last executing test programs:

9m32.909731322s ago: executing program 1 (id=1668):
futex(0x0, 0xd, 0x4, 0x0, 0x0, 0xfffffffe)
futex(&(0x7f000000cffc), 0x5, 0x3, 0x0, 0x0, 0x3000000)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40841}, 0x2000c050)
gettid()
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_create(0x1, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$sg(0x0, 0x0, 0x802)
getpid()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

9m32.646710979s ago: executing program 1 (id=1672):
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socket(0x400000000010, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x4000000)

9m32.348149639s ago: executing program 1 (id=1676):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000c80))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

9m31.05500694s ago: executing program 1 (id=1680):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r1, &(0x7f0000000340)='Linux Founda', 0xc)

9m29.759923052s ago: executing program 1 (id=1683):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x23fd, 0x4)

9m27.861034222s ago: executing program 1 (id=1700):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
capget(&(0x7f0000000000)={0x19980330, r0}, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0)
unshare(0x64000600)
getdents(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)

9m15.179421862s ago: executing program 0 (id=1787):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB], 0x38}, 0x1, 0x300}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0)

9m14.09648754s ago: executing program 0 (id=1792):
openat$rtc(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)

9m13.129261267s ago: executing program 0 (id=1795):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaabb0800450000380000000000019078ac1e14aa030190781200183f25"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
io_uring_setup(0x4fea, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

9m12.16847637s ago: executing program 32 (id=1700):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
capget(&(0x7f0000000000)={0x19980330, r0}, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0)
unshare(0x64000600)
getdents(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)

9m11.971222413s ago: executing program 0 (id=1802):
recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{&(0x7f0000000180)=@ax25={{0x3, @default}, [@rose, @rose, @bcast, @rose, @rose, @rose, @remote, @null]}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000002540)=""/188, 0xbc}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x3, &(0x7f0000003640)=""/150, 0x96}, 0x1}], 0x1, 0x2, &(0x7f0000003740)={0x0, 0x989680})
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = gettid()
tkill(r3, 0x2a)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r5 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000009b80)={0x40000012})
read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020)
epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1a00048, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_lower}, {@rodir}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@rodir}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbaf}}, {@shortname_mixed}, {@fat=@check_strict}, {@utf8no}, {@shortname_mixed}]}, 0x83, 0x350, &(0x7f0000001f80)="$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")
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x459, r7, 0x4}, 0x38)

9m10.699679871s ago: executing program 0 (id=1805):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)

9m8.526863086s ago: executing program 0 (id=1816):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(0x0, 0x8, 0x1)
rename(0x0, 0x0)
remap_file_pages(&(0x7f0000516000/0x4000)=nil, 0x4000, 0x2, 0x100000000, 0x8040)
mknod$loop(0x0, 0x100, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
clock_getres(0xfffffffffffffff5, 0x0)

8m52.7617588s ago: executing program 33 (id=1816):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(0x0, 0x8, 0x1)
rename(0x0, 0x0)
remap_file_pages(&(0x7f0000516000/0x4000)=nil, 0x4000, 0x2, 0x100000000, 0x8040)
mknod$loop(0x0, 0x100, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
clock_getres(0xfffffffffffffff5, 0x0)

6m2.496962439s ago: executing program 6 (id=2886):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98)

6m0.030913893s ago: executing program 6 (id=2895):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000)

5m59.844747419s ago: executing program 6 (id=2896):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4a1d, 0x40000009, @local, 0x4}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000540)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x8, 0x11, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast2, {[], {0x4e1d, 0x4e20, 0x8}}}}}}, 0x0)

5m59.589229849s ago: executing program 6 (id=2899):
recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{&(0x7f0000000180)=@ax25={{0x3, @default}, [@rose, @rose, @bcast, @rose, @rose, @rose, @remote, @null]}, 0x80, 0x0, 0x0, &(0x7f0000003640)=""/150, 0x96}, 0x1}], 0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = gettid()
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8)
tkill(r3, 0x2a)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r5 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000009b80)={0x40000012})
epoll_pwait(r5, 0x0, 0x0, 0x2, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1a00048, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_lower}, {@rodir}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@rodir}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbaf}}, {@shortname_mixed}, {@fat=@check_strict}, {@utf8no}, {@shortname_mixed}]}, 0x83, 0x350, &(0x7f0000001f80)="$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")
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x459, r7, 0x4}, 0x38)

5m57.850198276s ago: executing program 6 (id=2900):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x1000400, &(0x7f0000000000)=ANY=[], 0x2, 0x679, &(0x7f0000020540)="$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")
truncate(&(0x7f0000000940)='./file1\x00', 0x5a)

5m57.232301932s ago: executing program 6 (id=2906):
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)

5m41.884892423s ago: executing program 34 (id=2906):
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)

4m50.441559301s ago: executing program 8 (id=3240):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101001, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101002, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x83, 0x1, 0x85}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101003, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x2, 0x4)

4m50.118602569s ago: executing program 8 (id=3242):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
lseek(r0, 0xffffffffffffffee, 0x2)
sendfile(r0, r0, 0x0, 0x7a680000)

4m49.812958847s ago: executing program 8 (id=3245):
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
munlockall()
mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff)
mkdir(0x0, 0x20861e91fd0f0ddc)
socket$unix(0x1, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x5, 0x1000, 0x800, 0xfff9, 0x3ff, 0x1, 0x8800, 0x4, 0x101, 0x25, 0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000240))

4m46.178101354s ago: executing program 8 (id=3256):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
unshare(0x22020600)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x1b05c5a, 0x0)

4m45.726942056s ago: executing program 8 (id=3259):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4}, {0xffe0, 0xb}, {0xb, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4c00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e26}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)

4m45.129582901s ago: executing program 8 (id=3262):
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0xdffffffe, @mcast1, 0x9}, 0x1c)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
read$FUSE(r3, 0x0, 0x0)
syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='0')
close_range(r1, 0xffffffffffffffff, 0x0)

4m44.488067395s ago: executing program 35 (id=3262):
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0xdffffffe, @mcast1, 0x9}, 0x1c)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
read$FUSE(r3, 0x0, 0x0)
syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='0')
close_range(r1, 0xffffffffffffffff, 0x0)

3m46.341688294s ago: executing program 3 (id=3551):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x2ad, r0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r1}, &(0x7f0000000180)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha1'], 0x0, 0x0)

3m46.151154061s ago: executing program 3 (id=3552):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x43}, 0x5, 0x2, 0x0, 0x6, 0x2, 0xa}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b32, &(0x7f0000000040))

3m45.900943841s ago: executing program 3 (id=3555):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x6e21, 0x7, @loopback, 0x2}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

3m45.685694569s ago: executing program 3 (id=3557):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)

3m45.454043019s ago: executing program 3 (id=3560):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f0000000cc0)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x18}, 0x0)

3m42.99335994s ago: executing program 3 (id=3571):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)

3m31.492984003s ago: executing program 2 (id=3636):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@fallback=r0, r0, 0x2f, 0x2020, 0x4}, 0x20)

3m29.51721586s ago: executing program 2 (id=3649):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)

3m28.985066364s ago: executing program 2 (id=3654):
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ftruncate(r1, 0xe5)
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400), 0xfe, 0x59c, &(0x7f0000000440)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r3, &(0x7f0000001b00)=""/4119, 0x1017)

3m27.406756679s ago: executing program 2 (id=3660):
r0 = socket$inet(0x2, 0x3, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

3m26.9357879s ago: executing program 2 (id=3664):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3m26.684904371s ago: executing program 2 (id=3666):
syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
syz_open_dev$usbfs(&(0x7f0000000240), 0x80000000000b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x40000cd, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)

3m11.576212257s ago: executing program 36 (id=3666):
syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
syz_open_dev$usbfs(&(0x7f0000000240), 0x80000000000b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x40000cd, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)

6.799484407s ago: executing program 5 (id=4231):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, 0x0, 0x0)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)

6.737272817s ago: executing program 9 (id=4232):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x54)

4.914771035s ago: executing program 9 (id=4233):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r4}, 0xc)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)

4.186008427s ago: executing program 7 (id=4234):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
syz_mount_image$fuse(0x0, 0x0, 0x4002, 0x0, 0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x1)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(&(0x7f00000001c0)='pipefs\x00', 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0)
unshare(0x2a020400)
ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0xc0844123, &(0x7f0000000580)=0x1)

4.167071079s ago: executing program 5 (id=4235):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x17bb, &(0x7f0000000240)={0x0, 0xc8a1, 0x4000, 0x2, 0xc3})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
openat(r4, 0x0, 0x42, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0xc00)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
sendfile(r5, r3, 0x0, 0x20000)

4.003387376s ago: executing program 4 (id=4236):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.78408086s ago: executing program 5 (id=4237):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r2, <r3=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000000c0)=0x402)
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000280)={"f993ed062e3b3022a54da749dda5da682b183484c89625fcfb80c51996e4a4b0", r3})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.760306075s ago: executing program 7 (id=4238):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="bb2819d9983f", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0})

2.704238163s ago: executing program 9 (id=4239):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq}]})

2.53685139s ago: executing program 4 (id=4240):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_emit_ethernet(0x1ee, &(0x7f0000000000)=ANY=[], 0x0)

2.329194655s ago: executing program 5 (id=4241):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
r1 = semget(0x0, 0x1, 0x281)
semop(r1, 0x0, 0x0)
semop(r1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x0)

2.170310729s ago: executing program 5 (id=4242):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.854511939s ago: executing program 5 (id=4243):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000001c0)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)

1.768410526s ago: executing program 9 (id=4244):
syz_ublk_setup_io_uring(0x2000001d, &(0x7f00000001c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1fe)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/loopback.usb0\x00', 0x1ff)

1.458926869s ago: executing program 9 (id=4245):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, 0x0, 0x0)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)
read(r0, &(0x7f0000000200), 0x5)

1.261038951s ago: executing program 9 (id=4246):
mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./my_config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./my_sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0)
mkdir(0x0, 0x1ff)
mkdir(&(0x7f0000000900)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
symlink(&(0x7f0000000b00)='./my_config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000c00)='./my_config/usb_gadget/g1/configs/c.1/acm.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./my_sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000e00), 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, 0x0, 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f0000001200)='dummy_udc.0\x00', 0xc)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./my_sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000e00)='dummy_udc.0\x00', 0xc)

1.029102679s ago: executing program 4 (id=4247):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x17bb, &(0x7f0000000240)={0x0, 0xc8a1, 0x4000, 0x2, 0xc3})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
openat(r4, 0x0, 0x42, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0xc00)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
sendfile(r5, r3, 0x0, 0x20000)

813.387545ms ago: executing program 4 (id=4248):
epoll_create1(0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x81, 0x4)
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x7fa962bfffff, 0x110, r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x0, 0x4, 0x5}, 0x48)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff)
mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, 0x0)

690.048172ms ago: executing program 7 (id=4249):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r4}, 0xc)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)

368.753319ms ago: executing program 7 (id=4250):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

309.752955ms ago: executing program 4 (id=4251):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r2, <r3=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000000c0)=0x402)
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000280)={"f993ed062e3b3022a54da749dda5da682b183484c89625fcfb80c51996e4a4b0", r3})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

165.188645ms ago: executing program 7 (id=4252):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
r1 = semget(0x0, 0x1, 0x281)
semop(r1, 0x0, 0x0)
semop(r1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x0)

124.654041ms ago: executing program 4 (id=4253):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='1', 0x1)

