last executing test programs:

5m6.026801402s ago: executing program 0 (id=86):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r0, 0x0)

5m5.865620037s ago: executing program 0 (id=87):
r0 = io_uring_setup(0x630e, &(0x7f0000000800)={0x0, 0xd306, 0x1000, 0x0, 0x59})
r1 = syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000, 0x400, 0x0, 0x0, r0}, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000100)={0x6, 0xfe, 0x1, '\x00', 0x3}, 0x1)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
unshare(0x22020600)
r2 = openat$incfs(0xffffffffffffffff, &(0x7f00000004c0)='.log\x00', 0x0, 0x40)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000002c40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002c00)={&(0x7f0000001940)={0x40, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_ID={0x8}, @CTA_LABELS_MASK={0x14, 0x17, [0x9, 0x6, 0x9, 0x8]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008804}, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
recvmsg$unix(r4, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)}, {&(0x7f0000001980)=""/116, 0x74}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/129, 0x81}], 0x8, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x2020)
symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_ublk_setup_queues(r4, 0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bee, 0x80000, 0x1000002, 0x141, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x100, 0x0, 0x8004146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e8b, 0x1000, 0xffffffff, 0x2fd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x2, 0xc5, 0x0, r4}}], 0x1, 0x0, 0x0)

5m5.537815138s ago: executing program 0 (id=89):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000001)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x8f941a, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0xb)

5m5.32946555s ago: executing program 0 (id=92):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$RTC_PIE_OFF(r0, 0x7006)

5m5.080060029s ago: executing program 0 (id=95):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$UHID_INPUT(r0, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))

5m4.065116696s ago: executing program 0 (id=98):
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x800}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
io_uring_setup(0xc, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
socket$inet6(0xa, 0x80803, 0x87)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cgroup2\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)

4m48.686413493s ago: executing program 32 (id=98):
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x800}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
io_uring_setup(0xc, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
socket$inet6(0xa, 0x80803, 0x87)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cgroup2\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)

2m12.868151694s ago: executing program 3 (id=491):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1/file0\x00', 0x180c858, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x1, 0x372, &(0x7f0000000b00)="$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")
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0x3)

2m11.537138277s ago: executing program 3 (id=492):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
unshare(0x22020600)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
recvmsg$unix(r1, 0x0, 0x2020)
symlink(0x0, 0x0)
syz_ublk_setup_queues(r1, 0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bee, 0x80000, 0x1000002, 0x141, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x100, 0x0, 0x8004146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e8b, 0x1000, 0xffffffff, 0x2fd, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x2, 0xc5, 0x0, r1}}], 0x1, 0x0, 0x0)

2m10.69810019s ago: executing program 3 (id=495):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0xb, 0x0, 0x2, 0x2, 0x0, 0x0, 0xfffffffe}, 0x10}}, 0x8014)

2m9.473123309s ago: executing program 3 (id=496):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081020100bfa30000000000000703000004feffff720af0fff8ffffff69a4f0ff000000002d030000000000001d400500000000004704000001ed000072030200000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

2m9.340507429s ago: executing program 3 (id=497):
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0xa0ca, 0x80000004, 0x4f, 0x0, 0x9, 0xe, 0xd, 0x31e})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000000000080004", @ANYRES32=r1, @ANYBLOB="06001500030000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x220201, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2)
fcntl$getownex(r5, 0x40f, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r8 = dup3(r7, r6, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0)
r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r10, r5, &(0x7f0000002080)=0x64, 0x23b)
fchdir(0xffffffffffffffff)

2m8.23984941s ago: executing program 3 (id=501):
mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x2e)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x8882)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x400000f4, 0x0, 0x7}]})

1m52.818783754s ago: executing program 33 (id=501):
mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x2e)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x8882)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x400000f4, 0x0, 0x7}]})

17.419065598s ago: executing program 4 (id=712):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x28, r1, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x142, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x28}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x7fe5, 0x1, 0x44}, 0x50)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0)
recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

16.860811542s ago: executing program 1 (id=714):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10)
r0 = creat(0x0, 0x30)
connect$unix(r0, 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40008)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a)
write(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r5, &(0x7f00000091c0)=""/16384, 0x4000)

