to fetch extended address, random address set
[  592.043489][T12337] netlink: 'syz.0.2154': attribute type 72 has an invalid length.
[  592.047791][   T29] audit: type=1326 audit(1723361724.799:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.3.2153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33c4b779f9 code=0x0
[  592.063228][T12337] netlink: 1016 bytes leftover after parsing attributes in process `syz.0.2154'.
[  592.107047][ T9503] usb 2-1: USB disconnect, device number 15
[  592.240597][T12346] bridge0: port 3(vlan2) entered blocking state
[  592.242968][T12349] loop5: detected capacity change from 0 to 8
[  592.261086][T12346] bridge0: port 3(vlan2) entered disabled state
[  592.286749][T12346] vlan2: entered allmulticast mode
[  592.317496][T12349] SQUASHFS error: Unable to read directory block [631:72]
[  592.336671][T12346] vlan2: left allmulticast mode
[  592.350612][T12349] SQUASHFS error: Unable to read directory block [631:72]
[  592.595330][   T46] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  592.847978][ T5290] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  592.893195][T12361] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2161'.
[  592.986657][   T46] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  592.998727][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7
[  593.009917][   T46] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  593.027045][   T46] usb 1-1: string descriptor 0 read error: -22
[  593.033366][   T46] usb 1-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[  593.072336][   T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.084913][ T5290] usb 6-1: Using ep0 maxpacket: 8
[  593.104225][   T46] usb 1-1: config 0 descriptor??
[  593.117079][ T5290] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  593.130593][   T46] em28xx 1-1:0.0: New device   @ 480 Mbps (2013:0251, interface 0, class 0)
[  593.139204][ T5290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  593.148377][   T46] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  593.182134][ T5290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  593.236693][ T5290] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  593.273718][ T5290] usb 6-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00
[  593.302635][ T5290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.358003][ T5290] usb 6-1: config 0 descriptor??
[  593.787327][   T46] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  593.820086][   T46] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  593.836096][T12357] fuse: Unknown parameter '0xffffffffffffffff'
[  593.865230][   T46] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  594.031456][   T29] audit: type=1326 audit(1723361726.739:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.2.2166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f158eb779f9 code=0x0
[  594.190871][ T5290] usbhid 6-1:0.0: can't add hid device: -71
[  594.416078][ T5290] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  594.486240][ T5290] usb 6-1: USB disconnect, device number 21
[  594.656873][   T46] em28xx 1-1:0.0: No AC97 audio processor
[  594.693863][   T46] usb 1-1: USB disconnect, device number 20
[  594.701987][   T46] em28xx 1-1:0.0: Disconnecting em28xx
[  594.727487][   T46] em28xx 1-1:0.0: Freeing device
[  594.757195][T12381] program syz.3.2168 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  594.869706][T12384] netlink: 'syz.2.2169': attribute type 72 has an invalid length.
[  594.887283][T12384] netlink: 1016 bytes leftover after parsing attributes in process `syz.2.2169'.
[  594.969293][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'.
[  595.090373][   T29] audit: type=1326 audit(1723361727.849:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12382 comm="syz.0.2167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12f47779f9 code=0x0
[  595.226517][T12394] overlayfs: failed to resolve './file0/../file0': -2
[  595.415189][ T5240] Bluetooth: hci4: command 0x0406 tx timeout
[  595.655964][   T29] audit: type=1326 audit(1723361728.419:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.2.2175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f158eb779f9 code=0x0
[  595.925917][T12414] ------------[ cut here ]------------
[  595.932039][T12414] kernel BUG at drivers/android/binder.c:1173!
[  595.938297][T12414] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  595.945437][T12414] CPU: 1 UID: 0 PID: 12414 Comm: syz.0.2178 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0
[  595.956217][T12414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  595.966273][T12414] RIP: 0010:binder_inc_ref_for_node+0xdf7/0xe00
[  595.972539][T12414] Code: c8 f8 e9 4e fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fd ff ff 48 89 df e8 e4 c1 c8 f8 e9 4c fd ff ff e8 9a 7b 61 f8 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90
[  595.992150][T12414] RSP: 0018:ffffc9000f80f5e8 EFLAGS: 00010283
[  595.998223][T12414] RAX: ffffffff8931fc46 RBX: 0000000000000000 RCX: 0000000000040000
[  596.006192][T12414] RDX: ffffc90009409000 RSI: 0000000000000924 RDI: 0000000000000925
[  596.014160][T12414] RBP: ffff88805b2c8020 R08: ffffffff8931f77b R09: ffff8880603c2430
