last executing test programs:

47.087421489s ago: executing program 1 (id=612):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
timer_create(0x8, &(0x7f0000000200)={0x0, 0x11, 0x2, @thr={&(0x7f0000001600)="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", &(0x7f0000000240)="dc172352d47462219318c76c864d37892c3fd71fd5041c7b6e7d99c547a47bf8818ca40b8d31bf014db3877e86cdfad4dfc3a9dda5d4af0171adfc0b8cb96271df7b0c53e71763647b7e6be8c211ff9fd2d0b45201072b477fda4d12bd7a6a93241bb5787e6452683e2d3254e8c8689d3c6a45b61e06f75465b18f696955ec4c561fd98282a0a74f220ac311820624daf196febefda47391cc2ebcccb4c3cd135d7f9070ecd071278c565b2aaba480e986028074f1d70011cd17a2de7024736264b7e2c92fb675157d8bd08e9c22fa7820f87ded9d7de68dfa73387fc5bbea18ddb54f54ae0f843cf732"}}, &(0x7f0000000980)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f00000009c0), 0x0)
clock_gettime(0x0, &(0x7f00000003c0)={<r2=>0x0, <r3=>0x0})
timer_settime(r1, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0xfffffffd, 0xfffdffff, 0x0, 0xfb, 0x0, "0040001e1d113c812e5d6000"})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), 0x0}, 0x1c)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4)
add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000206d0425c20000000000010902244c240000c0b109040000020300040009210101000122050009058103"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000"], 0x0}, 0x0)
r6 = syz_open_pts(r0, 0x0)
r7 = dup3(r6, r0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCMBIC(r7, 0x5417, &(0x7f0000000340)=0x7)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
readv(r9, &(0x7f0000000680)=[{&(0x7f0000001140)=""/4096, 0x1000}, {0x0}], 0x2)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r8, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9dd75b00ca0c79eff1f58312938be010e62ea92927"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x40000)
syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008cbd7f209904f4cdee780102030109023c0001100010000904130001ff06d20005240600010524009a830d240f0100000000060091008106241a0000080224020009050503"], 0x0)

43.481000838s ago: executing program 1 (id=620):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}], &(0x7f0000000180)=[0x6, 0x0, 0x6, 0x5, 0x5], 0x1}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
setresgid(0xee00, 0xee01, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0)

42.757540218s ago: executing program 1 (id=622):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r6 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xd8}], 0x1)
tkill(r6, 0xb)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r7, r4, 0x0)

41.374831101s ago: executing program 1 (id=623):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x185, &(0x7f0000000500)="$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")
listxattr(&(0x7f00000002c0)='./file2\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1a9c01, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20020000}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0)

40.532344175s ago: executing program 1 (id=624):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000001440)=""/126, 0x7e, 0x41)
mkdirat(r0, &(0x7f0000000640)='./file2\x00', 0x2e)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b]}}, {@size={'size', 0x3d, [0x35]}}]})
r1 = openat$dsp(0xffffff9c, &(0x7f0000000140), 0x220502, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000001c0))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004dc193e3ec31becba459efff03d6e68d938564551748d5df1954e99ead2126b1d2e5477a17e875979d8861dced546210811094681847696c94fef8a12512b5d2fe37be747a2d4af8162b8a0fd57aabbd38b2da25987cabfad18db5c51b0d5d6fe7eb1f86c791b7521006ffcf2ce1867cfb872cf65adcad122c23f62fade220f385561a8a91ef27f62b816aec51072d272af2df270b654200000092c9f07f0f1c1f5a78605753e3793a4948da2d5cc323caf8318da94be4723ccf0ecfc49904"], 0x1, 0xa07, &(0x7f0000001540)="$eJzs3UuMHEfdAPDq2Z31M5/H+WyyOCaxCSThkd14vZiHBXEUX7DiiFukiIvlOMHCMQhHgkQ52D5xI1FkrjzEKZcIEBK5ICsnLpGIJS45BQ4csIwUiQME7EW7WzU7+/eMemZt73h2fj+pt6b7XzNVPdvT09PdVZWAsdVY+js/P12ldOmdN4/+/eG/bVlc8kQ7R2vp72THXDOlVOX5yfB6H04sp9c/eu1kt7RKc0t/y3x65lr7udtSSufTvnQ5tdKeS1feeG/u6eMXjl3c//5bh6/embUHAIDx8q3Lh+d3/+VP9+/8+O0HjqRN7eXl+LyV57fn4/4j+cC/HP830ur5qmPqNBXyTeapEfJNdMnXWU4z5JvsUf5UeN1mj3ybasqf6FjWbb1hlJXtuJWqxsyq+UZjZmb5N3la+l0/Vc2cPX3mhXNDqihw2/3zwZTSPpPJNI7Two5h74EAlsXrhTc5H88s3Jr2q032V/61Jxvdnw+3wXpv/8ofrfJ/dcEeh9tno25NZb3K52h7no/XEeL9S4N+/svrxesRzT7r2es6wqhcX+hVz4l1rsda9ap/3C42qq/ntLwP3wjxzs9P/J+Oyv8Y6O5fzv+bTGM7LQx7BwTcteJ9cwtZicf7+mJ8U018c018S018a018W00cxtlvX/5Jer1a+Z0ff9MPej6snGe7J6f/N2B94vnIQcuP9/0O6lbLj/cTw93s9yeePfWV55+7snz/f9Xe/m/k7X1fnm/lz9blnKGcL4zn1dv3/rdWl9Poke/eUJ97uuRferxrdb5q18rrpI79zE31mF79vB298u1dna8V8m3J0+ZQ33h8sjU8rxx/lP1qeb8mw/o2w3pMhXqU/crOnMZ6wFqU7bHX/f9l+5xOzeqF02dOPZ7ny3b6x4nmpsXlB9a53sCt67f9z3Ra3f5ne3t5s9G5X9ixsrzq3C+0wvK5HssP5vnyPfediS1Ly2dOfu/M87d75WHMnXvl1e+eOHPm1A888MADD9oPhr1nAu602Zdf+v7suVdefez0SydePPXiqbMHDx06ODd36KsH52eXjutnO4/ugY1k5Ut/2DUBAAAAAAAAAAAA+vXDY0ev/PndL3+w3P5/pf1faf9f7vwt7f9/HNr/x3bypR18aQe4s0t8KU/oYHUq5Gvm6f9DfXeFcnaH530ip+1x/HL7/1Jc7Ne11Oe+sDz231vyhe4EbuovZSr0QRLHC/x0Ti/m9JcJhqja0n1xTuv6ty7beumfQr8Uo6n838rWUPoxKe2/e/XrVPb/O9ehjtx+69GccNjrCHT3D/1/m0xjOy0sGMUDuDsMe/zPct6zpGf/8M3Ni1PJdu3J1fvL2H8p3Iq7ffxJ5W+s8T/b49/1vf8LI+a11lbuv3929YOOYtOefsuP61/6gd41WPkf5/LL2jyS+it/4Reh/HhBqE//CeVv7bP8m9Z/79rK/28uv7xtjz7Ub/nLNa4aq+sRzxuX63/xvHFxPax/6dtz4PVf40CNN3L5MM5GZZzZQY3K+L+9xPswvpTny46w3OcQxzsZtP7l/oryPbA7vH5V8/1m/N/R9rWc1n0eyvi/ZXtsdZlvdMw3u7y3G3VfA6PqQ9f/TKaxnRYWFu7sCa0aQy2cob//w/6dMOzyh/3+14nj/8Zj+Dj+b4zH8X9jPI7/G+NxfL0Yj+P/xvczjv8b4/eF143jA0/XxD9ZE99TE7+/Jr63Jv6pmvj+mvgDNfEHa+L31sQfqol/pib+2Zr4wzXxR2vin6uJb3SlPcq4rj+Ms9g+z+cfxke5/tPr87+rJg6Mrp++feCp537z7dZy+/+p9vmQch3vSEfexd/OP8qP43Xv1DG/GHs3z/81xO/28x0wTmL/GfH7/ZGaODC6yn1ePt8whqruPfb0229Vr+N8Rsvnc/qFnH4xp4/ldCanszk9kNO5daofd8ZTv/7d4derld/7O0K83/vJY3ug2E/UwT7rE88PDHo/e+zHb1C3Wv4am4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMTWPp7/z8dJXSpXfePPrs8dOzi0ueaOdoLf2d7Jhrtp+X0uM5ncjpz/OD6x+9drIzvZHTKs2lKlXt5emZa+2StqWUzqd96XJqpT2Xrrzx3tzTxy8cu7j//bcOX71z7wAAAABsfP8LAAD//zhdDZg=")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r4=>0x0})
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x0)
quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc0, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r4}, {0x0, 0xfffffffffffffffc, 0x0, 0x10001}, {}, 0x0, 0x0, 0x0, 0x1}, [@offload={0xc, 0x1c, {r4, 0x4}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000611871000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4f, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

39.858833243s ago: executing program 1 (id=627):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300), 0x1, 0x232, &(0x7f0000000000)="$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")
r0 = syz_open_dev$vbi(&(0x7f0000002300), 0x1, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000002340)={0x1, @sdr={0x4c47504a, 0x2}})
syz_open_dev$midi(&(0x7f00000002c0), 0x3, 0x8000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00010000000000000000000c0000000d000000ffffff7f04000180"], 0x20}], 0x1}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x6e, 0xcb, 0x10, 0x8, 0x0, 0xb, 0x10, 0x0, 0x10003, 0x9, 0x0, 0x6, 0x8, 0x0, '\x00', 0x9, 0x7})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000340)=0x48a, 0x4)
sendmmsg(r6, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004810)
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0)

36.657742686s ago: executing program 32 (id=627):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300), 0x1, 0x232, &(0x7f0000000000)="$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")
r0 = syz_open_dev$vbi(&(0x7f0000002300), 0x1, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000002340)={0x1, @sdr={0x4c47504a, 0x2}})
syz_open_dev$midi(&(0x7f00000002c0), 0x3, 0x8000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00010000000000000000000c0000000d000000ffffff7f04000180"], 0x20}], 0x1}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x6e, 0xcb, 0x10, 0x8, 0x0, 0xb, 0x10, 0x0, 0x10003, 0x9, 0x0, 0x6, 0x8, 0x0, '\x00', 0x9, 0x7})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000340)=0x48a, 0x4)
sendmmsg(r6, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004810)
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0)

33.125041329s ago: executing program 2 (id=639):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x45057bf4ccb05c67, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc9b}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}}, 0x0)

32.424060366s ago: executing program 2 (id=642):
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

31.719813808s ago: executing program 2 (id=645):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000140))
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40044146, &(0x7f0000000080)=0x7)

30.890027901s ago: executing program 2 (id=647):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xe, 0x1, 0x2025, 0x2, 0x8, 0x5, 0x1}}, {0x6, 0x2, [0xfffd]}}]}]}, 0x60}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000080)={0x1000, 0x108000})
close_range(r4, 0xffffffffffffffff, 0x0)
write$cgroup_pid(r3, &(0x7f0000000080), 0x12)
r7 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=<r8=>0x0, &(0x7f0000000200)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_SHUTDOWN)
io_uring_enter(r7, 0x2dbe, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r2, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c)

29.618980922s ago: executing program 2 (id=651):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}}, 0x0)

28.263137937s ago: executing program 2 (id=657):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3a, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000)

8.979043227s ago: executing program 3 (id=689):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000700)={0x1c, r0, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

8.7998934s ago: executing program 4 (id=690):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x185, &(0x7f0000000500)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6)

8.576360571s ago: executing program 0 (id=691):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300), 0x1, 0x232, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiAwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1t9BgaGDSDnulXOjbnrFi/ItUz9fN2bFwwHoz5PZGBkZGBgYmCYGbZzD7K/yhugkcHAzMDAoMIAUsTCkJaZk2rgwcDIwMzAws6ADGCqmRg4wKr0kvNzUtoZGMFJAKxtOQML3AzDxwys/CDlII7RYwZWuIyxRQPMyHYorQKlPaD0cij9GErLoyUbFrAJ/VCeRgMDAxtDReJ//iJDNgYGhorEkpIiQ4hYSUmREVzMSABuMxPU1rlMqJ47zsQwCkbBKBgFo2AUjIJRMApGwSgYBSMZAAIAAP//kpC1eQ==")
r0 = syz_open_dev$vbi(&(0x7f0000002300), 0x1, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000002340)={0x1, @sdr={0x4c47504a, 0x2}})
syz_open_dev$midi(&(0x7f00000002c0), 0x3, 0x8000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00010000000000000000000c0000000d000000ffffff7f04000180"], 0x20}], 0x1}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x6e, 0xcb, 0x10, 0x8, 0x0, 0xb, 0x10, 0x0, 0x10003, 0x9, 0x0, 0x6, 0x8, 0x0, '\x00', 0x9, 0x7})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0)

8.26484827s ago: executing program 3 (id=692):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6083, 0x3)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.698319628s ago: executing program 4 (id=693):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)

7.078354848s ago: executing program 0 (id=694):
syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x1014800, &(0x7f0000000c80)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="0cbd5b5353912a879413ea41a5629122f6276e175b189b44b947b5ed8f34c9675196c7f420a9b4778c892a009b17763f4dbda6a421bf154a20ef7653d70337286d09a41d27fbb619ff647f585a8577dd9c318e307ee0e9c3328c5093134a7c98153b0d68aba22a65e8773fad07b59a0c5437e47d4255e1e8658b9b5a0cf45c27f88d87d58476713ea75cc39cdeb6036614e0b73cfbcd4f9243e2124d8ff5112db88857c7b69007b6ff5355f42dac04033a790725615a827b96542e64ad60984b7626cc74628d2d76b1f32df646d70aa036bc7d42fd", @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="d435d9afbeca2782ae19ed8bd41575ea7d9c9874c548e8a3b6d356a39d4518f41339a72ccd509df9e4d9d79abcc2f6da6768bd4f40d0beffba62fb5009c1e93fd4fe41778354a47dc025c852e30590bfb3cccdb6c83b0fdb27f16f03d72df1eac33d4948589efe30db71a5f7e31a303bf4ed9f3125c0a7aa0008ddaa", @ANYRESDEC], 0x1, 0xda6, &(0x7f0000003c80)="$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")
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd04\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaK\xces\x04\x1e*p\x9e\xf2\x16\x01`\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xabo\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xb1)*O\xe3\xc3L\xd6J\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e'}]}, 0x9f)
close(r2)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_deladdr={0x5c, 0x15, 0x400, 0x70bd26, 0x25dfdbff, {0xa, 0x91e71d6a642907e6, 0x40, 0xc8, r1}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x4c4}, @IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0xfd0, 0x4, 0x80}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