0s ago: executing program 7 (id=4254):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = dup3(0xffffffffffffffff, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

t be used with ro mount option
[  595.872661][T14881] BTRFS error (device loop7): cannot disable free-space-tree
[  595.949431][T14881] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  595.963831][   T50] Bluetooth: hci6: command tx timeout
[  596.004180][T14881] BTRFS error (device loop7): open_ctree failed: -22
[  596.300919][ T5991] bridge_slave_1: left allmulticast mode
[  596.333315][ T5991] bridge_slave_1: left promiscuous mode
[  596.356901][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.375047][T14917] loop8: detected capacity change from 0 to 128
[  596.417815][ T5991] bridge_slave_0: left allmulticast mode
[  596.438997][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.469993][T14917] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  596.515571][T14927] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3181'.
[  596.570268][T14917] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  597.120322][T14244] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  597.954975][T14939] loop7: detected capacity change from 0 to 4096
[  597.975300][  T185] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  597.999606][ T5991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  598.045563][   T50] Bluetooth: hci6: command tx timeout
[  598.059192][ T5991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  598.109006][ T5991] bond0 (unregistering): Released all slaves
[  598.133711][  T185] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  598.145308][T14942] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  598.177561][  T185] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  598.209567][ T5991] bond1 (unregistering): (slave veth3): Releasing backup interface
[  598.219766][  T185] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  598.235064][T14939] NILFS error (device loop7): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[  598.245642][  T185] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  598.259657][  T185] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  598.277075][  T185] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.286847][  T185] usb 9-1: Product: syz
[  598.295745][  T185] usb 9-1: Manufacturer: syz
[  598.307562][  T185] usb 9-1: SerialNumber: syz
[  598.322381][ T5991] bond1 (unregistering): Released all slaves
[  598.393502][  T185] cdc_mbim 9-1:1.0: skipping garbage
[  598.508037][T14939] Remounting filesystem read-only
[  598.977469][T14937] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  599.471369][ T5991] IPVS: stopping backup sync thread 12153 ...
[  599.678038][T14823] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.685520][T14823] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.696869][T14823] bridge_slave_0: entered allmulticast mode
[  599.722692][T14823] bridge_slave_0: entered promiscuous mode
[  599.798117][T14823] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.809062][T14935] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  599.837203][T14823] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.867526][T14823] bridge_slave_1: entered allmulticast mode
[  599.897455][T14823] bridge_slave_1: entered promiscuous mode
[  600.059794][  T185] cdc_mbim 9-1:1.0: bind() failure
[  600.119676][  T185] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71
[  600.128187][   T50] Bluetooth: hci6: command tx timeout
[  600.191596][  T185] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71
[  600.270171][  T185] usbtest 9-1:1.1: probe with driver usbtest failed with error -71
[  600.348218][  T185] usb 9-1: USB disconnect, device number 2
[  600.726646][T14823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  600.895564][ T5991] hsr_slave_0: left promiscuous mode
[  600.924048][ T5991] hsr_slave_1: left promiscuous mode
[  600.960111][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  600.998978][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  601.089480][T14998] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3202'.
[  601.125998][ T5991] veth1_macvtap: left promiscuous mode
[  601.144972][ T5991] veth0_macvtap: left promiscuous mode
[  601.167360][ T5991] veth1_vlan: left promiscuous mode
[  601.181556][ T5991] veth0_vlan: left promiscuous mode
[  601.429785][T15011] loop8: detected capacity change from 0 to 164
[  602.932672][ T5991] team0 (unregistering): Port device team_slave_1 removed
[  602.961353][ T5991] team0 (unregistering): Port device team_slave_0 removed
[  603.098140][   T30] audit: type=1800 audit(1786993284.235:316): pid=15006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3206" name="file1" dev="tmpfs" ino=2696 res=0 errno=0
[  603.198333][T14823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  603.236407][ T5268] 8021q: adding VLAN 0 to HW filter on device eth13
[  603.445113][T14823] team0: Port device team_slave_0 added
[  603.469645][T14823] team0: Port device team_slave_1 added
[  603.724950][T14823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  603.779031][T14823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.893241][T14823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  603.946403][T14823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  603.988816][T14823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  604.071039][T14823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  604.114132][T15048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3219'.
[  604.250202][T15048] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  604.270482][T15048] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  604.464552][T14823] hsr_slave_0: entered promiscuous mode
[  604.490592][T14823] hsr_slave_1: entered promiscuous mode
[  604.514177][T15055] overlayfs: failed to clone upperpath
[  604.517380][T14823] debugfs: 'hsr0' already exists in 'hsr'
[  604.539077][T14823] Cannot create hsr debugfs directory
[  606.047217][   T50] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  606.051661][ T5618] Bluetooth: hci4: command 0x1003 tx timeout
[  606.858260][T15113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3236'.
[  606.879023][T14823] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  606.906169][T14823] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  606.926500][T15113] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  606.947821][T14823] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  607.016159][T14823] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  607.075759][T14823] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  607.171133][T14823] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  607.208948][T14823] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  607.305077][T14823] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  607.809232][T14823] 8021q: adding VLAN 0 to HW filter on device bond0
[  607.851691][T15106] Process accounting resumed
[  607.970997][T14823] 8021q: adding VLAN 0 to HW filter on device team0
[  607.990904][T15140] fuse: fd is not a fuse device
[  608.059394][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state
[  608.066640][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state
[  608.167980][  T373] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.175259][  T373] bridge0: port 2(bridge_slave_1) entered forwarding state
[  608.224990][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3244'.
[  608.562306][T14759] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  608.942418][T14759] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  608.956264][T14759] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  608.971852][T14759] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  608.984858][T14759] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  609.001161][T14759] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.017939][T14759] usb 9-1: Product: syz
[  609.046491][T14759] usb 9-1: Manufacturer: syz
[  609.475009][T14759] usb 9-1: SerialNumber: syz
[  609.939058][T14759] cdc_mbim 9-1:1.0: skipping garbage
[  610.133817][T15150] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  610.801277][T15150] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  611.078278][T14759] cdc_mbim 9-1:1.0: bind() failure
[  611.153071][T14759] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71
[  611.208318][T14759] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71
[  611.261292][T14759] usbtest 9-1:1.1: probe with driver usbtest failed with error -71
[  611.429940][T14759] usb 9-1: USB disconnect, device number 3
[  611.883229][T15194] loop7: detected capacity change from 0 to 256
[  611.891018][T15194] vfat: Bad value for 'time_offset'
[  612.741896][T14823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.165618][   T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.453312][   T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.756011][   T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.926559][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  613.943542][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  613.952735][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  613.963800][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  613.975279][   T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.986233][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  614.168147][T14823] veth0_vlan: entered promiscuous mode
[  614.316890][T14823] veth1_vlan: entered promiscuous mode
[  614.568929][   T13] bridge_slave_1: left allmulticast mode
[  614.595146][   T13] bridge_slave_1: left promiscuous mode
[  614.622849][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  614.675877][T15256] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3270'.
[  614.685980][   T13] bridge_slave_0: left allmulticast mode
[  614.714510][   T13] bridge_slave_0: left promiscuous mode
[  614.735122][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  615.370775][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  615.404436][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  615.435325][   T13] bond0 (unregistering): Released all slaves
[  615.514332][T14823] veth0_macvtap: entered promiscuous mode
[  615.576084][T14823] veth1_macvtap: entered promiscuous mode
[  615.860963][T14823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  615.934651][T14823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  616.006723][T15275] lo: entered allmulticast mode
[  616.041738][   T50] Bluetooth: hci4: command tx timeout
[  616.053095][ T5992] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  616.213762][T15277] loop7: detected capacity change from 0 to 4096
[  616.221324][ T5991] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  616.256467][T15283] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3275'.
[  616.331352][T15277] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  616.351252][T15274] lo: left allmulticast mode
[  616.499035][   T13] hsr_slave_0: left promiscuous mode
[  616.535961][   T13] hsr_slave_1: left promiscuous mode
[  616.553664][T15277] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[  616.565399][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  616.594416][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  616.639332][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  616.677259][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  616.755457][   T13] veth1_macvtap: left promiscuous mode
[  616.780122][   T13] veth0_macvtap: left promiscuous mode
[  616.803468][   T13] veth1_vlan: left promiscuous mode
[  616.819570][   T13] veth0_vlan: left promiscuous mode
[  617.882415][   T13] team0 (unregistering): Port device team_slave_1 removed
[  617.931216][   T13] team0 (unregistering): Port device team_slave_0 removed
[  618.121613][   T50] Bluetooth: hci4: command tx timeout
[  618.881637][ T5992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  618.918683][ T5992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  619.070861][ T5268] 8021q: adding VLAN 0 to HW filter on device eth13
[  619.362400][T15322] netlink: 'syz.3.3286': attribute type 10 has an invalid length.
[  619.514230][T15322] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.521788][T15322] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.401520][   T50] Bluetooth: hci4: command tx timeout
[  620.477179][T15322] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.484522][T15322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  620.492169][T15322] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.499408][T15322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.633122][T15322] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  620.877405][ T5991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.930976][ T5991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.184606][T15318] loop7: detected capacity change from 0 to 32768
[  621.430138][ T7458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.514147][ T7458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.917944][T15318] JBD2: Ignoring recovery information on journal
[  622.223380][T15318] JBD2: journal reset failed
[  622.259974][T15318] (syz.7.3284,15318,0):ocfs2_journal_load:1163 ERROR: Failed to load journal!
[  622.285473][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3292'.
[  622.302637][T15318] (syz.7.3284,15318,0):ocfs2_check_volume:2373 ERROR: ocfs2 journal load failed! -4
[  622.451565][   T50] Bluetooth: hci4: command tx timeout
[  622.916460][T15370] overlayfs: failed to resolve './file0': -2
[  622.987809][T15240] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.001196][T15240] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.022420][T15240] bridge_slave_0: entered allmulticast mode
[  623.030641][T15240] bridge_slave_0: entered promiscuous mode
[  623.058702][T15240] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.082411][T15240] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.110358][T15240] bridge_slave_1: entered allmulticast mode
[  623.131601][T15240] bridge_slave_1: entered promiscuous mode
[  623.165220][ T5741] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  623.245084][T15383] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3302'.
[  623.276805][T15240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  623.296031][T15383] batman_adv: batadv0: Interface deactivated: dummy0
[  623.314860][T15383] batman_adv: batadv0: Removing interface: dummy0
[  623.335299][T15240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  623.345900][ T5741] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  623.356517][ T5268] 8021q: adding VLAN 0 to HW filter on device eth14
[  623.364348][ T5741] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  623.386326][ T5741] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  623.411540][ T5741] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  623.433696][ T5741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.459187][T15240] team0: Port device team_slave_0 added
[  623.460026][ T5741] usb 6-1: config 0 descriptor??
[  623.483346][T15240] team0: Port device team_slave_1 added
[  623.601046][T15240] batman_adv: batadv0: Adding interface: batadv_slave_0
[  623.612152][T15240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  623.639685][T15240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  623.653277][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  623.666785][T15240] batman_adv: batadv0: Adding interface: batadv_slave_1
[  623.674330][T15240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  623.704096][T15240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  623.923702][T15240] hsr_slave_0: entered promiscuous mode
[  623.952713][ T5741] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0
[  623.966083][T15240] hsr_slave_1: entered promiscuous mode
[  623.972437][ T5741] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0
[  624.061916][ T5741] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf4 found
[  624.086967][ T5741] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf3 found
[  624.170268][ T5741] usb 6-1: USB disconnect, device number 2
[  624.544186][T15420] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3314'.