16.536269194s ago: executing program 1 (id=715):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)={@ifindex, 0xffffffffffffffff, 0x1b}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)
listen(r0, 0xd)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000004000010000001c000180060001000200000008000300ac1414b60800060003"], 0x30}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x2000}}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800)
r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
socket(0x15, 0x5, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0})
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)

15.701170817s ago: executing program 4 (id=717):
r0 = openat(0xffffffffffffff9c, 0x0, 0x1a50c0, 0x32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
io_setup(0x10000, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f00000000c0)={0x0, 0xbc, 0x10, 0x1, 0x30d, 0x0, r0}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf3c0, 0x2, 0xfffffffe, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe81, 0x800, 0x1, 0x31}}], 0x1, 0x0, 0x0)

14.980731427s ago: executing program 1 (id=719):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xdf)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0x7)

14.264602138s ago: executing program 1 (id=722):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0)
fsopen(&(0x7f0000000280)='zonefs\x00', 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x6)
socket$inet_smc(0x2b, 0x1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300))

12.676140304s ago: executing program 4 (id=724):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, {0xffffffffffffffff}, 0x9e6b, 0x0, 0x1, 0x1, 0x0, 0x2}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x22, 0xfffffffe}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)

10.380127199s ago: executing program 4 (id=727):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)={@ifindex, 0xffffffffffffffff, 0x1b}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)
listen(r0, 0xd)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000004000010000001c000180060001000200000008000300ac1414b60800060003"], 0x30}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x2000}}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800)
r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
socket(0x15, 0x5, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0})
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)