6.327152017s ago: executing program 4 (id=695):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300), 0x1, 0x232, &(0x7f0000000000)="$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")
r0 = syz_open_dev$vbi(&(0x7f0000002300), 0x1, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000002340)={0x1, @sdr={0x4c47504a, 0x2}})
syz_open_dev$midi(&(0x7f00000002c0), 0x3, 0x8000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00010000000000000000000c0000000d000000ffffff7f04000180"], 0x20}], 0x1}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x6e, 0xcb, 0x10, 0x8, 0x0, 0xb, 0x10, 0x0, 0x10003, 0x9, 0x0, 0x6, 0x8, 0x0, '\x00', 0x9, 0x7})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=<r6=>0x0, &(0x7f00000003c0)=0x4)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg(r7, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004810)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0x18b4, 0x65, 0x14, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x1, 0x9}, {0xfff1, 0xffff}, {0xb, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x87}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x9, 0x10}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_fw={{0x7}, {0x1420, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_POLICE={0x88c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x81, 0x401, 0x6, 0x5, 0x5, 0x6, 0x7, 0x6, 0x2, 0x0, 0x3, 0x6, 0x101, 0xe, 0xffff, 0x7224c788, 0x673b9029, 0x8, 0x3, 0x7fff, 0xffffffff, 0x5, 0x6, 0xfffffffd, 0x7beb, 0x2, 0x7, 0xfffffffa, 0x90, 0x1, 0xc76, 0x4, 0x5, 0x2700, 0x7fffffff, 0x9, 0xb765, 0x7, 0x81, 0x1, 0x8, 0x8, 0xffffff81, 0x5766, 0x2, 0x96e, 0x800, 0xae, 0x2, 0xe3, 0xffffffff, 0x5, 0x3da, 0xe89c, 0x1, 0x5, 0x5, 0x1, 0xfffffe0c, 0xffff, 0x2ffb, 0x1, 0x3, 0x5, 0xfffffffd, 0xdf8, 0xfffffffb, 0x2, 0x3b7f, 0x2, 0xda8, 0x3, 0x10001, 0x3, 0x1, 0xfffffff7, 0xdc7, 0x1000, 0x200, 0x8c, 0xfffffff0, 0x7, 0x4, 0x8, 0x2, 0x8, 0x5, 0x2, 0x81, 0x3, 0xb, 0x5, 0x0, 0x2, 0x7, 0xa1, 0x2, 0x44, 0x0, 0x4, 0x8000, 0x5, 0x8, 0x0, 0x3, 0x8, 0x4, 0x1, 0xff, 0x8, 0x9c, 0x3ff, 0x2, 0x4, 0x1c000000, 0x7, 0x7bd5f75a, 0x8, 0xf8000000, 0x2, 0x8, 0x2, 0x12, 0x8, 0x81, 0x4, 0x0, 0x3, 0x8, 0x3, 0x8, 0x4, 0x8, 0x5, 0x8, 0x4, 0xf83, 0xff, 0x6, 0x8, 0x9, 0x0, 0x1, 0x9, 0x7, 0x2ad, 0x5, 0xfffffff1, 0x8000, 0x0, 0x1, 0x6, 0x6, 0x4, 0x81, 0x6, 0xab, 0x5, 0x7, 0x9f6, 0x2, 0x2d4, 0x6, 0x0, 0x6, 0x140, 0x4, 0x10001, 0xffffffff, 0x800, 0x466, 0x6dc5, 0xffff0001, 0x5, 0x0, 0xbe, 0x4, 0x3, 0x9, 0x1, 0x6, 0x5, 0xffffffff, 0x1a, 0x7ff, 0x401, 0x3, 0xb, 0x4, 0x10001, 0x8, 0x1, 0x4, 0x3, 0x4, 0x7, 0x1, 0x0, 0x4, 0x80, 0x4, 0x9, 0x9, 0x2, 0x3, 0xb764, 0x1b, 0x7, 0x6, 0x80000001, 0xe9, 0x2, 0x2, 0x4b8, 0x8, 0x7ff, 0x5, 0x81, 0x1, 0x4, 0x7fffffff, 0x3, 0xdb9, 0x0, 0x0, 0x68b, 0x6, 0x1, 0x7, 0x4, 0x7fffffff, 0x510, 0x4, 0x205b, 0xbed0, 0x1, 0xf55, 0x4, 0x3, 0x8, 0x7fffffff, 0x1, 0x1, 0x5, 0x40, 0x80a, 0x8, 0x6, 0x5, 0x3, 0x8000, 0x0, 0x6, 0x9277, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7f, 0x8, 0xb9c3, 0x4, 0x7, 0x2, 0xff, 0x6, 0x7, 0x5, 0x32, 0x6, 0x3, 0x8, 0x8, 0x9, 0x200, 0x3, 0x1, 0x5, 0x2e, 0x7, 0x7, 0x7f, 0x2, 0x6, 0x100, 0x4, 0x4, 0xd9, 0xa2f1, 0xcfcb, 0xd2f8, 0x7, 0xa, 0x6da, 0x0, 0xfffffff5, 0x1, 0x7, 0xa, 0x9, 0x0, 0xd8, 0x6, 0x102, 0x985, 0x8, 0xfffffc00, 0x8, 0x3ff, 0x3, 0x1ff, 0x1, 0x6, 0x2, 0x2, 0x6, 0x5, 0xb, 0x0, 0x2, 0x1, 0x8001, 0xf, 0x1, 0x4, 0x6, 0x800, 0x4, 0x2000000, 0x9, 0x8, 0x6, 0x1, 0x7, 0xa, 0xa, 0x10000, 0x9, 0x8, 0x2, 0x1, 0xfffffffe, 0x1, 0x4, 0x8, 0x2, 0xb496, 0x8, 0x0, 0x0, 0x9, 0x7ff, 0x7, 0x2, 0xc9f, 0x8, 0xb9f3, 0x100, 0x5, 0x4, 0x3, 0xfffffffa, 0xe86, 0xe3, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x3, 0x4c, 0x2, 0xde, 0x7, 0x5, 0xccd6, 0x0, 0x2, 0x5, 0x9, 0xcc, 0x9, 0xffff2bc6, 0x4, 0xe0000, 0x7, 0x81, 0x5, 0xcbd2, 0x1, 0x81, 0x7, 0x9, 0x7c3, 0x8, 0x0, 0x80, 0x1, 0x2, 0xa0000000, 0x158, 0x1f, 0xf, 0x80000000, 0x4, 0x4, 0x4, 0x9, 0x3, 0x8, 0x2, 0x297, 0x5, 0xc55, 0x3ff, 0xcb9, 0x65, 0x5, 0x8, 0x7fff, 0x2, 0x8, 0x6, 0x8, 0x0, 0xb, 0x2, 0x401, 0x7f, 0x4, 0x9, 0x2, 0xffffff00, 0x7, 0x85b, 0x2, 0xf29, 0x3, 0x75b0, 0x124d350e, 0x4, 0x200, 0x14000, 0x7, 0x974, 0x3, 0x4, 0x1, 0x9, 0x61cc, 0x8001, 0x1000, 0x48183264, 0xfff, 0x1000, 0x6, 0x7, 0x9, 0x9, 0x8, 0x53, 0x5, 0x2, 0x1, 0x8, 0x9, 0xffffffff, 0x5, 0x1bf0, 0x9, 0x7, 0x7, 0xe3, 0x4, 0x7, 0x7d5c, 0x8000, 0xd, 0x9, 0x7f, 0x40, 0x5, 0xe, 0x1, 0x8, 0x3, 0x9, 0x0, 0x5, 0x4, 0x3, 0x8, 0x5, 0x4, 0x48, 0x4, 0x10, 0x6, 0x1, 0x5, 0x4, 0x5, 0x3, 0x9, 0xf8c3, 0x1, 0x4, 0x3, 0x5, 0x1, 0x3ff, 0x2, 0x9975]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x6, 0x0, 0x2, 0x8, {0xf8, 0x0, 0x5fe, 0x7, 0x6, 0xa28}, {0x9, 0x0, 0x2, 0x3966, 0x6, 0x8}, 0x7e, 0x9, 0x7ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0x0, 0x8, 0xfffffff8, {0x1, 0x1, 0x3ff, 0x7e9f, 0x100, 0x7}, {0x4, 0x0, 0x1ff, 0x5, 0x3, 0x1}, 0x182, 0x4, 0x2}}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_FW_INDEV={0x14, 0x3, 'gre0\x00'}, @TCA_FW_ACT={0x6f4, 0x4, [@m_connmark={0x1b4, 0x15, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x3, 0x6, 0x8}, 0x1dd3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1a, 0x8, 0x5, 0x9, 0x9}, 0x7ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x5, 0xfffffff0, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xfffffffc, 0x10000000, 0x2, 0x9}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xdd, 0x0, 0x4, 0x2, 0x55}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x1, 0x0, 0x5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf88, 0xed73, 0x6, 0x5398, 0x9}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x2, 0x800000, 0x6}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8000, 0x0, 0xffffff7f, 0x7}}}]}, {0x88, 0x6, "4eee7d4a56bc3ab1d1241218bfec0f07f8a06b4185e1ce9e05c1d378fea66bfcda20835558700dd85a35fcde50b95c8b05107bfa4fafd9f74545abeba128788e244c8e8d35f8cfa27fc20983c859bf21ea834a5da1237f1af70d61aae8e776ab07b48e712de64ba4c8a1f7044d110cecf8bed2a53881d2e813361a073acbeed8c5c70781"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x118, 0x7, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa}]}, {0xd1, 0x6, "43d6013d7730a1a278a540e9a03266c35538a1bcac261480577ac5ac0fe67935a770fef775379806f1b3ba8817ba0386530eea048cdf1826c53d7820c0944d24aed58f5b0b8a600a9c34f08daf6320a8ac770969b5e356647469ac4e0bcb470587828d4dfd1cab0e0ca74cfc8cd0a9821ffac6ad8137cdbeba9eec1bc1a7860bc219a4c7f948240c29dac06d5ec131a4500f2f430c1f2f62b1353ec8c9227d719c9673063c5c62767d58d8c87e45c634ca615cbfdeabfa0b4096f50ff66241a77aa9d30c061f751160f1d310b5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xec, 0x10, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x4, 0x0, 0x1, 0xb}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x4, 0x9, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x3016d8fd, 0x7, 0x7, 0x7fffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0x350, 0x3, 0x4, 0x3}}]}, {0x5e, 0x6, "a9184e1e586ad31a06c9eb7d79bd0131a5c232457daf0c7cb6bb79933f47689344449ee146dbabe58076801eb35808cfae4da511314f3bff9c412123dd9970948991b5d28455b20ec55d957f9055676c3bd9fba9e538db3bbae2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0xc0, 0x16, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb0}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffd}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x2, 0x236, 0x0, 0xe, 0xa8}, 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x9, 0x2, 0x10000000, 0x81, 0x3328}, 0x7}}]}, {0x15, 0x6, "bde9f883f5cfcd1004e02769cfa2731ea5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x110, 0x19, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x200, 0x6, 0x0, 0x2, 0x9}, 0xd}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, {0xb5, 0x6, "a8bf5395c0ebe182167ba779e8dbe5fab10afacfad53138a911adbdcb0e97a02d86fad7d663fd2ee6d179760e3c51406e904902f9bf2e158a1380800167bec4bbf1d509cf1940199faf5d5e2ddc9107e110e15687e1dbf1e64acae9cedd1a0c3f05138fd89c447120b5276d4a85a4536e4c286fdf076fcb7b284995398261e044516789a8187a063be1bed42cfcff27083b1596b42044ac7c3e2a2758f9e6fb4d2206978e639dbddc5de6b0f9c2d626e28"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x168, 0x15, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x8, 0x7, 0x97}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x40, 0x4, 0xffffff00, 0x2}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x2, 0x6, 0x4, 0x8}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf95, 0x7, 0x4, 0xffffcf4e}, 0x56}}]}, {0xcc, 0x6, "c5582e86d15530533dc967edd3ad5b61ed2480c425b3099da301c6c8f5be71cb8d1842ecce7c75d0d405b095f8a474a412e28018b8ba16d610e7e4c0dbb95323bda47fab6f6669521ced416b3fb8030be5d06056d2a540240b1f39c062580a78bd34089a6694ced20b35225e0e3a833efcaf5e76ba5b41b71ec14fd0916606ff4d338347eaabe76e7dd2326f9b4747d54c5bce0339243a562e3bdffffeeff3b93bed10fa26f5c86d5e0561f9e1ca7af7dfa943db6ebf64d25f4ff2d8df16bada05a8b27168698643"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_ACT={0x458, 0x4, [@m_skbmod={0xdc, 0x9, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="62a174c9a1e7"}]}, {0x6f, 0x6, "2f8fbf31551ec98362b64399ba5b322f08b901793af28781b853849385331f72bfe710f4fd8fbc72bbc34c7d07fccc7c09095e707be9f57f78b36a77d88d2454266adde48130787357049133eec1d52ad9af15c5af851702da5e881e11eb55038d1d67a41993e8caea4966"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0xa0, 0xc, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8000}]}, {0x69, 0x6, "21bd7428236a5ff3ad3eb77d57e70d3a5b30ac0707819b3d2c157624488c8a7079beb1aeb15948f3d4736500395e1e9d13316b898d1b568fad0f80b1870308e2f671f3ae00b54fc77e8d513de89f96f278b01f87043f209c4c30663dea2308c80860b9c0a4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x88, 0x5, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1f2a, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2, 0x7fffffffffffffff}}]}, {0x44, 0x6, "d463069b3d5dfc509f471663e50b1ff5d8f4f43841ad79ab23c7c57f15b7d19fb848f35e23e0785727ca868d62b721dd85b3cbd47fec5be9ccc81d733c7458f9"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ife={0x100, 0x5, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}]}, {0xca, 0x6, "fdd7496f218a34b43fd2c5cea8fa0c70d05c2f4ceda247701e72a787187f992ee34320eca1d8cf5bb0575454427f157e1355c0d21c53f507989180e6224c97ff07dda72a20df0732e97e2a102f678f03536861c43f92919c8fa2d4709d9c678c4762557b522dc2f8143bf3851e43825c756d2a2ecfe493c56de80b147b91e5c93af495a506f58e9c7d248b79c98c9eda7de255a626169a4cb20421e00d9809da065afdb7924dda8a97a8436bccc56501a01500ac46af8e2b28a3497ce120f90a52073c8f3512"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0x150, 0x1, 0x0, 0x0, {{0xa}, {0x8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x88, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x9c, 0x6, "63a7dcbcbe6d2996ec5f862ebac3799764348c13e57156da6d6761ec9b1530395586a1016352cde03861d8a330747fb46e9062bd0b446d9d90c67689bbbff2a3647f2f7b51349e7ed33f974fd74ac0e2806751457ece349b2fb94b12fe6512a648ba11008d818d9f8b823a809405d5ca6fb973abee793c76d9a9b580fc086f872768e70b3925514daa7c87fcc0fd36b34c52b8caba8f8d02"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x438, 0x2, [@TCA_FW_POLICE={0x420, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x71c3811}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0xd50, 0x9, 0xf896, 0x9, 0x7, 0x7, 0x9, 0x7, 0x7b, 0x8, 0x3e954c72, 0x5, 0x1000, 0x347, 0x4, 0x81, 0xffff, 0x7, 0x2, 0x1, 0x0, 0x9, 0x7, 0x6, 0xad3, 0x0, 0xd64, 0x0, 0xf0a, 0x7fffffff, 0xd47f, 0xc, 0x6, 0x35e, 0x4, 0x8, 0x4, 0xb4, 0x88, 0xffffffff, 0x0, 0x3, 0x6, 0x9, 0x4, 0xf, 0x2, 0x1, 0x401, 0x7, 0x3, 0x7ff, 0x9, 0x10001, 0x8, 0x2, 0x8, 0xffff, 0x600, 0x8c, 0x7f, 0x1, 0x6, 0x8, 0x7ff, 0x2, 0xe9b2, 0x1, 0x6, 0xffff, 0xa, 0xee32, 0x36d5, 0x2, 0x1b6, 0x0, 0x6, 0x8, 0x4, 0x8, 0x5, 0x8, 0x2c1, 0x5, 0x8, 0x8, 0x12, 0x2, 0x3, 0x3, 0xf, 0x1cc9, 0x1, 0x5, 0xa4, 0x4, 0x1000, 0x4, 0x7, 0x2, 0x0, 0x1, 0xffffffff, 0xa, 0x8, 0x7, 0x4, 0x5d, 0x5, 0x4, 0x9, 0x6a0d9d3, 0x6, 0xd, 0x3, 0x6, 0x8001, 0x0, 0x5, 0x6, 0x4, 0x0, 0x0, 0x4, 0x8e, 0x1a15f9cb, 0x8, 0x8, 0x7fb, 0x2, 0x78, 0x400, 0x80000000, 0x3, 0x9, 0x5, 0xffffa7e2, 0x1, 0x6, 0x0, 0x6, 0x5, 0x101, 0x6, 0x4, 0x8, 0x1, 0x0, 0x800, 0xcaa, 0x1, 0x2, 0x1000, 0x0, 0xffff, 0x7f, 0x30a8, 0x1, 0x4, 0x4, 0x1, 0x7, 0x5, 0x700, 0x2, 0x7, 0xd80, 0x9, 0xef, 0x4, 0x5, 0x8000, 0x7f, 0x3, 0x5, 0x7ff, 0x9, 0x9, 0x0, 0x3, 0xd, 0x5, 0x7, 0x4, 0x0, 0xe, 0x8, 0x8, 0x1, 0x8, 0x5, 0x0, 0x5, 0x4, 0x8, 0x10001, 0x4, 0x2, 0x5, 0x9, 0x10000, 0x6, 0x583c, 0x10000, 0x9, 0x5, 0x40000000, 0x1ff, 0x10001, 0x2, 0x784617eb, 0x9, 0x6, 0xc85, 0x5, 0x4, 0x3, 0xfff, 0x10, 0x81, 0x7, 0x0, 0x1, 0x10000, 0x7, 0xffff, 0x9, 0x9, 0xfdb5, 0x7, 0xf, 0x0, 0x2, 0x6, 0x8, 0x5f568d27, 0x800, 0x6, 0xfffffff7, 0x765, 0x9, 0x5, 0xe, 0x40, 0x4, 0x60, 0x3, 0x5, 0x2, 0x3, 0x6, 0x10000, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}, @TCA_FW_INDEV={0x14, 0x3, 'nicvf0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x18b4}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0)

5.713709281s ago: executing program 3 (id=696):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r4 = io_uring_setup(0x3aad, &(0x7f00000003c0)={0x0, 0x7611, 0x1000, 0x6, 0x3d8})
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0x0, 0x0, 0x31364d4e, 0x34565348, 0x7, [{}, {}, {}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0x6}], 0x0, 0x0, 0x7, 0x0, 0x6}})
fcntl$dupfd(r4, 0x0, r5)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x200400, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0xf, 0x0, 0x0)

5.40476328s ago: executing program 5 (id=629):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@setlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20081}}}}}}, @IFLA_TXQLEN={0x8, 0xd, 0x2}]}, 0x50}}, 0x0)

4.269423749s ago: executing program 3 (id=697):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}], &(0x7f0000000180)=[0x6, 0x0, 0x6, 0x5, 0x5], 0x1}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
setresgid(0xee00, 0xee01, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0)

4.06435134s ago: executing program 5 (id=698):
openat$nullb(0xffffffffffffff9c, 0x0, 0x40282, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x502, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

3.348007945s ago: executing program 3 (id=699):
socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)
r3 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)={0x101080, 0x3, 0xa}, 0x18)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x3}, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r4=>0x0})
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
pipe2(&(0x7f0000000200)={<r6=>0xffffffffffffffff}, 0x84000)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000240)={0x7ff, 0x0, {0xffffffffffffffff}, {<r7=>0xee00}, 0x9, 0x4})
read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
read$FUSE(r9, &(0x7f0000000580)={0x2020, 0x0, <r10=>0x0, <r11=>0x0, <r12=>0x0}, 0x2020)
write$FUSE_DIRENTPLUS(r9, &(0x7f00000029c0)=ANY=[@ANYBLOB="5806000000000000", @ANYRES64=r10, @ANYBLOB="0000000000000000020000000000000001800000000000004600000000000000ff000000020000000600000000000000a90f000000000000f9ffffffffffffffff0f00000000000002000000000000000300000000000000040000000000000007ed000000a0000008000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB="fd55000001000080000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000000000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff0030000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000ffffffffffffffff010000000000000002000000080000006194000000e0000007000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="008000000080ff01000000000100000000000000a9d00000000000000a0000005e9a00002f6465762f6375736500000000000000060000000000000002000000000000005f0000000000000004000000000000000400000001000000000000000000000007000000000000000010000000000000f9ffffffffffffff018000000000000000000000000000000008000000000080830b000000c0000001000080", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d00000006000000060000000000000084010000000000008705000000000000008000000000000008000000000000000000000000000000ffffffff0600000010000000002000000b000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="000000800b000000000000000200000000000000080000000000000001000000a200000028000000000000000200000000000000010000000000000009000000000000000600000000000000f8ffffffff7f0000050000000000000001000000000000000c000000000000000a00000000000000060000000000000006000000000000000300000006000000070000000080000008000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c0000000000000006000000000000000000000000000000d55d00000000000003000000000000000500000081000000030000000000000001000000010000000500000000000000020000000000000001000000000000000200000000000000060000009e4f5069000000800020000006000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0600000005000000000000000000000000000000fcffffffffffffff060000000400000026272e3a262800000200000000000000010000000000000001040000000000000500000000000000800000000400000005000000000000000404000000000000050000000000000004000000000000000108000000000000ff0000000000000006000000a2d70000ff7f0000004000007f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7fc60000000000000004000000000000000100000001000000040000004f0f00005c2d2d2c0000000005000000000000000100000000000000ff0700000000000004000000000000003d0000007f0000000600000000000000070000000000000005000000000000000300000000000000ec590000000000000500000000000000040000006c0f0000000000800040000080000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="060000004a6a00000000000002000000000000004f0500000000000008000000ff0300006e6c3830323131000500000000000000020000000000000002000000000000009f04000000000000ff7f00006500000005000000000000004abe0000000000000707000000000000b304000000000000000000000000000003000000000000000100010000f8ffff06000000004000003eca4c4b", @ANYRES32=0xee00, @ANYRES32=r12, @ANYBLOB="01000000e262000000000000020000000000000001010000000000000100000003000000ad00000000000000"], 0x658)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@noload}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xfc}}, {@data_writeback}, {@noload}, {@data_err_ignore}, {@usrjquota}], [{@audit}, {@flag='silent'}, {@euid_lt={'euid<', r11}}]}, 0x0, 0x467, &(0x7f0000000540)="$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")
r13 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, <r14=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r14)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=<r15=>0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x2100000, &(0x7f0000002600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c726f6f746d6f64653d30303030301430303030303030303030303132303030302c757365725f69643d", @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=r8, @ANYBLOB=',blksize=0x0000000000000800,max_read=0x0000000000000003,default_permissions,default_permissions,default_permissions,blksize=0x0000000000000400,allow_other,rootcontext=staff_u,fsmagic=0x0000000000000009,uid=', @ANYRESDEC=r11, @ANYBLOB=',fowner=', @ANYRESDEC=r14, @ANYBLOB=',fowner=', @ANYRESDEC=r15, @ANYBLOB=',\x00'])
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4})
r16 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r16, 0x8982, &(0x7f0000000400)={0x0, 'veth0_to_batadv\x00', {0x2000001}, 0x7})

