last executing test programs:

1m14.075761909s ago: executing program 0 (id=403):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000340))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xc})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

1m11.327338369s ago: executing program 0 (id=408):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0001}]})
r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0)
symlinkat(&(0x7f0000000180)='./bus\x00', r1, &(0x7f0000000240)='./bus\x00')
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
renameat2(r2, &(0x7f0000000000)='./bus\x00', r1, &(0x7f0000000040)='./file2\x00', 0x0)
epoll_create1(0x0)
getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40))
ptrace(0x10, 0x0)
stat(0x0, 0x0)
semget(0x0, 0x0, 0x0)
r3 = geteuid()
lstat(0x0, 0x0)
setresuid(0xee01, r3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xad, 0x66}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001800)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x175c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001880), 0x802, 0x0)
ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x5)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

1m9.588720338s ago: executing program 0 (id=413):
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000180))
creat(&(0x7f0000000440)='./file0\x00', 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200))
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000d90100000000000001"])

1m0.884140916s ago: executing program 0 (id=428):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

59.659212285s ago: executing program 0 (id=431):
syz_emit_ethernet(0x92, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527a", 0x5c, 0x3c, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x1, 0x9, 0x0, [@mcast2]}]}}}}}, 0x0)
socket(0x840000000002, 0x3, 0xff)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@uid={'uid', 0x3d, 0xee00}}, {@discard}]}, 0x81, 0x14f5, &(0x7f0000001580)="$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")
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x6a1, &(0x7f0000002c40)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x808, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
fstat(0xffffffffffffffff, 0x0)
statfs(&(0x7f0000000000)='./file0\x00', 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x2e, 0x4)
semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0xffffffffffffffde)
semtimedop(0x0, &(0x7f0000005740)=[{}], 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x1b, 0x4, @tid=r1}, &(0x7f0000000080))

25.831461975s ago: executing program 1 (id=488):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000010, &(0x7f0000000e80)={[{@uid}, {@uid_forget}, {@utf8}, {@anchor={'anchor', 0x3d, 0x1}}, {}, {@uid_forget}, {@gid}, {@volume={'volume', 0x3d, 0x5}}, {@anchor={'anchor', 0x3d, 0x7}}, {@noadinicb}, {@dmode={'dmode', 0x3d, 0x9}}, {}, {@lastblock={'lastblock', 0x3d, 0x101}}, {@uid_ignore}, {@bs={'bs', 0x3d, 0x7}}], [{@hash}, {@subj_role={'subj_role', 0x3d, 'uid=ignore'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, 'h\x7fY%\x954\xd5\xbc\x98\xa0$\"O\b\xcb\x82\xdc\x91\xf6\x93\xfe\xc3a\xbf\x8d\xda!3\xe3\x82y\xef\\\xf6*K\xec=\x9e\xe7Dd\x1cM)\xbd\vd\xc8'}}]}, 0x1, 0xc43, &(0x7f0000000200)="$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")
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0xfdff, @initdev={0xac, 0x1e, 0x1, 0x0}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='rxrpc_call_reset\x00'}, 0x1d)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x5a, &(0x7f0000000180)=0x172)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000012c0)={{0x6, 0x3, 0x0, 0x0, 'syz0\x00', 0x1}, 0x4, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x80003, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0})

23.199861224s ago: executing program 3 (id=492):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='kfree\x00', r1}, 0x10)
mbind(&(0x7f0000183000/0x2000)=nil, 0x2000, 0x2, &(0x7f00000054c0)=0x3, 0x984, 0x0)
mlock(&(0x7f0000183000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000183000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0xff, 0xff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='9p_client_res\x00'}, 0x10)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
dup(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

17.883479627s ago: executing program 2 (id=498):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000180)={@rand_addr, @local}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10)
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0xb0024000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff1b0000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x30}}, 0x0)

17.882543882s ago: executing program 3 (id=499):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
getitimer(0x1, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
getpriority(0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x90)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040))
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)

17.582278412s ago: executing program 1 (id=500):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x2282, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000003b40), 0x208e24b)
sendmmsg$alg(r3, &(0x7f0000002dc0)=[{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000000280)}, {0x0}, {&(0x7f0000002f00)="5d6f97218a012725ab461ef76b4e8b60e8e8a9594add4cd7c1a7cb32b9b4850f56e9f9529c39a7b501924de405010366337f8707c8506f9f42de3dc97610f6911e1770ab774ddae2e99e141a3849d4210f8a0d6acfb5c549f7ccbdf5745d8cdad6cf99ce2c432876b54f436aefb819f39753ed6ec005e637b89d816787cd3e702d75965d830041a8522b67201c09ecc978e534124025b0cf97e1b1fc676f90c66bd1dffd1e7d", 0xa6}], 0x3, &(0x7f0000003000)=ANY=[@ANYBLOB="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"], 0x220, 0x8001}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@assoc={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xe7}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x90, 0x4000000}, {0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="f4", 0x1}, {&(0x7f0000000980)="652e2f919dd4b6993860b498f15564307c2e0ba6a3b5ca884895d7efd05c002a38ac8feb903aad745db9cc58d94d80bade1d9a22cf69d6cca71164c32b716b10f6ed3caf3af25a861f1c900d38a6a83e0a61f9ddf767a6aba21f00ea28f1fa0e7ce8909efa731726668c90e3611e0ee79dc43cee432bd2c848a49bdab6b4acf3abd9d51821542437d86d4e0d5686da216914a570943915fbd555150af5b1ebc6", 0xa0}], 0x2, 0x0, 0x0, 0x8040}, {0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000a80)="95a876d27006d544844b15414ee09520714201c32ba057d48e5030ff4e9f48e10474bc8b7319c751fed07d56529e5a21bbeea18f4b2d9119213df524ffbeb7df577f6a6e157a232db7e1169a0a6a793bd076e596440b9a868d1f352297da1e01ffca66923572765f9832e5707f040dcb0a823d50ee4b6b09c1c5f3359972a1940086b4ce085c078674117b", 0x8b}, {&(0x7f0000000b40)}, {&(0x7f0000002cc0)="5c4221c317175712cbecd8a50eeb2f3a039bc566d7d4bfb83a2885e1b683aabe71b91f264ea1de4df4acf16e567c1c6d0d0763c64c5b484457341695f986022b6ad7bb19cbf1d8d898c7d5", 0x4b}], 0x3, &(0x7f0000002d80)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0xac}], 0x30, 0x4000091}], 0x4, 0x0)
fdatasync(r3)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000)=0x810, 0x4)
r4 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x6a, 0x5, 0x20000000, 0x3)
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0))
sched_setscheduler(r0, 0x2, &(0x7f0000002ec0)=0x6)

15.002959326s ago: executing program 1 (id=502):
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4440, &(0x7f0000000340)=ANY=[@ANYBLOB='dmode=00000000000000000000006,noadinicb,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000000000000000008000"], 0x1, 0xa1b, &(0x7f0000001540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
unshare(0x8040080)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04060306c9"], 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
sendmmsg(r2, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x44, &(0x7f00000000c0), 0x4)

14.99287465s ago: executing program 2 (id=503):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setreuid(0xee00, 0xee00)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x1}, 0x1c}}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, &(0x7f0000000200), 0xfd, 0x191, &(0x7f00000006c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0x1, 0x0)
vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000140)="a6", 0x1}, {&(0x7f0000000100)="ad", 0x1}, {&(0x7f0000000200)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x4, 0x0)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000))
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0, <r5=>0x0, 0x0], 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, r5], 0x4, 0x180000})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

14.20487573s ago: executing program 3 (id=505):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
unshare(0x68040200)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r0}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
fsetxattr(r1, 0x0, &(0x7f0000000580)='(\xc2,([!\x8d.!.\xbd{\x00', 0xd, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f00000004c0), 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r5}, 0x18)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00')
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)='9', 0x1}], 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0x40505331, &(0x7f00000000c0)={0xf00})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="f108e0d9b3f336e91eb1e6a78852f82ff15d42c5bc74a9ec677bc128961a94d10d32cf2b4d2b5d876ccef8cdb7debd20e6e69a81236b9ccc30bd077a33772208a7ffae9826e2d14ff008ee8a41e74ad1b4abbedb02f8f8cbaae6b0878e71ffae8ee4e7d409d9e31bc254faece4c69978ad72a1f9bac584074b69d13209d36fa8c8cbd74ab078bc54ea0341", @ANYRES32, @ANYBLOB="598837"], 0x2, 0x212, &(0x7f00000001c0)="$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")

13.870838671s ago: executing program 2 (id=506):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0)
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
socket$inet6_sctp(0xa, 0x0, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c80)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r5, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$video(0x0, 0x100000001, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

9.558346863s ago: executing program 1 (id=508):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x8b01, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x4002, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x11, 0x22f, &(0x7f0000000880)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000500), 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xe12b}, {0x16}]})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000004001d"], 0x2c}}, 0x0)

9.420854472s ago: executing program 4 (id=509):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='i2c_write\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="149813ed320f4c340dbf460a89763c3f0a1379a24001ebf47048777f369c14b52fc01fe7d267e92e56e997e3eefa8ff01f16674376c8055813b70b2a8a60038c9a7790a4d4831aea78"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4a}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e03010000000000360500000000000069163e0000000000bf07000000000000260507000fff0720670600003f000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

7.852882763s ago: executing program 4 (id=510):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x46c5, 0x110008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
get_robust_list(0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x5, &(0x7f0000000340)=[{0x726c, 0x81, 0x80, 0xf}, {0x6, 0x4, 0x0, 0x9}, {0xd, 0x2, 0x5}, {0x7ff, 0xb, 0xab, 0xfff}, {0x0, 0xfb, 0x7, 0x9}]})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x0, 0x31d, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0)

6.717352991s ago: executing program 4 (id=511):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xf6, 0xb3, 0xe0, 0x40, 0xdf6, 0x4b, 0x56d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x66, 0x87, 0xca}}]}}]}}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$EVIOCRMFF(r2, 0x550c, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
dup(r3)
fsopen(&(0x7f0000000140)='tmpfs\x00', 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r7, 0x0)
setregid(r7, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
fstat(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x40000, &(0x7f00000007c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@audit}, {@uid_lt={'uid<', r6}}, {@uid_lt={'uid<', r8}}, {@dont_hash}, {@context={'context', 0x3d, 'user_u'}}]}})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000))

6.52306708s ago: executing program 1 (id=512):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0)
fcntl$setstatus(r1, 0x4, 0x4800)
ppoll(&(0x7f0000000040)=[{r1, 0x300}], 0x1, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000040)={0x6, 'vxcan1\x00', {0x2}})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x50, &(0x7f00000003c0)=ANY=[], 0x1e, 0x150f, &(0x7f0000003040)="$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")
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
lseek(r5, 0x0, 0x4)
r7 = syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x8, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "", "9a1d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1}}}}}}}]}}, 0x0)
syz_usb_control_io(r7, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r7, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r7, &(0x7f0000001340)={0x2c, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000108000000180001801400020073797a5f74756e00000000000000000018000280080003"], 0x44}}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x0, 'team_slave_0\x00', {0x4}, 0xa82})

6.341755152s ago: executing program 2 (id=513):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r3=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r3, @ANYBLOB="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"], 0x50}, 0x4, 0x700000000000000}, 0x0)