[  625.819811][T15240] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  625.903424][T15240] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  625.941005][T15240] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  626.001071][T15240] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  626.088750][T15443] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  626.142219][T14759] bond_slave_0: entered promiscuous mode
[  626.152874][T14759] bond_slave_1: entered promiscuous mode
[  626.172793][T15240] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  626.227241][T15240] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  626.260597][T15240] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  626.309290][T15240] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  626.511898][ T5268] 8021q: adding VLAN 0 to HW filter on device eth15
[  626.562462][T15461] loop7: detected capacity change from 0 to 2048
[  626.678059][T15465] loop5: detected capacity change from 0 to 4096
[  626.690746][T15461] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  626.742700][T15469] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3329'.
[  626.855775][T15465] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  626.857532][T15461] syz.7.3326 (pid 15461) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  626.959756][T15240] 8021q: adding VLAN 0 to HW filter on device bond0
[  627.055973][T15465] ntfs3(loop5): Failed to load $Extend (-22).
[  627.091215][T15465] ntfs3(loop5): Failed to initialize $Extend.
[  627.094613][T15240] 8021q: adding VLAN 0 to HW filter on device team0
[  627.174160][T15475] fuse: fd is not a fuse device
[  627.174381][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state
[  627.186347][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  627.208201][T10845] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.310194][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state
[  627.317532][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state
[  628.699448][T15480] loop7: detected capacity change from 0 to 131072
[  628.719461][T15480] F2FS-fs (loop7): invalid crc value
[  628.823499][T15480] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  628.841186][T15480] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  629.472848][T15515] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3341'.
[  629.549121][T15484] loop5: detected capacity change from 0 to 32768
[  629.665144][T15484] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  629.882772][T15484] XFS (loop5): Ending clean mount
[  630.127227][T14823] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  630.887967][ T5268] 8021q: adding VLAN 0 to HW filter on device eth16
[  631.227591][T15240] 8021q: adding VLAN 0 to HW filter on device batadv0
[  631.458753][T15572] loop5: detected capacity change from 0 to 4096
[  631.480118][T15573] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3353'.
[  632.210523][T15595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3360'.
[  632.638088][T15240] veth0_vlan: entered promiscuous mode
[  632.676320][T15240] veth1_vlan: entered promiscuous mode
[  633.040539][T15240] veth0_macvtap: entered promiscuous mode
[  633.623393][T15623] loop7: detected capacity change from 0 to 128
[  633.674019][T15240] veth1_macvtap: entered promiscuous mode
[  633.794622][T15623] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  633.855891][T15623] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  633.876315][T15240] batman_adv: batadv0: Interface activated: batadv_slave_0
[  633.892727][T15240] batman_adv: batadv0: Interface activated: batadv_slave_1
[  634.016432][ T6298] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  634.163307][ T6363] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  634.703081][ T7458] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  634.942797][T10845] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  635.182318][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  635.212121][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  635.268890][T15646] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3375'.
[  635.345944][ T5992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  635.357703][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  635.372221][ T5992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  635.972886][   T30] audit: type=1800 audit(1786993317.105:317): pid=15661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3384" name="idVendor" dev="configfs" ino=38050 res=0 errno=0
[  636.045213][   T30] audit: type=1800 audit(1786993317.105:318): pid=15661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3384" name="idProduct" dev="configfs" ino=38053 res=0 errno=0
[  636.109965][   T30] audit: type=1800 audit(1786993317.115:319): pid=15661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3384" name="serialnumber" dev="configfs" ino=38056 res=0 errno=0
[  636.170000][T15643] loop5: detected capacity change from 0 to 32768
[  636.186500][   T30] audit: type=1800 audit(1786993317.115:320): pid=15661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3384" name="manufacturer" dev="configfs" ino=38057 res=0 errno=0
[  636.270400][T15643] JBD2: Ignoring recovery information on journal
[  636.326539][   T30] audit: type=1800 audit(1786993317.115:321): pid=15661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3384" name="product" dev="configfs" ino=38058 res=0 errno=0
[  636.509448][T15669] loop7: detected capacity change from 0 to 1024
[  636.673747][T15669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  636.708714][T15643] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  636.898216][T15675] bond1 (unregistering): Released all slaves
[  638.122305][   T13] wlan1: Trigger new scan to find an IBSS to join
[  638.159320][T10845] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  638.243084][T15701] 8021q: adding VLAN 0 to HW filter on device bond1
[  638.285428][T14823] ocfs2: Unmounting device (7,5) on (node local)
[  638.470342][   T30] audit: type=1800 audit(1786993319.605:322): pid=15706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3395" name="idVendor" dev="configfs" ino=39087 res=0 errno=0
[  638.537544][   T30] audit: type=1800 audit(1786993319.635:323): pid=15706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3395" name="idProduct" dev="configfs" ino=39088 res=0 errno=0
[  638.612082][   T30] audit: type=1800 audit(1786993319.645:324): pid=15706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3395" name="serialnumber" dev="configfs" ino=39089 res=0 errno=0
[  638.695259][   T30] audit: type=1800 audit(1786993319.645:325): pid=15706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3395" name="manufacturer" dev="configfs" ino=39090 res=0 errno=0
[  638.769088][   T30] audit: type=1800 audit(1786993319.645:326): pid=15706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3395" name="product" dev="configfs" ino=39091 res=0 errno=0
[  639.445185][T15719] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3402'.
[  641.096296][T15712] loop5: detected capacity change from 0 to 40427
[  641.169406][  T373] wlan1: Trigger new scan to find an IBSS to join
[  642.032199][T15712] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  642.249032][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3415'.
[  642.286521][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3415'.
[  642.305014][T15764] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3415'.
[  642.341757][T15760] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3415'.
[  642.371951][T15764] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3415'.
[  642.424151][T15764] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3415'.
[  642.693304][T15774] loop7: detected capacity change from 0 to 128
[  642.988384][T15774] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  643.426745][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  643.426771][   T30] audit: type=1800 audit(1786993324.565:333): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3424" name="idVendor" dev="configfs" ino=39183 res=0 errno=0
[  643.490812][   T30] audit: type=1800 audit(1786993324.605:334): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3424" name="idProduct" dev="configfs" ino=39184 res=0 errno=0
[  643.511769][   T30] audit: type=1800 audit(1786993324.615:335): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3424" name="serialnumber" dev="configfs" ino=39186 res=0 errno=0
[  643.561882][   T30] audit: type=1800 audit(1786993324.635:336): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3424" name="manufacturer" dev="configfs" ino=39187 res=0 errno=0
[  643.643497][   T30] audit: type=1800 audit(1786993324.645:337): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3424" name="product" dev="configfs" ino=39188 res=0 errno=0
[  643.812050][   T30] audit: type=1800 audit(1786993324.655:338): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3424" name="configuration" dev="configfs" ino=39189 res=0 errno=0
[  644.201691][ T5992] wlan1: Trigger new scan to find an IBSS to join
[  644.374357][T15774] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  644.491845][T15774] ext2 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  644.652896][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  644.667634][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  644.676974][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  644.685222][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  644.693181][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  644.919546][   T30] audit: type=1804 audit(1786993326.055:339): pid=15804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3420" name="/newroot/17/file1" dev="tmpfs" ino=111 res=1 errno=0
[  646.034515][ T5992] wlan1: Creating new IBSS network, BSSID ce:6d:71:c3:02:a0
[  646.761719][ T5618] Bluetooth: hci5: command tx timeout
[  647.016438][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3433'.
[  647.106046][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3433'.
[  647.183237][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3433'.
[  647.248758][T10845] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  647.261700][T15822] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3433'.
[  647.302816][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3433'.
[  647.387764][T15823] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3433'.
[  648.968133][ T5618] Bluetooth: hci5: command tx timeout
[  649.317670][T15855] loop9: detected capacity change from 0 to 512
[  649.348792][T15855] EXT4-fs: Ignoring removed nobh option
[  649.489514][T15855] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  649.563290][T15855] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  649.864067][T15855] EXT4-fs error (device loop9): ext4_find_dest_de:2049: inode #2: block 3: comm syz.9.3440: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  650.218692][T15882] UBIFS error (pid: 15882): cannot open "c:::", error -22
[  651.002036][ T5618] Bluetooth: hci5: command tx timeout
[  651.161826][   T13] wlan1: Trigger new scan to find an IBSS to join
[  651.886661][T15906] loop5: detected capacity change from 0 to 512
[  651.929562][T15906] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  652.011012][T15906] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  652.130523][T15906] EXT4-fs (loop5): 1 truncate cleaned up
[  652.174274][T15906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  652.366861][T15798] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.379861][T15798] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.387933][T15798] bridge_slave_0: entered allmulticast mode
[  652.400954][T15240] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  652.404318][T15798] bridge_slave_0: entered promiscuous mode
[  652.415944][T14823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  652.451126][T15798] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.475663][T15798] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.523401][T15798] bridge_slave_1: entered allmulticast mode
[  652.551076][T15798] bridge_slave_1: entered promiscuous mode
[  653.081526][   T50] Bluetooth: hci5: command tx timeout
[  653.115185][T15923] 8021q: adding VLAN 0 to HW filter on device bond2
[  654.096430][T15944] loop5: detected capacity change from 0 to 512
[  654.124739][T15944] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  654.133618][T15944] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  654.576340][T15944] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  654.601260][T15944] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.3465: bg 0: block 248: padding at end of block bitmap is not set
[  654.616360][T15944] loop5: lost filesystem error report for type 5 error -117
[  654.621444][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  654.637827][    C1] EXT4-fs (loop5): last error at time 1786993335: ext4_validate_block_bitmap:440
[  654.660493][T15944] Quota error (device loop5): write_blk: dquota write failed
[  654.669224][T15944] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  654.679530][T15944] EXT4-fs error (device loop5): ext4_acquire_dquot:7039: comm syz.5.3465: Failed to acquire dquot type 1
[  654.691025][T15944] loop5: lost filesystem error report for type 5 error -28
[  654.784319][T15944] EXT4-fs (loop5): 1 truncate cleaned up
[  654.879210][T15944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  655.095063][T15798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  655.123499][T15798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  655.180424][ T7408] wlan1: Trigger new scan to find an IBSS to join
[  655.371171][T15798] team0: Port device team_slave_0 added
[  655.440291][T15798] team0: Port device team_slave_1 added
[  655.667930][T15955] 9p: Bad value for 'wfdno'
[  655.857672][T14823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  656.102600][   T30] audit: type=1800 audit(1786993337.235:340): pid=15954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3468" name="idVendor" dev="configfs" ino=39406 res=0 errno=0
[  656.210396][T15798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  656.251285][   T30] audit: type=1800 audit(1786993337.265:341): pid=15954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3468" name="idProduct" dev="configfs" ino=39409 res=0 errno=0
[  656.302996][T15798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  656.343234][   T30] audit: type=1800 audit(1786993337.275:342): pid=15954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3468" name="serialnumber" dev="configfs" ino=39410 res=0 errno=0
[  656.365417][   T30] audit: type=1800 audit(1786993337.275:343): pid=15954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3468" name="manufacturer" dev="configfs" ino=39411 res=0 errno=0
[  656.386626][   T30] audit: type=1800 audit(1786993337.335:344): pid=15954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3468" name="product" dev="configfs" ino=38487 res=0 errno=0
[  656.409272][   T30] audit: type=1800 audit(1786993337.335:345): pid=15954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3468" name="configuration" dev="configfs" ino=38489 res=0 errno=0
[  656.430652][T15798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  656.463768][T15798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  656.478970][T15798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  656.585538][T15798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  656.740992][ T7408] wlan1: Creating new IBSS network, BSSID 92:89:58:d5:5f:f3
[  658.022230][T15798] hsr_slave_0: entered promiscuous mode
[  658.062859][T15798] hsr_slave_1: entered promiscuous mode
[  658.100952][T15798] debugfs: 'hsr0' already exists in 'hsr'
[  658.124383][T15798] Cannot create hsr debugfs directory
[  658.235212][   T30] audit: type=1800 audit(1786993339.345:346): pid=15995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3480" name="idVendor" dev="configfs" ino=38525 res=0 errno=0
[  658.551831][   T30] audit: type=1800 audit(1786993339.355:347): pid=15995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3480" name="idProduct" dev="configfs" ino=38526 res=0 errno=0
[  659.442100][T15621] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  659.613263][T15621] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  659.644163][T15621] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  659.679232][T15621] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  659.720457][T15621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.749368][T16021] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3488'.
[  659.760347][T15621] usb 6-1: Product: syz