3.002547777s ago: executing program 0 (id=700):
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x81, 0x60, 0xdd, [{{0x9, 0x4, 0x0, 0x49, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x18000000, 0x1, 0x2, 0xad}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x60}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x38, 0x8}}}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, [{0xa, &(0x7f0000000480)=@string={0xa, 0x3, "517b38e53cc66a7e"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0xb6, &(0x7f0000000500)=@string={0xb6, 0x3, "8eaaaa5e9ded798f1b6d5fc3c5ace4daf912f86caada6de5a4aab2276acf6f79725fb759b3303ff37fcd69cc24c259707ca0a14a907fecc690cfb5d2c585ad8666c152d6c18477b3bb2569f923cde4493e2797aa1e87b5848fc127e22de34f69091f3057e000444b8d4d13bbb90c217cace4685b9b7d30d0cc2bf78520885a063b49308fec1eb33c2bd37ff2c8332addf0c9d6356145a94e49b584f2422c89f3b1c3925207f04bc91e3268e91e5592fa53467d09"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x406}}]})
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x760b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x915}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x8, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x9, 0xd}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0xf9, 0x6e, 0x85, 0xff}, 0xbd, &(0x7f0000000280)={0x5, 0xf, 0xbd, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "31c6b58eeb8b9110242a268bc8b85d53"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x9, 0x0, 0x7, 0x4}, @generic={0x54, 0x10, 0x3, "895083219f7b4ff4b0910162c934b562018710434ef8ff03598c345bbe16db0a7a891d263ca7fdb655d5d01ecdcd5b9c5d2925b49766cce89d8cca9df402be94836711eba5149176d41ce6658ed4bbf7c5"}, @generic={0x3b, 0x10, 0xa, "7cc4b9d7e9550b14c5a29fd9ed057bc2fb2c17dfb1e9936505d106a44caca8f5e3ff853c3c72658b75c85b5e4f1e98a21212bbc5b8dde9f4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x8, 0x7, 0x7fff}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x812}}]})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, 0xffffffffffffffff, 0x0)

2.428318324s ago: executing program 4 (id=701):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000700)={0x1c, r0, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

1.861454354s ago: executing program 3 (id=702):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
timer_create(0x8, &(0x7f0000000200)={0x0, 0x11, 0x2, @thr={&(0x7f0000001600)="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", &(0x7f0000000240)="dc172352d47462219318c76c864d37892c3fd71fd5041c7b6e7d99c547a47bf8818ca40b8d31bf014db3877e86cdfad4dfc3a9dda5d4af0171adfc0b8cb96271df7b0c53e71763647b7e6be8c211ff9fd2d0b45201072b477fda4d12bd7a6a93241bb5787e6452683e2d3254e8c8689d3c6a45b61e06f75465b18f696955ec4c561fd98282a0a74f220ac311820624daf196febefda47391cc2ebcccb4c3cd135d7f9070ecd071278c565b2aaba480e986028074f1d70011cd17a2de7024736264b7e2c92fb675157d8bd08e9c22fa7820f87ded9d7de68dfa73387fc5bbea18ddb54f54ae0f843cf732"}}, &(0x7f0000000980)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f00000009c0), 0x0)
clock_gettime(0x0, &(0x7f00000003c0)={<r2=>0x0, <r3=>0x0})
timer_settime(r1, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0xfffffffd, 0xfffdffff, 0x0, 0xfb, 0x0, "0040001e1d113c812e5d6000"})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), 0x0}, 0x1c)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4)
add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000206d0425c20000000000010902244c240000c0b109040000020300040009210101000122050009058103"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000"], 0x0}, 0x0)
r6 = syz_open_pts(r0, 0x0)
r7 = dup3(r6, r0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCMBIC(r7, 0x5417, &(0x7f0000000340)=0x7)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)

1.763845724s ago: executing program 0 (id=703):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a00009"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="40000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.653559519s ago: executing program 4 (id=704):
timer_create(0x6, &(0x7f0000000140)={0x0, 0x35, 0x4, @thr={&(0x7f0000000000)="1d71b8b96ce78c9482e87265c750a66878b4cb66d4a858271602b5d75d51ffa667bb188dd81e0788f5d646c74bc7a22e69", &(0x7f0000000040)="42bed7b9292a61fac2fc3e16bbac5922715621c64436c6544f02b1a9640486a4761c550e593c26f76dbfe701313a003e3836600ac787b9e1eff6bf823f8870c8ec9cb9da77cc4ba3fc1cab0d25ba4d352889e7cf6a126754cd7be497cbece1707f70a6abc138b0061b11f216c57e9639d69bae4758aa9d8745af1d01cbe2d0d35e2d3c563ec469b8aacadcae7eefe36045b47b2de0273d78fbd69fdd8adf6bea6d97074f57ca396716f65679f05bdb7a1e08a35bea6f45c40cb72184605d57a3ac7b6338e7f5c276"}}, &(0x7f0000000180)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000200))
timer_getoverrun(r0)
futex_waitv(&(0x7f0000001a40)=[{0x2, &(0x7f0000000240)=0x2, 0x82}, {0x1, &(0x7f0000000280)=0x5, 0x82}, {0x4, &(0x7f00000002c0)=0x1800000, 0x2}, {0x4, &(0x7f0000000300)=0x4, 0x82}, {0x6, &(0x7f0000000340)=0xfff, 0x82}, {0xa3a, &(0x7f0000000380)=0x3, 0x2}, {0x4, &(0x7f00000003c0)=0xc, 0x2}, {0x98, &(0x7f0000000400)=0x7, 0x82}, {0x9, &(0x7f0000000440)=0x1, 0x82}, {0x7c66ece3, &(0x7f0000000480)=0x7f, 0x2}, {0xe060, &(0x7f00000004c0)=0x576f}, {0x96, &(0x7f0000000500)=0x7}, {0x1ff, &(0x7f0000000540)=0x7ff, 0x82}, {0x4, &(0x7f0000000580)=0x6, 0x82}, {0x6, &(0x7f00000005c0)=0x3, 0x2}, {0x8000, &(0x7f0000000600)=0xcc4, 0x82}, {0xfff, &(0x7f0000000640)=0x7, 0x82}, {0x3ff, &(0x7f0000000680)=0xfff, 0x82}, {0x8, &(0x7f00000006c0)=0x101, 0x82}, {0x4, &(0x7f0000000700)=0x6, 0x2}, {0x7, &(0x7f0000000740)=0x80000000, 0x82}, {0x7fffffffffffffff, &(0x7f0000000780)=0x3, 0x2}, {0x1, &(0x7f00000007c0)=0x2400, 0x82}, {0x99, &(0x7f0000000800), 0x2}, {0x4, &(0x7f0000000840)=0x81, 0x2}, {0x6, &(0x7f0000000880)=0x4, 0x82}, {0x100000001, &(0x7f00000008c0)=0x4, 0x82}, {0x40, &(0x7f0000000900)=0x9, 0x82}, {0x11307843, &(0x7f0000000940)=0x62, 0x82}, {0x6, &(0x7f0000000980)=0x1, 0x2}, {0x2, &(0x7f00000009c0)=0x97b6, 0x2}, {0xfffffffffffffff9, &(0x7f0000000a00)=0x9, 0x2}, {0x5, &(0x7f0000000a40)=0x8011, 0x82}, {0x6, &(0x7f0000000a80), 0x80}, {0xffffffffffffffff, &(0x7f0000000ac0)=0x3, 0x82}, {0x0, &(0x7f0000000b00)=0x80000001, 0x82}, {0xfa, &(0x7f0000000b40)=0xff, 0x2}, {0x786, &(0x7f0000000b80)=0xc26, 0x2}, {0x7, &(0x7f0000000bc0)=0x3c5, 0x2}, {0x2, &(0x7f0000000c00)=0xb, 0x82}, {0x8, &(0x7f0000000c40)=0x5, 0x82}, {0x9, &(0x7f0000000c80)=0x10001, 0x82}, {0x3ff, &(0x7f0000000cc0)=0x1, 0x2}, {0x3, &(0x7f0000000d00)=0x8001, 0x2}, {0x6, &(0x7f0000000d40)=0x7f, 0x2}, {0xd, &(0x7f0000000d80)=0x4, 0x82}, {0xfffffffffffffffd, &(0x7f0000000dc0)=0x1, 0x82}, {0x40, &(0x7f0000000e00)=0x8, 0x2}, {0xd, &(0x7f0000000e40)=0xd, 0x82}, {0x88e, &(0x7f0000000e80)=0x641, 0x82}, {0xffff, &(0x7f0000000ec0)=0x7, 0x2}, {0xe4a, &(0x7f0000000f00)=0x20000000000}, {0x9, &(0x7f0000000f40)=0x5, 0x82}, {0x8, &(0x7f0000000f80)=0x8, 0x82}, {0x6, &(0x7f0000000fc0), 0x82}, {0xfffffffffffffff8, &(0x7f0000001000)=0x7, 0x82}, {0x7, &(0x7f0000001040)=0x9, 0x82}, {0xfffffffffffffffa, &(0x7f0000001080)=0x4, 0x2}, {0x5, &(0x7f00000010c0)=0x967b, 0x2}, {0xb6c, &(0x7f0000001100)=0x1, 0x2}, {0x459, &(0x7f0000001140)=0x3, 0x2}, {0x5, &(0x7f0000001180)=0x9, 0x82}, {0x5, &(0x7f00000011c0)=0x47, 0x2}, {0x53b, &(0x7f0000001200)=0x7, 0x82}, {0x8000000000000001, &(0x7f0000001240), 0x2}, {0xcc, &(0x7f0000001280)=0x5, 0x82}, {0x8, &(0x7f00000012c0)=0x5, 0x2}, {0x3f21, &(0x7f0000001300)=0x3ed, 0x2}, {0xffffffff, &(0x7f0000001340)=0x6, 0xc8da4ae938df7c42}, {0x101, &(0x7f0000001380)=0x400, 0x2}, {0x10000, &(0x7f00000013c0)=0x9, 0x2}, {0x6, &(0x7f0000001400)=0x4, 0x82}, {0x1, &(0x7f0000001440)=0x7, 0x2}, {0x7fffffffffffffff, &(0x7f0000001480)=0x1, 0x2}, {0x6, &(0x7f00000014c0)=0x6, 0x82}, {0x6f, &(0x7f0000001500)=0x24000000, 0x82}, {0x0, &(0x7f0000001540)=0x8000000000000001, 0x82}, {0x0, &(0x7f0000001580)=0x6, 0x2}, {0xffffffffffff0001, &(0x7f00000015c0)=0x80000001, 0x82}, {0xffffffffffffb47e, &(0x7f0000001600)=0x9, 0x2}, {0x0, &(0x7f0000001640)=0x800, 0x2}, {0x6, &(0x7f0000001680)=0x8, 0x2}, {0x7f, &(0x7f00000016c0)=0x6, 0x82}, {0x7, &(0x7f0000001700)=0x79a, 0x82}, {0xe4a, &(0x7f0000001740)=0x6, 0x82}, {0x6, &(0x7f0000001780)=0x7fffffffffffffff, 0x2}, {0x4, &(0x7f00000017c0)=0x3, 0x49fc9bae5414c60f}, {0xfffffffffffffffd, &(0x7f0000001800)=0xfffffffffffffff7, 0x82}, {0x0, &(0x7f0000001840)=0x3, 0x2}, {0x5, &(0x7f0000001880)=0x5, 0x2}, {0x200, &(0x7f00000018c0)=0x3, 0x2}, {0x8e2e, &(0x7f0000001900)=0xcd8, 0x2}, {0x7fff, &(0x7f0000001940)=0x10000, 0x82}, {0x7, &(0x7f0000001980)=0x4, 0x82}, {0x101, &(0x7f00000019c0)=0x100, 0x82}, {0x26f2d823, &(0x7f0000001a00)=0x9, 0x2}], 0x60, 0x0, &(0x7f0000002340)={0x0, 0x3938700}, 0x1)
clock_gettime(0x0, &(0x7f0000002380)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x0, &(0x7f00000023c0)={{r1, r2+60000000}, {0x0, 0x989680}}, &(0x7f0000002400))
r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000002440), 0x0, 0x0)
timerfd_settime(r3, 0x2, &(0x7f0000002480)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000024c0))
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000d, 0x10, r3, 0x8000000)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000002500)=@IORING_OP_SPLICE={0x1e, 0x9, 0x0, @fd_index, 0xfffffffffffffff8, {0x0, r3}, 0x2, 0x8, 0x0, {0x0, r5, r3}})
getsockopt$sock_timeval(r3, 0x1, 0x1, &(0x7f0000002540), &(0x7f0000002580)=0x8)
timer_settime(r0, 0x0, &(0x7f00000025c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000002600))
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000002640)={0x4, 0x3a, 0x3})
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000026c0)={0x3, &(0x7f0000002680)=[{0x0, 0x80, 0x3, 0x6}, {0x9, 0xd0, 0x2, 0xfe}, {0x7, 0x2, 0x6, 0x2}]})
mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x5, 0x50, r3, 0x100000000)
shutdown(r6, 0x1)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002700), &(0x7f0000002740)=0x4)
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000002800)={0x0, r3})
timer_delete(r0)
gettid()
bind$rds(r6, &(0x7f0000002840)={0x2, 0x4e24, @broadcast}, 0x10)
getsockname$packet(r3, &(0x7f0000002880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000028c0)=0x14)
close(r7)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002a80)={0x8, <r8=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000002b00)={0xf, 0x5, &(0x7f0000002900)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x53}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd}]}, &(0x7f0000002940)='syzkaller\x00', 0x100, 0x90, &(0x7f0000002980)=""/144, 0x41100, 0x2, '\x00', 0x0, @fallback=0x27, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002a40)={0x4, 0xe, 0xa395, 0x3}, 0x10, r8, r3, 0x0, &(0x7f0000002ac0)=[r3, r3], 0x0, 0x10, 0x309b}, 0x94)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom(r9, &(0x7f0000002bc0)=""/220, 0xdc, 0x0, &(0x7f0000002cc0)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80)

1.446933245s ago: executing program 5 (id=705):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)

743.83266ms ago: executing program 0 (id=706):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000900)={0x0, 0x0, 0x7, &(0x7f00000008c0)={0x0, "cc3df0b97c31c635d41f1db191085cee6345c0bd492ca56f24ee000000000400"}})

233.544613ms ago: executing program 5 (id=707):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ab553fec84248c32e27deeffffff8464603120e439338db6d00c5b004f40c956f5d5a753b7bc2074", 0x28)

142.578965ms ago: executing program 4 (id=708):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r4 = io_uring_setup(0x3aad, &(0x7f00000003c0)={0x0, 0x7611, 0x1000, 0x6, 0x3d8})
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0x0, 0x0, 0x31364d4e, 0x34565348, 0x7, [{}, {}, {}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0x6}], 0x0, 0x0, 0x7, 0x0, 0x6}})
fcntl$dupfd(r4, 0x0, r5)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x200400, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0xf, 0x0, 0x0)

0s ago: executing program 0 (id=709):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
setresgid(0xee00, 0xee01, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0)

kernel console output (not intermixed with test programs):