6.16300734s ago: executing program 3 (id=514):
syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810746, &(0x7f0000000000), 0x1, 0x47f, &(0x7f00000001c0)="$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")
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="390200007d00000005fb000000000000000000000000000000000000000000000000000000000000000000000000000000002e00046e6f645a3dbf640237fc6225ffffff8005000000000000ff03ff92e91600059b65712c93cb3db6c231d119aaa134007002007dfa673effeb09b5351f5bde054000000000187b82d9b500002b5d5fcb14034354b9fd9ef196a51cd5157adc8106b494e11100cf60372d61cceab8c88641eb93b5ccf6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cdb80e8d407000000370029016f6465762f6eb17b2300f9daa5ee23266ecf85fedf5e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d7238593aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d1460f382066664c0fb4e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3d"], 0x239)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)

4.233261083s ago: executing program 3 (id=515):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x360044, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'veth1_virt_wifi\x00', @random="e2617b209e71"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6)
write$cgroup_subtree(r5, &(0x7f00000061c0)=ANY=[], 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe000000008500000015000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9e70617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e18"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

4.230933687s ago: executing program 4 (id=516):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xda2a000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
r5 = syz_io_uring_setup(0x7a9a, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0xa, 0x0, @fd_index=0x20000, 0x0, 0x0, 0x0, 0xd})
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0)
unshare(0x20000400)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
io_uring_enter(r5, 0x54, 0x4, 0x1, 0x0, 0x0)

2.106018675s ago: executing program 2 (id=517):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlockall(0x7)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
io_setup(0x1015, &(0x7f0000000080))
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/186, 0xba)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0)

1.972607541s ago: executing program 4 (id=518):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x80045519, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000004ec0)=ANY=[@ANYRES32=r5], &(0x7f00000000c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, &(0x7f0000000000))

1.971335435s ago: executing program 3 (id=519):
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @local}], 0x10)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x2c}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=0xdfa, 0x4)
dup(0xffffffffffffffff)
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0xf000)

1.842507973s ago: executing program 0 (id=450):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_nat_t_type={0x1}]}, 0x58}}, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='workqueue_queue_work\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000300), 0x7b9c0b)
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000540))
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)

807.562913ms ago: executing program 2 (id=520):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000340)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
io_setup(0x80, &(0x7f0000000440)=<r1=>0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48)
read$msr(r2, &(0x7f0000001340)=""/102378, 0x7706c522012798af)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fsopen(0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r4 = userfaultfd(0x80001)
io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
pipe(&(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))

423.881219ms ago: executing program 1 (id=521):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
socket(0x0, 0x0, 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x3)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000180)={0x58, r1, 0x825, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f81b42815be2c2eb1df48dda7dfb7b1f64347a182d9d2784"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x20}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000280)={[{@noblock_validity}, {@norecovery}, {@data_ordered}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fe, &(0x7f00000004c0)="$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")

0s ago: executing program 4 (id=522):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x28}], 0x2, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000740)=ANY=[@ANYBLOB='c ', @ANYRESOCT], 0xa)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x3a)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0x7e)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001640)={{}, &(0x7f00000015c0), &(0x7f0000001600)='%pI4   \x00'}, 0x20)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0)
r5 = fanotify_init(0x0, 0x0)
write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00@1\x00'/32], 0x20)
r6 = socket$inet6(0xa, 0x3, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