[  659.783514][T15621] usb 6-1: Manufacturer: syz
[  659.794897][T15621] usb 6-1: SerialNumber: syz
[  659.866806][T15621] cdc_mbim 6-1:1.0: skipping garbage
[  660.119115][T15994] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  661.253324][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  661.253361][   T30] audit: type=1800 audit(1786993342.385:352): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3496" name="idVendor" dev="configfs" ino=38601 res=0 errno=0
[  661.320912][   T30] audit: type=1800 audit(1786993342.395:353): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3496" name="idProduct" dev="configfs" ino=38602 res=0 errno=0
[  661.378096][T15994] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  661.382725][   T30] audit: type=1800 audit(1786993342.395:354): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3496" name="serialnumber" dev="configfs" ino=38603 res=0 errno=0
[  661.671139][T15621] cdc_mbim 6-1:1.0: setting tx_max = 28
[  661.681086][T15621] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  661.688910][   T30] audit: type=1800 audit(1786993342.395:355): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3496" name="manufacturer" dev="configfs" ino=38604 res=0 errno=0
[  661.710231][   T30] audit: type=1800 audit(1786993342.395:356): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3496" name="product" dev="configfs" ino=38605 res=0 errno=0
[  662.371472][T16057] syz.9.3497 (16057): drop_caches: 2
[  662.394648][   T30] audit: type=1800 audit(1786993342.395:357): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3496" name="configuration" dev="configfs" ino=38606 res=0 errno=0
[  662.655308][T15621] wwan wwan0: port wwan0mbim0 attached
[  662.829727][T15621] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 1e:ea:af:7f:31:91
[  662.921048][T15621] usb 6-1: USB disconnect, device number 3
[  662.930217][T16072] netlink: 112 bytes leftover after parsing attributes in process `syz.9.3504'.
[  662.998858][T15621] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[  663.392888][T15621] wwan wwan0: port wwan0mbim0 disconnected
[  663.653613][   T30] audit: type=1800 audit(1786993344.785:358): pid=16093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3511" name="idVendor" dev="configfs" ino=38666 res=0 errno=0
[  663.763916][   T30] audit: type=1800 audit(1786993344.825:359): pid=16093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3511" name="idProduct" dev="configfs" ino=38667 res=0 errno=0
[  663.869186][   T30] audit: type=1800 audit(1786993344.825:360): pid=16093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3511" name="serialnumber" dev="configfs" ino=38668 res=0 errno=0
[  663.979922][   T30] audit: type=1800 audit(1786993344.825:361): pid=16093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3511" name="manufacturer" dev="configfs" ino=38669 res=0 errno=0
[  666.617705][T15798] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  666.743443][T15798] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  666.781861][T16125] loop5: detected capacity change from 0 to 512
[  666.791251][T15798] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  666.868122][T16127] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3522'.
[  666.888757][T15798] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  666.910505][T16125] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  666.967214][T15798] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  667.003077][T16125] EXT4-fs (loop5): 1 truncate cleaned up
[  667.064158][T15798] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  667.082823][T16125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  667.140461][T15798] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  667.214862][T15798] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  667.490630][T14823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  667.648597][T15798] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.750513][T15798] 8021q: adding VLAN 0 to HW filter on device team0
[  667.797332][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.804606][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  667.847591][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.854878][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.016107][T16153] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3528'.
[  669.280167][T16171] netlink: 112 bytes leftover after parsing attributes in process `syz.9.3535'.
[  669.989412][T16193] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[14823] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[16193]
[  671.082596][T16206] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3546'.
[  671.232149][ T5749] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  671.317931][T15798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  671.435560][ T5749] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  671.464989][ T5749] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  671.496672][ T5749] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  671.528190][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.543150][ T5749] usb 6-1: Product: syz
[  671.543308][T16220] netlink: 'syz.9.3550': attribute type 10 has an invalid length.
[  671.551076][ T5749] usb 6-1: Manufacturer: syz
[  671.577014][ T5749] usb 6-1: SerialNumber: syz
[  671.589339][T16220] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.597174][T16220] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.606048][ T5749] cdc_mbim 6-1:1.0: skipping garbage
[  671.671296][T16220] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.678593][T16220] bridge0: port 2(bridge_slave_1) entered forwarding state
[  671.686286][T16220] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.693512][T16220] bridge0: port 1(bridge_slave_0) entered forwarding state
[  671.746523][T16220] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  671.802289][T16203] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  672.320636][T15798] veth0_vlan: entered promiscuous mode
[  672.358526][T15798] veth1_vlan: entered promiscuous mode
[  672.421372][T16203] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  672.444939][ T5749] cdc_mbim 6-1:1.0: setting tx_max = 28
[  672.469878][T15798] veth0_macvtap: entered promiscuous mode
[  672.520482][T15798] veth1_macvtap: entered promiscuous mode
[  672.542802][ T5749] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  672.573704][T15798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  672.600412][ T5749] wwan wwan0: port wwan0mbim0 attached
[  672.685406][ T5749] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 06:6f:96:36:ea:03
[  672.705984][T15798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  672.764479][ T5749] usb 6-1: USB disconnect, device number 4
[  672.777296][ T5618] Bluetooth: hci2: unexpected event for opcode 0x203e
[  672.797394][ T5749] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[  672.832003][ T7407] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  672.904733][ T7407] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  673.067152][ T5749] wwan wwan0: port wwan0mbim0 disconnected
[  673.074203][  T373] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  673.141924][  T373] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  673.447137][ T7407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  674.079708][ T7407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  674.412678][T16261] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3559'.
[  674.438356][  T373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  674.468862][T16261] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3559'.
[  674.541499][  T373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  675.054946][T16272] loop9: detected capacity change from 0 to 256
[  675.174185][T16272] vfat: Bad value for 'time_offset'
[  676.156267][T16278] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3574'.
[  676.173448][T16278] net_ratelimit: 10 callbacks suppressed
[  676.173472][T16278] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  677.458887][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  677.473053][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  677.488293][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  677.503587][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  677.515937][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  677.609798][T16303] loop4: detected capacity change from 0 to 512
[  677.672033][T16303] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  677.812690][T16303] EXT4-fs (loop4): 1 truncate cleaned up
[  677.855960][T16303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  677.975461][T16308] loop7: detected capacity change from 0 to 256
[  677.997590][T16308] vfat: Bad value for 'time_offset'
[  679.021955][T15798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  679.542101][T16326] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3585'.
[  679.564878][   T50] Bluetooth: hci0: command tx timeout
[  680.449110][T16351] netlink: 'syz.4.3596': attribute type 10 has an invalid length.
[  680.836484][T16356] loop9: detected capacity change from 0 to 256
[  680.859988][T16356] vfat: Bad value for 'time_offset'
[  681.575729][ T2991] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.643544][   T50] Bluetooth: hci0: command tx timeout
[  681.649391][T16351] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.657167][T16351] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.715929][T16351] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.723247][T16351] bridge0: port 2(bridge_slave_1) entered forwarding state
[  681.730821][T16351] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.738082][T16351] bridge0: port 1(bridge_slave_0) entered forwarding state
[  681.833429][T16351] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  681.903494][T16353] bridge1: entered promiscuous mode
[  681.922225][T16353] bridge1: entered allmulticast mode
[  682.206448][ T2991] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.470396][ T2991] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.722068][   T50] Bluetooth: hci0: command tx timeout
[  683.966375][T16396] loop7: detected capacity change from 0 to 256
[  683.986944][T16396] vfat: Bad value for 'time_offset'
[  684.699294][T16400] loop5: detected capacity change from 0 to 1024
[  684.760118][T16400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  684.773805][T16400] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  684.825813][T16400] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz.5.3614: path /50/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  685.087318][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  685.117677][ T2991] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  685.508101][T14823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  685.552632][T16422] tipc: Started in network mode
[  685.560996][T16422] tipc: Node identity ea9085a463c4, cluster identity 4711
[  685.569451][T16422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  685.584428][T16427] syzkaller0: MTU too low for tipc bearer
[  685.660871][T16427] tipc: Disabling bearer <eth:syzkaller0>
[  685.801710][   T50] Bluetooth: hci0: command tx timeout
[  686.390345][ T2991] bridge_slave_1: left allmulticast mode
[  686.408876][ T2991] bridge_slave_1: left promiscuous mode
[  686.437065][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.515437][ T2991] bridge_slave_0: left allmulticast mode
[  686.542540][ T2991] bridge_slave_0: left promiscuous mode
[  686.559780][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.715996][ T5992] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  686.737736][T16466] loop7: detected capacity change from 0 to 1024
[  686.773086][T16466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  686.785296][T16466] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  686.846035][T16466] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 16: comm syz.7.3637: path /248/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  687.407478][T16488] loop5: detected capacity change from 0 to 128
[  687.431184][T16488] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  687.519013][T16481] "syz.9.3640" (16481) uses obsolete ecb(arc4) skcipher
[  687.539311][T16488] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  687.550032][T10845] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  687.567568][T16488] ext2 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  687.574759][ T2991] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  687.708375][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  687.770221][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  687.841829][T14823] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  687.841903][ T2991] bond0 (unregistering): Released all slaves
[  687.934315][ T2991] bond1 (unregistering): Released all slaves
[  688.043870][ T2991] bond2 (unregistering): Released all slaves
[  688.156564][ T2991] bond3 (unregistering): Released all slaves
[  688.256982][ T5268] 8021q: adding VLAN 0 to HW filter on device eth17
[  688.471117][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  688.471170][   T30] audit: type=1800 audit(1786993369.605:364): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3648" name="idVendor" dev="configfs" ino=41630 res=0 errno=0
[  688.841864][   T30] audit: type=1800 audit(1786993369.635:365): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3648" name="idProduct" dev="configfs" ino=41631 res=0 errno=0
[  688.878919][   T30] audit: type=1800 audit(1786993369.645:366): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3648" name="serialnumber" dev="configfs" ino=41632 res=0 errno=0
[  688.903440][   T30] audit: type=1800 audit(1786993369.645:367): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3648" name="manufacturer" dev="configfs" ino=41633 res=0 errno=0
[  688.928796][   T30] audit: type=1800 audit(1786993369.645:368): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3648" name="product" dev="configfs" ino=41634 res=0 errno=0
[  688.951257][   T30] audit: type=1800 audit(1786993369.665:369): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3648" name="configuration" dev="configfs" ino=41635 res=0 errno=0
[  689.007485][T16518] 9p: Bad value for 'wfdno'
[  689.537285][T16292] bridge0: port 1(bridge_slave_0) entered blocking state
[  689.605753][T16292] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.667936][T16292] bridge_slave_0: entered allmulticast mode
[  689.711269][T16292] bridge_slave_0: entered promiscuous mode
[  689.865191][T16292] bridge0: port 2(bridge_slave_1) entered blocking state
[  689.868737][T16533] loop9: detected capacity change from 0 to 128
[  689.908225][T16292] bridge0: port 2(bridge_slave_1) entered disabled state
[  689.960525][T16533] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  689.980090][T16292] bridge_slave_1: entered allmulticast mode
[  690.013145][T16292] bridge_slave_1: entered promiscuous mode
[  690.043018][T16533] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  690.127323][T16533] ext2 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  690.130058][T16538] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3657'.
[  690.216894][T16292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  690.278304][T16292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  690.350513][T15240] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  690.733580][T16549] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96
[  690.794739][ T2991] hsr_slave_0: left promiscuous mode
[  690.828798][ T2991] hsr_slave_1: left promiscuous mode
[  690.854131][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  690.886042][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  690.898875][   T30] audit: type=1800 audit(1786993372.035:370): pid=16555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3663" name="idVendor" dev="configfs" ino=41707 res=0 errno=0
[  690.936784][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  690.952862][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  690.975284][   T30] audit: type=1800 audit(1786993372.035:371): pid=16555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3663" name="idProduct" dev="configfs" ino=41708 res=0 errno=0
[  691.063120][   T30] audit: type=1800 audit(1786993372.035:372): pid=16555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3663" name="serialnumber" dev="configfs" ino=41709 res=0 errno=0