5 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  409.006753][   T30] audit: type=1326 audit(1756759886.929:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  409.031326][   T30] audit: type=1326 audit(1756759886.929:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  409.055239][   T30] audit: type=1326 audit(1756759886.929:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  409.078060][   T30] audit: type=1326 audit(1756759886.979:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  409.164492][ T7282] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.249779][ T7984] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  409.334801][ T7984] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  409.439736][ T7984] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  409.497333][ T8089] loop4: detected capacity change from 0 to 8
[  409.570784][ T7984] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  409.610121][ T8089] SQUASHFS error: xz decompression failed, data probably corrupt
[  409.618450][ T8089] SQUASHFS error: Failed to read block 0x108: -5
[  409.625173][ T8089] SQUASHFS error: Unable to read metadata cache entry [106]
[  409.632614][ T8089] SQUASHFS error: Unable to read inode 0x11f
[  409.882076][ T8094] netlink: 'syz.0.511': attribute type 2 has an invalid length.
[  410.255269][ T8089] netlink: 'syz.4.510': attribute type 10 has an invalid length.
[  410.623964][ T5903] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  410.856538][ T5867] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  410.882702][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  410.893692][ T5903] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  410.905499][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33119, setting to 1024
[  410.917140][ T5903] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[  411.000244][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.037258][ T5903] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  411.050560][ T5903] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  411.061389][ T5903] usb 5-1: Manufacturer: syz
[  411.098942][ T5867] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[  411.108201][ T5867] usb 4-1: config 0 has no interface number 0
[  411.114798][ T5867] usb 4-1: config 0 interface 128 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.126302][ T5867] usb 4-1: config 0 interface 128 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  411.137258][ T5867] usb 4-1: config 0 interface 128 has no altsetting 0
[  411.146097][ T5867] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  411.156279][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.184336][ T5903] usb 5-1: config 0 descriptor??
[  411.193668][ T8089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  411.234749][ T7984] 8021q: adding VLAN 0 to HW filter on device team0
[  411.263886][ T5903] smsusb:smsusb_probe: board id=9, interface number 0
[  411.309939][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.317551][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  411.367349][ T5903] smsusb:siano_media_device_register: media controller created
[  411.380585][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  411.388599][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  411.396520][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  411.401914][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.404440][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  411.411336][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state
[  411.418985][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  411.433719][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  411.441530][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  411.449806][ T5903] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[  411.462643][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  411.462938][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  411.463199][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  411.466459][ T5867] usb 4-1: config 0 descriptor??
[  411.472943][ T5903] smsmdtv:smscore_set_device_mode: mode detect failed -22
[  411.473031][ T5903] smsmdtv:smscore_start_device: set device mode failed , rc -22
[  411.473111][ T5903] smsusb:smsusb_init_device: smscore_start_device(...) failed
[  411.507609][ T5876] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  411.516307][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f62
[  411.532571][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  411.543563][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  411.556936][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  411.569283][ T5903] raw: ffffea00011a4ea0 ffffea00011b8ea0
[  411.575251][ T5903] page dumped because: Not a kmalloc allocation
[  411.582326][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f60
[  411.591398][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  411.598855][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  411.607767][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  411.616681][ T5903] raw: ffffea00011a4e00 ffffea00011b8e00
[  411.622467][ T5903] page dumped because: Not a kmalloc allocation
[  411.630130][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f5e
[  411.639234][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  411.646671][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  411.660176][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  411.671239][ T5903] raw: ffffea00011a4d60 ffffea00011b8d60
[  411.677165][ T5903] page dumped because: Not a kmalloc allocation
[  411.684451][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f5c
[  411.693529][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  411.700882][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  411.709767][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  411.718659][ T5903] raw: ffffea00011a4cc0 ffffea00011b8cc0
[  411.724554][ T5903] page dumped because: Not a kmalloc allocation
[  411.731663][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f5a
[  411.740748][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  411.748320][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  411.761674][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  411.772664][ T5903] raw: ffffea00011a4c20 ffffea00011b8c20
[  411.778589][ T5903] page dumped because: Not a kmalloc allocation
[  411.785748][ T5876] usb 3-1: Using ep0 maxpacket: 8
[  411.785797][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f58
[  411.799915][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  411.800003][ T5876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  411.807380][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  411.807517][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  411.807627][ T5903] raw: ffffea00011a4b80 ffffea00011b8b80
[  411.807697][ T5903] page dumped because: Not a kmalloc allocation
[  411.847165][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f56
[  411.856296][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  411.868244][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  411.879778][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  411.888706][ T5903] raw: ffffea00011a4ae0 ffffea00011b8ae0
[  411.894708][ T5903] page dumped because: Not a kmalloc allocation
[  411.901776][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f54
[  411.910985][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  411.917941][ T5867] usbhid 4-1:0.128: can't add hid device: -71
[  411.918403][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  411.925498][ T5867] usbhid 4-1:0.128: probe with driver usbhid failed with error -71
[  411.933257][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  411.933510][ T5903] raw: ffffea00011a4a40 ffffea00011b8a40
[  411.955936][ T5903] page dumped because: Not a kmalloc allocation
[  411.967442][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f52
[  411.978740][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  411.986190][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  411.995086][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  412.004044][ T5903] raw: ffffea00011a49a0 ffffea00011b89a0
[  412.009822][ T5903] page dumped because: Not a kmalloc allocation
[  412.017001][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f50
[  412.026179][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  412.033716][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  412.040618][ T5876] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  412.042480][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  412.042592][ T5903] raw: ffffea00011a4900 ffffea00011b8900
[  412.052055][ T5876] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  412.060480][ T5903] page dumped because: Not a kmalloc allocation
[  412.083509][ T5876] usb 3-1: Product: syz
[  412.087860][ T5876] usb 3-1: Manufacturer: syz
[  412.092623][ T5876] usb 3-1: SerialNumber: syz
[  412.196464][ T5867] usb 4-1: USB disconnect, device number 16
[  412.656356][ T5903] smsusb:smsusb_probe: Device initialized with return code -22
[  412.690353][ T5876] usb 3-1: Handspring Visor / Palm OS: No valid connect info available
[  412.700374][ T5876] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  412.708628][ T5876] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  412.716932][ T5876] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2
[  412.803449][    C0] hrtimer: interrupt took 184320 ns
[  412.904529][ T5876] usb 3-1: palm_os_3_probe - error -71 getting bytes available request
[  412.914808][ T5876] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[  412.967405][ T5876] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  413.014418][ T5876] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  413.188085][ T5876] usb 3-1: USB disconnect, device number 18
[  413.211328][ T5903] smsusb 5-1:0.0: probe with driver smsusb failed with error -22
[  413.286680][ T5876] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  413.316581][ T5903] usb 5-1: USB disconnect, device number 33
[  413.507663][ T5876] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  413.604894][ T5876] visor 3-1:1.0: device disconnected
[  413.848210][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  413.914993][ T8125] program syz.4.517 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  414.527668][ T7984] veth0_vlan: entered promiscuous mode
[  414.636189][ T7984] veth1_vlan: entered promiscuous mode
[  414.967930][ T7984] veth0_macvtap: entered promiscuous mode
[  415.027879][ T7984] veth1_macvtap: entered promiscuous mode
[  415.337844][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.381095][ T8142] loop2: detected capacity change from 0 to 8
[  415.438546][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.479748][ T8142] SQUASHFS error: xz decompression failed, data probably corrupt
[  415.488398][ T8142] SQUASHFS error: Failed to read block 0x108: -5
[  415.495076][ T8142] SQUASHFS error: Unable to read metadata cache entry [106]
[  415.502534][ T8142] SQUASHFS error: Unable to read inode 0x11f
[  415.578007][ T4380] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.630643][ T4380] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.697101][ T8148] bond0: entered promiscuous mode
[  415.702366][ T8148] bond_slave_0: entered promiscuous mode
[  415.709593][ T8148] bond_slave_1: entered promiscuous mode
[  415.725242][ T8148] batadv0: entered promiscuous mode
[  415.741587][ T8148] 8021q: adding VLAN 0 to HW filter on device hsr1
[  415.758502][ T3872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.762658][ T5867] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  415.818679][ T1131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.943640][ T5867] usb 5-1: Using ep0 maxpacket: 32
[  415.989760][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  416.001654][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  416.013524][ T5867] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  416.022796][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.062329][ T8152] netlink: 'syz.2.524': attribute type 10 has an invalid length.
[  416.179924][ T5867] usb 5-1: config 0 descriptor??
[  416.189523][ T8146] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  416.238179][ T5867] hub 5-1:0.0: USB hub found
[  416.386940][ T5876] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  416.475673][ T5867] hub 5-1:0.0: 1 port detected
[  416.623605][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  416.634805][ T5876] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  416.645292][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33119, setting to 1024
[  416.656992][ T5876] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[  416.806126][ T5876] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  416.816497][ T5876] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  416.826122][ T5876] usb 3-1: Manufacturer: syz
[  416.861607][ T5876] usb 3-1: config 0 descriptor??
[  416.873725][ T8142] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  416.950799][ T5876] smsusb:smsusb_probe: board id=9, interface number 0
[  417.002400][ T5876] smsusb:siano_media_device_register: media controller created
[  417.015979][ T5876] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[  417.024774][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  417.025124][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  417.025365][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  417.025610][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  417.025844][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  417.026079][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  417.026313][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  417.026554][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  417.026798][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  417.027040][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  417.115179][ T5876] smsmdtv:smscore_set_device_mode: mode detect failed -22
[  417.122585][ T5876] smsmdtv:smscore_start_device: set device mode failed , rc -22
[  417.130656][ T5876] smsusb:smsusb_init_device: smscore_start_device(...) failed
[  417.151704][ T5876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f62
[  417.160901][ T5876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  417.168907][ T5876] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  417.177940][ T5876] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  417.189202][ T5876] raw: ffffea00011a4ea0 ffffea00011b8ea0
[  417.196301][ T5876] page dumped because: Not a kmalloc allocation
[  417.203966][ T5876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f60
[  417.213048][ T5876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  417.220954][ T5876] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  417.224702][ T8162] loop3: detected capacity change from 0 to 2048
[  417.229890][ T5876] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  417.245094][ T5876] raw: ffffea00011a4e00 ffffea00011b8e00
[  417.250875][ T5876] page dumped because: Not a kmalloc allocation
[  417.258800][ T5876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f5e
[  417.267950][ T5876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  417.275457][ T5876] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  417.284493][ T5876] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  417.295807][ T5876] raw: ffffea00011a4d60 ffffea00011b8d60
[  417.301619][ T5876] page dumped because: Not a kmalloc allocation
[  417.309865][ T5876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f5c
[  417.319107][ T5876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  417.326637][ T5876] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  417.335666][ T5876] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  417.344667][ T5876] raw: ffffea00011a4cc0 ffffea00011b8cc0
[  417.350500][ T5876] page dumped because: Not a kmalloc allocation
[  417.357802][ T5876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f5a
[  417.366940][ T5876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  417.375402][ T5876] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  417.384366][ T5876] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  417.395552][ T5876] raw: ffffea00011a4c20 ffffea00011b8c20
[  417.401445][ T5876] page dumped because: Not a kmalloc allocation
[  417.409779][ T5876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f58
[  417.419040][ T5876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  417.426630][ T5876] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  417.435641][ T5876] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  417.444595][ T5876] raw: ffffea00011a4b80 ffffea00011b8b80
[  417.450385][ T5876] page dumped because: Not a kmalloc allocation
[  417.457666][ T5876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f56
[  417.467166][ T5876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  417.474619][ T5876] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  417.483701][ T5876] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  417.494978][ T5876] raw: ffffea00011a4ae0 ffffea00011b8ae0
[  417.500771][ T5876] page dumped because: Not a kmalloc allocation
[  417.509156][ T5876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f54
[  417.518294][ T5876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  417.525889][ T5876] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  417.534816][ T5876] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  417.543820][ T5876] raw: ffffea00011a4a40 ffffea00011b8a40
[  417.549613][ T5876] page dumped because: Not a kmalloc allocation
[  417.556844][ T5876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f52
[  417.566052][ T5876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  417.573560][ T5876] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  417.582376][ T5876] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  417.591400][ T5876] raw: ffffea00011a49a0 ffffea00011b89a0
[  417.599530][ T5876] page dumped because: Not a kmalloc allocation
[  417.607823][ T5876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f50
[  417.616966][ T5876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  417.624586][ T5876] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  417.633538][ T5876] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  417.642333][ T5876] raw: ffffea00011a4900 ffffea00011b8900
[  417.648349][ T5876] page dumped because: Not a kmalloc allocation
[  417.959897][ T8162] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  417.985964][ T5876] smsusb:smsusb_probe: Device initialized with return code -22
[  418.047606][ T5867] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  418.053272][ T5872] usb 5-1: USB disconnect, device number 34
[  418.069381][ T8162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  418.270009][ T5876] smsusb 3-1:0.0: probe with driver smsusb failed with error -22
[  418.333660][ T5876] usb 3-1: USB disconnect, device number 19
[  419.216762][ T8186] program syz.3.533 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  419.282221][ T8180] loop2: detected capacity change from 0 to 128
[  419.301899][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'.
[  419.413982][ T8180] zonefs: Bad value for 'errors'
[  419.604835][ T5872] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  419.712259][ T8180] loop2: detected capacity change from 0 to 1024
[  419.792823][ T8180] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  419.803601][ T8180] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  419.815204][ T8180] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  419.873227][ T5872] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  419.882013][ T5872] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  419.891505][ T5872] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  419.902162][ T5872] usb 5-1: config 220 has no interface number 2
[  419.908752][ T5872] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  419.922258][ T5872] usb 5-1: config 220 interface 0 has no altsetting 0
[  419.929399][ T5872] usb 5-1: config 220 interface 76 has no altsetting 0
[  419.938998][ T5872] usb 5-1: config 220 interface 1 has no altsetting 0
[  420.011439][ T8180] EXT4-fs error (device loop2): ext4_get_journal_inode:5800: inode #5: comm syz.2.532: unexpected bad inode w/o EXT4_IGET_BAD
[  420.073941][ T8180] EXT4-fs (loop2): no journal found
[  420.079459][ T8180] EXT4-fs (loop2): can't get journal size
[  420.135266][ T5872] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  420.144802][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.153000][ T5872] usb 5-1: Product: syz
[  420.160834][ T5872] usb 5-1: Manufacturer: syz
[  420.167854][ T5872] usb 5-1: SerialNumber: syz
[  420.178429][ T8180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  420.438442][ T8191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.449387][ T8191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.538132][ T8205] loop3: detected capacity change from 0 to 8
[  420.616769][ T5872] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  420.624314][ T5872] usb 5-1: No valid video chain found.
[  420.630122][ T5872] usb 5-1: selecting invalid altsetting 0
[  420.699102][ T8205] SQUASHFS error: xz decompression failed, data probably corrupt
[  420.707368][ T8205] SQUASHFS error: Failed to read block 0x108: -5
[  420.715099][ T8205] SQUASHFS error: Unable to read metadata cache entry [106]
[  420.722534][ T8205] SQUASHFS error: Unable to read inode 0x11f
[  420.812310][ T5872] usb 5-1: selecting invalid altsetting 0
[  420.820402][ T5872] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  420.988083][ T5872] usb 5-1: USB disconnect, device number 35
[  421.165913][ T7486] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.202064][ T8208] netlink: 'syz.3.538': attribute type 10 has an invalid length.
[  421.275376][ T8208] syz_tun: entered promiscuous mode
[  421.313097][ T8208] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  421.768602][ T5903] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  422.006831][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  422.017056][ T5903] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  422.027089][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33119, setting to 1024
[  422.034699][ T5867] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  422.038497][ T5903] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[  422.085206][ T5903] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  422.095177][ T5903] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  422.106655][ T5903] usb 4-1: Manufacturer: syz
[  422.117551][ T5903] usb 4-1: config 0 descriptor??
[  422.129405][ T8208] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  422.185654][ T5903] smsusb:smsusb_probe: board id=9, interface number 0
[  422.229543][ T5903] smsusb:siano_media_device_register: media controller created
[  422.240834][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  422.248975][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  422.262705][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  422.270610][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  422.278476][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  422.285475][ T8224] netlink: 'syz.0.542': attribute type 10 has an invalid length.
[  422.286351][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  422.301641][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  422.309811][ T5903] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[  422.314901][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  422.322789][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  422.331342][ T5867] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[  422.338642][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  422.348433][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.355235][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  422.370730][ T5903] smsmdtv:smscore_set_device_mode: mode detect failed -22
[  422.380293][ T5903] smsmdtv:smscore_start_device: set device mode failed , rc -22
[  422.388234][ T5903] smsusb:smsusb_init_device: smscore_start_device(...) failed
[  422.402435][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x129962
[  422.416231][ T5903] flags: 0x17ff00000000000(node=0|zone=2|lastcpupid=0x7ff)
[  422.425809][ T5903] raw: 017ff00000000000 0000000000000000 ffffea0005cfeeb0 0000000000000000