expected cc 0x1003 length: 249 > 9
[  182.953440][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  182.967068][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  182.980472][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  182.991190][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.066602][ T6458] loop1: detected capacity change from 0 to 256
[  183.078571][ T6456] loop0: detected capacity change from 0 to 128
[  183.105682][ T6458] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  183.145017][ T6456] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  183.360453][ T6456] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  184.324687][   T29] audit: type=1800 audit(2000000065.310:15): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.221" name="bus" dev="loop1" ino=1048638 res=0 errno=0
[  184.337980][ T6453] chnl_net:caif_netlink_parms(): no params data found
[  184.434884][ T6456] loop0: detected capacity change from 128 to 64
[  184.500261][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.508240][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.516046][ T6453] bridge_slave_0: entered allmulticast mode
[  184.523390][ T6453] bridge_slave_0: entered promiscuous mode
[  184.531569][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.540557][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.548264][ T6453] bridge_slave_1: entered allmulticast mode
[  184.556419][ T6453] bridge_slave_1: entered promiscuous mode
[  184.579743][ T6453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.592074][ T6453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.638057][ T6453] team0: Port device team_slave_0 added
[  184.652404][ T6453] team0: Port device team_slave_1 added
[  184.678153][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.708155][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.741155][ T6453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.754265][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.773306][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.805808][ T6453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.852388][ T6453] hsr_slave_0: entered promiscuous mode
[  184.863461][ T6453] hsr_slave_1: entered promiscuous mode
[  184.870643][ T6453] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.885027][ T6453] Cannot create hsr debugfs directory
[  184.894594][  T942] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  185.012307][ T6453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.048810][  T942] usb 2-1: Using ep0 maxpacket: 8
[  185.056295][  T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 32249, setting to 1024
[  185.072264][  T942] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  185.082860][ T5243] Bluetooth: hci5: command tx timeout
[  185.104051][  T942] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  185.114653][  T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.129491][  T942] usb 2-1: config 0 descriptor??
[  185.136337][ T6474] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  185.148561][  T942] iowarrior 2-1:0.0: no interrupt-in endpoint found
[  185.187192][ T6453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.287456][ T6453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.354694][  T942] usb 2-1: USB disconnect, device number 5
[  185.400687][ T6453] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.519182][ T6332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.680736][ T6453] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  185.702059][ T6453] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  185.738616][ T6453] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  185.779212][ T6453] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  186.013197][ T6453] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.057152][ T5226] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Out of memory
[  186.117603][ T5226] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error
[  186.382382][ T5226] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  187.161907][ T6479] loop1: detected capacity change from 0 to 131072
[  187.174482][ T5243] Bluetooth: hci5: command tx timeout
[  187.191170][ T6453] 8021q: adding VLAN 0 to HW filter on device team0
[  187.213442][ T6479] F2FS-fs (loop1): invalid crc value
[  187.307392][ T6479] F2FS-fs (loop1): Found nat_bits in checkpoint
[  187.352016][ T5417] bridge_slave_1: left allmulticast mode
[  187.367705][ T6479] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  187.428385][ T5417] bridge_slave_1: left promiscuous mode
[  187.435218][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.604676][ T5417] bridge_slave_0: left allmulticast mode
[  187.610353][ T5417] bridge_slave_0: left promiscuous mode
[  187.622875][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.256218][   T29] audit: type=1800 audit(2000000069.260:16): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.225" name="bus" dev="loop1" ino=10 res=0 errno=0
[  188.382094][   T29] audit: type=1800 audit(2000000069.430:17): pid=6488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.225" name="bus" dev="loop1" ino=10 res=0 errno=0
[  188.687646][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.701195][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.709665][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.721598][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.729048][   T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  188.743762][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.237464][   T55] Bluetooth: hci5: command tx timeout
[  189.611223][ T5932] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.665502][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  189.715727][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  189.730686][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  189.776844][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  189.944956][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  189.953632][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  190.876437][ T5243] Bluetooth: hci0: command tx timeout
[  190.904848][ T5417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.933449][ T5417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.967267][ T5417] bond0 (unregistering): Released all slaves
[  190.997982][  T137] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.005171][  T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.062769][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.069933][ T5859] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.177454][ T6502] loop4: detected capacity change from 0 to 8192
[  191.191462][ T6502] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  191.207911][ T6502] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  191.225003][ T6502] REISERFS (device loop4): using ordered data mode
[  191.239494][ T6501] batadv0: entered promiscuous mode
[  191.250095][ T6501] batadv0: left promiscuous mode
[  191.256947][ T6502] REISERFS warning (device loop4): sh-457 journal_init_dev: journal_init_dev: Cannot open './file1': -15
[  191.270210][ T6502] REISERFS warning (device loop4): sh-462 journal_init: unable to initialize journal device
[  191.286142][ T6502] REISERFS warning (device loop4): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  191.314426][ T5243] Bluetooth: hci5: command tx timeout
[  191.793201][ T6453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.988440][ T6515] loop1: detected capacity change from 0 to 128
[  192.074749][ T6513] loop4: detected capacity change from 0 to 256
[  192.082482][ T5243] Bluetooth: hci2: command tx timeout
[  192.242064][ T6515] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  192.259385][ T6515] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  193.204403][ T5243] Bluetooth: hci0: command tx timeout
[  193.350549][   T52] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  193.364354][   T52] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  193.409433][   T52] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  193.426282][ T5417] hsr_slave_0: left promiscuous mode
[  193.445436][   T52] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  193.463186][ T5417] hsr_slave_1: left promiscuous mode
[  193.478106][   T52] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  193.492964][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.503568][   T52] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  193.516759][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.524096][   T52] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  193.551785][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.570680][   T52] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  193.580020][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  193.594951][   T29] audit: type=1326 audit(2000000074.610:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8197dff9 code=0x7ffc0000
[  193.623380][   T52] hid-generic 0000:0000:0000.0002: item fetching failed at offset 8/31
[  193.654176][   T52] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22
[  193.675053][ T5417] veth1_macvtap: left promiscuous mode
[  193.680994][ T5417] veth0_macvtap: left promiscuous mode
[  193.694417][   T29] audit: type=1326 audit(2000000074.610:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8197dff9 code=0x7ffc0000
[  193.737213][ T5417] veth1_vlan: left promiscuous mode
[  193.742562][ T5417] veth0_vlan: left promiscuous mode
[  193.757466][   T29] audit: type=1326 audit(2000000074.610:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea8197dff9 code=0x7ffc0000
[  193.826809][   T29] audit: type=1326 audit(2000000074.620:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8197dff9 code=0x7ffc0000
[  193.883981][   T29] audit: type=1326 audit(2000000074.620:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea8197dff9 code=0x7ffc0000
[  193.908331][   T29] audit: type=1326 audit(2000000074.620:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8197dff9 code=0x7ffc0000
[  193.932951][   T29] audit: type=1326 audit(2000000074.620:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fea8197dff9 code=0x7ffc0000
[  193.955682][   T29] audit: type=1326 audit(2000000074.620:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8197dff9 code=0x7ffc0000
[  193.977919][   T29] audit: type=1326 audit(2000000074.620:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8197dff9 code=0x7ffc0000
[  194.119959][   T55] Bluetooth: hci2: command tx timeout
[  194.336039][ T5417] team0 (unregistering): Port device team_slave_1 removed
[  194.363375][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  194.392170][ T5417] team0 (unregistering): Port device team_slave_0 removed
[  194.874176][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'.
[  194.968900][ T5242] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.973729][ T6492] chnl_net:caif_netlink_parms(): no params data found
[  195.049520][ T6489] chnl_net:caif_netlink_parms(): no params data found
[  195.166336][ T6531] loop4: detected capacity change from 0 to 512
[  195.234467][   T55] Bluetooth: hci0: command tx timeout
[  195.270883][ T6531] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.235: casefold flag without casefold feature
[  195.304138][ T6538] fuse: Bad value for 'fd'
[  195.334894][ T6531] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.235: couldn't read orphan inode 15 (err -117)
[  195.385667][ T6531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.456777][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.476205][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.483488][ T6492] bridge_slave_0: entered allmulticast mode
[  195.495263][ T6492] bridge_slave_0: entered promiscuous mode
[  195.697090][ T6453] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.725809][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.738407][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.752978][ T6492] bridge_slave_1: entered allmulticast mode
[  195.768156][ T6492] bridge_slave_1: entered promiscuous mode
[  196.194453][   T55] Bluetooth: hci2: command tx timeout
[  196.386682][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.413572][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.447854][ T5932] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.454686][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.464182][ T6489] bridge_slave_0: entered allmulticast mode
[  196.474078][ T6489] bridge_slave_0: entered promiscuous mode
[  196.494484][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.501630][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.509051][ T6489] bridge_slave_1: entered allmulticast mode
[  196.515996][ T6489] bridge_slave_1: entered promiscuous mode
[  196.561862][ T6453] veth0_vlan: entered promiscuous mode
[  196.570861][ T6554] loop1: detected capacity change from 0 to 128
[  196.574405][ T6453] veth1_vlan: entered promiscuous mode
[  196.602560][ T6453] veth0_macvtap: entered promiscuous mode
[  196.611818][ T6453] veth1_macvtap: entered promiscuous mode
[  196.628482][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.639058][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.649137][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.660232][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.670694][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.681508][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.691656][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.702400][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.716323][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.727008][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.737537][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.748079][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.750762][ T6554] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  196.758566][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.758594][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.758613][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.758631][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.758646][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.760884][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.802544][ T6554] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  196.816417][ T6453] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.871640][ T6453] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.880524][ T6453] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.889324][ T6453] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.926144][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.161251][ T6492] team0: Port device team_slave_0 added
[  197.175651][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.130868][   T55] Bluetooth: hci0: command tx timeout
[  198.168326][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.274468][   T55] Bluetooth: hci2: command tx timeout
[  198.401804][ T6492] team0: Port device team_slave_1 added
[  198.472701][ T5242] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  198.744561][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.240'.
[  198.785372][ T6489] team0: Port device team_slave_0 added
[  198.806898][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.824212][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.833705][ T6579] loop4: detected capacity change from 0 to 256
[  198.850735][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.940726][ T6579] vfat: Unknown parameter '����B��8Pw������"MB�"���-��dC!�]ڏDf\��{���<!����d��pJ��k'
[  199.012119][ T5417] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.169399][ T6583] loop4: detected capacity change from 0 to 1024
[  199.198492][ T5945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.213047][ T6583] hfsplus: unable to find HFS+ superblock
[  199.218712][ T6489] team0: Port device team_slave_1 added
[  199.226041][ T5945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.986241][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.018998][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.056989][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.490137][ T5417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.560271][ T6592] loop1: detected capacity change from 0 to 256
[  200.751411][ T6592] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  200.955767][ T6592] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  201.406659][   T29] audit: type=1800 audit(2000000082.400:27): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.244" name="bus" dev="loop1" ino=1048640 res=0 errno=0
[  202.146403][ T6600] loop1: detected capacity change from 0 to 1024
[  202.155301][ T5417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.165554][ T6600] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  202.165674][ T6600] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  202.176955][ T6600] EXT4-fs (loop1): invalid journal inode
[  202.192796][ T6600] EXT4-fs (loop1): can't get journal size
[  202.206244][ T6600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  202.243360][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.322119][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.358008][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.423442][ T6492] hsr_slave_0: entered promiscuous mode
[  202.438342][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.453954][ T6603] loop4: detected capacity change from 0 to 128
[  202.470355][ T6492] hsr_slave_1: entered promiscuous mode