[  691.071776][   T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  691.096399][ T2991] veth1_macvtap: left promiscuous mode
[  691.119519][ T2991] veth0_macvtap: left promiscuous mode
[  691.136681][ T2991] veth1_vlan: left promiscuous mode
[  691.148690][   T30] audit: type=1800 audit(1786993372.035:373): pid=16555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3663" name="manufacturer" dev="configfs" ino=41710 res=0 errno=0
[  691.179670][ T2991] veth0_vlan: left promiscuous mode
[  691.302406][   T29] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  691.575979][   T29] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  691.588877][   T29] usb 5-1: Product: syz
[  691.593137][   T29] usb 5-1: Manufacturer: syz
[  691.597749][   T29] usb 5-1: SerialNumber: syz
[  691.615596][   T29] usb 5-1: config 0 descriptor??
[  691.634981][   T29] ch341 5-1:0.0: ch341-uart converter detected
[  691.701348][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3667'.
[  691.768299][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3667'.
[  691.850425][   T29] usb 5-1: failed to receive control message: -71
[  691.880201][   T29] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  691.932865][   T29] usb 5-1: USB disconnect, device number 3
[  692.058523][   T29] ch341 5-1:0.0: device disconnected
[  692.670454][ T2991] team0 (unregistering): Port device team_slave_1 removed
[  692.729957][T16589] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3672'.
[  692.744751][ T2991] team0 (unregistering): Port device team_slave_0 removed
[  694.181882][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  694.591879][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  694.961276][T16596] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f800
[  695.152668][T16292] team0: Port device team_slave_0 added
[  695.169821][T16292] team0: Port device team_slave_1 added
[  695.235862][ T5268] 8021q: adding VLAN 0 to HW filter on device eth18
[  695.388621][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  695.388646][   T30] audit: type=1800 audit(1786993376.525:376): pid=16603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3677" name="idVendor" dev="configfs" ino=40636 res=0 errno=0
[  695.467563][T16292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  695.477438][   T30] audit: type=1800 audit(1786993376.545:377): pid=16603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3677" name="idProduct" dev="configfs" ino=40640 res=0 errno=0
[  695.514324][T16292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  695.564587][   T30] audit: type=1800 audit(1786993376.575:378): pid=16603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3677" name="serialnumber" dev="configfs" ino=40641 res=0 errno=0
[  695.611341][T16292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  695.629431][   T30] audit: type=1800 audit(1786993376.585:379): pid=16603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3677" name="manufacturer" dev="configfs" ino=40643 res=0 errno=0
[  695.670777][T16292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  695.689068][T16292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  695.723913][   T30] audit: type=1800 audit(1786993376.595:380): pid=16603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3677" name="product" dev="configfs" ino=40644 res=0 errno=0
[  695.813754][T16292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  695.828419][   T30] audit: type=1800 audit(1786993376.605:381): pid=16603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3677" name="configuration" dev="configfs" ino=40645 res=0 errno=0
[  695.913977][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3680'.
[  695.979412][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3680'.
[  696.149724][T16292] hsr_slave_0: entered promiscuous mode
[  696.175818][T16292] hsr_slave_1: entered promiscuous mode
[  696.210229][T16292] debugfs: 'hsr0' already exists in 'hsr'
[  696.245912][T16292] Cannot create hsr debugfs directory
[  700.137238][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3687'.
[  700.561507][   T30] audit: type=1800 audit(1786993381.675:382): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3690" name="idVendor" dev="configfs" ino=41869 res=0 errno=0
[  700.697708][   T30] audit: type=1800 audit(1786993381.685:383): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3690" name="idProduct" dev="configfs" ino=41870 res=0 errno=0
[  700.718567][   T30] audit: type=1800 audit(1786993381.695:384): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3690" name="serialnumber" dev="configfs" ino=41871 res=0 errno=0
[  700.745012][   T30] audit: type=1800 audit(1786993381.695:385): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3690" name="manufacturer" dev="configfs" ino=41872 res=0 errno=0
[  700.768437][   T30] audit: type=1800 audit(1786993381.745:386): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3690" name="product" dev="configfs" ino=41873 res=0 errno=0
[  701.514316][   T30] audit: type=1800 audit(1786993381.745:387): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3690" name="configuration" dev="configfs" ino=41874 res=0 errno=0
[  701.902190][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3692'.
[  701.938202][   T30] audit: type=1800 audit(1786993383.065:388): pid=16657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3693" name="idVendor" dev="configfs" ino=41893 res=0 errno=0
[  701.957085][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3692'.
[  702.015153][   T30] audit: type=1800 audit(1786993383.075:389): pid=16657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3693" name="idProduct" dev="configfs" ino=41894 res=0 errno=0
[  702.090699][   T30] audit: type=1800 audit(1786993383.075:390): pid=16657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3693" name="serialnumber" dev="configfs" ino=41895 res=0 errno=0
[  702.204527][   T30] audit: type=1800 audit(1786993383.105:391): pid=16657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3693" name="manufacturer" dev="configfs" ino=41896 res=0 errno=0
[  702.629413][T16660] input: syz1 as /devices/virtual/input/input6
[  703.414797][T16653] syz.4.3685 (16653): drop_caches: 2
[  704.355143][T16292] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  704.390934][T16292] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  704.414770][T16292] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  704.669688][T16292] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  705.381370][T16292] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  705.403236][T16292] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  705.441225][T16292] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  705.572944][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  705.572969][   T30] audit: type=1800 audit(1786993386.715:397): pid=16690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3702" name="manufacturer" dev="configfs" ino=42114 res=0 errno=0
[  705.597371][T16292] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  705.618421][   T30] audit: type=1800 audit(1786993386.745:398): pid=16690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3702" name="product" dev="configfs" ino=42115 res=0 errno=0
[  705.657289][   T30] audit: type=1800 audit(1786993386.795:399): pid=16690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3702" name="configuration" dev="configfs" ino=40762 res=0 errno=0
[  706.172996][T16292] 8021q: adding VLAN 0 to HW filter on device bond0
[  706.286809][T16292] 8021q: adding VLAN 0 to HW filter on device team0
[  706.295428][   T30] audit: type=1800 audit(1786993387.425:400): pid=16712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3707" name="idVendor" dev="configfs" ino=42150 res=0 errno=0
[  706.372189][ T6363] bridge0: port 1(bridge_slave_0) entered blocking state
[  706.379438][ T6363] bridge0: port 1(bridge_slave_0) entered forwarding state
[  706.422452][   T30] audit: type=1800 audit(1786993387.435:401): pid=16712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3707" name="idProduct" dev="configfs" ino=42151 res=0 errno=0
[  706.480901][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  706.488144][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  706.564270][   T30] audit: type=1800 audit(1786993387.455:402): pid=16712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3707" name="serialnumber" dev="configfs" ino=42152 res=0 errno=0
[  706.686748][   T30] audit: type=1800 audit(1786993387.475:403): pid=16712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3707" name="manufacturer" dev="configfs" ino=42156 res=0 errno=0
[  706.814882][   T30] audit: type=1800 audit(1786993387.485:404): pid=16712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3707" name="product" dev="configfs" ino=42157 res=0 errno=0
[  707.391455][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  708.786749][   T30] audit: type=1800 audit(1786993387.485:405): pid=16712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3707" name="configuration" dev="configfs" ino=42158 res=0 errno=0
[  710.074630][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  710.102753][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  710.116570][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  710.126579][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  710.135706][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  712.212345][   T50] Bluetooth: hci3: command tx timeout
[  712.595563][T16785] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3727'.
[  712.976302][T16789] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[14823] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[16789]
[  714.281807][   T50] Bluetooth: hci3: command tx timeout
[  714.503380][ T5992] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.833794][T16292] 8021q: adding VLAN 0 to HW filter on device batadv0
[  715.092510][T16808] netlink: 'syz.4.3733': attribute type 10 has an invalid length.
[  715.248787][ T5992] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  715.362780][T16808] bridge0: port 2(bridge_slave_1) entered disabled state
[  715.370307][T16808] bridge0: port 1(bridge_slave_0) entered disabled state
[  715.444687][   T30] audit: type=1800 audit(1786993396.585:406): pid=16822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3716" name="idVendor" dev="configfs" ino=40942 res=0 errno=0
[  715.512059][   T30] audit: type=1800 audit(1786993396.585:407): pid=16822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3716" name="idProduct" dev="configfs" ino=40943 res=0 errno=0
[  715.584597][   T30] audit: type=1800 audit(1786993396.585:408): pid=16822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3716" name="serialnumber" dev="configfs" ino=40944 res=0 errno=0
[  715.606077][   T30] audit: type=1800 audit(1786993396.595:409): pid=16822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3716" name="manufacturer" dev="configfs" ino=40946 res=0 errno=0
[  715.627486][   T30] audit: type=1800 audit(1786993396.595:410): pid=16822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3716" name="product" dev="configfs" ino=40947 res=0 errno=0
[  715.652416][   T30] audit: type=1800 audit(1786993396.605:411): pid=16822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3716" name="configuration" dev="configfs" ino=40948 res=0 errno=0
[  715.774809][ T5992] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.164115][ T5992] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.381693][   T50] Bluetooth: hci3: command tx timeout
[  717.900479][   T50] Bluetooth: hci6: command 0x0406 tx timeout
[  717.915601][ T6298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  718.040187][T16840] syzkaller0: entered promiscuous mode
[  718.050114][T16840] syzkaller0: entered allmulticast mode
[  718.452112][ T5618] Bluetooth: hci3: command tx timeout
[  720.148194][T16869] loop4: detected capacity change from 0 to 256
[  720.167869][T16869] vfat: Bad value for 'time_offset'
[  720.887742][T16292] veth0_vlan: entered promiscuous mode
[  721.106941][T16292] veth1_vlan: entered promiscuous mode
[  723.096517][T16905] loop7: detected capacity change from 0 to 256
[  723.116331][T16905] vfat: Bad value for 'time_offset'
[  723.852213][T16292] veth0_macvtap: entered promiscuous mode
[  723.888252][T16913] loop4: detected capacity change from 0 to 128
[  723.925811][T16913] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  723.987155][T16913] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  724.071554][T16913] ext2 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  724.546991][T15798] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  724.698309][T16928] loop5: detected capacity change from 0 to 256
[  724.719348][T16928] vfat: Bad value for 'time_offset'
[  726.149319][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  726.177573][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  726.201012][ T5992] bond0 (unregistering): Released all slaves
[  726.247396][ T5992] bond1 (unregistering): Released all slaves
[  726.328403][ T5992] bond2 (unregistering): Released all slaves
[  726.583277][T16292] veth1_macvtap: entered promiscuous mode
[  726.746316][T16733] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.754142][T16733] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.762457][T16733] bridge_slave_0: entered allmulticast mode
[  726.771116][T16733] bridge_slave_0: entered promiscuous mode
[  726.887631][T16733] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.935140][T16733] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.994329][T16733] bridge_slave_1: entered allmulticast mode
[  727.229720][T16733] bridge_slave_1: entered promiscuous mode
[  728.393521][T16953] syz.4.3765 (16953): drop_caches: 2
[  728.927777][T16733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  729.084754][T16967] capability: warning: `syz.9.3770' uses deprecated v2 capabilities in a way that may be insecure
[  729.953764][T16292] batman_adv: batadv0: Interface activated: batadv_slave_0
[  729.968247][T16292] batman_adv: batadv0: Interface activated: batadv_slave_1
[  730.728079][T16733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  730.940465][T16973] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3772'.
[  731.337738][ T5992] hsr_slave_0: left promiscuous mode
[  731.374618][ T5992] hsr_slave_1: left promiscuous mode
[  731.416654][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  731.467219][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0
[  731.667626][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  732.328073][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1
[  732.393848][ T5992] veth1_macvtap: left promiscuous mode
[  732.420162][ T5992] veth0_macvtap: left promiscuous mode
[  732.453811][ T5992] veth1_vlan: left promiscuous mode
[  732.477116][ T5992] veth0_vlan: left promiscuous mode
[  732.991451][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  733.401560][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  735.574245][T17009] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3780'.
[  736.033340][ T5992] team0 (unregistering): Port device team_slave_1 removed
[  736.114158][ T5992] team0 (unregistering): Port device team_slave_0 removed
[  736.731716][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  736.773691][T16733] team0: Port device team_slave_0 added
[  736.856736][T16733] team0: Port device team_slave_1 added
[  736.905661][  T373] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  736.965602][T17017] netlink: 'syz.9.3783': attribute type 2 has an invalid length.
[  736.981774][  T373] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  737.033644][ T5268] 8021q: adding VLAN 0 to HW filter on device eth17
[  737.082119][  T373] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  737.329555][T17024] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3784'.
[  737.390425][T16733] batman_adv: batadv0: Adding interface: batadv_slave_0
[  737.432292][T16298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  737.441775][T16298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  737.452790][T16298] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  737.467844][T16298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  737.476011][T16298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  737.503394][T16733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  737.726142][T16733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  737.790063][T16733] batman_adv: batadv0: Adding interface: batadv_slave_1