[  422.434815][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  422.443771][ T5903] raw: ffffea0005cd6ea0 ffffea0005ceaea0
[  422.449560][ T5903] page dumped because: Not a kmalloc allocation
[  422.456739][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x129960
[  422.465871][ T5903] flags: 0x17ff00000000000(node=0|zone=2|lastcpupid=0x7ff)
[  422.473301][ T5903] raw: 017ff00000000000 0000000000000000 dead000000000122 0000000000000000
[  422.482336][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  422.491363][ T5903] raw: ffffea0005cd6e00 ffffea0005ceae00
[  422.497322][ T5903] page dumped because: Not a kmalloc allocation
[  422.504489][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12995e
[  422.518064][ T5903] flags: 0x17ff00000000000(node=0|zone=2|lastcpupid=0x7ff)
[  422.527619][ T5903] raw: 017ff00000000000 0000000000000000 ffffea0005cfed68 0000000000000000
[  422.536664][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  422.545547][ T5903] raw: ffffea0005cd6d60 ffffea0005cead60
[  422.551334][ T5903] page dumped because: Not a kmalloc allocation
[  422.555718][ T5867] usb 3-1: config 0 descriptor??
[  422.558653][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12995c
[  422.571807][ T5903] flags: 0x17ff00000000000(node=0|zone=2|lastcpupid=0x7ff)
[  422.579405][ T5903] raw: 017ff00000000000 0000000000000000 ffffea0005cfecc8 0000000000000000
[  422.588372][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  422.597274][ T5903] raw: ffffea0005cd6cc0 ffffea0005ceacc0
[  422.603054][ T5903] page dumped because: Not a kmalloc allocation
[  422.610253][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12995a
[  422.624010][ T5903] flags: 0x17ff00000000000(node=0|zone=2|lastcpupid=0x7ff)
[  422.631460][ T5903] raw: 017ff00000000000 0000000000000000 ffffea0005cfec30 0000000000000000
[  422.642519][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  422.651430][ T5903] raw: ffffea0005cd6c20 ffffea0005ceac20
[  422.657375][ T5903] page dumped because: Not a kmalloc allocation
[  422.664491][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x129958
[  422.673838][ T5903] flags: 0x17ff00000000000(node=0|zone=2|lastcpupid=0x7ff)
[  422.681277][ T5903] raw: 017ff00000000000 0000000000000000 dead000000000122 0000000000000000
[  422.690293][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  422.699240][ T5903] raw: ffffea0005cd6b80 ffffea0005ceab80
[  422.705110][ T5903] page dumped because: Not a kmalloc allocation
[  422.712145][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x129956
[  422.725845][ T5903] flags: 0x17ff00000000000(node=0|zone=2|lastcpupid=0x7ff)
[  422.733313][ T5903] raw: 017ff00000000000 0000000000000000 ffffea0005cfeae8 0000000000000000
[  422.746631][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  422.755680][ T5903] raw: ffffea0005cd6ae0 ffffea0005ceaae0
[  422.761488][ T5903] page dumped because: Not a kmalloc allocation
[  422.768589][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x129954
[  422.777756][ T5903] flags: 0x17ff00000000000(node=0|zone=2|lastcpupid=0x7ff)
[  422.785292][ T5903] raw: 017ff00000000000 0000000000000000 ffffea0005cfea48 0000000000000000
[  422.794275][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  422.803082][ T5903] raw: ffffea0005cd6a40 ffffea0005ceaa40
[  422.809047][ T5903] page dumped because: Not a kmalloc allocation
[  422.816203][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x129952
[  422.829756][ T5903] flags: 0x17ff00000000000(node=0|zone=2|lastcpupid=0x7ff)
[  422.839344][ T5903] raw: 017ff00000000000 0000000000000000 ffffea0005cfe9b0 0000000000000000
[  422.848244][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  422.857283][ T5903] raw: ffffea0005cd69a0 ffffea0005cea9a0
[  422.863059][ T5903] page dumped because: Not a kmalloc allocation
[  422.870180][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x129950
[  422.879333][ T5903] flags: 0x17ff00000000000(node=0|zone=2|lastcpupid=0x7ff)
[  422.886920][ T5903] raw: 017ff00000000000 0000000000000000 dead000000000122 0000000000000000
[  422.896992][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  422.905983][ T5903] raw: ffffea0005cd6900 ffffea0005cea900
[  422.911773][ T5903] page dumped because: Not a kmalloc allocation
[  422.936741][ T5903] smsusb:smsusb_probe: Device initialized with return code -22
[  422.989561][ T8229] loop4: detected capacity change from 0 to 2048
[  423.129907][ T8229] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  423.162667][ T5867] waltop 0003:172F:0502.000D: hidraw0: USB HID v1.01 Device [HID 172f:0502] on usb-dummy_hcd.2-1/input0
[  423.186408][ T5903] smsusb 4-1:0.0: probe with driver smsusb failed with error -22
[  423.248762][ T5867] usb 3-1: USB disconnect, device number 20
[  423.290635][ T8229] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  423.788467][ T8239] fuse: Unknown parameter '`Q:ï÷ggó#ÏAu»M—à�þ–�½-%€ÿqÀn6ö3 ã¸˜HíS{²u„
§¸ÑeT]%Ôw㕽'
[  423.939669][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  423.939746][   T30] audit: type=1326 audit(1756759902.079:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  423.972819][   T30] audit: type=1326 audit(1756759902.089:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  423.995088][   T30] audit: type=1326 audit(1756759902.089:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  423.999561][ T8234] fido_id[8234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  424.050942][ T5867] usb 4-1: USB disconnect, device number 17
[  424.227376][   T30] audit: type=1326 audit(1756759902.179:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  424.252198][   T30] audit: type=1326 audit(1756759902.179:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  424.275918][   T30] audit: type=1326 audit(1756759902.189:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  424.298598][   T30] audit: type=1326 audit(1756759902.189:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  424.320946][   T30] audit: type=1326 audit(1756759902.219:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  424.345623][   T30] audit: type=1326 audit(1756759902.219:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  424.370974][   T30] audit: type=1326 audit(1756759902.219:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  424.470264][ T3872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.478874][ T3872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.738008][ T8250] program syz.3.547 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  425.112544][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.121104][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.663877][ T8264] binder: 8261:8264 unknown command 0
[  425.669548][ T8264] binder: 8261:8264 ioctl c0306201 80000080 returned -22
[  425.722173][ T8260] loop3: detected capacity change from 0 to 512
[  426.042477][ T8260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  426.055854][ T8260] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  426.459387][ T8281] loop4: detected capacity change from 0 to 8
[  426.627722][ T8281] SQUASHFS error: xz decompression failed, data probably corrupt
[  426.636127][ T8281] SQUASHFS error: Failed to read block 0x108: -5
[  426.642618][ T8281] SQUASHFS error: Unable to read metadata cache entry [106]
[  426.650301][ T8281] SQUASHFS error: Unable to read inode 0x11f
[  426.898184][ T7282] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  427.165647][ T8281] netlink: 'syz.4.554': attribute type 10 has an invalid length.
[  427.503900][ T5903] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  427.714379][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  427.716609][ T7486] bond0: (slave syz_tun): Releasing backup interface
[  427.724940][ T5903] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  427.725098][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33119, setting to 1024
[  427.725256][ T5903] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[  427.781094][ T5903] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  427.790832][ T5903] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  427.799393][ T5903] usb 5-1: Manufacturer: syz
[  427.816815][ T5903] usb 5-1: config 0 descriptor??
[  427.826838][ T8281] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  427.867854][ T5903] smsusb:smsusb_probe: board id=9, interface number 0
[  427.891373][ T5903] smsusb:siano_media_device_register: media controller created
[  427.902439][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  427.910420][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  427.918330][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  427.926313][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  427.934230][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  427.942553][ T5903] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[  427.957566][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  427.957838][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  427.958077][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  427.958317][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  427.958563][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  427.999526][ T5903] smsmdtv:smscore_set_device_mode: mode detect failed -22
[  428.006905][ T5903] smsmdtv:smscore_start_device: set device mode failed , rc -22
[  428.016333][ T5903] smsusb:smsusb_init_device: smscore_start_device(...) failed
[  428.032275][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f62
[  428.048458][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  428.059055][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  428.068139][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  428.077011][ T5903] raw: ffffea00011a4ea0 ffffea00011b8ea0
[  428.082788][ T5903] page dumped because: Not a kmalloc allocation
[  428.089982][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f60
[  428.099080][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  428.106649][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  428.115525][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  428.124868][ T5903] raw: ffffea00011a4e00 ffffea00011b8e00
[  428.130665][ T5903] page dumped because: Not a kmalloc allocation
[  428.137857][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f5e
[  428.153759][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  428.161140][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  428.173230][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  428.182123][ T5903] raw: ffffea00011a4d60 ffffea00011b8d60
[  428.188125][ T5903] page dumped because: Not a kmalloc allocation
[  428.195261][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f5c
[  428.204381][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  428.211742][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  428.220754][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  428.229731][ T5903] raw: ffffea00011a4cc0 ffffea00011b8cc0
[  428.236051][ T5903] page dumped because: Not a kmalloc allocation
[  428.249929][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f5a
[  428.262039][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  428.269548][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  428.278478][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  428.287818][ T5903] raw: ffffea00011a4c20 ffffea00011b8c20
[  428.293741][ T5903] page dumped because: Not a kmalloc allocation
[  428.300770][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f58
[  428.309854][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  428.317411][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  428.326373][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  428.335532][ T5903] raw: ffffea00011a4b80 ffffea00011b8b80
[  428.341332][ T5903] page dumped because: Not a kmalloc allocation
[  428.354902][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f56
[  428.367093][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  428.374663][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  428.383567][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  428.392369][ T5903] raw: ffffea00011a4ae0 ffffea00011b8ae0
[  428.398330][ T5903] page dumped because: Not a kmalloc allocation
[  428.405437][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f54
[  428.414603][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  428.421972][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  428.430963][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  428.439939][ T5903] raw: ffffea00011a4a40 ffffea00011b8a40
[  428.445897][ T5903] page dumped because: Not a kmalloc allocation
[  428.459401][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f52
[  428.471701][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  428.479164][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  428.488056][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  428.497059][ T5903] raw: ffffea00011a49a0 ffffea00011b89a0
[  428.502848][ T5903] page dumped because: Not a kmalloc allocation
[  428.509992][ T5903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38f50
[  428.519077][ T5903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  428.526544][ T5903] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  428.535519][ T5903] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  428.544399][ T5903] raw: ffffea00011a4900 ffffea00011b8900
[  428.557059][ T5903] page dumped because: Not a kmalloc allocation
[  428.576645][ T5903] smsusb:smsusb_probe: Device initialized with return code -22
[  428.788325][ T4313] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.901640][ T4313] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.119266][ T4313] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.122992][ T5903] smsusb 5-1:0.0: probe with driver smsusb failed with error -22
[  429.234998][ T5903] usb 5-1: USB disconnect, device number 36
[  429.376859][ T4313] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.964650][ T4313] bridge_slave_1: left allmulticast mode
[  429.970616][ T4313] bridge_slave_1: left promiscuous mode
[  429.977626][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.059025][ T4313] bridge_slave_0: left allmulticast mode
[  430.065694][ T4313] bridge_slave_0: left promiscuous mode
[  430.072203][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.739767][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  430.761529][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  430.792983][ T4313] bond0 (unregistering): Released all slaves
[  431.454827][ T5872] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  431.496818][ T5867] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  431.542016][ T4313] hsr_slave_0: left promiscuous mode
[  431.573985][ T4313] hsr_slave_1: left promiscuous mode
[  431.582065][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  431.591492][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0
[  431.656556][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  431.664382][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1
[  431.710122][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  431.721928][ T5872] usb 5-1: Using ep0 maxpacket: 8
[  431.723568][ T5867] usb 2-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[  431.738419][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.744654][ T4313] veth1_macvtap: left promiscuous mode
[  431.752166][ T4313] veth0_macvtap: left promiscuous mode
[  431.760019][ T4313] veth1_vlan: left promiscuous mode
[  431.765654][ T4313] veth0_vlan: left promiscuous mode
[  431.798233][ T5872] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  431.807533][ T5872] usb 5-1: config 179 has no interface number 0
[  431.814224][ T5872] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  431.825752][ T5872] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  431.841121][ T5872] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  431.853687][ T5872] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  431.868509][ T5872] usb 5-1: config 179 interface 65 has no altsetting 0
[  431.875798][ T5872] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  431.885158][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.905446][ T5867] usb 2-1: config 0 descriptor??
[  432.547373][ T5867] waltop 0003:172F:0502.000E: hidraw0: USB HID v1.01 Device [HID 172f:0502] on usb-dummy_hcd.1-1/input0
[  432.589906][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  432.647626][ T5867] usb 2-1: USB disconnect, device number 30
[  432.684734][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  432.715338][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  432.784799][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  432.809403][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  433.095703][ T4313] team0 (unregistering): Port device team_slave_1 removed
[  433.186365][ T4313] team0 (unregistering): Port device team_slave_0 removed
[  433.387595][ T8332] fido_id[8332]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  434.085451][ T7824] bond0: (slave syz_tun): Releasing backup interface
[  434.281750][ T8337] loop1: detected capacity change from 0 to 2048
[  434.437134][ T8337] udf: Unexpected value for 'shortad'
[  434.450306][ T4313] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.534148][ T8339] random: crng reseeded on system resumption
[  434.621824][ T4313] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.637514][ T8337] netlink: 'syz.1.573': attribute type 1 has an invalid length.
[  434.688734][ T8339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.573'.
[  434.770106][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'.
[  434.822950][ T4313] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.938705][ T5830] Bluetooth: hci4: command tx timeout
[  435.080758][ T4313] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.433890][ T5867] usb 5-1: USB disconnect, device number 37
[  435.684438][ T4313] bridge_slave_1: left allmulticast mode
[  435.690462][ T4313] bridge_slave_1: left promiscuous mode
[  435.697443][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.779979][ T4313] bridge_slave_0: left allmulticast mode
[  435.786566][ T4313] bridge_slave_0: left promiscuous mode
[  435.793073][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.286446][ T4313] bond0 (unregistering): left promiscuous mode
[  436.292832][ T4313] bond_slave_0: left promiscuous mode
[  436.299612][ T4313] bond_slave_1: left promiscuous mode
[  436.311616][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  436.341972][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  436.362196][ T4313] bond0 (unregistering): Released all slaves
[  436.382406][ T8328] chnl_net:caif_netlink_parms(): no params data found
[  436.920090][ T4313] batadv0: left promiscuous mode
[  436.976015][ T5830] Bluetooth: hci4: command tx timeout
[  437.042174][ T4313] hsr_slave_0: left promiscuous mode
[  437.085882][ T4313] hsr_slave_1: left promiscuous mode
[  437.094177][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  437.101825][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0
[  437.195910][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.204197][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.270056][ T4313] veth1_macvtap: left promiscuous mode
[  437.277163][ T4313] veth0_macvtap: left promiscuous mode
[  437.283038][ T4313] veth1_vlan: left promiscuous mode
[  437.288787][ T4313] veth0_vlan: left promiscuous mode
[  437.862419][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  437.888950][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  437.938906][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  438.110006][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  438.110123][ T4313] team0 (unregistering): Port device team_slave_1 removed
[  438.200095][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  438.210795][ T4313] team0 (unregistering): Port device team_slave_0 removed
[  439.054682][ T5830] Bluetooth: hci4: command tx timeout
[  439.245128][ T8390] loop4: detected capacity change from 0 to 8
[  439.373785][ T8390] SQUASHFS error: xz decompression failed, data probably corrupt
[  439.381877][ T8390] SQUASHFS error: Failed to read block 0x108: -5
[  439.388582][ T8390] SQUASHFS error: Unable to read metadata cache entry [106]
[  439.396242][ T8390] SQUASHFS error: Unable to read inode 0x11f
[  439.476243][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.485661][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.493303][ T8328] bridge_slave_0: entered allmulticast mode
[  439.503081][ T8328] bridge_slave_0: entered promiscuous mode
[  439.597843][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.605700][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.615301][ T8328] bridge_slave_1: entered allmulticast mode
[  439.624830][ T8328] bridge_slave_1: entered promiscuous mode
[  439.939778][ T8400] netlink: 'syz.4.584': attribute type 10 has an invalid length.
[  440.080129][ T8328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.119043][ T8328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.265211][ T5821] Bluetooth: hci2: command tx timeout
[  440.380761][ T5872] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  440.519171][ T8328] team0: Port device team_slave_0 added
[  440.568569][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  440.578948][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  440.580013][ T8328] team0: Port device team_slave_1 added
[  440.589014][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33119, setting to 1024
[  440.589181][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[  440.649328][ T5872] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  440.659458][ T5872] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  440.660552][ T8409] loop1: detected capacity change from 0 to 256
[  440.668024][ T5872] usb 5-1: Manufacturer: syz
[  440.703244][ T8373] chnl_net:caif_netlink_parms(): no params data found
[  440.759922][ T5872] usb 5-1: config 0 descriptor??
[  440.779235][ T8390] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  440.827345][ T5872] smsusb:smsusb_probe: board id=9, interface number 0
[  440.872115][ T5872] smsusb:siano_media_device_register: media controller created
[  440.883964][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  440.891888][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  440.899808][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  440.907636][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  440.915554][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  440.923332][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  440.931167][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  440.941190][ T5872] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[  440.953120][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  440.953385][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  440.953622][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  440.980362][ T5872] smsmdtv:smscore_set_device_mode: mode detect failed -22
[  440.987790][ T5872] smsmdtv:smscore_start_device: set device mode failed , rc -22
[  440.995659][ T5872] smsusb:smsusb_init_device: smscore_start_device(...) failed
[  441.009756][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170e2
[  441.018863][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  441.026468][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  441.035501][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  441.047892][ T5872] raw: ffffea000070c6a0 ffffea00007206a0
[  441.055541][ T5872] page dumped because: Not a kmalloc allocation
[  441.062558][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170e0
[  441.071661][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  441.079121][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  441.088143][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  441.097176][ T5872] raw: ffffea000070c600 ffffea0000720600
[  441.102965][ T5872] page dumped because: Not a kmalloc allocation
[  441.110183][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170de
[  441.119260][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  441.126866][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  441.135867][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  441.136345][ T5821] Bluetooth: hci4: command tx timeout
[  441.144799][ T5872] raw: ffffea000070c560 ffffea0000720560
[  441.144870][ T5872] page dumped because: Not a kmalloc allocation
[  441.149059][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170dc