[  202.480802][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.522559][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.543677][ T6603] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  202.544631][ T6492] Cannot create hsr debugfs directory
[  202.564035][ T6603] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  202.731212][ T6608] Bluetooth: MGMT ver 1.23
[  203.080554][ T5417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.105902][ T5242] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.129301][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.155941][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.241612][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.327085][ T5932] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  203.868862][ T6489] hsr_slave_0: entered promiscuous mode
[  204.410300][ T6489] hsr_slave_1: entered promiscuous mode
[  204.436854][ T6489] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  204.447048][ T6489] Cannot create hsr debugfs directory
[  205.228016][ T6621] loop2: detected capacity change from 0 to 164
[  205.823672][ T6628] loop4: detected capacity change from 0 to 256
[  205.875889][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  205.885020][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[  205.895603][ T5243] Bluetooth: hci1: hardware error 0x00
[  205.932206][ T6628] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d)
[  206.961608][ T5417] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.153178][ T6651] loop4: detected capacity change from 0 to 512
[  207.433209][ T6651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.500299][ T6651] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.502053][ T6656] loop2: detected capacity change from 0 to 512
[  208.033642][ T6656] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.253: bg 0: block 393: padding at end of block bitmap is not set
[  208.212469][ T6656] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  208.269871][ T5243] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  208.680332][ T5932] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.722001][ T6656] EXT4-fs (loop2): 2 truncates cleaned up
[  208.748101][ T6656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.841636][ T5417] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.911109][ T6453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.927881][   T29] audit: type=1326 audit(2000000089.980:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.1.258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ec077dff9 code=0x0
[  209.908129][ T6680] loop2: detected capacity change from 0 to 1024
[  209.945504][ T6680] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  210.059333][ T5417] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.096973][ T6680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.381184][ T5417] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.581331][ T6453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.128286][ T6714] loop4: detected capacity change from 0 to 128
[  214.715929][ T5417] bridge_slave_1: left allmulticast mode
[  214.721828][ T5417] bridge_slave_1: left promiscuous mode
[  214.729696][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.350167][ T5417] bridge_slave_0: left allmulticast mode
[  215.356259][ T5417] bridge_slave_0: left promiscuous mode
[  215.372035][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.486081][ T5417] bridge_slave_1: left allmulticast mode
[  215.491812][ T5417] bridge_slave_1: left promiscuous mode
[  215.602620][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.646322][ T6731] loop2: detected capacity change from 0 to 256
[  215.664688][ T6731] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  215.681099][ T5417] bridge_slave_0: left allmulticast mode
[  215.687038][ T5417] bridge_slave_0: left promiscuous mode
[  215.721050][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.909412][ T5330] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  216.080535][ T5330] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  216.093643][ T5330] usb 2-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0
[  216.113656][ T5330] usb 2-1: Manufacturer: syz
[  216.133868][ T5330] usb 2-1: config 0 descriptor??
[  216.141451][ T5330] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  216.151874][ T5330] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  216.365288][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.376460][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.738813][ T5417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.752241][ T5417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.778374][ T5417] bond0 (unregistering): Released all slaves
[  216.906023][ T6743] loop4: detected capacity change from 0 to 16
[  216.915773][ T6743] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  217.553416][ T5417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.571590][ T5417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.593551][ T5417] bond0 (unregistering): Released all slaves
[  217.885050][ T6732] netlink: 'syz.1.269': attribute type 4 has an invalid length.
[  217.915242][ T6732] netlink: 17 bytes leftover after parsing attributes in process `syz.1.269'.
[  218.074128][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  219.493879][  T939] usb 2-1: USB disconnect, device number 6
[  219.554006][  T939] ftdi_sio 2-1:0.0: device disconnected
[  219.758454][ T6492] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  220.387506][ T6765] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  220.394103][ T6765] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  220.417861][ T6765] vhci_hcd vhci_hcd.0: Device attached
[  220.462887][ T6770] vhci_hcd: connection closed
[  220.472395][ T2570] vhci_hcd: stop threads
[  220.493602][ T2570] vhci_hcd: release socket
[  220.499599][ T2570] vhci_hcd: disconnect device
[  220.503861][ T6492] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  220.542421][ T6492] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  220.604504][ T5330] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  220.666448][ T6492] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  220.688426][ T6778] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  220.695025][ T6778] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  220.712293][ T6778] vhci_hcd vhci_hcd.0: Device attached
[  220.723329][ T6781] vhci_hcd: connection closed
[  220.723630][ T2570] vhci_hcd: stop threads
[  220.748922][ T2570] vhci_hcd: release socket
[  220.753865][ T2570] vhci_hcd: disconnect device
[  220.829624][ T5330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.855411][ T5330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.884553][ T5330] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  220.914657][ T5330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.939721][ T5330] usb 2-1: config 0 descriptor??
[  221.079290][ T5417] hsr_slave_0: left promiscuous mode
[  221.139023][ T5417] hsr_slave_1: left promiscuous mode
[  221.155978][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.188082][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.205553][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.228263][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.264505][ T5417] hsr_slave_0: left promiscuous mode
[  221.285882][ T5417] hsr_slave_1: left promiscuous mode
[  221.312250][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.338129][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.365672][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.383788][ T5330] holtek_kbd 0003:04D9:A055.0003: item fetching failed at offset 3/5
[  221.403174][ T5330] holtek_kbd 0003:04D9:A055.0003: probe with driver holtek_kbd failed with error -22
[  221.410384][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.519893][ T5417] veth1_macvtap: left promiscuous mode
[  221.534453][ T5417] veth0_macvtap: left promiscuous mode
[  221.556828][ T5417] veth1_vlan: left promiscuous mode
[  221.575199][ T5417] veth0_vlan: left promiscuous mode
[  221.609986][ T5417] veth1_macvtap: left promiscuous mode
[  221.626274][ T5417] veth0_macvtap: left promiscuous mode
[  221.633906][ T5417] veth1_vlan: left promiscuous mode
[  221.667056][ T5417] veth0_vlan: left promiscuous mode
[  221.728615][ T6799] loop4: detected capacity change from 0 to 8192
[  221.752511][ T6799] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  222.034416][ T5243] Bluetooth: hci4: command 0x0406 tx timeout
[  222.160918][ T6810] overlayfs: missing 'lowerdir'
[  222.175790][ T6810] loop4: detected capacity change from 0 to 64
[  222.428917][ T6812] loop4: detected capacity change from 0 to 2048
[  222.455759][ T6812] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  222.613786][ T6805] loop2: detected capacity change from 0 to 32768
[  222.798601][ T6805] ERROR: (device loop2): dtReadFirst: DT_GETPAGE: dtree page corrupt
[  222.798601][ T6805] 
[  222.859140][ T6805] ERROR: (device loop2): remounting filesystem as read-only
[  222.887900][ T6805] jfs_readdir: unexpected rc = -5 from dtReadNext
[  222.951452][ T6815] loop4: detected capacity change from 0 to 8192
[  224.498366][ T6823] loop2: detected capacity change from 0 to 512
[  224.516972][ T6823] ext4: Unknown parameter 'noacl'
[  224.526348][ T5417] team0 (unregistering): Port device team_slave_1 removed
[  224.585912][ T6823] loop2: detected capacity change from 0 to 164
[  224.794439][ T6825] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  224.801039][ T6825] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  224.838529][ T5417] team0 (unregistering): Port device team_slave_0 removed
[  224.861771][ T6825] vhci_hcd vhci_hcd.0: Device attached
[  224.902718][ T6828] vhci_hcd: connection closed
[  224.903261][ T5945] vhci_hcd: stop threads
[  225.032350][ T5945] vhci_hcd: release socket
[  225.092712][ T5945] vhci_hcd: disconnect device
[  228.253649][ T6846] loop2: detected capacity change from 0 to 16
[  228.281472][ T6846] erofs: (device loop2): mounted with root inode @ nid 36.
[  228.378297][ T6846] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  228.435225][ T6846] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  228.485531][ T6847] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  228.536262][ T6847] syz.2.289: attempt to access beyond end of device
[  228.536262][ T6847] loop2: rw=0, sector=296, nr_sectors = 8 limit=16
[  228.567239][ T6847] erofs: (device loop2): z_erofs_read_folio: read error -5 @ 0 of nid 36
[  228.567257][ T6848] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  228.580551][ T6847] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  228.611565][ T6848] syz.2.289: attempt to access beyond end of device
[  228.611565][ T6848] loop2: rw=0, sector=296, nr_sectors = 8 limit=16
[  228.638555][ T6848] erofs: (device loop2): z_erofs_read_folio: read error -5 @ 0 of nid 36
[  228.654030][ T6848] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  228.677761][ T6846] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  228.688860][ T6846] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  229.375827][ T6851] loop2: detected capacity change from 0 to 512
[  229.443029][ T6851] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.290: casefold flag without casefold feature
[  229.470818][ T6851] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.290: couldn't read orphan inode 15 (err -117)
[  229.504204][ T6851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.606454][ T6453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.602020][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  230.648405][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  230.663301][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  230.671702][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  230.929928][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  230.942123][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  231.344826][ T5417] team0 (unregistering): Port device team_slave_1 removed
[  231.709129][ T5417] team0 (unregistering): Port device team_slave_0 removed
[  232.547122][ T6869] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  232.553739][ T6869] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  232.585407][ T6869] vhci_hcd vhci_hcd.0: Device attached
[  232.637165][ T6872] vhci_hcd: connection closed
[  232.638060][   T71] vhci_hcd: stop threads
[  232.649311][   T71] vhci_hcd: release socket
[  232.653893][   T71] vhci_hcd: disconnect device
[  233.074735][   T55] Bluetooth: hci3: command tx timeout
[  233.097688][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.223872][ T6492] 8021q: adding VLAN 0 to HW filter on device team0
[  233.332710][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.339884][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.521998][ T6885] tipc: Started in network mode
[  233.532298][ T6885] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  233.571764][ T6885] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  233.762555][ T6885] tipc: Enabled bearer <udp:syz1>, priority 10
[  233.890379][ T6889] Cannot find set identified by id 0 to match
[  234.758999][   T52] tipc: Node number set to 1
[  235.049726][ T6489] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  235.074599][ T6489] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  235.097192][  T173] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.104449][  T173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.120761][ T5281] usb 2-1: USB disconnect, device number 7
[  235.138962][ T6489] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  235.154699][   T55] Bluetooth: hci3: command tx timeout
[  235.258783][ T6489] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  236.104507][  T942] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  236.261192][ T6861] chnl_net:caif_netlink_parms(): no params data found
[  236.280088][  T942] usb 5-1: Using ep0 maxpacket: 32
[  236.292662][  T942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  236.314909][  T942] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8
[  236.324135][  T942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.335947][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.344476][  T942] usb 5-1: Product: syz
[  236.350179][  T942] usb 5-1: Manufacturer: syz
[  236.355251][  T942] usb 5-1: SerialNumber: syz
[  236.413579][  T942] usb 5-1: config 0 descriptor??
[  236.483807][ T6489] 8021q: adding VLAN 0 to HW filter on device team0
[  236.547595][  T137] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.554795][  T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.596436][  T137] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.603571][  T137] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.633498][ T6861] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.643603][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.653850][ T6861] bridge_slave_0: entered allmulticast mode
[  236.663315][ T6861] bridge_slave_0: entered promiscuous mode
[  236.680991][ T6861] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.693374][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.703182][ T6861] bridge_slave_1: entered allmulticast mode
[  236.713334][ T6861] bridge_slave_1: entered promiscuous mode
[  236.733601][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.761960][ T6861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.772934][ T5330] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  236.799314][ T6861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.841069][ T6861] team0: Port device team_slave_0 added
[  236.862771][ T6861] team0: Port device team_slave_1 added
[  236.927900][  T137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.954948][ T5330] usb 3-1: Using ep0 maxpacket: 16
[  236.971222][ T5330] usb 3-1: config 1 interface 0 altsetting 192 bulk endpoint 0x82 has invalid maxpacket 64
[  236.983038][ T5330] usb 3-1: config 1 interface 0 altsetting 192 bulk endpoint 0x3 has invalid maxpacket 32
[  237.002882][ T5330] usb 3-1: config 1 interface 0 has no altsetting 0
[  237.018793][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.026634][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.053147][    C1] vkms_vblank_simulate: vblank timer overrun
[  237.060367][ T6861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.072651][ T5330] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  237.082338][ T5330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.091480][ T5330] usb 3-1: Product: ࠁ
[  237.097291][ T5330] usb 3-1: Manufacturer: 塔⪢ﮟꅎ孓吣鿽ㇻ⠯
[  237.110824][ T5330] usb 3-1: SerialNumber: И
[  237.127833][ T6908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  237.138246][  T137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.145891][ T6908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  237.169941][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.174670][   T52] usb 5-1: USB disconnect, device number 4
[  237.195518][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.221451][    C1] vkms_vblank_simulate: vblank timer overrun
[  237.233669][ T6861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.246352][   T55] Bluetooth: hci3: command tx timeout
[  237.376908][  T137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.408381][ T5330] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  237.461885][ T5330] usb 3-1: USB disconnect, device number 3
[  237.768660][  T137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.107410][ T6861] hsr_slave_0: entered promiscuous mode