[  737.832139][T16733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  737.930071][T16733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  738.461437][ T5618] Bluetooth: hci4: command 0x0406 tx timeout
[  738.693776][T16733] hsr_slave_0: entered promiscuous mode
[  738.715096][T16733] hsr_slave_1: entered promiscuous mode
[  738.723256][T16733] debugfs: 'hsr0' already exists in 'hsr'
[  738.729686][T16733] Cannot create hsr debugfs directory
[  739.178764][T17053] loop5: detected capacity change from 0 to 512
[  739.263362][T17053] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  739.298812][ T5992] IPVS: stop unused estimator thread 0...
[  739.323647][T17053] EXT4-fs (loop5): 1 truncate cleaned up
[  739.422168][T17053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  739.563500][   T50] Bluetooth: hci2: command tx timeout
[  739.849970][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3794'.
[  739.953738][T14823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  741.027083][T17085] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  741.038215][ T7408] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.054292][T17089] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3800'.
[  742.821808][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  742.912093][   T50] Bluetooth: hci2: command tx timeout
[  743.722034][ T7408] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  744.196930][   T30] audit: type=1326 audit(1786993425.335:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.4.3806" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45679e0d9 code=0x7ffc0000
[  744.270292][   T30] audit: type=1326 audit(1786993425.335:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.4.3806" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45679e0d9 code=0x7ffc0000
[  744.344989][   T30] audit: type=1326 audit(1786993425.345:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.4.3806" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45679e0d9 code=0x7ffc0000
[  744.427596][ T5268] 8021q: adding VLAN 0 to HW filter on device eth18
[  744.445808][   T30] audit: type=1326 audit(1786993425.345:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.4.3806" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45679e0d9 code=0x7ffc0000
[  744.725343][   T30] audit: type=1326 audit(1786993425.345:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.4.3806" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fe45679e0d9 code=0x7ffc0000
[  744.750981][   T30] audit: type=1326 audit(1786993425.345:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.4.3806" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45679e0d9 code=0x7ffc0000
[  744.891269][   T30] audit: type=1326 audit(1786993425.345:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.4.3806" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45679e0d9 code=0x7ffc0000
[  744.921579][   T50] Bluetooth: hci2: command tx timeout
[  745.116033][   T30] audit: type=1326 audit(1786993425.345:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.4.3806" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45679e0d9 code=0x7ffc0000
[  745.220106][   T30] audit: type=1326 audit(1786993425.345:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.4.3806" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45679e0d9 code=0x7ffc0000
[  745.275248][   T30] audit: type=1326 audit(1786993425.345:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17107 comm="syz.4.3806" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe45679e0d9 code=0x7ffc0000
[  745.370926][ T7408] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.739753][ T7408] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.172148][T17134] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3814'.
[  746.209651][T17136] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3815'.
[  746.525555][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  747.001803][   T50] Bluetooth: hci2: command tx timeout
[  747.133806][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3818'.
[  748.235066][ T5268] 8021q: adding VLAN 0 to HW filter on device eth19
[  748.919388][T17025] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.927739][T17025] bridge0: port 1(bridge_slave_0) entered disabled state
[  748.935164][T17025] bridge_slave_0: entered allmulticast mode
[  748.951879][T17025] bridge_slave_0: entered promiscuous mode
[  749.148354][T17025] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.351688][T17025] bridge0: port 2(bridge_slave_1) entered disabled state
[  749.359093][T17025] bridge_slave_1: entered allmulticast mode
[  749.368064][T17025] bridge_slave_1: entered promiscuous mode
[  750.320199][ T7408] bridge_slave_1: left allmulticast mode
[  750.330685][ T7408] bridge_slave_1: left promiscuous mode
[  750.347760][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state
[  750.514148][ T7408] bridge_slave_0: left allmulticast mode
[  750.530714][ T7408] bridge_slave_0: left promiscuous mode
[  750.543031][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state
[  750.974418][T17216] input: syz1 as /devices/virtual/input/input9
[  751.563565][   T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  751.779685][T17215] syz.9.3835 (17215): drop_caches: 2
[  753.284073][ T7408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  753.338402][ T7408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  753.386027][ T7408] bond0 (unregistering): Released all slaves
[  753.540673][T17025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  753.599322][T17025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  753.828385][ T7408] hsr_slave_0: left promiscuous mode
[  753.881213][ T7408] hsr_slave_1: left promiscuous mode
[  753.913400][ T7408] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  753.939880][ T7408] batman_adv: batadv0: Removing interface: batadv_slave_0
[  753.990979][ T7408] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  754.011749][ T7408] batman_adv: batadv0: Removing interface: batadv_slave_1
[  754.089116][ T7408] veth1_macvtap: left promiscuous mode
[  754.110420][ T7408] veth0_macvtap: left promiscuous mode
[  754.126359][ T7408] veth1_vlan: left promiscuous mode
[  754.145057][ T7408] veth0_vlan: left promiscuous mode
[  754.662168][T17259] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3853'.
[  755.778136][ T7408] team0 (unregistering): Port device team_slave_1 removed
[  755.839795][ T7408] team0 (unregistering): Port device team_slave_0 removed
[  755.841764][ T5757] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  756.691520][ T5757] usb 5-1: Using ep0 maxpacket: 8
[  756.706484][ T5757] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  756.736256][T17025] team0: Port device team_slave_0 added
[  756.744602][ T5757] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1023
[  756.765374][ T5757] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024
[  756.780652][T17025] team0: Port device team_slave_1 added
[  756.804161][ T5757] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  756.820315][ T5757] usb 5-1: config 1 interface 0 has no altsetting 0
[  756.860502][ T5757] usb 5-1: string descriptor 0 read error: -22
[  756.869463][ T5757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.897629][T17263] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  756.911693][T17263] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  756.982671][   T30] kauditd_printk_skb: 39 callbacks suppressed
[  756.982697][   T30] audit: type=1800 audit(1786993438.115:461): pid=17282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3862" name="idVendor" dev="configfs" ino=44102 res=0 errno=0
[  757.019072][T17025] batman_adv: batadv0: Adding interface: batadv_slave_0
[  757.051662][T17025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  757.108525][   T30] audit: type=1800 audit(1786993438.145:462): pid=17282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3862" name="idProduct" dev="configfs" ino=44103 res=0 errno=0
[  757.113255][T17025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  757.140545][   T30] audit: type=1800 audit(1786993438.155:463): pid=17282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3862" name="serialnumber" dev="configfs" ino=44104 res=0 errno=0
[  757.189060][   T30] audit: type=1800 audit(1786993438.155:464): pid=17282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3862" name="manufacturer" dev="configfs" ino=44105 res=0 errno=0
[  757.215950][   T30] audit: type=1800 audit(1786993438.165:465): pid=17282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3862" name="product" dev="configfs" ino=44106 res=0 errno=0
[  757.218268][ T5757] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  757.282128][T17025] batman_adv: batadv0: Adding interface: batadv_slave_1
[  757.296890][T17025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  757.332133][   T30] audit: type=1800 audit(1786993438.165:466): pid=17282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3862" name="configuration" dev="configfs" ino=44107 res=0 errno=0
[  757.339603][ T5757] usb 5-1: USB disconnect, device number 4
[  757.356547][T17025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  757.843379][T17293] loop9: detected capacity change from 0 to 256
[  757.862747][T17293] vfat: Bad value for 'time_offset'
[  758.838033][T17025] hsr_slave_0: entered promiscuous mode
[  758.864749][T17025] hsr_slave_1: entered promiscuous mode
[  758.893934][T17025] debugfs: 'hsr0' already exists in 'hsr'
[  758.918595][T17025] Cannot create hsr debugfs directory
[  759.200708][T17312] loop4: detected capacity change from 0 to 256
[  759.220099][T17312] vfat: Bad value for 'time_offset'
[  759.978390][T16733] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  760.054120][T16733] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  760.287904][T16733] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  760.328687][T16733] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  760.346000][T17328] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3875'.
[  760.388574][T16733] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  760.431491][T16733] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  760.489838][T16733] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  760.629066][T16733] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  760.776612][T17335] jffs2: notice: (17335) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  761.494114][T17341] loop4: detected capacity change from 0 to 256
[  761.501951][T17341] vfat: Bad value for 'time_offset'
[  762.189565][T17350] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3881'.
[  762.697309][T17361] loop4: detected capacity change from 0 to 256
[  762.716727][T17361] vfat: Bad value for 'time_offset'
[  763.390236][ T5268] 8021q: adding VLAN 0 to HW filter on device eth20
[  763.980318][T16733] 8021q: adding VLAN 0 to HW filter on device bond0
[  764.197756][T16733] 8021q: adding VLAN 0 to HW filter on device team0
[  764.280365][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.287678][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  764.477161][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.484444][ T7407] bridge0: port 2(bridge_slave_1) entered forwarding state
[  764.832141][T17393] loop9: detected capacity change from 0 to 256
[  764.852988][T17393] vfat: Bad value for 'time_offset'
[  766.103643][T17408] loop7: detected capacity change from 0 to 256
[  766.123435][T17408] vfat: Bad value for 'time_offset'
[  768.545932][T16298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  768.571698][T16298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  768.585718][T16298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  768.610801][T16298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  768.624256][T16298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  768.802180][T17441] loop7: detected capacity change from 0 to 512
[  768.827142][T17441] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  769.089484][T16298] Bluetooth: hci5: command 0x0406 tx timeout
[  769.113405][T17441] EXT4-fs (loop7): 1 truncate cleaned up
[  769.393047][T17451] loop4: detected capacity change from 0 to 256
[  769.413703][T17451] vfat: Bad value for 'time_offset'
[  769.862783][T17441] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  770.381864][T17464] loop5: detected capacity change from 0 to 256
[  770.402485][T17464] vfat: Bad value for 'time_offset'
[  770.465326][T10845] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  770.832825][ T5618] Bluetooth: hci0: command tx timeout
[  771.102313][T17025] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  771.265773][T17025] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  772.504196][T17025] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  772.568950][T17482] syz.5.3919 (17482): drop_caches: 2
[  772.843238][T17025] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  772.919399][T17025] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  772.928340][ T5618] Bluetooth: hci0: command tx timeout
[  773.077469][T17025] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  773.155573][T17025] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  773.275274][T17025] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  773.690270][T17512] loop5: detected capacity change from 0 to 512
[  773.734405][T17512] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  773.829274][T17512] EXT4-fs (loop5): 1 truncate cleaned up
[  773.865322][T17512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  773.977473][T14823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  774.321814][ T5757] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  774.511573][ T5757] usb 5-1: Using ep0 maxpacket: 16
[  774.534397][ T5757] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  775.007312][T16298] Bluetooth: hci0: command tx timeout
[  775.342442][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  775.370681][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  776.257277][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  776.267160][ T5757] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  776.278741][ T5757] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  776.310705][ T5757] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  776.341575][ T5757] usb 5-1: Manufacturer: syz
[  776.387772][ T5757] usb 5-1: config 0 descriptor??
[  776.513742][T17548] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3934'.
[  777.081931][T16298] Bluetooth: hci0: command 0x0419 tx timeout
[  777.532239][ T5757] rc_core: IR keymap rc-hauppauge not found
[  777.538712][ T5757] Registered IR keymap rc-empty
[  777.552680][ T5757] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  777.581609][ T5757] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  777.615475][ T5757] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  777.702375][ T5757] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10
[  777.878186][T17025] 8021q: adding VLAN 0 to HW filter on device bond0
[  777.910084][ T5757] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  777.931917][ T5757] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  778.002686][ T5757] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  778.042442][ T5757] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  778.081824][ T5757] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  778.134730][ T5757] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  778.195031][ T5757] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  778.257643][T17025] 8021q: adding VLAN 0 to HW filter on device team0
[  778.275879][ T5757] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  778.336425][ T5757] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  778.401185][T17580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3944'.
[  778.431126][ T5757] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  778.447357][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  778.454665][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  778.488648][ T5757] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  778.566333][ T5757] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  778.577378][T17583] binder_alloc: 17582: binder_alloc_buf, no vma