10.256868501s ago: executing program 2 (id=728):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
fsmount(0xffffffffffffffff, 0x0, 0x80)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESDEC], 0x0, 0x1da, &(0x7f0000000600)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
r0 = getpid()
r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9, 0x1)
socket$key(0xf, 0x3, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), &(0x7f0000000800)=ANY=[@ANYBLOB="00fb15070940ff268d8637e27141a8d801c279f9b198a747e5765cf454713f4a43687dd0705aa8116ae7ad7a1bb878cc658f846b1bc8e469ee5dd794af3b9b955e68aff946c877dfbdae36910f95d6802d0b1c51d6cd9aa3536e9c8d485f09cffea8f92907ae31a79e0bfc6a7a324a70c0b549aca420f53c03f451ea1016b0c35080b288b10a7276ce770d0b9c6a9a69134287467da0896738a744b7b5a0e7a89b76cd33813af3c108f800df87d500f259571472b6bc07767f79541a86550f6e444bfe14baff94cab9b7e72226563300661f4bb3f5755309a77ed2cd988e52b827cf8747502b1243f20ded4a73b6cb103d746ee6ab5cd25132d1cfa9e5c869f45e174a2ce31851e4dfec965e1362d4c02d6bf8d9f8d960db7bcb02a5fa43117c686bbacf19b1ef3d307f692b32c65168f7721a8f5d78da27681c229b78f11b8c5a9060f236d5ba3eb643ad96e77638570a9689c749d13b339440c34ba83003b8cfd2e76c6468ef85ae446caf8b3aa853680714e0cb98afa0a01c0ec08cb83d05c8d9b6f3ea23559642d627af6b51a8a7bfac17ba5b6a300cbf0481362371e557c5b646435af814bfad122a34658414a6b2d8e22b0a0c2c75bf5056082eabb4d88212f6846764e765f7d167d33d9bfae3efd2a1ca97e8a90418bd0c31de308cf96dc75486395e74e02890bc03d27ef15fcd55586d3afa6a10261931faec8834167cc76c733de593e0632884118e45b4dcb724949e2e88b84c656c72b3499e3f41cfe39f7c7956b8ec0cd4e68bddd856ea31ef267decb702282ba9ec469667531a944a878c0f149456a44fab2c550a4027d431411ac0ff0ea409cbb214e97909f1771ed789edd658731506816c23a9f27cb2819eac050cb0d5fc0a39c121ca85ebbce6d7853b73aa1a874e962a780585a2954c44d2bbcf8c44f3196ad6eb06e607106fa65e82d24aeebaf69591ccfaf29f72936e53134eac02e9da3cb4cb80bbbbd03b781b758eccbf9aa45ca0ea5a48bb77eaed5f4a63a15a52d50a5f777b25c9a89b7999a03bf40ed126c2c6ac886d4772a3ba268dd59b89daa82ebb730827f9b8d0ec7a8e6d90392230455b125ab7430b679db4f827b5384f9ec25372034c8f98097c9fa6601b9795f2cd60606bdea17f1a30917db9b83777a8fefbf53519f45ffd6278918f033032e9e165c62874f891f4bfff9f3e1e5d253212e4ed909f2ac676bd3a375d6ff8cf624db2d43f18ac7caf34265be86d50b75ef449e15565366c8872337c5dd77535fd159b1336a9e90e1b9392df32f63e7aa8760d4387a0b0514d245df19d9936ef2fbe05df2e7e413dc1cfb3c2e64a4f6c85007a4bad9bfa2aad3bc1bc1a638dcd828adc54e88f7b4788787ee44e44bfa9befaf3e2c082f827c893951ef77b5cb5bd05161f7bfc5bec1a81d15e57823768ca3b8274bfb2a1acf6b860d965b7c793e7d5a47ac35f2f276485c5fda06415a08717ab53e4c18b80a66181a3cac880d03848c66b2f0f7e6ec996760c6db5a1d0f366ae89f027e274fd0c8f5ed312267272130e210e6713e0e73178f458fb776e177cc2c8efad8687d6a89bb6c3d3bd8cadeb5f495903537365b6fe091afdeb72261b3abea87e1ba90f639255540fea3c6f611d758b41acccd3dc8dc8c6e563854a926c4062e2d63f195cbb66107410ff7ab61a170f3ab599cb5616d510752224c587321be5afea65e6b44c654384f7547836d67755e65c1bf532277ea2f2e8c8412ca464a27ebaf34d0e1b133092177b784a3fe7fc2a59e42daf9aa58d9dd9de8807f3d116108d27e70d9434405e9f485d67a4b1be5f25341a4acbaf8567