[  596.022156][T12414] R10: dffffc0000000000 R11: ffffed100c078488 R12: 0000000000000000
[  596.030130][T12414] R13: dffffc0000000000 R14: ffff88802a0c5828 R15: ffff88802a0c5810
[  596.038105][T12414] FS:  00007f12f56126c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[  596.047038][T12414] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  596.053622][T12414] CR2: 00007f9bbe41e9db CR3: 0000000027e3c000 CR4: 0000000000350ef0
[  596.061596][T12414] Call Trace:
[  596.064870][T12414]  <TASK>
[  596.067799][T12414]  ? __die_body+0x88/0xe0
[  596.072145][T12414]  ? die+0xcf/0x110
[  596.075966][T12414]  ? do_trap+0x15a/0x3a0
[  596.080217][T12414]  ? binder_inc_ref_for_node+0xdf7/0xe00
[  596.085870][T12414]  ? do_error_trap+0x1dc/0x2c0
[  596.090639][T12414]  ? binder_inc_ref_for_node+0xdf7/0xe00
[  596.096283][T12414]  ? srso_alias_return_thunk+0x5/0xfbef5
[  596.101924][T12414]  ? __pfx_do_error_trap+0x10/0x10
[  596.107048][T12414]  ? srso_alias_return_thunk+0x5/0xfbef5
[  596.112686][T12414]  ? handle_invalid_op+0x34/0x40
[  596.117634][T12414]  ? binder_inc_ref_for_node+0xdf7/0xe00
[  596.123277][T12414]  ? exc_invalid_op+0x38/0x50
[  596.127959][T12414]  ? asm_exc_invalid_op+0x1a/0x20
[  596.132986][T12414]  ? binder_inc_ref_for_node+0x92b/0xe00
[  596.138629][T12414]  ? binder_inc_ref_for_node+0xdf6/0xe00
[  596.144275][T12414]  ? binder_inc_ref_for_node+0xdf7/0xe00
[  596.150006][T12414]  ? binder_inc_ref_for_node+0xdf6/0xe00
[  596.155754][T12414]  binder_ioctl_write_read+0xc7b/0x8d00
[  596.161312][T12414]  ? 0xffffffffa0000814
[  596.165481][T12414]  ? srso_alias_return_thunk+0x5/0xfbef5
[  596.171139][T12414]  ? __pfx_stack_trace_save+0x10/0x10
[  596.176538][T12414]  ? srso_alias_return_thunk+0x5/0xfbef5
[  596.182197][T12414]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  596.188200][T12414]  ? srso_alias_return_thunk+0x5/0xfbef5
[  596.193844][T12414]  ? __lock_acquire+0x137a/0x2040
[  596.198889][T12414]  ? srso_alias_return_thunk+0x5/0xfbef5
[  596.204533][T12414]  ? srso_alias_return_thunk+0x5/0xfbef5
[  596.210174][T12414]  ? binder_get_thread+0x16e/0x6c0
[  596.215299][T12414]  ? __pfx_lock_release+0x10/0x10
[  596.220337][T12414]  ? srso_alias_return_thunk+0x5/0xfbef5
[  596.225974][T12414]  ? do_raw_spin_unlock+0x13c/0x8b0
[  596.231181][T12414]  ? srso_alias_return_thunk+0x5/0xfbef5
[  596.236819][T12414]  ? _raw_spin_unlock+0x28/0x50
[  596.241683][T12414]  ? binder_get_thread+0x178/0x6c0
[  596.246818][T12414]  binder_ioctl+0x43d/0x1c70
[  596.251429][T12414]  ? srso_alias_return_thunk+0x5/0xfbef5
[  596.257073][T12414]  ? tomoyo_path_number_perm+0x71a/0x880
[  596.262720][T12414]  ? tomoyo_path_number_perm+0x208/0x880
[  596.268358][T12414]  ? __pfx_binder_ioctl+0x10/0x10
[  596.273421][T12414]  ? __fget_files+0x29/0x470
[  596.278023][T12414]  ? __fget_files+0x3f6/0x470
[  596.282715][T12414]  ? __fget_files+0x29/0x470
[  596.287325][T12414]  ? srso_alias_return_thunk+0x5/0xfbef5
[  596.292968][T12414]  ? srso_alias_return_thunk+0x5/0xfbef5
[  596.298603][T12414]  ? security_file_ioctl+0x87/0xb0
[  596.303719][T12414]  ? __pfx_binder_ioctl+0x10/0x10
[  596.308752][T12414]  __se_sys_ioctl+0xfe/0x170
[  596.313350][T12414]  do_syscall_64+0xf3/0x230
[  596.317869][T12414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.323761][T12414] RIP: 0033:0x7f12f47779f9
[  596.328173][T12414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  596.347778][T12414] RSP: 002b:00007f12f5612038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  596.356191][T12414] RAX: ffffffffffffffda RBX: 00007f12f4905f80 RCX: 00007f12f47779f9
[  596.364160][T12414] RDX: 00000000200003c0 RSI: 00000000c0306201 RDI: 0000000000000004
[  596.372129][T12414] RBP: 00007f12f47e58ee R08: 0000000000000000 R09: 0000000000000000
[  596.380096][T12414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  596.388064][T12414] R13: 0000000000000000 R14: 00007f12f4905f80 R15: 00007ffc862880a8
[  596.396042][T12414]  </TASK>
[  596.399056][T12414] Modules linked in:
[  596.404186][T12414] ---[ end trace 0000000000000000 ]---
[  596.410447][T12414] RIP: 0010:binder_inc_ref_for_node+0xdf7/0xe00
[  596.416766][T12414] Code: c8 f8 e9 4e fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fd ff ff 48 89 df e8 e4 c1 c8 f8 e9 4c fd ff ff e8 9a 7b 61 f8 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90
[  596.436464][T12414] RSP: 0018:ffffc9000f80f5e8 EFLAGS: 00010283
[  596.442559][T12414] RAX: ffffffff8931fc46 RBX: 0000000000000000 RCX: 0000000000040000
[  596.450588][T12414] RDX: ffffc90009409000 RSI: 0000000000000924 RDI: 0000000000000925
[  596.458691][T12414] RBP: ffff88805b2c8020 R08: ffffffff8931f77b R09: ffff8880603c2430
[  596.467644][T12414] R10: dffffc0000000000 R11: ffffed100c078488 R12: 0000000000000000
[  596.476416][T12414] R13: dffffc0000000000 R14: ffff88802a0c5828 R15: ffff88802a0c5810
[  596.484442][T12414] FS:  00007f12f56126c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[  596.493392][T12414] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  596.500069][T12414] CR2: 00007f9bbe41e9db CR3: 0000000027e3c000 CR4: 0000000000350ef0
[  596.508095][T12414] Kernel panic - not syncing: Fatal exception
[  596.514401][T12414] Kernel Offset: disabled
[  596.518718][T12414] Rebooting in 86400 seconds..