[  778.620391][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  778.627722][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  778.642496][ T5757] usb 5-1: USB disconnect, device number 5
[  779.234364][ T5618] Bluetooth: hci0: command 0x0419 tx timeout
[  781.167717][T17025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  781.262182][T17617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3952'.
[  781.265994][T17025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  782.041641][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  782.276390][T17638] Device name cannot be null; rc = [-22]
[  783.387741][ T6298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  783.601698][   T12] bridge_slave_1: left allmulticast mode
[  783.626438][   T12] bridge_slave_1: left promiscuous mode
[  783.669724][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  783.739820][   T12] bridge_slave_0: left allmulticast mode
[  783.770284][   T12] bridge_slave_0: left promiscuous mode
[  783.797267][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.231330][T17660] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  786.500514][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  786.560963][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  786.607027][   T12] bond0 (unregistering): Released all slaves
[  787.153654][   T12] hsr_slave_0: left promiscuous mode
[  787.178061][   T12] hsr_slave_1: left promiscuous mode
[  787.197531][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  787.283870][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  788.898150][T17698] file system registered
[  788.964754][T17704] ffs_data_put(): freeing
[  789.086852][   T12] team0 (unregistering): Port device team_slave_1 removed
[  789.218425][   T12] team0 (unregistering): Port device team_slave_0 removed
[  792.333586][T17433] bridge0: port 1(bridge_slave_0) entered blocking state
[  792.387610][T17433] bridge0: port 1(bridge_slave_0) entered disabled state
[  792.419712][T17433] bridge_slave_0: entered allmulticast mode
[  792.453811][T17433] bridge_slave_0: entered promiscuous mode
[  792.482654][T17433] bridge0: port 2(bridge_slave_1) entered blocking state
[  792.525546][T17433] bridge0: port 2(bridge_slave_1) entered disabled state
[  793.371589][T17433] bridge_slave_1: entered allmulticast mode
[  793.383767][T17433] bridge_slave_1: entered promiscuous mode
[  793.390889][T17755] loop4: detected capacity change from 0 to 512
[  793.437133][T17755] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  793.537073][T17755] EXT4-fs (loop4): 1 truncate cleaned up
[  793.564787][T17755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  793.733986][T17765] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3987'.
[  793.777655][T17433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  793.789477][T15798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  793.838186][T17766] bridge0: port 3(veth0) entered blocking state
[  793.861807][T17766] bridge0: port 3(veth0) entered disabled state
[  793.895194][T17766] veth0: entered allmulticast mode
[  793.949997][T17766] veth0: entered promiscuous mode
[  793.997580][T17766] bridge0: port 3(veth0) entered blocking state
[  794.004033][T17766] bridge0: port 3(veth0) entered forwarding state
[  794.054517][T17433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  794.311997][T17433] team0: Port device team_slave_0 added
[  794.358393][T17433] team0: Port device team_slave_1 added
[  794.605030][T17433] batman_adv: batadv0: Adding interface: batadv_slave_0
[  794.639602][T17433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  794.712609][T17790] jffs2: notice: (17790) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  794.761473][T17433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  794.792723][T17433] batman_adv: batadv0: Adding interface: batadv_slave_1
[  794.805591][T17433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  794.903028][T17433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  795.154568][T17025] 8021q: adding VLAN 0 to HW filter on device batadv0
[  795.217427][T17433] hsr_slave_0: entered promiscuous mode
[  795.253394][T17433] hsr_slave_1: entered promiscuous mode
[  795.278350][T17433] debugfs: 'hsr0' already exists in 'hsr'
[  795.301175][T17433] Cannot create hsr debugfs directory
[  798.087481][T17858] input: syz1 as /devices/virtual/input/input11
[  798.166153][T17862] syz.9.4001 (17862): drop_caches: 2
[  799.135394][T16298] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  799.146012][T16298] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  799.160851][T16298] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  799.188602][T16298] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  799.196727][T16298] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  799.222098][   T30] audit: type=1326 audit(1786993480.355:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17884 comm="syz.7.4006" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3439e0d9 code=0x7ffc0000
[  799.299209][   T30] audit: type=1326 audit(1786993480.395:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17884 comm="syz.7.4006" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3439e0d9 code=0x7ffc0000
[  799.374244][   T30] audit: type=1326 audit(1786993480.395:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17884 comm="syz.7.4006" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3439e0d9 code=0x7ffc0000
[  799.400255][   T30] audit: type=1326 audit(1786993480.395:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17884 comm="syz.7.4006" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3439e0d9 code=0x7ffc0000
[  799.426682][   T30] audit: type=1326 audit(1786993480.395:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17884 comm="syz.7.4006" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f1d3439e0d9 code=0x7ffc0000
[  799.452584][   T30] audit: type=1326 audit(1786993480.465:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17884 comm="syz.7.4006" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3439e0d9 code=0x7ffc0000
[  799.479108][   T30] audit: type=1326 audit(1786993480.465:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17884 comm="syz.7.4006" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1d3439de42 code=0x7ffc0000
[  799.553076][   T30] audit: type=1326 audit(1786993480.485:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17884 comm="syz.7.4006" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1d3439ded7 code=0x7ffc0000
[  799.634045][   T30] audit: type=1326 audit(1786993480.485:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17884 comm="syz.7.4006" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1d3435add1 code=0x7ffc0000
[  799.728089][   T30] audit: type=1326 audit(1786993480.485:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17884 comm="syz.7.4006" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1d3439eec9 code=0x7ffc0000
[  799.889125][T17880] tipc: Started in network mode
[  799.923547][T17880] tipc: Node identity 924548c961a1, cluster identity 4711
[  799.962007][T17880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  800.005814][T17881] syzkaller0: entered promiscuous mode
[  800.017283][T17903] loop4: detected capacity change from 0 to 256
[  800.038268][T17881] syzkaller0: entered allmulticast mode
[  800.074139][T17883] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  800.087876][T17903] vfat: Bad value for 'time_offset'
[  800.202719][T17897] tipc: Resetting bearer <eth:syzkaller0>
[  800.258950][T17868] tipc: Resetting bearer <eth:syzkaller0>
[  800.376987][T17868] tipc: Disabling bearer <eth:syzkaller0>
[  801.469645][ T5618] Bluetooth: hci3: command tx timeout
[  802.481672][T17938] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4014'.
[  802.510484][T17938] netlink: 'syz.7.4014': attribute type 10 has an invalid length.
[  802.595508][T17938] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  803.483899][ T5618] Bluetooth: hci3: command tx timeout
[  803.494379][T15240] ffs_data_put(): freeing
[  805.263320][T17433] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  805.345298][T17433] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  805.389352][T17433] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  805.408430][T17433] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  805.478798][T17433] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  805.520107][T17433] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  805.545910][T17433] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  805.561658][ T5618] Bluetooth: hci3: command tx timeout
[  805.577977][T17433] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  805.680581][ T1038] bridge_slave_1: left allmulticast mode
[  805.700771][T18013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4031'.
[  805.703399][ T1038] bridge_slave_1: left promiscuous mode
[  805.722526][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state
[  805.748395][ T1038] bridge_slave_0: left allmulticast mode
[  805.769514][ T1038] bridge_slave_0: left promiscuous mode
[  805.990927][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.695093][ T5618] Bluetooth: hci3: command tx timeout
[  807.966913][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  808.654877][T18037] loop5: detected capacity change from 0 to 256
[  808.798817][T18037] vfat: Bad value for 'time_offset'
[  808.871126][T18043] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4034'.
[  810.296602][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  810.337213][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  810.354143][ T1038] bond0 (unregistering): Released all slaves
[  812.699608][ T1038] hsr_slave_0: left promiscuous mode
[  812.722804][ T1038] hsr_slave_1: left promiscuous mode
[  812.742086][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0
[  812.771064][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1
[  813.290733][ T1038] team0 (unregistering): Port device team_slave_1 removed
[  813.355055][ T1038] team0 (unregistering): Port device team_slave_0 removed
[  816.360348][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  816.600660][T17433] 8021q: adding VLAN 0 to HW filter on device bond0
[  818.577326][T17433] 8021q: adding VLAN 0 to HW filter on device team0
[  818.718437][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  818.725724][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  818.828712][T18109] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4053'.
[  818.882895][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4053'.
[  818.938022][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  818.945336][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  819.311191][T17882] bridge0: port 1(bridge_slave_0) entered blocking state
[  819.320892][T17882] bridge0: port 1(bridge_slave_0) entered disabled state
[  819.329273][T17882] bridge_slave_0: entered allmulticast mode
[  819.338249][T17882] bridge_slave_0: entered promiscuous mode
[  819.348011][T17882] bridge0: port 2(bridge_slave_1) entered blocking state
[  819.355284][T17882] bridge0: port 2(bridge_slave_1) entered disabled state
[  819.362647][T17882] bridge_slave_1: entered allmulticast mode
[  819.370729][T17882] bridge_slave_1: entered promiscuous mode
[  819.470814][T17882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  819.515199][T17882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  819.737492][T17882] team0: Port device team_slave_0 added
[  819.775546][T17882] team0: Port device team_slave_1 added
[  820.008842][T17882] batman_adv: batadv0: Adding interface: batadv_slave_0
[  820.056876][T17882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  820.102679][ T1038] rpcbind: server 127.0.0.1 not responding, timed out
[  820.110304][T17882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  820.126803][T17882] batman_adv: batadv0: Adding interface: batadv_slave_1
[  820.147982][T17882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  820.206073][T17882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  820.464773][T17882] hsr_slave_0: entered promiscuous mode
[  820.479907][T17882] hsr_slave_1: entered promiscuous mode
[  820.486827][T17882] debugfs: 'hsr0' already exists in 'hsr'
[  820.494217][T17882] Cannot create hsr debugfs directory
[  820.505717][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2
[  824.678292][T18168] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4052'.
[  826.847823][T17433] 8021q: adding VLAN 0 to HW filter on device batadv0
[  827.765299][T16298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  827.786723][T16298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  827.799551][T16298] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  827.816176][T16298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  827.824239][T16298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  830.225792][T16298] Bluetooth: hci2: command tx timeout
[  832.465152][T16298] Bluetooth: hci2: command tx timeout
[  832.546572][T17882] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  833.635563][T17882] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  833.644023][T17882] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  833.678407][T17882] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  834.601662][T16298] Bluetooth: hci2: command tx timeout
[  835.105550][T18270] netlink: 'syz.5.4084': attribute type 10 has an invalid length.
[  835.184157][T17882] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  836.654845][T17882] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  836.666197][T17882] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  836.682009][T17882] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  836.685232][T16298] Bluetooth: hci2: command tx timeout
[  836.697266][T18270] bridge0: port 2(bridge_slave_1) entered disabled state
[  836.705079][T18270] bridge0: port 1(bridge_slave_0) entered disabled state
[  837.999192][T18270] bridge0: port 2(bridge_slave_1) entered blocking state
[  838.006418][T18270] bridge0: port 2(bridge_slave_1) entered forwarding state
[  838.014032][T18270] bridge0: port 1(bridge_slave_0) entered blocking state
[  838.021273][T18270] bridge0: port 1(bridge_slave_0) entered forwarding state
[  839.088601][T18270] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  839.198120][T18270] bridge0: entered promiscuous mode
[  840.604089][T18303] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4089'.
[  846.394147][T10845] ffs_data_put(): freeing
[  846.558715][T18346] netlink: 'syz.7.4100': attribute type 10 has an invalid length.
[  846.582437][T17882] 8021q: adding VLAN 0 to HW filter on device bond0
[  848.783286][ T7407] bridge_slave_1: left allmulticast mode
[  848.814096][ T7407] bridge_slave_1: left promiscuous mode
[  848.842323][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.883737][ T7407] bridge_slave_0: left allmulticast mode
[  848.903066][ T7407] bridge_slave_0: left promiscuous mode
[  848.920621][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state
[  849.432673][ T1038] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  850.434616][ T7407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  850.734237][ T7407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  850.769128][ T7407] bond0 (unregistering): Released all slaves
[  851.590867][T17882] 8021q: adding VLAN 0 to HW filter on device team0
[  851.657054][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state
[  851.664270][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state
[  851.972975][ T7407] hsr_slave_0: left promiscuous mode
[  852.007525][ T7407] hsr_slave_1: left promiscuous mode
[  853.953899][ T7407] batman_adv: batadv0: Removing interface: batadv_slave_0
[  854.019039][ T7407] batman_adv: batadv0: Removing interface: batadv_slave_1
[  855.160563][ T7407] team0 (unregistering): Port device team_slave_1 removed
[  855.190944][ T7407] team0 (unregistering): Port device team_slave_0 removed
[  856.021641][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state
[  856.028867][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state
[  856.700431][T15240] ffs_data_put(): freeing
[  856.928332][T18212] bridge0: port 1(bridge_slave_0) entered blocking state
[  856.954305][T18212] bridge0: port 1(bridge_slave_0) entered disabled state
[  856.972330][T18212] bridge_slave_0: entered allmulticast mode
[  856.998513][T18212] bridge_slave_0: entered promiscuous mode
[  857.031460][T18212] bridge0: port 2(bridge_slave_1) entered blocking state