a1a2cf9ba025367e2f6ba07ffa53c95fffbafd2701059b9f38756e05abe445251b55da97bf4190f8b819e76236b2007b86c793ba1336f7379a852e249964fa5cedcea12e8617480720e4cd62c0e685911ea8b4738f1c8032b8ed258ba0c26cfc225c4e005d6295e99b5cf0045c5e25b292de3f877ba69d4aa4bebae583d8108286923a6a56528e7fa1a92e4b6d1cccf7174d66af5994b55b73cafe18fbfa856e9943125ea3abb639002b56068d734408458572775b7133922c9a990d0f35d2933c5649c1182bdd8b52e48d29ae85551827e6dedd3fdb0e8c8dd687dfed4e096f0cbff2868dc788ad7ca6088ba0383fc48c089d8de62250584e4ff79bcf7a7f8fcb2549d8b2514cb88ad270dc07e6131335242cacf088b5b1c6b8e31f6348988809bdb5f109c18793c601090424a260a1dbd85bf0b73b3eece5d39bb9c18d3438e45103152ed2e998e4913d8ffeff1cc2f0d4a345a94977782f8469925f614a9b32a5bf5fc673dd0bb35f4ea62e6b8beccc5aa4146b8d72145764f36610c913c6838644ee116bcd80bea2ca4a4457eb36f5f8a5498c64b9a16089dba640c51843662fc9297848423be24a7299cfbfcd42fa472e71a7fdae0aac65e15410a871307a6ba0ad360397d81c80a0b8655a44bdd0abb76637a46d8a5826c01af1756ab99d71784a1da2bde4cba7324246fdc31a6f87750d9d9c013d4647fc1f61b0ad62e95290cfa9ccd13abd3403440013ff76e4445c1f500738a9d37f04975aaad8fbdb7750d11192076fa514c6ff3394daaf048207f4d806ece178f4b0a3aab240398063e04ec2cd4ccc13cce12fed02ecd38141b8a7c7ec310ecdffdb093e8466be64c070446bdfc8a6e3d00363e529c0495530cdc164621316812265fa8b7491a642a6f26455fc852a2d3fc72a1811459a8e1640572408a36805edc764af3fb3d80596262b61d46cda862deb9c8cc55737eb1aa35945f97bfb2908d5135c3bbbf09f48478cd43de64a669c6a3db3355a030fbaf31b53d44d3c96d766249175dccb4f0a150db8c5230f3486712e37be6d82060421d1dfd3fd31aec9c02d3dcb6b5c5e82e519b854d602689d4e8993a6b9f3e75ccaeb41dc5efed556421379d3a63bcc2d06744b2d938a8e61a9b31db0c2ffe2ba5490ac1f1f95452df4b44e3d04e76ef60995bb60b36887818051dce977cd421ef1c67012259a1b0b67b0aa6c92b7f8ca1a6af813a5bce03ddbe3ef51979ce2916c60cd20918f5fc7ef67ab7db2ca060a21d783ecf6da188a268a9dec166c7f9d97a99f94e86bfec8f889b74c4929ec912c6f2a0da088f9437dc663cb01a3ada8dcd075d84d9b5eefc04bfdd7618adcab7a6acd23042f5b78af047ee728884b435db31946513eaf5a037b07c7fbdd8a53a8048721550cde6121ab7b7cacd1c4f454a27272678498102db2f44f01d4b2d02d9a1a220ee07b21638fec0a0e66a38df38c16675e82684af25e3104d7335e870901efd8b47b7f750fa76dbe9077e783933d18b9b8ecb04f7c9a29876960715b0572326a03eb3c77703ab11157746ee403a732bd9efab083a0e1028a4b611fd3ee9a93424de2cf1f4f68c3a9e376fc54e96a7230bd793be5d5368dc74d731332627df3d48f37a426c722fb862db64c0dfff9dd6fcd6ecfc92ed03ddd2697cf5fec5977ec60fc37dff8e58ba420cb6ba438f35c5c1c6e87d44cbb4aca8965641ded47af3e7f316b6152a574be20b6baa96cdecce1398651c1733b790f8e6a2f3ea7b3b09f717f7d76841c8c4c6289f4cbabcc0c2b895afaa6c6d0ea2f55b168eb20b577de4cedb183acba784b86edef552a7293961d38e85134bfcaa8fbadaeeb19c7c9fdb1c51fd288a6938c08e6ed52a25cd63d144b52e59aa11c4a89e082fd914c023cc8ec73227db358960a7064922ce445309bb2b5fca5ad061d6eb6f653fdbcfc08c00698fe0d3387bb7d33bdeabf2f76f24122391132c83c6ae4afa402c9359806bb4bdae499f2e74fc72f2d67c30f9d1269d56498da155f006e9bad56a3bb5a91d854ef4f1a0abab4aa69b5c1265d6c9c867c079f90a2521e5c1895850f31070118fcab63b83b0ce2666bf6d07dba6741cedef85bc9fe23268826c1db81efcbc2bb5110784b10278f7c0d08c7e74747980a6f4875ff3c69d6764