[  238.114220][ T6861] hsr_slave_1: entered promiscuous mode
[  238.139529][ T6492] veth0_vlan: entered promiscuous mode
[  238.323649][ T6918] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  238.330255][ T6918] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  238.501103][ T6918] vhci_hcd vhci_hcd.0: Device attached
[  238.511666][ T6492] veth1_vlan: entered promiscuous mode
[  238.727542][ T6923] vhci_hcd: connection closed
[  238.760047][ T5859] vhci_hcd: stop threads
[  238.774491][ T5309] usb 17-1: new low-speed USB device number 2 using vhci_hcd
[  238.984195][ T5859] vhci_hcd: release socket
[  239.115140][ T5859] vhci_hcd: disconnect device
[  239.219738][  T137] bridge_slave_1: left allmulticast mode
[  239.227266][  T137] bridge_slave_1: left promiscuous mode
[  239.234457][  T137] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.268458][  T137] bridge_slave_0: left allmulticast mode
[  239.274181][  T137] bridge_slave_0: left promiscuous mode
[  239.295638][  T137] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.314515][   T55] Bluetooth: hci3: command tx timeout
[  239.339482][ T6936] loop2: detected capacity change from 0 to 256
[  239.377431][ T6938] loop4: detected capacity change from 0 to 1764
[  239.679883][  T137] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  239.793867][  T942] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  239.938384][  T137] gretap1 (unregistering): left allmulticast mode
[  240.016215][  T942] usb 3-1: Using ep0 maxpacket: 32
[  240.055498][  T942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  240.157026][  T942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  240.374380][  T942] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  240.424189][  T942] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  240.433697][  T942] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  240.479496][  T942] usb 3-1: Product: syz
[  240.498593][  T942] usb 3-1: Manufacturer: syz
[  240.512411][  T942] usb 3-1: SerialNumber: syz
[  240.539343][ T6936] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  240.569916][  T942] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7
[  241.758520][  T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.788136][  T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.829839][ T5282] usb 3-1: USB disconnect, device number 4
[  241.859579][  T137] bond0 (unregistering): Released all slaves
[  241.936980][  T137] bond1 (unregistering): Released all slaves
[  241.941326][ T5282] appletouch 3-1:1.0: input: appletouch disconnected
[  242.128727][ T6949] loop4: detected capacity change from 0 to 4112
[  242.154966][ T6949] ntfs3: loop4: Primary boot: invalid bytes per index 12288(3).
[  242.163306][ T6949] ntfs3: loop4: try to read out of volume at offset 0x201e00
[  242.181000][ T6952] loop2: detected capacity change from 0 to 512
[  242.194119][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.295454][ T6952] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  242.347337][ T6952] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.309: invalid indirect mapped block 2683928664 (level 1)
[  242.387175][ T6952] EXT4-fs (loop2): Remounting filesystem read-only
[  242.394247][ T6952] EXT4-fs (loop2): 1 truncate cleaned up
[  242.402061][ T6952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.475154][ T6492] veth0_macvtap: entered promiscuous mode
[  243.276550][ T6489] veth0_vlan: entered promiscuous mode
[  243.317228][ T6453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.396174][ T6492] veth1_macvtap: entered promiscuous mode
[  243.697310][  T137] hsr_slave_0: left promiscuous mode
[  243.707884][  T137] hsr_slave_1: left promiscuous mode
[  244.628230][  T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.636012][  T137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.644174][  T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.651824][  T137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.788173][ T5309] vhci_hcd: vhci_device speed not set
[  244.797643][  T137] veth1_macvtap: left promiscuous mode
[  244.811249][  T137] veth0_macvtap: left promiscuous mode
[  244.824895][  T137] veth1_vlan: left promiscuous mode
[  244.838974][  T137] veth0_vlan: left promiscuous mode
[  246.013108][ T6981] loop4: detected capacity change from 0 to 2048
[  246.032778][ T6981] NILFS (loop4): invalid segment: Sequence number mismatch
[  246.040840][ T6981] NILFS (loop4): trying rollback from an earlier position
[  246.062415][  T137] team0 (unregistering): Port device team_slave_1 removed
[  246.070318][ T6981] NILFS (loop4): recovery complete
[  246.077392][ T6982] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  246.197530][  T137] team0 (unregistering): Port device team_slave_0 removed
[  248.652786][ T6995] loop4: detected capacity change from 0 to 256
[  248.706071][ T6995] vfat: Bad value for 'fmask'
[  248.805693][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.816852][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.843520][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.857102][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.879395][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.915438][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  248.934195][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  248.955307][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  248.966110][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  248.981050][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  248.989326][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  249.135702][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.146860][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.157116][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.168864][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.192427][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.571278][ T6861] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  250.303590][ T7006] loop2: detected capacity change from 0 to 2048
[  250.345194][ T6861] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  250.757285][ T6861] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  250.851282][ T7004] loop4: detected capacity change from 0 to 164
[  250.865441][ T6861] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  251.074613][   T55] Bluetooth: hci4: command tx timeout
[  251.407283][ T6861] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.426768][ T6861] 8021q: adding VLAN 0 to HW filter on device team0
[  251.503041][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  251.522430][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.529684][ T5859] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.550030][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  251.561483][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  251.577274][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  251.580466][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.591548][ T5859] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.604528][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  251.613286][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  253.032776][ T7039] delete_channel: no stack
[  254.858318][ T5243] Bluetooth: hci4: command tx timeout
[  254.863880][ T5243] Bluetooth: hci0: command tx timeout
[  255.170788][ T6997] chnl_net:caif_netlink_parms(): no params data found
[  255.524480][ T5281] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  255.538009][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.550228][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.569417][ T6997] bridge_slave_0: entered allmulticast mode
[  255.579600][ T6997] bridge_slave_0: entered promiscuous mode
[  255.621581][ T6997] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.637776][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.655429][ T6997] bridge_slave_1: entered allmulticast mode
[  255.662417][ T6997] bridge_slave_1: entered promiscuous mode
[  255.721679][ T5281] usb 3-1: Using ep0 maxpacket: 32
[  255.746779][ T6997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.763203][ T5281] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 222, changing to 11
[  255.766019][ T6997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.797069][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  255.855284][ T5281] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  255.884682][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.892367][ T6997] team0: Port device team_slave_0 added
[  255.938992][ T5281] hub 3-1:4.0: USB hub found
[  256.006720][ T6997] team0: Port device team_slave_1 added
[  256.094810][  T137] bridge_slave_1: left allmulticast mode
[  256.100568][  T137] bridge_slave_1: left promiscuous mode
[  256.118177][  T137] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.137805][ T5281] hub 3-1:4.0: 2 ports detected
[  256.164200][  T137] bridge_slave_0: left allmulticast mode
[  256.179811][  T137] bridge_slave_0: left promiscuous mode
[  256.188770][  T137] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.340678][ T5281] hub 3-1:4.0: hub_hub_status failed (err = -71)
[  256.358191][ T5281] hub 3-1:4.0: config failed, can't get hub status (err -71)
[  256.418404][ T5281] usb 3-1: USB disconnect, device number 5
[  256.673073][  T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.685571][  T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.697199][  T137] bond0 (unregistering): Released all slaves
[  256.811058][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.818470][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.848249][ T6997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.874818][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.882064][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.909192][ T7055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  256.918762][   T55] Bluetooth: hci0: command tx timeout
[  256.918838][   T55] Bluetooth: hci4: command tx timeout
[  256.918997][ T6997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.061718][ T7074] loop2: detected capacity change from 0 to 512
[  257.110875][  T137] hsr_slave_0: left promiscuous mode
[  257.120344][  T137] hsr_slave_1: left promiscuous mode
[  257.136124][  T137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.137285][ T7074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.163876][  T137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.168884][ T7074] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.211208][  T137] veth0_vlan: left promiscuous mode
[  257.727985][ T7084] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  258.089925][ T6453] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /31/file1/file0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  258.198837][ T7086] loop4: detected capacity change from 0 to 256
[  258.963471][  T137] team0 (unregistering): Port device team_slave_1 removed
[  259.004906][ T5243] Bluetooth: hci4: command tx timeout
[  259.010527][   T55] Bluetooth: hci0: command tx timeout
[  259.071211][  T137] team0 (unregistering): Port device team_slave_0 removed
[  260.952449][ T6861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.078397][ T7027] chnl_net:caif_netlink_parms(): no params data found
[  261.085553][ T5243] Bluetooth: hci0: command tx timeout
[  261.633866][ T6861] veth0_vlan: entered promiscuous mode
[  261.646471][ T6861] veth1_vlan: entered promiscuous mode
[  261.672877][ T6861] veth0_macvtap: entered promiscuous mode
[  261.683335][ T6861] veth1_macvtap: entered promiscuous mode
[  261.700753][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.711445][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.721981][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.732674][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.742788][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.753402][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.764968][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.880838][ T6997] hsr_slave_0: entered promiscuous mode
[  261.899859][ T6997] hsr_slave_1: entered promiscuous mode
[  261.917276][ T6997] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.925153][ T6997] Cannot create hsr debugfs directory
[  262.188259][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.200964][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.240854][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.288736][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.373704][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.409311][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.440397][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.474162][   T29] audit: type=1326 audit(2000000143.520:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.4.329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea8197dff9 code=0x0
[  262.574123][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.592258][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.594567][ T7114] loop4: detected capacity change from 0 to 1024
[  262.600485][ T7027] bridge_slave_0: entered allmulticast mode
[  262.613401][ T7027] bridge_slave_0: entered promiscuous mode
[  262.635421][ T7114] hfsplus: Bad value for 'session'
[  262.740414][ T6861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.755499][ T6861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.764890][ T6861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.773736][ T6861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.785823][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.793000][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.800535][ T7027] bridge_slave_1: entered allmulticast mode
[  262.808523][ T7027] bridge_slave_1: entered promiscuous mode
[  262.869377][ T7027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  262.904825][ T7027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.978043][ T7027] team0: Port device team_slave_0 added
[  263.022975][ T7027] team0: Port device team_slave_1 added
[  263.146092][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.153454][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.200129][ T7027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.256749][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.263762][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.344376][ T7027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.071385][ T7133] loop4: detected capacity change from 0 to 2048
[  264.312371][ T7027] hsr_slave_0: entered promiscuous mode
[  264.328992][ T7027] hsr_slave_1: entered promiscuous mode
[  264.339666][ T7027] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  264.364093][ T7027] Cannot create hsr debugfs directory
[  264.423181][ T7133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.684566][ T7136] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  264.840452][ T5945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.849020][ T5416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.894404][ T5416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.901983][ T5945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.548910][ T7145] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  265.587764][  T137] bridge_slave_1: left allmulticast mode
[  265.593591][  T137] bridge_slave_1: left promiscuous mode
[  265.624693][  T137] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.663603][  T137] bridge_slave_0: left allmulticast mode
[  265.685414][  T137] bridge_slave_0: left promiscuous mode
[  265.693606][  T137] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.144551][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  266.321950][    T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  266.364504][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.401326][    T9] usb 2-1: config 0 descriptor??
[  267.128345][ T7146] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 788 with error 28
[  267.300559][ T7146] EXT4-fs (loop4): This should not happen!! Data will be lost
[  267.300559][ T7146] 
[  267.434642][ T7146] EXT4-fs (loop4): Total free blocks count 0
[  267.494325][ T7146] EXT4-fs (loop4): Free/Dirty block details
[  267.554349][ T7146] EXT4-fs (loop4): free_blocks=2415919104
[  267.626085][ T7146] EXT4-fs (loop4): dirty_blocks=800
[  267.692734][ T7146] EXT4-fs (loop4): Block reservation details
[  267.773251][ T7146] EXT4-fs (loop4): i_reserved_data_blocks=50
[  267.846315][  T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  267.923298][  T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  267.990755][  T137] bond0 (unregistering): Released all slaves
[  268.109668][    T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  268.185006][    T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  268.247859][    T9] [drm:udl_init] *ERROR* Selecting channel failed
[  268.375018][ T6997] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  268.522213][    T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  268.554587][    T9] [drm] Initialized udl on minor 2
[  268.554854][  T137] hsr_slave_0: left promiscuous mode
[  268.595346][  T137] hsr_slave_1: left promiscuous mode
[  268.607436][    T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  268.625145][  T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.632632][  T137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.669337][  T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.676582][    T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  268.709121][  T137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.740129][  T942] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  268.763197][    T9] usb 2-1: USB disconnect, device number 8