[  441.173149][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  441.180654][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  441.190248][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  441.199162][ T5872] raw: ffffea000070c4c0 ffffea00007204c0
[  441.205053][ T5872] page dumped because: Not a kmalloc allocation
[  441.212078][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170da
[  441.221259][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  441.228696][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  441.237580][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  441.246513][ T5872] raw: ffffea000070c420 ffffea0000720420
[  441.255733][ T5872] page dumped because: Not a kmalloc allocation
[  441.262635][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170d8
[  441.273450][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  441.280818][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  441.289820][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  441.298796][ T5872] raw: ffffea000070c380 ffffea0000720380
[  441.304741][ T5872] page dumped because: Not a kmalloc allocation
[  441.311751][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170d6
[  441.320889][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  441.328400][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  441.337403][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  441.346433][ T5872] raw: ffffea000070c2e0 ffffea00007202e0
[  441.355656][ T5872] page dumped because: Not a kmalloc allocation
[  441.362576][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170d4
[  441.373454][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  441.380830][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  441.389940][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  441.398801][ T5872] raw: ffffea000070c240 ffffea0000720240
[  441.404681][ T5872] page dumped because: Not a kmalloc allocation
[  441.411707][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170d2
[  441.420817][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  441.428264][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  441.437217][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  441.446190][ T5872] raw: ffffea000070c1a0 ffffea00007201a0
[  441.451976][ T5872] page dumped because: Not a kmalloc allocation
[  441.465002][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170d0
[  441.477284][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  441.484835][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  441.493730][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  441.502862][ T5872] raw: ffffea000070c100 ffffea0000720100
[  441.508977][ T5872] page dumped because: Not a kmalloc allocation
[  441.520451][ T5872] smsusb:smsusb_probe: Device initialized with return code -22
[  441.567621][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.575013][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.601526][ T8328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.622585][ T5821] Bluetooth: hci3: command 0x0406 tx timeout
[  441.646258][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.653678][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.681038][ T8328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.734998][ T5872] smsusb 5-1:0.0: probe with driver smsusb failed with error -22
[  441.813036][ T5872] usb 5-1: USB disconnect, device number 38
[  442.123663][ T5877] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  442.188407][ T8328] hsr_slave_0: entered promiscuous mode
[  442.198880][ T8328] hsr_slave_1: entered promiscuous mode
[  442.207817][ T8328] debugfs: 'hsr0' already exists in 'hsr'
[  442.213826][ T8328] Cannot create hsr debugfs directory
[  442.334356][ T5821] Bluetooth: hci2: command tx timeout
[  442.341537][ T5877] usb 2-1: Using ep0 maxpacket: 8
[  442.379808][ T5877] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  442.388670][ T5877] usb 2-1: config 179 has no interface number 0
[  442.395437][ T5877] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  442.407093][ T5877] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  442.419083][ T5877] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  442.429510][ T5877] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  442.443876][ T5877] usb 2-1: config 179 interface 65 has no altsetting 0
[  442.451000][ T5877] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  442.460524][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.179495][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.187179][ T8373] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.196368][ T8373] bridge_slave_0: entered allmulticast mode
[  443.206163][ T8373] bridge_slave_0: entered promiscuous mode
[  443.286014][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.296530][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.304672][ T8373] bridge_slave_1: entered allmulticast mode
[  443.314314][ T8373] bridge_slave_1: entered promiscuous mode
[  443.650292][ T8373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  443.769337][ T8373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.129357][ T8373] team0: Port device team_slave_0 added
[  444.210588][ T8373] team0: Port device team_slave_1 added
[  444.414129][ T5821] Bluetooth: hci2: command tx timeout
[  444.562607][ T5877] libceph: connect (1)[c::]:6789 error -101
[  444.569181][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  444.615828][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.623230][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.653264][ T8373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.688997][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.698707][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.725093][ T8373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.774634][ T8444] ceph: No mds server is up or the cluster is laggy
[  445.082335][ T5877] usb 2-1: USB disconnect, device number 31
[  445.176161][ T8373] hsr_slave_0: entered promiscuous mode
[  445.186464][ T8373] hsr_slave_1: entered promiscuous mode
[  445.195315][ T8373] debugfs: 'hsr0' already exists in 'hsr'
[  445.201210][ T8373] Cannot create hsr debugfs directory
[  445.325878][ T8328] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  445.397603][ T8328] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  445.497248][ T8328] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  445.639303][ T8456] loop4: detected capacity change from 0 to 2048
[  445.720754][ T8328] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  445.790137][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'.
[  445.799894][ T8460] netlink: 48 bytes leftover after parsing attributes in process `syz.0.598'.
[  446.516821][ T5821] Bluetooth: hci2: command tx timeout
[  446.769797][ T8474] loop1: detected capacity change from 0 to 8
[  446.784286][ T5876] usb 5-1: new low-speed USB device number 39 using dummy_hcd
[  446.909019][ T8474] SQUASHFS error: xz decompression failed, data probably corrupt
[  446.917357][ T8474] SQUASHFS error: Failed to read block 0x108: -5
[  446.924081][ T8474] SQUASHFS error: Unable to read metadata cache entry [106]
[  446.931522][ T8474] SQUASHFS error: Unable to read inode 0x11f
[  446.991189][ T5876] usb 5-1: config 13 has an invalid interface number: 100 but max is 1
[  447.000610][ T5876] usb 5-1: config 13 has an invalid interface number: 188 but max is 1
[  447.009928][ T5876] usb 5-1: config 13 has no interface number 0
[  447.016668][ T5876] usb 5-1: config 13 has no interface number 1
[  447.023063][ T5876] usb 5-1: config 13 interface 100 altsetting 250 endpoint 0x6 has invalid maxpacket 32, setting to 8
[  447.034410][ T5876] usb 5-1: config 13 interface 100 has no altsetting 0
[  447.101252][ T5876] usb 5-1: string descriptor 0 read error: -22
[  447.108440][ T5876] usb 5-1: New USB device found, idVendor=0408, idProduct=ea05, bcdDevice=2c.a8
[  447.118557][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.204282][ T5876] option 5-1:13.100: GSM modem (1-port) converter detected
[  447.225559][ T5876] option 5-1:13.188: GSM modem (1-port) converter detected
[  447.751144][ T8373] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  447.783677][ T8477] netlink: 'syz.1.603': attribute type 10 has an invalid length.
[  448.112198][ T8328] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.142985][ T8477] syz_tun: entered promiscuous mode
[  448.197865][ T8477] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  448.198414][ T5903] usb 5-1: USB disconnect, device number 39
[  448.225908][ T5872] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  448.236974][ T8373] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  448.268542][ T5903] option 5-1:13.100: device disconnected
[  448.279755][ T5903] option 5-1:13.188: device disconnected
[  448.341276][ T8373] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  448.392687][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'.
[  448.441894][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'.
[  448.450778][ T8373] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  448.505529][ T8328] 8021q: adding VLAN 0 to HW filter on device team0
[  448.516681][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  448.529129][ T5872] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  448.540314][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33119, setting to 1024
[  448.551978][ T5872] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[  448.571661][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.579411][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.657146][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.664890][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.695495][ T5872] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  448.705757][ T5872] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  448.714384][ T5872] usb 2-1: Manufacturer: syz
[  448.887311][ T5872] usb 2-1: config 0 descriptor??
[  448.896409][ T8478] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  448.975372][ T5872] smsusb:smsusb_probe: board id=9, interface number 0
[  449.068844][ T5872] smsusb:siano_media_device_register: media controller created
[  449.079721][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  449.087759][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  449.095734][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  449.103623][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  449.111386][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  449.119371][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  449.127263][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  449.135456][ T5872] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[  449.148161][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  449.148414][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  449.148666][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  449.174406][ T5872] smsmdtv:smscore_set_device_mode: mode detect failed -22
[  449.181688][ T5872] smsmdtv:smscore_start_device: set device mode failed , rc -22
[  449.189707][ T5872] smsusb:smsusb_init_device: smscore_start_device(...) failed
[  449.204176][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170e2
[  449.213174][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  449.223728][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  449.232547][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  449.245102][ T5872] raw: ffffea000070c6a0 ffffea00007206a0
[  449.250903][ T5872] page dumped because: Not a kmalloc allocation
[  449.259807][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170e0
[  449.268940][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  449.271147][ T8328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  449.276353][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  449.276481][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  449.276595][ T5872] raw: ffffea000070c600 ffffea0000720600
[  449.276659][ T5872] page dumped because: Not a kmalloc allocation
[  449.277369][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170de
[  449.287331][ T8328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  449.295995][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  449.349945][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  449.358897][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  449.367783][ T5872] raw: ffffea000070c560 ffffea0000720560
[  449.373759][ T5872] page dumped because: Not a kmalloc allocation
[  449.380790][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170dc
[  449.389886][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  449.397377][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  449.406872][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  449.415881][ T5872] raw: ffffea000070c4c0 ffffea00007204c0
[  449.421672][ T5872] page dumped because: Not a kmalloc allocation
[  449.428813][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170da
[  449.438030][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  449.448919][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  449.461066][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  449.469969][ T5872] raw: ffffea000070c420 ffffea0000720420
[  449.475911][ T5872] page dumped because: Not a kmalloc allocation
[  449.482937][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170d8
[  449.492080][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  449.499622][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  449.508530][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  449.517417][ T5872] raw: ffffea000070c380 ffffea0000720380
[  449.523213][ T5872] page dumped because: Not a kmalloc allocation
[  449.530434][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170d6
[  449.540941][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  449.551945][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  449.562768][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  449.571714][ T5872] raw: ffffea000070c2e0 ffffea00007202e0
[  449.577619][ T5872] page dumped because: Not a kmalloc allocation
[  449.584888][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170d4
[  449.593948][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  449.601296][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  449.610305][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  449.619369][ T5872] raw: ffffea000070c240 ffffea0000720240
[  449.625274][ T5872] page dumped because: Not a kmalloc allocation
[  449.632287][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170d2
[  449.641383][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  449.652331][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  449.662883][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  449.671765][ T5872] raw: ffffea000070c1a0 ffffea00007201a0
[  449.677788][ T5872] page dumped because: Not a kmalloc allocation
[  449.684899][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170d0
[  449.693943][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  449.704002][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  449.712811][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  449.721723][ T5872] raw: ffffea000070c100 ffffea0000720100
[  449.727646][ T5872] page dumped because: Not a kmalloc allocation
[  449.790505][ T5872] smsusb:smsusb_probe: Device initialized with return code -22
[  450.232365][ T5872] smsusb 2-1:0.0: probe with driver smsusb failed with error -22
[  450.357492][ T5872] usb 2-1: USB disconnect, device number 32
[  450.425395][ T8373] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.687677][ T8373] 8021q: adding VLAN 0 to HW filter on device team0
[  450.809876][ T3910] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.817598][ T3910] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.934973][ T3910] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.942468][ T3910] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.367951][ T8373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  451.458981][ T8507] loop4: detected capacity change from 0 to 8
[  451.486886][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  451.496836][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  451.508184][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  451.517782][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  451.635022][ T8507] SQUASHFS error: xz decompression failed, data probably corrupt
[  451.643813][ T8507] SQUASHFS error: Failed to read block 0x108: -5
[  451.650310][ T8507] SQUASHFS error: Unable to read metadata cache entry [106]
[  451.658439][ T8507] SQUASHFS error: Unable to read inode 0x11f
[  451.723262][   T24] libceph: connect (1)[c::]:6789 error -101
[  451.730633][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  451.887900][ T8328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.960822][ T8511] ceph: No mds server is up or the cluster is laggy
[  452.388269][ T8507] netlink: 'syz.4.610': attribute type 10 has an invalid length.
[  452.464744][ T8507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  452.576414][ T8328] veth0_vlan: entered promiscuous mode
[  452.741207][ T8328] veth1_vlan: entered promiscuous mode
[  453.023999][ T5872] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  453.168936][ T8328] veth0_macvtap: entered promiscuous mode
[  453.217485][ T8328] veth1_macvtap: entered promiscuous mode
[  453.289952][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  453.300475][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  453.310581][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33119, setting to 1024
[  453.322065][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[  453.400107][ T8328] batman_adv: batadv0: Interface activated: batadv_slave_0
[  453.409052][ T5867] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  453.426157][ T8373] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.482740][ T5872] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  453.492429][ T5872] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  453.501178][ T5872] usb 5-1: Manufacturer: syz
[  453.532157][ T8328] batman_adv: batadv0: Interface activated: batadv_slave_1
[  453.606246][ T5872] usb 5-1: config 0 descriptor??
[  453.617839][ T8518] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  453.634362][ T5867] usb 2-1: config index 0 descriptor too short (expected 19492, got 36)
[  453.643768][ T5867] usb 2-1: config 0 has too many interfaces: 36, using maximum allowed: 32
[  453.652939][ T5867] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 36
[  453.662482][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  453.673864][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  453.684066][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  453.697981][ T5867] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  453.707544][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.722293][ T5872] smsusb:smsusb_probe: board id=9, interface number 0
[  453.750581][ T4460] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.791460][ T4460] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.809344][ T4460] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.828687][ T5872] smsusb:siano_media_device_register: media controller created
[  453.839641][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  453.848615][ T5872] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[  453.861371][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  453.861639][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  453.861880][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  453.862122][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  453.862384][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  453.862628][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  453.862871][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  453.863113][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  453.863362][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  453.932210][ T5872] smsmdtv:smscore_set_device_mode: mode detect failed -22
[  453.941166][ T5872] smsmdtv:smscore_start_device: set device mode failed , rc -22
[  453.952293][ T5872] smsusb:smsusb_init_device: smscore_start_device(...) failed
[  453.968170][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59de2
[  453.977400][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  453.984900][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  453.993813][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  454.002607][ T5872] raw: ffffea0001bed6a0 ffffea0001c016a0
[  454.008530][ T5872] page dumped because: Not a kmalloc allocation
[  454.017305][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59de0
[  454.028316][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  454.035818][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  454.044719][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  454.057214][ T5872] raw: ffffea0001bed600 ffffea0001c01600
[  454.063020][ T5872] page dumped because: Not a kmalloc allocation
[  454.071822][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59dde
[  454.080908][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  454.084089][ T5867] usb 2-1: config 0 descriptor??
[  454.088326][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  454.088454][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  454.097339][ T4460] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  454.102338][ T5872] raw: ffffea0001bed560 ffffea0001c01560
[  454.102414][ T5872] page dumped because: Not a kmalloc allocation
[  454.133491][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59ddc
[  454.142461][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  454.150092][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  454.162600][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  454.173255][ T5872] raw: ffffea0001bed4c0 ffffea0001c014c0
[  454.180165][ T5872] page dumped because: Not a kmalloc allocation
[  454.187838][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59dda
[  454.196936][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  454.204501][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  454.213308][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  454.222190][ T5872] raw: ffffea0001bed420 ffffea0001c01420
[  454.228062][ T5872] page dumped because: Not a kmalloc allocation
[  454.235191][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59dd8
[  454.244272][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  454.251628][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  454.266109][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  454.276920][ T5872] raw: ffffea0001bed380 ffffea0001c01380
[  454.282713][ T5872] page dumped because: Not a kmalloc allocation
[  454.289880][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59dd6
[  454.298963][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  454.306393][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  454.315293][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  454.324175][ T5872] raw: ffffea0001bed2e0 ffffea0001c012e0
[  454.324261][ T8373] veth0_vlan: entered promiscuous mode
[  454.329927][ T5872] page dumped because: Not a kmalloc allocation
[  454.345493][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59dd4
[  454.354560][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  454.367427][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  454.376350][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  454.385266][ T5872] raw: ffffea0001bed240 ffffea0001c01240
[  454.391054][ T5872] page dumped because: Not a kmalloc allocation
[  454.398330][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59dd2
[  454.407405][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  454.415723][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  454.425162][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  454.434061][ T5872] raw: ffffea0001bed1a0 ffffea0001c011a0
[  454.439837][ T5872] page dumped because: Not a kmalloc allocation
[  454.447006][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59dd0
[  454.456170][ T5872] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  454.467069][ T5872] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  454.477625][ T5872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  454.486499][ T5872] raw: ffffea0001bed100 ffffea0001c01100