e1a203ad6daadb3829d776c299cebd3025a44bb958dc47aabdc72cfa991d9d6639969bff79698c578b09855b3a6f23146f10c9f330e1b3b6020234e8f6e8f6a923996562a7d2b4af3ad7491151dc81c4dd4d69f03bf69c060fca1d471035a6abd40912c4706541017d3188b92b815831143e9e014235b8a28518b5d3f385eefdcbac7ecae082b6dc09849b8a086cce2cb33383fe2ee50f36c9a567fc27a51b0388a32daf579a1fda64dd5d38c27b774dd80b0fdd579f88b88d88f311d950615ca3ca35bba9fb97f559b5608544b3695586d7fef8262c47a54e2809a45025a557a9e594e708ff7787205c07dc58450ddd534c1d55e5e99308b1a3e4988ee4d274c6df4215f33a795424f405b8be089a1e1f253149633f61b3a57e933b6f42651371f478c6ad40cf5e50d2f174367b290900d05488cd8cf1e173923d3cfc2345d618499bf50d27f9ab9d7a43fdbdcd0195e5de56363550786449973447b45727a8438f58b16e20c5672e4a85b4dbd894859136a04c0dd248cf96808d7553bb3c332fd5cb1aa11d520aafbd931f1cc4044dc2e5d23c3ec1d77bfa632ead5eb10ad64c8c485411fb63c668e180ad85884c114cbb7171f251553b2a2f282daaa956d6a307e6cf9dd39ff2387e6c3b8d81239d3b5fbd3d2ace0dbb866ce1f44bf30e5395a37b488891d0f55397b738195ca8a83e26169eb83f9cddd0be0d5ddc5f3ec8a2bd77c2fef36ee1fda3549033d99b6dc0d94518dfbba239ce2dfe3aea93ca2376602841b984bf3c79e0f2540995b9147079d02f4aca2ebee40d62d3b6aefd8516b8ef5134e94212e8f8534fb5e3f4265286ce106e9ddefe22ed7e0a8b1521e347f98bb3d11088923bc069de1661875d4c9f48b19da5cb833e4b351ed2693ede2c2d3629a58a29d3d91bebb7e486dfab43f9d90c0c54d3641cd49699f8136d27e728587a1ee361024333748089e075d823a67c845abdf173807638a0d33c34101a5f8fe1e73362c27cb2d853af02ea7b05411929054686250afe526fb17c7eff39aa1aadcfd19a174021f6fa611a1fc19719919a3d87c89aaacb93dedd2450215b6bc57e38d81a01ab2df6dfd9539d06d3b28acf5277bbfc7af0b52df0a5264f380684ef1477b0fbff3ea332fe43e950fb65684e6df13a0d6483854279aeed530a1560d92eb2415f1aebe9bb28c48c50c1241ec54ac7f203c6dd80d2348858bb0594acb15ad7e1f3e238a62c13153341187932eee342d43e00defbd9107b74f941c555f5f25d041c562fcf7b9a0b624fae70a5f3b6977b9d760658d7eb3a5ce7f4dfeed633f60060ee50d24456f9a953063d5e9dca8747aaa9878b28d7a188c9677c67eaa520152fce163b047977c1d546ca9b8dc43002f952fa283c0eeb361a40d06bba46675125d29e0d6f23b5ba41e50be6496f975d947a7ecf45ab6be05c4def7db385a14e218c2b79196719359cdcccedb7df8e034420c34ba179202a401eba721892f269f47ad73c42bf2432619ee543afad22234768d132ff25fca78ef476bde0e04ef68d952bbbaeaf12472b7910a42918cb80121d1849c60a579d2f0e48f70dc8b9b9ffb72b7dc4abcff629844aad7c7cfd11b021e06380cfed48a9b140bafc63a28f5e1f0322f56ec98ff57311e490b0211be829b903862a978089088dd1eadd08ba6495c9560ecbdf60af7eb2f04d6402e4235e5c6b5d6988ece14c81f13fbe5329837b0355919a6efec568a02df58060a3437af3351d6db845ee027ce43117ee03dc153eb21cc2de968a0429ec600"/4117], 0x1015, 0x2)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001004019d26000031e93f370000000000", @ANYRES32=0x0, @ANYBLOB="010800000000000014001280090001007665746800000000040002800800200007000000"], 0x3c}}, 0x40c4)
ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000280))
r5 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$inet6_buf(r5, 0x29, 0xca, &(0x7f0000000040), 0x0)
setsockopt$inet6_buf(r5, 0x29, 0xca, &(0x7f0000000080)="010000010200000000000000", 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