[  268.805391][  T942] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  268.850906][  T137] veth1_macvtap: left promiscuous mode
[  268.878203][  T137] veth0_macvtap: left promiscuous mode
[  268.924970][  T137] veth1_vlan: left promiscuous mode
[  268.930371][  T137] veth0_vlan: left promiscuous mode
[  268.965146][ T7174] input: syz1 as /devices/virtual/input/input8
[  269.202694][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  269.226841][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  269.239952][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  269.256140][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  269.273145][   T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  269.283607][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  269.642669][ T5932] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.982351][ T7197] program syz.1.335 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  271.394580][   T55] Bluetooth: hci2: command tx timeout
[  271.406013][ T7202] loop4: detected capacity change from 0 to 512
[  271.466750][ T7202] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.336: iget: bogus i_mode (0)
[  271.488493][ T7202] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.336: couldn't read orphan inode 17 (err -117)
[  271.515772][ T7202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.605386][ T7202] netlink: 'syz.4.336': attribute type 2 has an invalid length.
[  271.631873][ T7202] netlink: 'syz.4.336': attribute type 1 has an invalid length.
[  271.698118][ T5932] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.848270][ T7209] loop4: detected capacity change from 0 to 2048
[  271.855673][ T7209] udf: Bad value for 'session'
[  272.685139][  T137] team0 (unregistering): Port device team_slave_1 removed
[  272.686737][ T7212] xt_time: unknown flags 0x18
[  272.808220][  T137] team0 (unregistering): Port device team_slave_0 removed
[  273.028716][ T7222] netlink: 'syz.4.340': attribute type 27 has an invalid length.
[  273.688450][   T55] Bluetooth: hci2: command tx timeout
[  274.532204][ T7228] loop4: detected capacity change from 0 to 512
[  274.551555][ T7228] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent
[  275.125480][ T6997] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  275.468834][ T6997] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  275.488933][ T6997] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  275.721098][   T55] Bluetooth: hci2: command tx timeout
[  275.941675][ T6453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.357066][ T6997] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.081255][ T7181] chnl_net:caif_netlink_parms(): no params data found
[  277.124222][ T6997] 8021q: adding VLAN 0 to HW filter on device team0
[  277.159278][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.166488][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.795133][   T55] Bluetooth: hci2: command tx timeout
[  278.440576][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.447793][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.702400][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.710038][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.717884][ T7181] bridge_slave_0: entered allmulticast mode
[  278.725536][ T7181] bridge_slave_0: entered promiscuous mode
[  278.747034][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.754197][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.771182][ T7181] bridge_slave_1: entered allmulticast mode
[  278.778478][ T7181] bridge_slave_1: entered promiscuous mode
[  278.815881][ T7027] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  278.893761][ T7027] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  278.934874][ T7027] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  279.041715][ T7181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.079079][ T7027] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  279.152852][ T7181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.122030][  T137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.302240][ T7181] team0: Port device team_slave_0 added
[  280.358020][ T7181] team0: Port device team_slave_1 added
[  280.822299][  T137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.408122][  T137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.616927][  T137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.712043][ T6997] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.724698][ T7181] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.741988][ T7181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.928874][ T7181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.415705][ T7181] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.443152][ T7181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.526259][ T7181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.579006][ T7027] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.604137][ T7027] 8021q: adding VLAN 0 to HW filter on device team0
[  282.658261][ T7027] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  282.682367][ T7027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  282.771051][ T6997] veth0_vlan: entered promiscuous mode
[  282.785195][ T6997] veth1_vlan: entered promiscuous mode
[  282.812914][ T6997] veth0_macvtap: entered promiscuous mode
[  282.822712][ T6997] veth1_macvtap: entered promiscuous mode
[  282.839486][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.850507][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.860749][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.871545][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.881922][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.895995][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.907625][ T6997] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.925815][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.937128][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.947220][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.957807][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.967840][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.978463][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.990347][ T6997] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.000710][ T6997] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.009572][ T6997] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.018438][ T6997] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.027261][ T6997] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.090010][ T5366] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.097236][ T5366] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.107873][ T5366] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.115077][ T5366] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.330972][ T7027] 8021q: adding VLAN 0 to HW filter on device batadv0
[  283.351089][ T7317] loop4: detected capacity change from 0 to 512
[  283.377303][ T7317] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  283.455713][  T137] bridge_slave_1: left allmulticast mode
[  283.461433][  T137] bridge_slave_1: left promiscuous mode
[  283.468828][ T7317] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.354: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  283.474930][  T137] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.498596][  T137] bridge_slave_0: left allmulticast mode
[  283.504465][  T137] bridge_slave_0: left promiscuous mode
[  283.511387][  T137] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.523647][ T7317] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.354: couldn't read orphan inode 15 (err -117)
[  283.569808][ T7317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.675004][    T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  283.718989][ T5932] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.839605][    T8] usb 2-1: Using ep0 maxpacket: 32
[  283.851736][    T8] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  283.862601][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.870792][    T8] usb 2-1: Product: syz
[  283.875598][    T8] usb 2-1: Manufacturer: syz
[  283.880254][    T8] usb 2-1: SerialNumber: syz
[  283.896983][    T8] usb 2-1: config 0 descriptor??
[  284.164477][ T5330] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  284.241900][  T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.255170][  T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  284.266661][  T137] bond0 (unregistering): Released all slaves
[  284.295100][ T7181] hsr_slave_0: entered promiscuous mode
[  284.303289][ T7181] hsr_slave_1: entered promiscuous mode
[  284.313362][ T7181] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  284.337122][ T7181] Cannot create hsr debugfs directory
[  284.346198][ T5330] usb 5-1: not running at top speed; connect to a high speed hub
[  284.357258][ T5330] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 43214, setting to 64
[  284.372885][ T5330] usb 5-1: config 1 interface 0 has no altsetting 0
[  284.383035][ T5330] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40
[  284.393569][ T7323] wg1: entered promiscuous mode
[  284.414462][ T5330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.422539][ T5330] usb 5-1: Product: Є
[  284.428597][ T5330] usb 5-1: Manufacturer: 慎遛聖箷毓ꡏᶷꜺ暖㫍⫧㟵㉌䖠ሖ壼㈮叠圼䧈ٚ춧䡂蒜肎
[  284.446461][ T5330] usb 5-1: SerialNumber: Э
[  284.484707][ T7324] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  284.748681][    T8] rtl8150 2-1:0.0: eth5: rtl8150 is detected
[  284.823588][  T942] usb 2-1: USB disconnect, device number 9
[  284.860304][ T5330] usbhid 5-1:1.0: can't add hid device: -71
[  284.875292][ T5330] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  284.896245][ T5330] usb 5-1: USB disconnect, device number 5
[  285.002885][  T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.021240][  T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.139735][  T137] hsr_slave_0: left promiscuous mode
[  285.154978][  T137] hsr_slave_1: left promiscuous mode
[  285.171429][  T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.183592][  T137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  285.195193][  T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.202893][  T137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  285.241143][  T137] veth1_macvtap: left promiscuous mode
[  285.248320][  T137] veth0_macvtap: left promiscuous mode
[  285.253991][  T137] veth1_vlan: left promiscuous mode
[  285.259483][  T137] veth0_vlan: left promiscuous mode
[  285.653220][ T7346] ALSA: mixer_oss: invalid OSS volume '0000000000000000'
[  285.763331][ T7347] loop4: detected capacity change from 0 to 128
[  285.823999][ T7347] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  286.101765][ T7345] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  286.469926][ T7345] fuse: Unknown parameter '��f000000000000000000000000000000000000000000000600000000000000000000'
[  286.628199][ T7347] netlink: 'syz.4.358': attribute type 1 has an invalid length.
[  286.664457][ T7347] netlink: 'syz.4.358': attribute type 1 has an invalid length.
[  287.189579][  T137] team0 (unregistering): Port device team_slave_1 removed
[  287.295552][  T137] team0 (unregistering): Port device team_slave_0 removed
[  288.517070][ T7355] loop4: detected capacity change from 0 to 64
[  288.524468][ T7355] hfs: Bad value for 'file_umask'
[  288.534418][ T7355] loop4: detected capacity change from 0 to 8
[  288.901526][ T7357] SQUASHFS error: Failed to read block 0x8f: -5
[  288.913440][ T7357] SQUASHFS error: Failed to read block 0xc00090: -5
[  288.920836][ T7357] SQUASHFS error: Failed to read block 0x8f: -5
[  288.927708][ T7357] SQUASHFS error: Failed to read block 0x8f: -5
[  288.934408][ T7357] SQUASHFS error: Failed to read block 0x8f: -5
[  288.941631][ T7357] SQUASHFS error: Failed to read block 0x8f: -5
[  288.949560][ T7357] SQUASHFS error: Failed to read block 0x8f: -5
[  288.963426][   T29] audit: type=1800 audit(2000000170.020:30): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.361" name="file2" dev="loop4" ino=6 res=0 errno=0
[  289.590515][ T7027] veth0_vlan: entered promiscuous mode
[  289.729136][ T5416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.777519][ T7027] veth1_vlan: entered promiscuous mode
[  289.783460][ T5416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.376657][ T7363] loop4: detected capacity change from 0 to 16
[  290.392792][ T7363] erofs: (device loop4): mounted with root inode @ nid 36.
[  291.999951][   T29] audit: type=1800 audit(2000000173.050:31): pid=7382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.364" name="/" dev="fuse" ino=1 res=0 errno=0
[  292.823618][ T7027] veth0_macvtap: entered promiscuous mode
[  293.015523][ T7027] veth1_macvtap: entered promiscuous mode
[  293.670897][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.735522][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.764184][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.775142][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.791197][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.812662][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.853450][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.307824][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.363273][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.391933][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.609315][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.333623][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.354345][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.381181][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.427963][ T7027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.466012][ T7027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.492513][ T7027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.512224][ T7027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.188661][ T7181] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  297.508309][ T7181] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  297.574816][ T7181] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  297.648660][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  298.487557][ T7181] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  298.763488][ T7429] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  298.779441][ T7429] overlay: ./bus is not a directory
[  298.779861][   T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.799044][   T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.889103][ T7430] netlink: 'syz.0.373': attribute type 2 has an invalid length.
[  299.580001][   T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.624345][   T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.699648][ T7433] syz.4.376[7433] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  299.699765][ T7433] syz.4.376[7433] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  299.749160][ T7181] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.776994][ T7433] syz.4.376[7433] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  299.804638][   T29] audit: type=1326 audit(2000000180.840:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea8197dff9 code=0x0
[  299.877539][ T7441] block nbd0: NBD_DISCONNECT
[  299.898010][ T7181] 8021q: adding VLAN 0 to HW filter on device team0
[  300.003178][ T7443] syz.3.229: attempt to access beyond end of device
[  300.003178][ T7443] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[  300.022218][ T7443] syz.3.229: attempt to access beyond end of device
[  300.022218][ T7443] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0
[  300.028216][  T173] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.042287][  T173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.466541][ T7443] Mount JFS Failure: -5
[  300.490402][ T7443] jfs_mount failed w/return code = -5
[  300.592429][  T173] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.599925][  T173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.041371][ T7181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  301.052204][ T7181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  301.693855][ T7456] loop4: detected capacity change from 0 to 65536
[  301.719944][ T7458] loop3: detected capacity change from 0 to 256
[  301.991240][ T7181] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.031707][ T7456] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  302.117461][ T7456] XFS (loop4): Ending clean mount
[  302.263953][ T7456] XFS (loop4): Quotacheck needed: Please wait.
[  302.617766][ T7456] XFS (loop4): Quotacheck: Done.
[  302.669511][ T7181] veth0_vlan: entered promiscuous mode
[  302.701222][ T7181] veth1_vlan: entered promiscuous mode
[  303.903252][ T7181] veth0_macvtap: entered promiscuous mode
[  303.976303][ T7181] veth1_macvtap: entered promiscuous mode