[  454.492276][ T5872] page dumped because: Not a kmalloc allocation
[  454.670553][ T8373] veth1_vlan: entered promiscuous mode
[  454.998674][ T5867] lg-g15 0003:046D:C225.000F: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.1-1/input0
[  455.210014][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.221586][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.345222][ T5867] usb 2-1: USB disconnect, device number 33
[  455.536811][ T8373] veth0_macvtap: entered promiscuous mode
[  455.652010][ T8373] veth1_macvtap: entered promiscuous mode
[  455.797262][ T8543] fido_id[8543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  455.827923][ T5872] smsusb:smsusb_probe: Device initialized with return code -22
[  455.955721][ T8373] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.049808][ T8373] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.233927][ T3910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.255942][ T1131] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.379607][ T4460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.384217][ T5872] smsusb 5-1:0.0: probe with driver smsusb failed with error -22
[  456.447788][ T4460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.583870][ T5872] usb 5-1: USB disconnect, device number 40
[  457.013624][ T5872] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  457.230133][ T5872] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  457.241332][ T5872] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  457.251649][ T5872] usb 5-1: config 1 interface 0 has no altsetting 0
[  457.350026][ T5872] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  457.359809][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.368955][ T5872] usb 5-1: Product: syz
[  457.373518][ T5872] usb 5-1: Manufacturer: syz
[  457.378303][ T5872] usb 5-1: SerialNumber: syz
[  457.439826][   T24] libceph: connect (1)[c::]:6789 error -101
[  457.446326][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  457.489799][ T8560] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  457.557791][ T8560] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  457.576642][ T8575] ceph: No mds server is up or the cluster is laggy
[  458.693073][ T8593] netlink: 'syz.0.633': attribute type 10 has an invalid length.
[  458.722352][ T8595] loop1: detected capacity change from 0 to 8
[  458.774124][ T5872] (unnamed net_device) (uninitialized): Assigned a random MAC address: 02:3c:03:93:3f:1b
[  458.853745][ T5872] rtl8150 5-1:1.0: eth1: rtl8150 is detected
[  458.976197][ T5872] usb 5-1: USB disconnect, device number 41
[  459.212547][ T7984] SQUASHFS error: Unable to read directory block [249:c]
[  459.278057][ T7984] SQUASHFS error: Unable to read inode 0x0
[  459.290537][ T7984] SQUASHFS error: Unable to read inode 0x0
[  459.619717][ T7984] bond0: (slave syz_tun): Releasing backup interface
[  459.928643][ T4156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.272938][ T4156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.434177][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.626'.
[  460.477959][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.626'.
[  460.489918][ T4156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.649081][ T4156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.349147][ T4156] bridge_slave_1: left allmulticast mode
[  461.355235][ T4156] bridge_slave_1: left promiscuous mode
[  461.361923][ T4156] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.456213][ T4156] bridge_slave_0: left allmulticast mode
[  461.462078][ T4156] bridge_slave_0: left promiscuous mode
[  461.469124][ T4156] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.305140][ T4156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  462.324564][ T4156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  462.359460][ T4156] bond0 (unregistering): Released all slaves
[  462.740933][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.749245][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.055456][ T4156] hsr_slave_0: left promiscuous mode
[  463.071394][ T4156] hsr_slave_1: left promiscuous mode
[  463.081005][ T4156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  463.088875][ T4156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  463.105378][ T4156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  463.113077][ T4156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  463.164572][ T4156] veth1_macvtap: left promiscuous mode
[  463.170466][ T4156] veth0_macvtap: left promiscuous mode
[  463.176954][ T4156] veth1_vlan: left promiscuous mode
[  463.182495][ T4156] veth0_vlan: left promiscuous mode
[  464.165680][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  464.184196][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  464.195043][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  464.208659][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  464.220817][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  464.267296][ T4156] team0 (unregistering): Port device team_slave_1 removed
[  464.294460][ T4156] team0 (unregistering): Port device team_slave_0 removed
[  464.518864][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'.
[  464.542546][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'.
[  464.591308][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'.
[  464.669709][ T4460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.678009][ T4460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.589946][ T5872] libceph: connect (1)[c::]:6789 error -101
[  465.597609][ T5872] libceph: mon0 (1)[c::]:6789 connect error
[  465.729974][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.738283][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.809571][ T8661] ceph: No mds server is up or the cluster is laggy
[  465.874248][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.882359][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  466.257040][ T5821] Bluetooth: hci1: command tx timeout
[  466.260045][ T8646] chnl_net:caif_netlink_parms(): no params data found
[  466.776309][ T8682] loop4: detected capacity change from 0 to 8
[  467.686358][ T8694] netlink: 'syz.4.641': attribute type 2 has an invalid length.
[  467.823716][ T5872] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[  467.851227][ T8698] netlink: 'syz.0.643': attribute type 1 has an invalid length.
[  467.859509][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'.
[  467.868904][ T8698] netlink: 'syz.0.643': attribute type 1 has an invalid length.
[  467.880019][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'.
[  468.285288][ T8646] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.292817][ T8646] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.301631][ T8646] bridge_slave_0: entered allmulticast mode
[  468.311290][ T8646] bridge_slave_0: entered promiscuous mode
[  468.354769][ T5821] Bluetooth: hci1: command tx timeout
[  468.375256][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'.
[  468.410136][ T8646] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.418944][ T8646] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.427143][ T8646] bridge_slave_1: entered allmulticast mode
[  468.438793][ T8646] bridge_slave_1: entered promiscuous mode
[  468.681065][ T8646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  468.725424][ T8646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  468.828230][   T24] libceph: connect (1)[c::]:6789 error -101
[  468.834937][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  468.995607][ T8709] ceph: No mds server is up or the cluster is laggy
[  469.269032][ T8646] team0: Port device team_slave_0 added
[  469.431013][ T8646] team0: Port device team_slave_1 added
[  469.889239][ T8646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  469.897725][ T8646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.927902][ T8646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.032277][ T8730] loop3: detected capacity change from 0 to 8
[  470.069199][ T8646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.077003][ T8646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.103623][ T8646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  470.300678][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  470.307719][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  470.414232][ T5821] Bluetooth: hci1: command tx timeout
[  470.878249][ T8646] hsr_slave_0: entered promiscuous mode
[  470.891107][ T8646] hsr_slave_1: entered promiscuous mode
[  471.578980][ T4156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.795432][ T4156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.014000][ T4156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.124497][ T5872] libceph: connect (1)[c::]:6789 error -101
[  472.130838][ T5872] libceph: mon0 (1)[c::]:6789 connect error
[  472.134298][ T4156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.380004][ T8754] ceph: No mds server is up or the cluster is laggy
[  472.434984][ T5872] libceph: connect (1)[c::]:6789 error -101
[  472.441481][ T5872] libceph: mon0 (1)[c::]:6789 connect error
[  472.493995][ T5821] Bluetooth: hci1: command tx timeout
[  472.733213][ T4156] bridge_slave_1: left allmulticast mode
[  472.740842][ T4156] bridge_slave_1: left promiscuous mode
[  472.747858][ T4156] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.824324][ T4156] bridge_slave_0: left allmulticast mode
[  472.830288][ T4156] bridge_slave_0: left promiscuous mode
[  472.837276][ T4156] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.265758][ T4156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  473.285254][ T4156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  473.321045][ T4156] bond0 (unregistering): Released all slaves
[  473.615687][ T8646] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  473.682196][ T8646] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  473.804529][ T8646] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  473.871263][ T8646] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  473.948414][ T4156] hsr_slave_0: left promiscuous mode
[  473.982990][ T4156] hsr_slave_1: left promiscuous mode
[  473.991120][ T4156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  473.998856][ T4156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  474.054829][ T4156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  474.062517][ T4156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  474.149320][ T4156] veth1_macvtap: left promiscuous mode
[  474.157986][ T4156] veth0_macvtap: left promiscuous mode
[  474.164043][ T4156] veth1_vlan: left promiscuous mode
[  474.169558][ T4156] veth0_vlan: left promiscuous mode
[  475.017809][ T4156] team0 (unregistering): Port device team_slave_1 removed
[  475.158600][ T4156] team0 (unregistering): Port device team_slave_0 removed
[  475.239605][ T8773] loop3: detected capacity change from 0 to 1024
[  475.476733][ T5876] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  475.728175][ T8773] FAULT_INJECTION: forcing a failure.
[  475.728175][ T8773] name failslab, interval 1, probability 0, space 0, times 0
[  475.741418][ T8773] CPU: 1 UID: 0 PID: 8773 Comm: syz.3.660 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  475.741596][ T8773] Tainted: [W]=WARN
[  475.741644][ T8773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  475.741730][ T8773] Call Trace:
[  475.741778][ T8773]  <TASK>
[  475.741823][ T8773]  __dump_stack+0x26/0x30
[  475.741994][ T8773]  dump_stack_lvl+0x1df/0x270
[  475.742172][ T8773]  dump_stack+0x1e/0x25
[  475.742343][ T8773]  should_fail_ex+0x7dc/0x8a0
[  475.742553][ T8773]  should_failslab+0x15b/0x200
[  475.742725][ T8773]  __kmalloc_noprof+0x182/0x1310
[  475.742899][ T8773]  ? tomoyo_realpath_from_path+0xeb/0x9f0
[  475.743074][ T8773]  ? tomoyo_path_number_perm+0x21/0x7d0
[  475.743208][ T8773]  ? filter_irq_stacks+0x49/0x190
[  475.743404][ T8773]  ? kmsan_get_metadata+0xfb/0x160
[  475.743572][ T8773]  tomoyo_realpath_from_path+0xeb/0x9f0
[  475.743744][ T8773]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  475.743916][ T8773]  ? __srcu_read_lock+0x5e/0xd0
[  475.744075][ T8773]  tomoyo_path_number_perm+0x1d0/0x7d0
[  475.744225][ T8773]  ? stack_depot_save_flags+0x35/0x7b0
[  475.744428][ T8773]  ? kmsan_get_metadata+0xfb/0x160
[  475.744587][ T8773]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  475.744792][ T8773]  tomoyo_file_ioctl+0x3d/0x50
[  475.744962][ T8773]  security_file_ioctl_compat+0x141/0x590
[  475.745167][ T8773]  __ia32_compat_sys_ioctl+0x150/0x1270
[  475.745332][ T8773]  ? kmsan_get_metadata+0xfb/0x160
[  475.745479][ T8773]  ? kmsan_get_metadata+0xfb/0x160
[  475.745651][ T8773]  ia32_sys_call+0x2d5f/0x4310
[  475.745787][ T8773]  __do_fast_syscall_32+0xb0/0x150
[  475.745974][ T8773]  ? irqentry_exit_to_user_mode+0x82/0xa0
[  475.746162][ T8773]  do_fast_syscall_32+0x38/0x80
[  475.746335][ T8773]  do_SYSENTER_32+0x1f/0x30
[  475.746505][ T8773]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  475.746675][ T8773] RIP: 0023:0xf702e539
[  475.746770][ T8773] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  475.746890][ T8773] RSP: 002b:00000000f541e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  475.747015][ T8773] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000401c5820
[  475.747108][ T8773] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  475.747196][ T8773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  475.747277][ T8773] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  475.747358][ T8773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  475.747468][ T8773]  </TASK>
[  475.765985][ T5876] usb 5-1: Using ep0 maxpacket: 16
[  475.774588][ T8773] ERROR: Out of memory at tomoyo_realpath_from_path.
[  476.048820][ T5876] usb 5-1: config 28 has an invalid interface number: 162 but max is 0
[  476.058078][ T5876] usb 5-1: config 28 has no interface number 0
[  476.065805][ T5876] usb 5-1: config 28 interface 162 has no altsetting 0
[  476.146347][ T5876] usb 5-1: config 28 has an invalid interface number: 162 but max is 0
[  476.155800][ T5876] usb 5-1: config 28 has no interface number 0
[  476.163678][ T5876] usb 5-1: config 28 interface 162 has no altsetting 0
[  476.260750][ T5876] usb 5-1: config 28 has an invalid interface number: 162 but max is 0
[  476.270948][ T5876] usb 5-1: config 28 has no interface number 0
[  476.278476][ T5876] usb 5-1: config 28 interface 162 has no altsetting 0
[  476.335956][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  476.348738][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  476.358214][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  476.375122][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  476.388545][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  476.407074][ T5876] usb 5-1: config 28 has an invalid interface number: 162 but max is 0
[  476.416096][ T5876] usb 5-1: config 28 has no interface number 0
[  476.422557][ T5876] usb 5-1: config 28 interface 162 has no altsetting 0
[  476.442018][ T8646] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.514321][ T8646] 8021q: adding VLAN 0 to HW filter on device team0
[  476.550624][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.558276][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state
[  476.580561][ T8783] netlink: 'syz.0.662': attribute type 10 has an invalid length.
[  476.647902][ T5876] usb 5-1: config 28 has an invalid interface number: 162 but max is 0
[  476.656701][ T5876] usb 5-1: config 28 has no interface number 0
[  476.663092][ T5876] usb 5-1: config 28 interface 162 has no altsetting 0
[  476.708319][ T5876] usb 5-1: config 28 has an invalid interface number: 162 but max is 0
[  476.717141][ T5876] usb 5-1: config 28 has no interface number 0
[  476.723776][ T5876] usb 5-1: config 28 interface 162 has no altsetting 0
[  476.755719][ T5876] usb 5-1: config 28 has an invalid interface number: 162 but max is 0
[  476.764540][ T5876] usb 5-1: config 28 has no interface number 0
[  476.770904][ T5876] usb 5-1: config 28 interface 162 has no altsetting 0
[  476.840036][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.847634][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.979267][ T5876] usb 5-1: string descriptor 0 read error: -71
[  476.987648][ T5876] usb 5-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=8b.bc
[  476.997746][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.100734][ T5876] usb 5-1: rejected 7 configurations due to insufficient available bus power
[  477.110276][ T5876] usb 5-1: no configuration chosen from 7 choices
[  477.218667][ T5876] usb 5-1: USB disconnect, device number 43
[  477.760569][ T8793] netlink: 'syz.0.664': attribute type 2 has an invalid length.
[  477.944972][ T8797] pimreg: tun_chr_ioctl cmd 1074025677
[  477.951053][ T8797] pimreg: linktype set to 776
[  478.278082][ T8803] pimreg: tun_chr_ioctl cmd 1074025677
[  478.284290][ T8803] pimreg: linktype set to 776
[  478.289349][ T8803] FAULT_INJECTION: forcing a failure.
[  478.289349][ T8803] name failslab, interval 1, probability 0, space 0, times 0
[  478.302450][ T8803] CPU: 0 UID: 0 PID: 8803 Comm: syz.4.666 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  478.302620][ T8803] Tainted: [W]=WARN
[  478.302667][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  478.302746][ T8803] Call Trace:
[  478.302797][ T8803]  <TASK>
[  478.302844][ T8803]  __dump_stack+0x26/0x30
[  478.303041][ T8803]  dump_stack_lvl+0x1df/0x270
[  478.303213][ T8803]  dump_stack+0x1e/0x25
[  478.303364][ T8803]  should_fail_ex+0x7dc/0x8a0
[  478.303575][ T8803]  should_failslab+0x15b/0x200
[  478.303732][ T8803]  kmem_cache_alloc_node_noprof+0xf3/0xf00
[  478.303921][ T8803]  ? __alloc_skb+0x1e0/0x7d0
[  478.304072][ T8803]  ? kmsan_get_metadata+0xfb/0x160
[  478.304230][ T8803]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  478.304399][ T8803]  __alloc_skb+0x1e0/0x7d0
[  478.304553][ T8803]  rtmsg_ifinfo_build_skb+0xab/0x420
[  478.304743][ T8803]  rtnetlink_event+0x24d/0x3d0
[  478.304931][ T8803]  ? __pfx_rtnetlink_event+0x10/0x10
[  478.305105][ T8803]  ? __pfx_rtnetlink_event+0x10/0x10
[  478.305276][ T8803]  raw_notifier_call_chain+0xdd/0x410
[  478.305496][ T8803]  call_netdevice_notifiers_info+0x1ac/0x2b0
[  478.305709][ T8803]  call_netdevice_notifiers+0x7e/0xb0
[  478.305895][ T8803]  __tun_chr_ioctl+0x1e1b/0x36f0
[  478.306038][ T8803]  ? do_vfs_ioctl+0x13a3/0x2900
[  478.306230][ T8803]  tun_chr_compat_ioctl+0x43/0x60
[  478.306371][ T8803]  ? __pfx_tun_chr_compat_ioctl+0x10/0x10
[  478.306518][ T8803]  __ia32_compat_sys_ioctl+0x7f6/0x1270
[  478.306682][ T8803]  ? kmsan_get_metadata+0xfb/0x160
[  478.306831][ T8803]  ? kmsan_get_metadata+0xfb/0x160
[  478.307009][ T8803]  ia32_sys_call+0x2d5f/0x4310
[  478.307144][ T8803]  __do_fast_syscall_32+0xb0/0x150
[  478.307328][ T8803]  ? irqentry_exit_to_user_mode+0x82/0xa0
[  478.307508][ T8803]  do_fast_syscall_32+0x38/0x80
[  478.307685][ T8803]  do_SYSENTER_32+0x1f/0x30
[  478.307881][ T8803]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  478.308043][ T8803] RIP: 0023:0xf703e539
[  478.308138][ T8803] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  478.308258][ T8803] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  478.308389][ T8803] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400454cd
[  478.308481][ T8803] RDX: 0000000000000308 RSI: 0000000000000000 RDI: 0000000000000000
[  478.308559][ T8803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  478.308635][ T8803] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  478.308716][ T8803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  478.308827][ T8803]  </TASK>
[  478.518335][ T5830] Bluetooth: hci4: command tx timeout
[  478.837718][ T8780] chnl_net:caif_netlink_parms(): no params data found
[  479.106702][ T8810] loop3: detected capacity change from 0 to 2048
[  479.304256][ T8810] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  479.472870][ T8646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  479.625970][ T8816] loop4: detected capacity change from 0 to 1024
[  479.675108][ T5876] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  479.865517][ T5876] usb 4-1: Using ep0 maxpacket: 8
[  479.901243][ T5876] usb 4-1: config 0 has an invalid interface number: 125 but max is 0
[  479.910541][ T5876] usb 4-1: config 0 has no interface number 0
[  479.971393][ T5876] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=d8.ba
[  479.980875][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.989674][ T5876] usb 4-1: Product: syz
[  479.994107][ T5876] usb 4-1: Manufacturer: syz
[  479.998889][ T5876] usb 4-1: SerialNumber: syz
[  480.040738][ T8816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  480.073604][ T8816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  480.117241][ T5876] usb 4-1: config 0 descriptor??
[  480.380480][ T5876] pegasus 4-1:0.125: probe with driver pegasus failed with error -71
[  480.460054][ T5876] usb 4-1: USB disconnect, device number 18
[  480.569067][ T8780] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.581595][ T8780] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.590063][ T8780] bridge_slave_0: entered allmulticast mode
[  480.650732][ T8780] bridge_slave_0: entered promiscuous mode
[  480.663803][ T5830] Bluetooth: hci4: command tx timeout
[  480.736429][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.744316][ T8780] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.752014][ T8780] bridge_slave_1: entered allmulticast mode
[  480.761509][ T8780] bridge_slave_1: entered promiscuous mode
[  481.237313][ T8780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  481.266928][ T8833] netlink: 'syz.0.671': attribute type 10 has an invalid length.
[  481.357926][ T8780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  481.665792][ T8780] team0: Port device team_slave_0 added
[  481.691757][ T8780] team0: Port device team_slave_1 added
[  481.853863][ T5876] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  481.938617][ T8780] batman_adv: batadv0: Adding interface: batadv_slave_0
[  481.945879][ T8780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.976787][ T8780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  482.033831][ T5876] usb 4-1: Using ep0 maxpacket: 32
[  482.059885][ T5876] usb 4-1: config 1 interface 0 altsetting 73 bulk endpoint 0x82 has invalid maxpacket 64
[  482.070560][ T5876] usb 4-1: config 1 interface 0 altsetting 73 bulk endpoint 0x3 has invalid maxpacket 1024
[  482.081073][ T5876] usb 4-1: config 1 interface 0 altsetting 73 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  482.097591][ T5876] usb 4-1: config 1 interface 0 has no altsetting 0
[  482.118436][ T8780] batman_adv: batadv0: Adding interface: batadv_slave_1
[  482.125642][ T8780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  482.152720][ T8780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  482.210034][ T8841] loop4: detected capacity change from 0 to 128
[  482.321823][ T8841] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  482.356922][ T8841] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  482.399063][ T8841] netlink: 48 bytes leftover after parsing attributes in process `syz.4.673'.
[  482.411181][ T5876] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  482.424125][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.432388][ T5876] usb 4-1: Product: syz
[  482.440107][ T5876] usb 4-1: Manufacturer: syz
[  482.445125][ T5876] usb 4-1: SerialNumber: syz
[  482.478788][ T8838] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  482.489588][ T8841] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  482.534889][ T8838] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  482.562322][ T8780] hsr_slave_0: entered promiscuous mode
[  482.573056][ T8780] hsr_slave_1: entered promiscuous mode
[  482.582040][ T8780] debugfs: 'hsr0' already exists in 'hsr'
[  482.588112][ T8780] Cannot create hsr debugfs directory
[  482.736434][ T8646] veth0_vlan: entered promiscuous mode
[  482.736496][ T5830] Bluetooth: hci4: command tx timeout
[  482.798356][ T8838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.808559][ T8838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.906690][ T7100] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  482.951484][ T8646] veth1_vlan: entered promiscuous mode
[  482.976190][ T5876] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  483.030109][ T5876] usb 4-1: USB disconnect, device number 19
[  483.615134][ T8646] veth0_macvtap: entered promiscuous mode