[  857.055137][T18212] bridge0: port 2(bridge_slave_1) entered disabled state
[  857.089888][T18212] bridge_slave_1: entered allmulticast mode
[  857.129342][T18212] bridge_slave_1: entered promiscuous mode
[  857.212099][T18440] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4126'.
[  857.353300][T18212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  857.446731][T18212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  857.925296][T18212] team0: Port device team_slave_0 added
[  858.002360][T18212] team0: Port device team_slave_1 added
[  858.296335][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  858.333830][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  858.347406][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  858.373123][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  858.381269][T18212] batman_adv: batadv0: Adding interface: batadv_slave_0
[  858.389535][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  858.398338][T18212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  858.630900][T18212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  858.733414][T18212] batman_adv: batadv0: Adding interface: batadv_slave_1
[  858.790136][T18212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  858.925492][T18212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  859.123676][T18479] netlink: 'syz.5.4138': attribute type 10 has an invalid length.
[  859.140873][T18479] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.143398][T10845] ffs_data_put(): freeing
[  859.148190][T18479] bridge0: port 1(bridge_slave_0) entered disabled state
[  859.390379][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1
[  859.497239][T18212] hsr_slave_0: entered promiscuous mode
[  859.525689][T18212] hsr_slave_1: entered promiscuous mode
[  859.554324][T18212] debugfs: 'hsr0' already exists in 'hsr'
[  859.584704][T18212] Cannot create hsr debugfs directory
[  860.617413][T16298] Bluetooth: hci0: command tx timeout
[  862.783742][ T5618] Bluetooth: hci0: command tx timeout
[  864.983224][ T5618] Bluetooth: hci0: command tx timeout
[  866.150940][T18544] loop5: detected capacity change from 0 to 2048
[  867.001534][ T5618] Bluetooth: hci0: command tx timeout
[  869.400125][T15798] ffs_data_put(): freeing
[  869.409095][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  871.713646][   T12] bridge_slave_1: left allmulticast mode
[  871.752816][   T12] bridge_slave_1: left promiscuous mode
[  871.787735][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.825873][   T12] bridge_slave_0: left allmulticast mode
[  871.842477][   T12] bridge_slave_0: left promiscuous mode
[  871.863465][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  873.117646][T18599] syz.9.4169 (18599): drop_caches: 2
[  873.670608][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  873.723023][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  875.467237][   T12] bond0 (unregistering): Released all slaves
[  876.572785][   T12] hsr_slave_0: left promiscuous mode
[  876.612547][   T12] hsr_slave_1: left promiscuous mode
[  876.630099][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  876.675037][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  876.742793][T18623] zram0: detected capacity change from 20480 to 0
[  878.965748][T18631] zram0: detected capacity change from 0 to 8
[  879.885006][   T12] team0 (unregistering): Port device team_slave_1 removed
[  879.968083][   T12] team0 (unregistering): Port device team_slave_0 removed
[  880.417981][T18660] jffs2: notice: (18660) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  882.261972][ T5991] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  882.979639][T18671] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4188'.
[  883.257324][T18462] bridge0: port 1(bridge_slave_0) entered blocking state
[  883.286338][T18462] bridge0: port 1(bridge_slave_0) entered disabled state
[  883.332306][T18462] bridge_slave_0: entered allmulticast mode
[  883.357740][T18462] bridge_slave_0: entered promiscuous mode
[  883.383734][T18462] bridge0: port 2(bridge_slave_1) entered blocking state
[  883.431076][T18462] bridge0: port 2(bridge_slave_1) entered disabled state
[  883.459851][T18462] bridge_slave_1: entered allmulticast mode
[  883.493002][T18462] bridge_slave_1: entered promiscuous mode
[  883.710830][T18462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  883.749834][T18691] loop5: detected capacity change from 0 to 512
[  883.771103][T18462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  883.980510][T18691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  884.003104][T18691] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  884.018959][T18699] jffs2: notice: (18699) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  884.188893][T18462] team0: Port device team_slave_0 added
[  884.232994][T18462] team0: Port device team_slave_1 added
[  884.393311][T14823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  884.537467][T18462] batman_adv: batadv0: Adding interface: batadv_slave_0
[  884.571082][T18462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  884.665555][T18462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  884.702766][T18462] batman_adv: batadv0: Adding interface: batadv_slave_1
[  884.735861][T18462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  884.774958][T18713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4202'.
[  884.838163][T18462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  886.647562][T18735] jffs2: notice: (18735) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  886.809778][T18462] hsr_slave_0: entered promiscuous mode
[  886.841283][T18462] hsr_slave_1: entered promiscuous mode
[  886.867459][T18462] debugfs: 'hsr0' already exists in 'hsr'
[  886.888009][T18462] Cannot create hsr debugfs directory
[  886.920215][T18212] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  886.996946][T18212] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  887.051094][T18744] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4211'.
[  887.117775][T18212] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  887.194724][T18212] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  887.227956][T18212] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  887.265326][T18212] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  887.364064][T18212] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  887.405061][T18212] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  887.555954][T18212] kthread_run failed with err -4
[  888.264376][T15798] ffs_data_put(): freeing
[  888.570403][T16298] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  888.590552][T16298] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  888.612325][T16298] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  888.635248][T16298] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  888.657554][T16298] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  890.762218][T16298] Bluetooth: hci3: command tx timeout
[  890.886289][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4227'.
[  890.903300][T18812] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4227'.
[  892.963004][ T5618] Bluetooth: hci3: command tx timeout
[  895.019654][T16298] Bluetooth: hci3: command tx timeout
[  896.354581][T18462] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  896.405165][T18462] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  896.559511][T18462] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  896.582574][T18462] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  896.590860][T18462] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  896.613429][T18462] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  896.778682][T18462] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  896.826975][T18462] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  896.991575][ T6298] bridge_slave_1: left allmulticast mode
[  897.014020][ T6298] bridge_slave_1: left promiscuous mode
[  897.026844][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state
[  897.117161][ T5749] usb 1-1: USB disconnect, device number 3
[  897.149133][ T6298] bridge_slave_0: left allmulticast mode
[  897.164581][T16298] Bluetooth: hci3: command tx timeout
[  897.176646][ T6298] bridge_slave_0: left promiscuous mode
[  897.211328][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state
[  897.854353][T18884] Config c/2 of g1 needs at least one function.
[  897.878680][T18884] udc dummy_udc.0: failed to start g1: -22
[  897.897855][T18884] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  897.975032][   T60] ------------[ cut here ]------------
[  897.980880][   T60] wlan0: Failed check-sdata-in-driver check, flags: 0x0
[  897.988287][   T60] WARNING: net/mac80211/driver-ops.h:1723 at ieee80211_set_active_links+0x2d0/0x970, CPU#0: kworker/u8:5/60
[  898.000119][   T60] Modules linked in:
[  898.004857][   T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u8:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  898.015862][   T60] Tainted: [L]=SOFTLOCKUP
[  898.020209][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  898.030545][   T60] Workqueue: events_unbound cfg80211_wiphy_work
[  898.037024][   T60] RIP: 0010:ieee80211_set_active_links+0x2d7/0x970
[  898.044236][   T60] Code: 05 00 00 e8 2b 9b da f6 48 8b 34 24 48 81 c6 20 01 00 00 48 89 34 24 e8 17 9b da f6 48 8d 3d 10 fe 03 06 48 8b 34 24 44 89 fa <67> 48 0f b9 3a e9 e0 fe ff ff e8 fa 9a da f6 0f b7 c5 4c 8d bb 50
[  898.064154][   T60] RSP: 0018:ffffc9000201faf8 EFLAGS: 00010293
[  898.070532][   T60] RAX: 0000000000000000 RBX: ffff8881412f6c70 RCX: ffffffff8b2fc70e
[  898.079190][T18900] binder: BINDER_SET_CONTEXT_MGR already set
[  898.079235][T18900] binder: 18899:18900 ioctl 4018620d 200000004a80 returned -16
[  898.085701][   T60] RDX: 0000000000000000 RSI: ffff8881412f4120 RDI: ffffffff9133c580
[  898.101094][   T60] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[  898.109251][   T60] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881412f5928
[  898.117338][   T60] R13: 0000000000000000 R14: ffff88802a1a0f40 R15: 0000000000000000
[  898.125497][   T60] FS:  0000000000000000(0000) GS:ffff888123de1000(0000) knlGS:0000000000000000
[  898.134696][   T60] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  898.141361][   T60] CR2: 00007fe4575eeff8 CR3: 0000000053f18000 CR4: 0000000000350ef0
[  898.149440][   T60] Call Trace:
[  898.152879][   T60]  <TASK>
[  898.155837][   T60]  ieee80211_if_parse_active_links+0xbb/0x120
[  898.162468][   T60]  ? __pfx_ieee80211_if_parse_active_links+0x10/0x10
[  898.169659][   T60]  ? srso_alias_return_thunk+0x5/0xfbef5
[  898.175421][   T60]  ? register_lock_class+0x1b1/0x560
[  898.180766][   T60]  ? find_held_lock+0x2b/0x80
[  898.185595][   T60]  ? srso_alias_return_thunk+0x5/0xfbef5
[  898.191305][   T60]  ? ieee80211_if_write_sdata_handler+0x1a/0x90
[  898.197711][   T60]  ? __pfx_ieee80211_if_write_sdata_handler+0x10/0x10
[  898.204809][   T60]  wiphy_locked_debugfs_write_work+0xe6/0x1c0
[  898.210956][   T60]  ? srso_alias_return_thunk+0x5/0xfbef5
[  898.216934][   T60]  ? trace_wiphy_work_run+0x73/0x220
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  898.222367][   T60]  cfg80211_wiphy_work+0x2b7/0x550
[  898.227554][   T60]  process_one_work+0xa23/0x1940
[  898.232637][   T60]  ? __pfx_process_one_work+0x10/0x10
[  898.238051][   T60]  ? srso_alias_return_thunk+0x5/0xfbef5
[  898.244108][   T60]  ? srso_alias_return_thunk+0x5/0xfbef5
[  898.250251][   T60]  worker_thread+0x5ef/0xe50
[  898.255409][   T60]  ? __pfx_worker_thread+0x10/0x10
[  898.260618][   T60]  ? kthread+0x13a/0x450
[  898.265357][   T60]  ? __pfx_worker_thread+0x10/0x10
[  898.270897][   T60]  kthread+0x370/0x450
[  898.275090][   T60]  ? __pfx_kthread+0x10/0x10
[  898.279724][   T60]  ret_from_fork+0x72b/0xd50
[  898.285059][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  898.290254][   T60]  ? srso_alias_return_thunk+0x5/0xfbef5
[  898.295989][   T60]  ? __switch_to+0x800/0x10f0
[  898.300701][   T60]  ? __switch_to_asm+0x39/0x70
[  898.305567][   T60]  ? __pfx_kthread+0x10/0x10
[  898.310202][   T60]  ret_from_fork_asm+0x1a/0x30
[  898.315183][   T60]  </TASK>
[  898.318251][   T60] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  898.325559][   T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u8:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  898.336487][   T60] Tainted: [L]=SOFTLOCKUP
[  898.340826][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  898.350946][   T60] Workqueue: events_unbound cfg80211_wiphy_work
[  898.357264][   T60] Call Trace:
[  898.360557][   T60]  <TASK>
[  898.363499][   T60]  dump_stack_lvl+0x100/0x190
[  898.368221][   T60]  vpanic+0x552/0x970
[  898.372286][   T60]  ? __pfx_vpanic+0x10/0x10
[  898.376842][   T60]  panic+0xd1/0xe0
[  898.380604][   T60]  ? __pfx_panic+0x10/0x10
[  898.385074][   T60]  ? check_panic_on_warn+0x1f/0x90
[  898.390250][   T60]  check_panic_on_warn.cold+0x19/0x34
[  898.395667][   T60]  ? ieee80211_set_active_links+0x2d0/0x970
[  898.401610][   T60]  __warn.cold+0x191/0x318
[  898.406068][   T60]  __report_bug+0x30f/0x440
[  898.410609][   T60]  ? ieee80211_set_active_links+0x2d0/0x970
[  898.416545][   T60]  ? __pfx___report_bug+0x10/0x10
[  898.421624][   T60]  ? ieee80211_set_active_links+0x26e/0x970
[  898.427562][   T60]  ? clockevents_program_event+0x23e/0x820
[  898.433429][   T60]  ? clockevents_program_event+0x23e/0x820
[  898.439309][   T60]  report_bug_entry+0xe1/0x290
[  898.444130][   T60]  ? ieee80211_set_active_links+0x2d7/0x970
[  898.450068][   T60]  handle_bug+0x1cd/0x2a0
[  898.454454][   T60]  exc_invalid_op+0x17/0x50
[  898.459008][   T60]  asm_exc_invalid_op+0x1a/0x20
[  898.463898][   T60] RIP: 0010:ieee80211_set_active_links+0x2d7/0x970
[  898.470452][   T60] Code: 05 00 00 e8 2b 9b da f6 48 8b 34 24 48 81 c6 20 01 00 00 48 89 34 24 e8 17 9b da f6 48 8d 3d 10 fe 03 06 48 8b 34 24 44 89 fa <67> 48 0f b9 3a e9 e0 fe ff ff e8 fa 9a da f6 0f b7 c5 4c 8d bb 50
[  898.490100][   T60] RSP: 0018:ffffc9000201faf8 EFLAGS: 00010293
[  898.496200][   T60] RAX: 0000000000000000 RBX: ffff8881412f6c70 RCX: ffffffff8b2fc70e
[  898.504190][   T60] RDX: 0000000000000000 RSI: ffff8881412f4120 RDI: ffffffff9133c580
[  898.512173][   T60] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[  898.520146][   T60] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881412f5928
[  898.528131][   T60] R13: 0000000000000000 R14: ffff88802a1a0f40 R15: 0000000000000000
[  898.536136][   T60]  ? ieee80211_set_active_links+0x26e/0x970
[  898.542071][   T60]  ? ieee80211_set_active_links+0x2c9/0x970
[  898.547995][   T60]  ieee80211_if_parse_active_links+0xbb/0x120
[  898.554094][   T60]  ? __pfx_ieee80211_if_parse_active_links+0x10/0x10
[  898.560796][   T60]  ? srso_alias_return_thunk+0x5/0xfbef5
[  898.566453][   T60]  ? register_lock_class+0x1b1/0x560
[  898.571770][   T60]  ? find_held_lock+0x2b/0x80
[  898.576492][   T60]  ? srso_alias_return_thunk+0x5/0xfbef5
[  898.582155][   T60]  ? ieee80211_if_write_sdata_handler+0x1a/0x90
[  898.588432][   T60]  ? __pfx_ieee80211_if_write_sdata_handler+0x10/0x10
[  898.595227][   T60]  wiphy_locked_debugfs_write_work+0xe6/0x1c0
[  898.601334][   T60]  ? srso_alias_return_thunk+0x5/0xfbef5
[  898.606994][   T60]  ? trace_wiphy_work_run+0x73/0x220
[  898.612322][   T60]  cfg80211_wiphy_work+0x2b7/0x550
[  898.617481][   T60]  process_one_work+0xa23/0x1940
[  898.622458][   T60]  ? __pfx_process_one_work+0x10/0x10
[  898.627844][   T60]  ? srso_alias_return_thunk+0x5/0xfbef5
[  898.633517][   T60]  ? srso_alias_return_thunk+0x5/0xfbef5
[  898.639178][   T60]  worker_thread+0x5ef/0xe50
[  898.643807][   T60]  ? __pfx_worker_thread+0x10/0x10
[  898.648941][   T60]  ? kthread+0x13a/0x450
[  898.653191][   T60]  ? __pfx_worker_thread+0x10/0x10
[  898.658448][   T60]  kthread+0x370/0x450
[  898.662547][   T60]  ? __pfx_kthread+0x10/0x10
[  898.667157][   T60]  ret_from_fork+0x72b/0xd50
[  898.671786][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  898.676929][   T60]  ? srso_alias_return_thunk+0x5/0xfbef5
[  898.682584][   T60]  ? __switch_to+0x800/0x10f0
[  898.687273][   T60]  ? __switch_to_asm+0x39/0x70
[  898.692068][   T60]  ? __pfx_kthread+0x10/0x10
[  898.696679][   T60]  ret_from_fork_asm+0x1a/0x30
[  898.701498][   T60]  </TASK>
[  898.704805][   T60] Kernel Offset: disabled
[  898.709132][   T60] Rebooting in 86400 seconds..