[  304.110764][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.149771][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.164397][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.174991][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.185497][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.196541][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.206473][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.217096][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.230053][ T7181] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.241926][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.252540][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.262486][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.273077][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.283704][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.294764][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.304702][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.315230][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.326649][ T7181] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.337117][ T7181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.346152][ T7181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.355448][ T7181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.364195][ T7181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.223974][ T5932] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  305.274531][ T5945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.282422][ T5945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.372722][ T5945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.398423][ T5945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.615435][  T942] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  305.733139][ T7504] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  305.739738][ T7504] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  305.800030][  T942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.811415][  T942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.822509][  T942] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  305.842243][  T942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.871708][ T7504] vhci_hcd vhci_hcd.0: Device attached
[  305.971904][  T942] usb 4-1: config 0 descriptor??
[  305.985070][ T7515] vhci_hcd: connection closed
[  305.985547][  T137] vhci_hcd: stop threads
[  306.020276][  T137] vhci_hcd: release socket
[  306.040733][  T137] vhci_hcd: disconnect device
[  306.547951][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  307.435028][ T7507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  307.451779][  T942] wacom 0003:056A:00D0.0004: Unknown device_type for 'HID 056a:00d0'. Assuming pen.
[  307.469148][  T942] wacom 0003:056A:00D0.0004: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0
[  307.482076][  T942] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.0004/input/input10
[  307.677295][ T7545] loop0: detected capacity change from 0 to 256
[  307.711078][ T7545] /dev/loop0: Can't open blockdev
[  308.004547][ T7549] loop4: detected capacity change from 0 to 1024
[  308.065973][ T7552] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  308.113016][ T7556] loop0: detected capacity change from 0 to 2048
[  308.128341][  T942] usb 4-1: USB disconnect, device number 3
[  308.937236][   T55] Bluetooth: hci3: unexpected cc 0x1408 length: 57 > 4
[  309.002443][ T7556] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0)
[  310.226168][ T7572] netlink: 88 bytes leftover after parsing attributes in process `syz.2.394'.
[  310.356290][ T7577] No such timeout policy "syz1"
[  311.285685][ T7594] loop0: detected capacity change from 0 to 164
[  312.595711][ T5243] Bluetooth: hci2: command 0x0405 tx timeout
[  312.623506][ T7595] loop2: detected capacity change from 0 to 256
[  312.680806][ T7595] FAT-fs (loop2): Directory bread(block 64) failed
[  312.781408][ T7595] FAT-fs (loop2): Directory bread(block 65) failed
[  313.078301][   T55] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  313.110405][   T55] Bluetooth: hci3: Injecting HCI hardware error event
[  313.189994][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  313.930672][ T7595] FAT-fs (loop2): Directory bread(block 66) failed
[  313.951100][   T55] Bluetooth: hci3: hardware error 0x00
[  314.244015][ T7595] FAT-fs (loop2): Directory bread(block 67) failed
[  314.245650][ T7608] loop3: detected capacity change from 0 to 256
[  315.265529][ T7595] FAT-fs (loop2): Directory bread(block 68) failed
[  315.394107][ T7595] FAT-fs (loop2): Directory bread(block 69) failed
[  315.617823][ T7595] FAT-fs (loop2): Directory bread(block 70) failed
[  316.212183][   T55] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  316.229510][ T7595] FAT-fs (loop2): Directory bread(block 71) failed
[  316.281671][ T7595] FAT-fs (loop2): Directory bread(block 72) failed
[  316.494733][ T7595] FAT-fs (loop2): Directory bread(block 73) failed
[  316.849279][   T29] audit: type=1326 audit(2000000197.890:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270137dff9 code=0x7ffc0000
[  316.969966][   T29] audit: type=1326 audit(2000000197.890:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270137dff9 code=0x7ffc0000
[  317.067187][   T29] audit: type=1326 audit(2000000197.890:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f270137dff9 code=0x7ffc0000
[  317.119951][   T29] audit: type=1326 audit(2000000197.910:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f270137e033 code=0x7ffc0000
[  317.142420][   T29] audit: type=1326 audit(2000000198.020:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f270137cadf code=0x7ffc0000
[  317.595248][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  318.216684][   T29] audit: type=1326 audit(2000000199.270:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f270137e087 code=0x7ffc0000
[  318.218449][ T7634] loop0: detected capacity change from 0 to 2048
[  318.259480][   T29] audit: type=1326 audit(2000000199.270:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f270137c990 code=0x7ffc0000
[  318.350416][   T29] audit: type=1326 audit(2000000199.270:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f270137dbfb code=0x7ffc0000
[  318.383294][ T7634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.419259][   T29] audit: type=1326 audit(2000000199.360:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f270137cc8a code=0x7ffc0000
[  318.452824][ T7644] loop4: detected capacity change from 0 to 4096
[  318.479858][ T7651] loop3: detected capacity change from 0 to 1024
[  318.493198][ T6997] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.495590][   T29] audit: type=1326 audit(2000000199.360:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f270137cc8a code=0x7ffc0000
[  318.524415][ T7651] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  318.553562][ T7651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.566707][ T7644] NILFS (loop4): invalid segment: Checksum error in segment payload
[  318.588443][ T7644] NILFS (loop4): trying rollback from an earlier position
[  318.616723][ T7656] loop2: detected capacity change from 0 to 256
[  318.625576][ T7656] exfat: Deprecated parameter 'namecase'
[  318.709019][ T7644] NILFS (loop4): recovery complete
[  318.747966][ T7656] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  318.786960][ T7660] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  320.405187][ T7661] kvm_intel: kvm [7657]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1
[  320.545214][ T7675] netlink: 228 bytes leftover after parsing attributes in process `syz.4.417'.
[  320.904877][ T7677] sp0: Synchronizing with TNC
[  321.303783][ T7674] [U] �
[  321.412134][ T7027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.997795][   T29] kauditd_printk_skb: 52 callbacks suppressed
[  322.997846][   T29] audit: type=1800 audit(2000000203.940:95): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.419" name="/" dev="fuse" ino=1 res=0 errno=0
[  324.793620][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.423'.
[  324.953904][ T7705] loop4: detected capacity change from 0 to 256
[  325.348634][   T29] audit: type=1326 audit(2000000206.160:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbd57dff9 code=0x7ffc0000
[  325.439664][ T7705] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  325.947534][   T29] audit: type=1326 audit(2000000206.160:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbd57dff9 code=0x7ffc0000
[  326.064478][   T29] audit: type=1326 audit(2000000206.160:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbbd57dff9 code=0x7ffc0000
[  326.111742][   T29] audit: type=1326 audit(2000000206.170:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbd57dff9 code=0x7ffc0000
[  326.134374][   T29] audit: type=1326 audit(2000000206.170:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbd57dff9 code=0x7ffc0000
[  326.156979][   T29] audit: type=1326 audit(2000000206.170:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbbd57dff9 code=0x7ffc0000
[  326.179485][   T29] audit: type=1326 audit(2000000206.170:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbd57dff9 code=0x7ffc0000
[  326.203319][   T29] audit: type=1326 audit(2000000206.170:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbd57dff9 code=0x7ffc0000
[  326.226341][   T29] audit: type=1326 audit(2000000206.170:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbbd57dff9 code=0x7ffc0000
[  326.462625][ T7721] tmpfs: Cannot retroactively limit size
[  327.595404][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  329.291231][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'.
[  329.416066][ T7737] loop0: detected capacity change from 0 to 256
[  329.528794][ T7737] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  330.574842][ T7753] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  333.926285][ T7782] loop3: detected capacity change from 0 to 128
[  334.066594][ T7782] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  334.081081][ T7782] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  334.170889][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  335.065069][ T7788] binder: BINDER_SET_CONTEXT_MGR already set
[  335.082855][ T7788] binder: 7779:7788 ioctl 4018620d 20000040 returned -16
[  335.380111][ T7781] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  335.543511][ T7800] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  336.238031][ T7781] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  336.266961][ T7781] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  336.281749][ T7781] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  336.296200][ T7781] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  336.310633][ T7781] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  336.344432][ T7781] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  336.379559][ T7794] can: request_module (can-proto-0) failed.
[  336.462762][ T7781] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  336.483770][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'.
[  336.494512][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'.
[  336.542053][ T7788] syz.4.442 (7788): drop_caches: 2
[  336.602407][ T7802] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  337.394536][   T52] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  337.554440][   T52] usb 5-1: Using ep0 maxpacket: 8
[  337.569230][   T52] usb 5-1: config 0 has an invalid interface number: 29 but max is 0
[  337.904331][   T52] usb 5-1: config 0 has no interface number 0
[  338.341556][ T7814] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[  340.102867][   T52] usb 5-1: New USB device found, idVendor=17a8, idProduct=0001, bcdDevice=2f.d6
[  340.114576][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.126522][   T52] usb 5-1: Product: syz
[  340.130910][   T52] usb 5-1: Manufacturer: syz
[  340.198121][   T52] usb 5-1: config 0 descriptor??
[  340.353709][   T52] usb 5-1: can't set config #0, error -71
[  340.692414][ T7826] loop2: detected capacity change from 0 to 1024
[  341.451700][   T52] usb 5-1: USB disconnect, device number 6
[  341.900192][ T5417] hfsplus: b-tree write err: -5, ino 4
[  341.966826][  T942] IPVS: starting estimator thread 0...
[  342.094472][ T7832] IPVS: using max 19 ests per chain, 45600 per kthread
[  342.274564][   T52] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  342.322708][ T5243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  342.336131][ T5243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  342.362945][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  342.375744][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  342.394393][ T5233] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  342.403622][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  342.418926][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  342.459148][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.497176][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.543779][   T52] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  342.565667][ T5233] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  342.577467][ T5282] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  342.594657][   T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.609130][ T5233] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  342.629906][   T52] usb 5-1: config 0 descriptor??
[  342.657534][ T5233] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  342.676132][ T5233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.732391][ T7837] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  342.747328][ T7842] chnl_net:caif_netlink_parms(): no params data found
[  342.754673][ T5282] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  342.786389][ T5282] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  342.838181][ T5233] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  342.845817][ T5282] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  342.873922][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.948931][ T7844] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  342.957194][ T7842] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.994935][ T5282] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  343.011690][ T7842] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.054477][ T7842] bridge_slave_0: entered allmulticast mode
[  343.097437][ T7842] bridge_slave_0: entered promiscuous mode
[  343.125777][ T7842] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.150721][ T7842] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.200050][ T7842] bridge_slave_1: entered allmulticast mode
[  343.231547][ T7842] bridge_slave_1: entered promiscuous mode
[  343.380697][ T7842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.049792][   T52] hid (null): bogus close delimiter
[  344.069589][ T7842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  344.237922][ T7862] loop2: detected capacity change from 0 to 128
[  344.523764][   T55] Bluetooth: hci5: command tx timeout
[  344.971362][   T52] usb 5-1: language id specifier not provided by device, defaulting to English
[  345.040697][ T5233] usb 4-1: USB disconnect, device number 4
[  345.092155][ T5282] usb 2-1: USB disconnect, device number 10
[  345.234402][   T52] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71
[  345.251045][   T52] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71
[  345.289253][   T52] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71
[  345.336100][   T52] uclogic 0003:256C:006D.0005: failed probing parameters: -71
[  345.360426][ T7842] team0: Port device team_slave_0 added
[  345.367632][   T52] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71
[  345.377640][ T7842] team0: Port device team_slave_1 added
[  345.416904][ T7842] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.424683][ T7842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.463263][ T7842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.486841][ T7842] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.494106][ T7842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.528576][ T7842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.823903][ T7866] Bluetooth: MGMT ver 1.23
[  346.423935][   T52] usb 5-1: USB disconnect, device number 7
[  347.344415][   T55] Bluetooth: hci5: command tx timeout
[  347.433267][ T7875] loop2: detected capacity change from 0 to 8
[  347.448168][ T7875] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  347.705660][ T7875] process 'syz.2.461' launched './file2' with NULL argv: empty string added
[  347.722467][ T7875] cramfs: Error -3 while decompressing!
[  347.737918][ T7875] cramfs: ffffffff9a50ea08(26)->ffff88805ea1b000(4096)
[  348.177643][ T7875] cramfs: Error -3 while decompressing!
[  348.317525][ T7875] cramfs: ffffffff9a50ea22(26)->ffff88805ea1c000(4096)
[  348.533236][ T7875] cramfs: Error -3 while decompressing!
[  348.554788][ T7875] cramfs: ffffffff9a50ea3c(16)->ffff88805ea1d000(4096)
[  348.577231][ T7875] cramfs: Error -3 while decompressing!
[  348.599584][ T7875] cramfs: ffffffff9a50ea08(26)->ffff88805ea1b000(4096)
[  349.131769][ T7884] bond0: entered promiscuous mode
[  349.137522][ T7884] bond_slave_0: entered promiscuous mode
[  349.143581][ T7884] bond_slave_1: entered promiscuous mode
[  349.174357][ T7886] netlink: 'syz.4.463': attribute type 10 has an invalid length.
[  349.330302][ T7886] 8021q: adding VLAN 0 to HW filter on device team0
[  349.366877][ T7886] team0: entered promiscuous mode
[  349.387572][ T7886] team_slave_0: entered promiscuous mode
[  349.394677][   T55] Bluetooth: hci5: command tx timeout
[  349.423304][ T7886] team_slave_1: entered promiscuous mode
[  349.455362][ T7886] bond0: (slave team0): Enslaving as an active interface with an up link
[  349.529549][ T7889] netlink: 'syz.4.463': attribute type 10 has an invalid length.
[  349.577290][ T7889] bond0: (slave team0): Releasing backup interface
[  349.621323][ T7889] team0: left promiscuous mode
[  349.636730][ T7889] team_slave_0: left promiscuous mode