[  483.672622][ T8646] veth1_macvtap: entered promiscuous mode
[  484.039740][ T8858] loop4: detected capacity change from 0 to 8
[  484.069221][ T8646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  484.187006][ T8646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  484.329469][ T1131] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  484.393741][ T5877] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  484.406504][ T1131] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  484.454051][ T1131] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  484.539130][ T1131] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  484.560930][ T8864] netlink: 'syz.0.680': attribute type 2 has an invalid length.
[  484.605855][ T5877] usb 4-1: Using ep0 maxpacket: 32
[  484.636327][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  484.648408][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  484.660226][ T5877] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  484.670833][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.829907][ T5877] usb 4-1: config 0 descriptor??
[  484.838724][ T8860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  484.854187][ T5830] Bluetooth: hci4: command tx timeout
[  484.902453][ T5877] hub 4-1:0.0: USB hub found
[  485.082643][ T5877] hub 4-1:0.0: 1 port detected
[  485.091606][ T8780] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  485.167190][ T5872] usb 5-1: new low-speed USB device number 44 using dummy_hcd
[  485.236562][ T8780] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  485.340079][ T8780] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  485.371087][ T5872] usb 5-1: config 13 has an invalid interface number: 100 but max is 1
[  485.379875][ T5872] usb 5-1: config 13 has an invalid interface number: 188 but max is 1
[  485.390149][ T5872] usb 5-1: config 13 has no interface number 0
[  485.397497][ T5872] usb 5-1: config 13 has no interface number 1
[  485.404036][ T5872] usb 5-1: config 13 interface 100 altsetting 250 endpoint 0x6 has invalid maxpacket 32, setting to 8
[  485.415474][ T5872] usb 5-1: config 13 interface 100 has no altsetting 0
[  485.431212][ T8780] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  485.540431][ T5877] usb 4-1: USB disconnect, device number 20
[  485.578984][ T5872] usb 5-1: string descriptor 0 read error: -22
[  485.586177][ T5872] usb 5-1: New USB device found, idVendor=0408, idProduct=ea05, bcdDevice=2c.a8
[  485.597320][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.670258][ T5872] option 5-1:13.100: GSM modem (1-port) converter detected
[  485.694053][ T5872] option 5-1:13.188: GSM modem (1-port) converter detected
[  486.852081][ T8780] 8021q: adding VLAN 0 to HW filter on device bond0
[  487.119761][ T5872] usb 5-1: USB disconnect, device number 44
[  487.178310][ T8780] 8021q: adding VLAN 0 to HW filter on device team0
[  487.195195][ T5872] option 5-1:13.100: device disconnected
[  487.207076][ T5872] option 5-1:13.188: device disconnected
[  487.290661][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.298299][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  487.349414][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.682'.
[  487.429140][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.436765][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  487.561136][ T5830] Bluetooth: hci2: Malformed Event: 0x13
[  487.659409][ T8883] loop3: detected capacity change from 0 to 256
[  487.744225][ T8883] vfat: Bad value for 'shortname'
[  487.889737][ T8885] netlink: 'syz.0.683': attribute type 10 has an invalid length.
[  488.885920][ T5872] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  489.071446][ T5877] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  489.111675][ T5872] usb 5-1: config index 0 descriptor too short (expected 19492, got 36)
[  489.120559][ T5872] usb 5-1: config 0 has too many interfaces: 36, using maximum allowed: 32
[  489.130911][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 36
[  489.140330][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  489.151687][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  489.161857][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  489.176724][ T5872] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  489.187088][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.277727][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  489.291746][ T5877] usb 4-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[  489.301424][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.375298][ T5872] usb 5-1: config 0 descriptor??
[  489.411616][ T5877] usb 4-1: config 0 descriptor??
[  489.788564][ T8780] 8021q: adding VLAN 0 to HW filter on device batadv0
[  489.865711][ T5872] lg-g15 0003:046D:C225.0010: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.4-1/input0
[  489.871757][ T5877] usbhid 4-1:0.0: can't add hid device: -71
[  489.884117][ T5877] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  489.989288][ T5877] usb 4-1: USB disconnect, device number 21
[  490.035208][ T5872] usb 5-1: USB disconnect, device number 45
[  490.540512][ T8780] veth0_vlan: entered promiscuous mode
[  490.667133][ T8780] veth1_vlan: entered promiscuous mode
[  490.747269][ T8911] fido_id[8911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  491.197519][ T8780] veth0_macvtap: entered promiscuous mode
[  491.278658][ T8780] veth1_macvtap: entered promiscuous mode
[  491.429695][ T8924] loop4: detected capacity change from 0 to 8
[  491.546375][ T8780] batman_adv: batadv0: Interface activated: batadv_slave_0
[  491.588645][ T8927] netlink: 'syz.0.691': attribute type 10 has an invalid length.
[  491.687081][ T8780] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.827719][ T4313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.890897][ T4313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.946042][ T4313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.991769][ T4313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  492.124241][   T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  492.335325][   T24] usb 4-1: Using ep0 maxpacket: 32
[  492.360666][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  492.372343][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  492.383925][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  492.393194][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.620919][   T24] usb 4-1: config 0 descriptor??
[  492.629993][ T8931] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  492.719621][   T24] hub 4-1:0.0: USB hub found
[  492.728165][ T5872] libceph: connect (1)[c::]:6789 error -101
[  492.736056][ T5872] libceph: mon0 (1)[c::]:6789 connect error
[  493.024779][   T42] libceph: connect (1)[c::]:6789 error -101
[  493.031458][   T42] libceph: mon0 (1)[c::]:6789 connect error
[  493.045870][   T24] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  493.133030][   T24] usbhid 4-1:0.0: can't add hid device: -71
[  493.142369][   T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  493.302167][ T8941] ceph: No mds server is up or the cluster is laggy
[  493.315620][   T24] usb 4-1: USB disconnect, device number 22
[  493.512418][ T3910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.520958][ T3910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.739516][ T8952] loop4: detected capacity change from 0 to 8
[  493.767451][ T3910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.777080][ T3910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.889427][ T8952] SQUASHFS error: xz decompression failed, data probably corrupt
[  493.897585][ T8952] SQUASHFS error: Failed to read block 0x108: -5
[  493.904402][ T8952] SQUASHFS error: Unable to read metadata cache entry [106]
[  493.911848][ T8952] SQUASHFS error: Unable to read inode 0x11f
[  494.020791][ T8948] process 'syz.0.694' launched './file0' with NULL argv: empty string added
[  494.492805][ T8952] netlink: 'syz.4.695': attribute type 10 has an invalid length.
[  496.413918][   T24] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  496.696869][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  496.711183][   T24] usb 6-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[  496.720989][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.743656][ T5877] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  496.960460][   T24] usb 6-1: config 0 descriptor??
[  497.294644][ T8974] loop3: detected capacity change from 0 to 512
[  497.380412][ T8974] ext3: Unknown parameter 'audit'
[  497.490079][   T24] usbhid 6-1:0.0: can't add hid device: -71
[  497.496899][   T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  497.556328][   T24] usb 6-1: USB disconnect, device number 2
[  498.523795][   T24] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  498.725680][   T24] usb 4-1: config index 0 descriptor too short (expected 19492, got 36)
[  498.735481][   T24] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32
[  498.744484][   T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 36
[  498.753840][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  498.765138][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  498.775326][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  498.788522][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  498.799712][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.816214][   T24] usb 4-1: config 0 descriptor??
[  498.951497][ T5877] libceph: connect (1)[c::]:6789 error -101
[  498.958275][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  499.295199][ T5877] libceph: connect (1)[c::]:6789 error -101
[  499.301752][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  499.356693][   T24] lg-g15 0003:046D:C225.0011: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0
[  499.376374][ T8999] ceph: No mds server is up or the cluster is laggy
[  499.588788][   T24] usb 4-1: USB disconnect, device number 23
[  500.284702][ T9006] fido_id[9006]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  500.969073][ T9010] =====================================================
[  500.976268][ T9010] BUG: KMSAN: uninit-value in aes_encrypt+0x126a/0x1960
[  500.983359][ T9010]  aes_encrypt+0x126a/0x1960
[  500.988097][ T9010]  aesti_encrypt+0x7d/0xf0
[  500.992668][ T9010]  cipher_crypt_one+0x11d/0x2e0
[  500.997668][ T9010]  crypto_cipher_encrypt_one+0x33/0x40
[  501.003280][ T9010]  drbg_ctr_update+0x19a9/0x3700
[  501.008387][ T9010]  drbg_seed+0xb1b/0xe20
[  501.012781][ T9010]  drbg_kcapi_seed+0x19b2/0x1e40
SYZFAIL: failed to recv rpc
[  501.017872][ T9010]  crypto_rng_reset+0x193/0x250
[  501.022872][ T9010]  rng_setkey+0x52/0x70
[  501.027170][ T9010]  alg_setkey+0x262/0x3b0
[  501.031627][ T9010]  alg_setsockopt+0x503/0x760
[  501.036445][ T9010]  __sys_setsockopt+0x43b/0x580
[  501.041453][ T9010]  __ia32_sys_setsockopt+0xf3/0x1a0
[  501.046804][ T9010]  ia32_sys_call+0x24c2/0x4310
[  501.051690][ T9010]  __do_fast_syscall_32+0xb0/0x150
[  501.056998][ T9010]  do_fast_syscall_32+0x38/0x80
[  501.062018][ T9010]  do_SYSENTER_32+0x1f/0x30
[  501.066684][ T9010]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  501.073186][ T9010] 
[  501.075560][ T9010] <Zero or more stacks not recorded to save memory>
[  501.075560][ T9010] 
[  501.084376][ T9010] Uninit was stored to memory at:
[  501.089598][ T9010]  crypto_sha3_finup+0x136/0xe00
[  501.094678][ T9010]  crypto_shash_finup+0x327/0xe80
[  501.099883][ T9010]  jent_hash_time+0x247/0x590
[  501.104715][ T9010]  jent_condition_data+0x4f0/0x510
[  501.109992][ T9010]  jent_measure_jitter+0x547/0x770
[  501.115254][ T9010]  jent_gen_entropy+0x209/0x450
[  501.120278][ T9010]  jent_read_entropy+0x353/0xeb0
[  501.125361][ T9010]  jent_kcapi_random+0x6c/0x250
[  501.130403][ T9010]  drbg_seed+0x3f5/0xe20
[  501.134781][ T9010]  drbg_kcapi_seed+0x19b2/0x1e40
[  501.139862][ T9010]  crypto_rng_reset+0x193/0x250
[  501.144845][ T9010]  rng_setkey+0x52/0x70
[  501.149121][ T9010]  alg_setkey+0x262/0x3b0
[  501.153562][ T9010]  alg_setsockopt+0x503/0x760
[  501.158361][ T9010]  __sys_setsockopt+0x43b/0x580
[  501.163356][ T9010]  __ia32_sys_setsockopt+0xf3/0x1a0
[  501.168700][ T9010]  ia32_sys_call+0x24c2/0x4310
[  501.173596][ T9010]  __do_fast_syscall_32+0xb0/0x150
[  501.179142][ T9010]  do_fast_syscall_32+0x38/0x80
[  501.184153][ T9010]  do_SYSENTER_32+0x1f/0x30
[  501.188818][ T9010]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  501.195303][ T9010] 
[  501.197675][ T9010] Uninit was stored to memory at:
[  501.202917][ T9010]  crypto_shash_finup+0xc5a/0xe80
[  501.208112][ T9010]  jent_hash_time+0x1de/0x590
[  501.212944][ T9010]  jent_condition_data+0x4f0/0x510
[  501.218210][ T9010]  jent_measure_jitter+0x547/0x770
[  501.223474][ T9010]  jent_gen_entropy+0x209/0x450
[  501.228471][ T9010]  jent_read_entropy+0x353/0xeb0
[  501.233557][ T9010]  jent_kcapi_random+0x6c/0x250
[  501.238571][ T9010]  drbg_seed+0x3f5/0xe20
[  501.242945][ T9010]  drbg_kcapi_seed+0x19b2/0x1e40
[  501.248027][ T9010]  crypto_rng_reset+0x193/0x250
[  501.253007][ T9010]  rng_setkey+0x52/0x70
[  501.257281][ T9010]  alg_setkey+0x262/0x3b0
[  501.261725][ T9010]  alg_setsockopt+0x503/0x760
[  501.266522][ T9010]  __sys_setsockopt+0x43b/0x580
[  501.271534][ T9010]  __ia32_sys_setsockopt+0xf3/0x1a0
[  501.276877][ T9010]  ia32_sys_call+0x24c2/0x4310
[  501.281770][ T9010]  __do_fast_syscall_32+0xb0/0x150
[  501.287058][ T9010]  do_fast_syscall_32+0x38/0x80
[  501.292072][ T9010]  do_SYSENTER_32+0x1f/0x30
[  501.296732][ T9010]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  501.303222][ T9010] 
[  501.305595][ T9010] Uninit was stored to memory at:
[  501.310791][ T9010]  crypto_sha3_finup+0xc98/0xe00
[  501.315866][ T9010]  crypto_shash_finup+0x327/0xe80
[  501.321094][ T9010]  jent_hash_time+0x247/0x590
[  501.325929][ T9010]  jent_condition_data+0x4f0/0x510
[  501.331200][ T9010]  jent_measure_jitter+0x547/0x770
[  501.336465][ T9010]  jent_gen_entropy+0x209/0x450
[  501.341463][ T9010]  jent_read_entropy+0x353/0xeb0
[  501.346552][ T9010]  jent_kcapi_random+0x6c/0x250
[  501.351601][ T9010]  drbg_seed+0x3f5/0xe20
[  501.355983][ T9010]  drbg_kcapi_seed+0x19b2/0x1e40
[  501.361061][ T9010]  crypto_rng_reset+0x193/0x250
[  501.366054][ T9010]  rng_setkey+0x52/0x70
[  501.370333][ T9010]  alg_setkey+0x262/0x3b0
[  501.374771][ T9010]  alg_setsockopt+0x503/0x760
[  501.379564][ T9010]  __sys_setsockopt+0x43b/0x580
[  501.384559][ T9010]  __ia32_sys_setsockopt+0xf3/0x1a0
[  501.389908][ T9010]  ia32_sys_call+0x24c2/0x4310
[  501.394803][ T9010]  __do_fast_syscall_32+0xb0/0x150
[  501.400082][ T9010]  do_fast_syscall_32+0x38/0x80
[  501.405097][ T9010]  do_SYSENTER_32+0x1f/0x30
[  501.409756][ T9010]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  501.416240][ T9010] 
[  501.418616][ T9010] Uninit was stored to memory at:
[  501.423803][ T9010]  keccakf+0x1efb/0x2110
[  501.428180][ T9010]  crypto_sha3_finup+0x772/0xe00
[  501.433264][ T9010]  crypto_shash_finup+0x327/0xe80
[  501.438467][ T9010]  jent_hash_time+0x247/0x590
[  501.443393][ T9010]  jent_condition_data+0x4f0/0x510
[  501.448664][ T9010]  jent_measure_jitter+0x547/0x770
[  501.453942][ T9010]  jent_gen_entropy+0x209/0x450
[  501.458945][ T9010]  jent_read_entropy+0x353/0xeb0
[  501.464038][ T9010]  jent_kcapi_random+0x6c/0x250
[  501.469065][ T9010]  drbg_seed+0x3f5/0xe20
[  501.473451][ T9010]  drbg_kcapi_seed+0x19b2/0x1e40
[  501.478534][ T9010]  crypto_rng_reset+0x193/0x250
[  501.483513][ T9010]  rng_setkey+0x52/0x70
[  501.487799][ T9010]  alg_setkey+0x262/0x3b0
[  501.492240][ T9010]  alg_setsockopt+0x503/0x760
[  501.497029][ T9010]  __sys_setsockopt+0x43b/0x580
[  501.502020][ T9010]  __ia32_sys_setsockopt+0xf3/0x1a0
[  501.507360][ T9010]  ia32_sys_call+0x24c2/0x4310
[  501.512256][ T9010]  __do_fast_syscall_32+0xb0/0x150
[  501.517560][ T9010]  do_fast_syscall_32+0x38/0x80
[  501.522597][ T9010]  do_SYSENTER_32+0x1f/0x30
[  501.527273][ T9010]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  501.533769][ T9010] 
[  501.536143][ T9010] Uninit was stored to memory at:
[  501.541332][ T9010]  crypto_sha3_finup+0x5be/0xe00
[  501.546412][ T9010]  crypto_shash_finup+0x327/0xe80
[  501.551613][ T9010]  jent_hash_time+0x247/0x590
[  501.556459][ T9010]  jent_condition_data+0x4f0/0x510
[  501.561729][ T9010]  jent_measure_jitter+0x547/0x770
[  501.567007][ T9010]  jent_gen_entropy+0x209/0x450
[  501.572012][ T9010]  jent_read_entropy+0x353/0xeb0
[  501.577101][ T9010]  jent_kcapi_random+0x6c/0x250
[  501.582130][ T9010]  drbg_seed+0x3f5/0xe20
[  501.586508][ T9010]  drbg_kcapi_seed+0x19b2/0x1e40
[  501.591598][ T9010]  crypto_rng_reset+0x193/0x250
[  501.596597][ T9010]  rng_setkey+0x52/0x70
[  501.600898][ T9010]  alg_setkey+0x262/0x3b0
[  501.605349][ T9010]  alg_setsockopt+0x503/0x760
[  501.610138][ T9010]  __sys_setsockopt+0x43b/0x580
[  501.615132][ T9010]  __ia32_sys_setsockopt+0xf3/0x1a0
[  501.620478][ T9010]  ia32_sys_call+0x24c2/0x4310
[  501.625364][ T9010]  __do_fast_syscall_32+0xb0/0x150
[  501.630645][ T9010]  do_fast_syscall_32+0x38/0x80
[  501.635664][ T9010]  do_SYSENTER_32+0x1f/0x30
[  501.640349][ T9010]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  501.646959][ T9010] 
[  501.649334][ T9010] Uninit was stored to memory at:
[  501.654567][ T9010]  crypto_sha3_finup+0x136/0xe00
[  501.659653][ T9010]  crypto_shash_finup+0x327/0xe80
[  501.664862][ T9010]  jent_hash_time+0x247/0x590
[  501.669715][ T9010]  jent_condition_data+0x4f0/0x510
[  501.674985][ T9010]  jent_measure_jitter+0x547/0x770
[  501.680255][ T9010]  jent_gen_entropy+0x209/0x450
[  501.685254][ T9010]  jent_read_entropy+0x353/0xeb0
[  501.690340][ T9010]  jent_kcapi_random+0x6c/0x250
[  501.695346][ T9010]  drbg_seed+0x3f5/0xe20
[  501.699722][ T9010]  drbg_kcapi_seed+0x19b2/0x1e40
[  501.704913][ T9010]  crypto_rng_reset+0x193/0x250
[  501.709913][ T9010]  rng_setkey+0x52/0x70
[  501.714197][ T9010]  alg_setkey+0x262/0x3b0
[  501.718643][ T9010]  alg_setsockopt+0x503/0x760
[  501.723443][ T9010]  __sys_setsockopt+0x43b/0x580
[  501.728442][ T9010]  __ia32_sys_setsockopt+0xf3/0x1a0
[  501.733787][ T9010]  ia32_sys_call+0x24c2/0x4310
[  501.738680][ T9010]  __do_fast_syscall_32+0xb0/0x150
[  501.743959][ T9010]  do_fast_syscall_32+0x38/0x80
[  501.748974][ T9010]  do_SYSENTER_32+0x1f/0x30
[  501.753636][ T9010]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  501.760131][ T9010] 
[  501.762519][ T9010] Uninit was stored to memory at:
[  501.767863][ T9010]  crypto_shash_finup+0xc5a/0xe80
[  501.773073][ T9010]  jent_hash_time+0x1de/0x590
[  501.777907][ T9010]  jent_condition_data+0x4f0/0x510
[  501.783447][ T9010]  jent_measure_jitter+0x547/0x770
[  501.788720][ T9010]  jent_gen_entropy+0x209/0x450
[  501.793719][ T9010]  jent_read_entropy+0x353/0xeb0
[  501.798804][ T9010]  jent_kcapi_random+0x6c/0x250
[  501.803829][ T9010]  drbg_seed+0x3f5/0xe20
[  501.808204][ T9010]  drbg_kcapi_seed+0x19b2/0x1e40
[  501.813284][ T9010]  crypto_rng_reset+0x193/0x250
[  501.818270][ T9010]  rng_setkey+0x52/0x70
[  501.822551][ T9010]  alg_setkey+0x262/0x3b0
[  501.826999][ T9010]  alg_setsockopt+0x503/0x760
[  501.831793][ T9010]  __sys_setsockopt+0x43b/0x580
[  501.836789][ T9010]  __ia32_sys_setsockopt+0xf3/0x1a0
[  501.842147][ T9010]  ia32_sys_call+0x24c2/0x4310
[  501.847029][ T9010]  __do_fast_syscall_32+0xb0/0x150
[  501.852478][ T9010]  do_fast_syscall_32+0x38/0x80
[  501.857507][ T9010]  do_SYSENTER_32+0x1f/0x30
[  501.862182][ T9010]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  501.868675][ T9010] 
[  501.871056][ T9010] Local variable intermediary created at:
[  501.876852][ T9010]  jent_hash_time+0x9b/0x590
[  501.881601][ T9010]  jent_condition_data+0x4f0/0x510
[  501.886879][ T9010] 
[  501.889289][ T9010] CPU: 1 UID: 0 PID: 9010 Comm: syz.5.707 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  501.900215][ T9010] Tainted: [W]=WARN
[  501.904090][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  501.914242][ T9010] =====================================================
[  501.921328][ T9010] Disabling lock debugging due to kernel taint
[  501.927561][ T9010] Kernel panic - not syncing: kmsan.panic set ...
[  501.934087][ T9010] CPU: 1 UID: 0 PID: 9010 Comm: syz.5.707 Tainted: G    B   W           syzkaller #0 PREEMPT(none) 
[  501.945026][ T9010] Tainted: [B]=BAD_PAGE, [W]=WARN
[  501.950115][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  501.960268][ T9010] Call Trace:
[  501.963626][ T9010]  <TASK>
[  501.966630][ T9010]  __dump_stack+0x26/0x30
[  501.971125][ T9010]  dump_stack_lvl+0x53/0x270
[  501.975895][ T9010]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  501.981916][ T9010]  dump_stack+0x1e/0x25
[  501.986231][ T9010]  vpanic+0x361/0xc50
[  501.990390][ T9010]  panic+0x15d/0x160
[  501.994486][ T9010]  kmsan_report+0x31c/0x320
[  501.999148][ T9010]  ? __msan_warning+0x1b/0x30
[  502.003972][ T9010]  ? aes_encrypt+0x126a/0x1960
[  502.008868][ T9010]  ? aesti_encrypt+0x7d/0xf0
[  502.013600][ T9010]  ? cipher_crypt_one+0x11d/0x2e0
[  502.018761][ T9010]  ? crypto_cipher_encrypt_one+0x33/0x40
[  502.024530][ T9010]  ? drbg_ctr_update+0x19a9/0x3700
[  502.029803][ T9010]  ? drbg_seed+0xb1b/0xe20
[  502.034465][ T9010]  ? drbg_kcapi_seed+0x19b2/0x1e40
[  502.039731][ T9010]  ? crypto_rng_reset+0x193/0x250
[  502.044897][ T9010]  ? rng_setkey+0x52/0x70
[  502.049358][ T9010]  ? alg_setkey+0x262/0x3b0
[  502.053981][ T9010]  ? alg_setsockopt+0x503/0x760
[  502.058950][ T9010]  ? __sys_setsockopt+0x43b/0x580
[  502.064123][ T9010]  ? __ia32_sys_setsockopt+0xf3/0x1a0
[  502.069648][ T9010]  ? ia32_sys_call+0x24c2/0x4310
[  502.074717][ T9010]  ? __do_fast_syscall_32+0xb0/0x150
[  502.080192][ T9010]  ? do_fast_syscall_32+0x38/0x80
[  502.085391][ T9010]  ? do_SYSENTER_32+0x1f/0x30
[  502.090336][ T9010]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  502.097029][ T9010]  ? crypto_sha3_finup+0xd11/0xe00
[  502.102534][ T9010]  ? kmsan_get_metadata+0xfb/0x160
[  502.107812][ T9010]  ? kmsan_internal_memmove_metadata+0x181/0x230
[  502.114293][ T9010]  ? kmsan_get_metadata+0xfb/0x160
[  502.119579][ T9010]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  502.125640][ T9010]  ? kmsan_get_metadata+0xfb/0x160
[  502.130910][ T9010]  __msan_warning+0x1b/0x30
[  502.135547][ T9010]  aes_encrypt+0x126a/0x1960
[  502.140463][ T9010]  ? kmsan_get_metadata+0xfb/0x160
[  502.145954][ T9010]  aesti_encrypt+0x7d/0xf0
[  502.150528][ T9010]  cipher_crypt_one+0x11d/0x2e0
[  502.155526][ T9010]  ? __pfx_aesti_encrypt+0x10/0x10
[  502.160793][ T9010]  ? crypto_cipher_setkey+0x380/0x430
[  502.166302][ T9010]  ? kmsan_get_metadata+0xfb/0x160
[  502.171588][ T9010]  crypto_cipher_encrypt_one+0x33/0x40
[  502.177214][ T9010]  drbg_ctr_update+0x19a9/0x3700
[  502.182417][ T9010]  ? __pfx_drbg_ctr_update+0x10/0x10
[  502.187871][ T9010]  drbg_seed+0xb1b/0xe20
[  502.192304][ T9010]  ? __pfx_jent_kcapi_random+0x10/0x10
[  502.197956][ T9010]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  502.203933][ T9010]  drbg_kcapi_seed+0x19b2/0x1e40
[  502.209063][ T9010]  ? __pfx_drbg_kcapi_seed+0x10/0x10
[  502.214507][ T9010]  crypto_rng_reset+0x193/0x250
[  502.219528][ T9010]  rng_setkey+0x52/0x70
[  502.223829][ T9010]  ? __pfx_rng_setkey+0x10/0x10
[  502.228816][ T9010]  alg_setkey+0x262/0x3b0
[  502.233287][ T9010]  alg_setsockopt+0x503/0x760
[  502.238109][ T9010]  ? __pfx_alg_setsockopt+0x10/0x10
[  502.243440][ T9010]  __sys_setsockopt+0x43b/0x580
[  502.248483][ T9010]  __ia32_sys_setsockopt+0xf3/0x1a0
[  502.253866][ T9010]  ia32_sys_call+0x24c2/0x4310
[  502.258772][ T9010]  __do_fast_syscall_32+0xb0/0x150
[  502.264067][ T9010]  ? irqentry_exit_to_user_mode+0x82/0xa0
[  502.269963][ T9010]  do_fast_syscall_32+0x38/0x80
[  502.275004][ T9010]  do_SYSENTER_32+0x1f/0x30
[  502.279696][ T9010]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  502.286228][ T9010] RIP: 0023:0xf707e539
[  502.290404][ T9010] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  502.310168][ T9010] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[  502.318741][ T9010] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000117
[  502.326841][ T9010] RDX: 0000000000000001 RSI: 0000000080000300 RDI: 0000000000000028
[  502.334917][ T9010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  502.343079][ T9010] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  502.351149][ T9010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  502.359254][ T9010]  </TASK>
[  502.362629][ T9010] Kernel Offset: disabled
[  502.367032][ T9010] Rebooting in 86400 seconds..