[  349.654589][ T7889] team_slave_1: left promiscuous mode
[  349.686040][ T7889] bridge0: port 3(team0) entered blocking state
[  349.703642][ T7889] bridge0: port 3(team0) entered disabled state
[  349.727578][ T7889] team0: entered allmulticast mode
[  349.740450][ T7889] team_slave_0: entered allmulticast mode
[  349.764289][ T7889] team_slave_1: entered allmulticast mode
[  349.786489][ T7889] team0: entered promiscuous mode
[  349.795695][ T7889] team_slave_0: entered promiscuous mode
[  349.817873][ T7889] team_slave_1: entered promiscuous mode
[  349.928479][ T7842] hsr_slave_0: entered promiscuous mode
[  350.000428][ T7842] hsr_slave_1: entered promiscuous mode
[  350.035719][ T7842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  350.061616][ T7842] Cannot create hsr debugfs directory
[  350.432577][ T5366] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.582440][ T5366] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.785564][ T5366] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.943336][ T5366] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.190719][ T7901] loop2: detected capacity change from 0 to 256
[  351.228570][ T7910] loop4: detected capacity change from 0 to 1024
[  351.303345][ T7910] EXT4-fs: Mount option(s) incompatible with ext2
[  351.532922][ T5243] Bluetooth: hci5: command tx timeout
[  353.375011][ T7919] loop4: detected capacity change from 0 to 256
[  353.687241][ T5243] Bluetooth: hci5: command 0x0405 tx timeout
[  353.743114][ T5366] bridge_slave_1: left allmulticast mode
[  353.824448][ T5366] bridge_slave_1: left promiscuous mode
[  353.832937][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.843184][ T7920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.473'.
[  353.859776][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.473'.
[  353.909853][ T5366] bridge_slave_0: left allmulticast mode
[  353.927734][ T5366] bridge_slave_0: left promiscuous mode
[  353.953502][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.398198][ T7922] loop3: detected capacity change from 0 to 32768
[  356.555942][   T52] IPVS: starting estimator thread 0...
[  356.686502][ T7940] IPVS: using max 19 ests per chain, 45600 per kthread
[  356.933485][ T5366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  356.961868][ T5366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.005920][ T5366] bond0 (unregistering): Released all slaves
[  360.316480][ T7964] loop4: detected capacity change from 0 to 256
[  360.503145][ T7964] exFAT-fs (loop4): failed to load alloc-bitmap
[  360.509855][ T7964] exFAT-fs (loop4): failed to recognize exfat type
[  361.185450][ T7979] loop4: detected capacity change from 0 to 256
[  361.198774][ T7979] exfat: Deprecated parameter 'utf8'
[  361.215509][ T7979] exfat: Deprecated parameter 'namecase'
[  361.221229][ T7979] exfat: Deprecated parameter 'utf8'
[  361.257021][ T7979] exfat: Deprecated parameter 'utf8'
[  361.514590][ T7979] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d)
[  362.165613][ T5366] hsr_slave_0: left promiscuous mode
[  362.185524][ T5366] hsr_slave_1: left promiscuous mode
[  362.222425][ T7992] loop2: detected capacity change from 0 to 512
[  362.223905][ T5366] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  362.259409][ T7992] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000079f)
[  362.277059][ T5366] batman_adv: batadv0: Removing interface: batadv_slave_0
[  362.328359][ T7992] FAT-fs (loop2): Filesystem has been set read-only
[  362.372687][ T5366] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  362.389001][ T5366] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.493442][ T5366] veth1_macvtap: left promiscuous mode
[  362.499214][ T5366] veth0_macvtap: left promiscuous mode
[  362.664513][ T5366] veth1_vlan: left promiscuous mode
[  362.675220][ T5366] veth0_vlan: left promiscuous mode
[  362.752222][ T5282] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  363.927137][ T5282] usb 3-1: Using ep0 maxpacket: 16
[  363.949827][ T5282] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  363.971769][ T5282] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  364.014176][ T5282] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  364.064100][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.805369][ T5282] usb 3-1: Product: syz
[  364.830104][ T5282] usb 3-1: Manufacturer: ᨵĒ麶쟃︆ẵꕴ
[  364.837960][ T5282] usb 3-1: SerialNumber: syz
[  365.365586][ T5282] cdc_ncm 3-1:1.0: bind() failure
[  365.375641][ T5282] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  365.384360][ T5282] cdc_ncm 3-1:1.1: bind() failure
[  365.410333][ T5282] usb 3-1: USB disconnect, device number 6
[  365.648978][ T8010] Falling back ldisc for ptm0.
[  365.770843][ T8014] loop4: detected capacity change from 0 to 8
[  366.062727][ T5366] team0 (unregistering): Port device team_slave_1 removed
[  366.167365][ T8016] SQUASHFS error: Failed to read block 0x1ec: -5
[  366.174315][ T8016] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  366.824455][ T5366] team0 (unregistering): Port device team_slave_0 removed
[  367.629024][ T8023] loop2: detected capacity change from 0 to 16
[  368.094428][ T8023] erofs: (device loop2): mounted with root inode @ nid 36.
[  368.127106][ T8023] erofs: (device loop2): z_erofs_readahead: readahead error at folio 24 @ nid 36
[  368.138186][ T8023] erofs: (device loop2): z_erofs_readahead: readahead error at folio 19 @ nid 36
[  368.148581][ T8023] erofs: (device loop2): z_erofs_readahead: readahead error at folio 13 @ nid 36
[  368.158932][ T8023] erofs: (device loop2): z_erofs_readahead: readahead error at folio 8 @ nid 36
[  368.168405][ T8023] syz.2.494: attempt to access beyond end of device
[  368.168405][ T8023] loop2: rw=524288, sector=736, nr_sectors = 112 limit=16
[  368.183962][ T8023] syz.2.494: attempt to access beyond end of device
[  368.183962][ T8023] loop2: rw=524288, sector=13478624032, nr_sectors = 24 limit=16
[  368.843195][ T8028] loop2: detected capacity change from 0 to 256
[  368.897182][ T8028] FAT-fs (loop2): bogus logical sector size 0
[  368.903387][ T8028] FAT-fs (loop2): Can't find a valid FAT filesystem
[  370.431177][ T7842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  370.541057][ T8044] netlink: 'syz.2.498': attribute type 4 has an invalid length.
[  371.197294][ T7842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  372.773493][ T7842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  373.013923][ T7842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  373.588476][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  373.588496][   T29] audit: type=1326 audit(2000000254.640:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbd57dff9 code=0x7ffc0000
[  373.623781][   T29] audit: type=1326 audit(2000000254.640:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbd57dff9 code=0x7ffc0000
[  373.674643][   T29] audit: type=1326 audit(2000000254.710:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcbbd57dff9 code=0x7ffc0000
[  373.718911][   T29] audit: type=1326 audit(2000000254.710:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbd57dff9 code=0x7ffc0000
[  373.741485][   T29] audit: type=1326 audit(2000000254.710:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbd57dff9 code=0x7ffc0000
[  378.655123][ T8091] batman_adv: batadv0: Adding interface: wlan1
[  378.699081][ T8091] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  378.734835][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  379.740372][   T29] audit: type=1326 audit(2000000260.640:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.1.508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6fb17dff9 code=0x0
[  379.743770][ T8091] batman_adv: batadv0: Interface activated: wlan1
[  380.292282][ T7842] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.313932][ T7842] 8021q: adding VLAN 0 to HW filter on device team0
[  380.334881][ T8095] batman_adv: batadv0: Interface deactivated: wlan1
[  381.386739][ T8095] batman_adv: batadv0: Removing interface: wlan1
[  381.416159][ T8110] netlink: 'syz.1.508': attribute type 29 has an invalid length.
[  381.514238][ T5416] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.521412][ T5416] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.543598][ T5416] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.550816][ T5416] bridge0: port 2(bridge_slave_1) entered forwarding state
[  381.705343][   T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  381.906918][ T7842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  381.909606][   T25] usb 5-1: New USB device found, idVendor=0df6, idProduct=004b, bcdDevice=56.d7
[  381.924685][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.932767][   T25] usb 5-1: Product: syz
[  381.937305][   T25] usb 5-1: Manufacturer: syz
[  381.941939][   T25] usb 5-1: SerialNumber: syz
[  381.954618][   T25] usb 5-1: config 0 descriptor??
[  381.970013][   T25] r8712u: register rtl8712_netdev_ops to netdev_ops
[  381.977051][   T25] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints
[  381.981388][ T8128] loop3: detected capacity change from 0 to 512
[  382.020112][ T7842] veth0_vlan: entered promiscuous mode
[  382.033423][ T7842] veth1_vlan: entered promiscuous mode
[  382.034519][  T942] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  382.044359][ T5330] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  382.087358][ T8128] EXT4-fs error (device loop3): __ext4_fill_super:5458: inode #2: comm syz.3.514: iget: special inode unallocated
[  382.089741][ T7842] veth0_macvtap: entered promiscuous mode
[  382.107016][ T8128] EXT4-fs (loop3): get root inode failed
[  382.113019][ T8128] EXT4-fs (loop3): mount failed
[  382.121139][ T7842] veth1_macvtap: entered promiscuous mode
[  382.155588][ T7842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.166652][ T7842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.181708][ T7842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.193973][ T7842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.207652][ T7842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.218769][ T5330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  382.226854][ T7842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.230088][ T5330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  382.239940][ T7842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.249528][ T5330] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  382.260053][ T7842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.269122][ T5330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.280922][ T7842] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.292530][ T5330] usb 3-1: config 0 descriptor??
[  382.298177][ T7842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.310215][ T7842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.320305][ T7842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.333300][ T7842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.343468][ T7842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.354743][ T7842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.364922][ T7842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.375511][ T7842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.386831][ T7842] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.403422][   T25] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed
[  382.410842][   T25] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  382.438896][   T25] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  382.450571][ T7842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.459593][ T7842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.468683][ T7842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.478217][ T7842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.499454][  T942] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  382.508735][  T942] usb 2-1: config 1 has no interface number 1
[  382.515537][  T942] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  382.521168][   T25] usb 5-1: USB disconnect, device number 8
[  382.528724][  T942] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  382.545858][  T942] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  382.574492][  T942] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  382.583622][  T942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.651474][  T942] usb 2-1: Product: syz
[  382.661461][  T942] usb 2-1: Manufacturer: syz
[  382.673863][  T942] usb 2-1: SerialNumber: syz
[  382.833176][ T8128] kvm: emulating exchange as write
[  383.037654][ T5417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.049640][ T5417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.937100][ T5859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.982787][ T5859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.774658][ T5330] usbhid 3-1:0.0: can't add hid device: -71
[  385.780720][ T5330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  385.795973][ T5330] usb 3-1: USB disconnect, device number 7
[  386.487988][ T8153] capability: warning: `syz.2.517' uses 32-bit capabilities (legacy support in use)
[  387.294369][ T5309] usb 2-1: USB disconnect, device number 11
[  387.346989][ T8158] loop3: detected capacity change from 0 to 64
[  392.760059][   T52] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c7: 0000 [#1] PREEMPT SMP KASAN PTI
[  392.772711][   T52] KASAN: null-ptr-deref in range [0x0000000000000638-0x000000000000063f]
[  392.781171][   T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/1:1 Not tainted 6.12.0-rc1-next-20241001-syzkaller #0
[  392.791259][   T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  392.801319][   T52] Workqueue: events_long flush_mdb
[  392.806452][   T52] RIP: 0010:hfs_mdb_commit+0x37/0xfd0
[  392.811865][   T52] Code: 53 48 83 ec 48 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 8c 0f 0a ff 48 89 5c 24 08 4c 8d a3 38 06 00 00 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 fa f2 73 ff 4d 8b 34 24 49 8d 6e
[  392.831520][   T52] RSP: 0018:ffffc90000bc7b40 EFLAGS: 00010202
[  392.837591][   T52] RAX: ffffffff828ac694 RBX: 00000000000000c7 RCX: ffff88801ea9bc00
[  392.845569][   T52] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000
[  392.853553][   T52] RBP: ffffc90000bc7dc0 R08: ffff88804d6881eb R09: 1ffff11009ad103d
[  392.861542][   T52] R10: dffffc0000000000 R11: ffffed1009ad103e R12: 0000000000000638
[  392.869547][   T52] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000001800000
[  392.877548][   T52] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  392.886486][   T52] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  392.893077][   T52] CR2: 00000000200cd000 CR3: 00000000251bc000 CR4: 00000000003526f0
[  392.901080][   T52] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  392.909067][   T52] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  392.917066][   T52] Call Trace:
[  392.920347][   T52]  <TASK>
[  392.923276][   T52]  ? __die_body+0x5f/0xb0
[  392.927608][   T52]  ? die_addr+0xb0/0xe0
[  392.931775][   T52]  ? exc_general_protection+0x3dd/0x5d0
[  392.937337][   T52]  ? process_scheduled_works+0x976/0x1850
[  392.943067][   T52]  ? asm_exc_general_protection+0x26/0x30
[  392.948797][   T52]  ? hfs_mdb_commit+0x24/0xfd0
[  392.953567][   T52]  ? hfs_mdb_commit+0x37/0xfd0
[  392.958361][   T52]  ? _raw_spin_unlock+0x3e/0x50
[  392.963221][   T52]  ? process_scheduled_works+0x976/0x1850
[  392.968964][   T52]  process_scheduled_works+0xa63/0x1850
[  392.974540][   T52]  ? __pfx_process_scheduled_works+0x10/0x10
[  392.980539][   T52]  ? assign_work+0x364/0x3d0
[  392.985151][   T52]  worker_thread+0x870/0xd30
[  392.989750][   T52]  ? __kthread_parkme+0x169/0x1d0
[  392.994781][   T52]  ? __pfx_worker_thread+0x10/0x10
[  392.999900][   T52]  kthread+0x2f0/0x390
[  393.003966][   T52]  ? __pfx_worker_thread+0x10/0x10
[  393.009096][   T52]  ? __pfx_kthread+0x10/0x10
[  393.013687][   T52]  ret_from_fork+0x4b/0x80
[  393.018127][   T52]  ? __pfx_kthread+0x10/0x10
[  393.022712][   T52]  ret_from_fork_asm+0x1a/0x30
[  393.027483][   T52]  </TASK>
[  393.030490][   T52] Modules linked in:
[  393.034855][   T52] ---[ end trace 0000000000000000 ]---
[  395.205465][   T52] RIP: 0010:hfs_mdb_commit+0x37/0xfd0
[  395.211358][   T52] Code: 53 48 83 ec 48 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 8c 0f 0a ff 48 89 5c 24 08 4c 8d a3 38 06 00 00 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 fa f2 73 ff 4d 8b 34 24 49 8d 6e
[  395.231663][   T52] RSP: 0018:ffffc90000bc7b40 EFLAGS: 00010202
[  395.238118][   T52] RAX: ffffffff828ac694 RBX: 00000000000000c7 RCX: ffff88801ea9bc00
[  395.246361][   T52] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000
[  395.254731][   T52] RBP: ffffc90000bc7dc0 R08: ffff88804d6881eb R09: 1ffff11009ad103d
[  395.262813][   T52] R10: dffffc0000000000 R11: ffffed1009ad103e R12: 0000000000000638
[  395.271158][   T52] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000001800000
[  395.279463][   T52] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  395.288611][   T52] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  395.295431][   T52] CR2: 00000000201a9000 CR3: 00000000251bc000 CR4: 00000000003526f0
[  395.303463][   T52] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  395.311679][   T52] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  395.321485][   T52] Kernel panic - not syncing: Fatal exception
[  395.327988][   T52] Kernel Offset: disabled
[  395.332320][   T52] Rebooting in 86400 seconds..