10.256648091s ago: executing program 5 (id=729):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x40, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)

9.903117716s ago: executing program 5 (id=730):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10)
r0 = creat(0x0, 0x30)
connect$unix(r0, 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, 0x0, 0x0)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES8, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="039bfed84b7d020ed15b8cde0dba1fed41f2b26f36781e2618ec987c0d2d6c6294ad4c7a01c40d35465793e504ea672fd8d921e93ab445efcd1700e3810722949be20f2e1421c58ae4"], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a)
write(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r5, &(0x7f00000091c0)=""/16384, 0x4000)

9.002098755s ago: executing program 2 (id=731):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10452, &(0x7f0000000940)={[{@rodir}, {@numtail}, {@fat=@nfs_stale_rw}, {@utf8}, {@uni_xlate}, {@shortname_lower}, {@numtail}, {@rodir}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortname_win95}, {@utf8}, {@utf8no}, {@shortname_mixed}, {@utf8no}]}, 0x3, 0x295, &(0x7f0000000380)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0)
socket$packet(0x11, 0x2, 0x300)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001580)={{{@in, @in=@initdev}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8)
fstat(r3, 0x0)
getresgid(&(0x7f0000000a00), 0x0, &(0x7f0000000a80))
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain)
bind$can_raw(r0, &(0x7f00000001c0), 0x10)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000240)={&(0x7f0000000040), 0x10, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000a80100000600000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x1)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)

8.329307881s ago: executing program 5 (id=732):
r0 = openat(0xffffffffffffff9c, 0x0, 0x1a50c0, 0x32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
io_setup(0x10000, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f00000000c0)={0x0, 0xbc, 0x10, 0x1, 0x30d, 0x0, r0}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf3c0, 0x2, 0xfffffffe, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe81, 0x800, 0x1, 0x31}}], 0x1, 0x0, 0x0)

5.771427842s ago: executing program 2 (id=733):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10)
r0 = creat(0x0, 0x30)
connect$unix(r0, 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40008)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a)
write(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r5, &(0x7f00000091c0)=""/16384, 0x4000)

5.599669099s ago: executing program 5 (id=734):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000035d, 0x20000084)
recvmmsg(r1, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket(0x2, 0x3, 0xff)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10)

4.720727926s ago: executing program 2 (id=735):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0x9, &(0x7f0000000180))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
process_vm_readv(r0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/246, 0xf6}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000c40)=[{&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f00000007c0)=""/125, 0x7d}, {&(0x7f0000000840)=""/143, 0x8f}, {&(0x7f0000000980)=""/152, 0x98}, {&(0x7f0000000a40)=""/196, 0xc4}, {&(0x7f0000000b40)=""/33, 0x21}], 0x6, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000280)=0xa0, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @empty, 0x905e3b80}, 0x1c)
recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb2a}], 0x1, 0x40022063, 0x0)
getrusage(0xffffffffffffffff, &(0x7f0000000cc0))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x31)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c2100001000010400", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380003001000010008bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000300000008001b0000000000080028004c6f00000800290041010000"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)

3.194098515s ago: executing program 5 (id=736):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
close(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000380), 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r1, 0x0, 0x0)
close(r1)
symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r2, &(0x7f0000000500)='dummy_udc.0\n', 0xc)

3.129786002s ago: executing program 4 (id=737):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, {0xffffffffffffffff}, 0x9e6b, 0x0, 0x1, 0x1, 0x0, 0x2}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x22, 0xfffffffe}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)

3.05113182s ago: executing program 1 (id=738):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x40, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)

1.783240974s ago: executing program 2 (id=739):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
add_key$user(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffb)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f00000030c0)={0x2, 0x0, 0x8, 0x1a, 0x1f8, &(0x7f0000002cc0)="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"})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff)

1.129818998s ago: executing program 4 (id=740):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10)
r0 = creat(0x0, 0x30)
connect$unix(r0, 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, 0x0, 0x0)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES8, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="039bfed84b7d020ed15b8cde0dba1fed41f2b26f36781e2618ec987c0d2d6c6294ad4c7a01c40d35465793e504ea672fd8d921e93ab445efcd1700e3810722949be20f2e1421c58ae4"], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a)
write(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r5, &(0x7f00000091c0)=""/16384, 0x4000)

1.054746545s ago: executing program 5 (id=741):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1a00040, &(0x7f0000000480)={[{@fat=@flush}, {@shortname_win95}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@numtail}, {@shortname_winnt}, {@numtail}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}, {@utf8no}, {@fat=@check_strict}, {@fat=@flush}]}, 0x3, 0x34f, &(0x7f0000000100)="$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")
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20048800)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1a00fe00000000bfa10000000000000701000000feffffb702000005000000b713000000dc000085000000c700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41, 0x68)
mkdirat(r1, 0x0, 0x105)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioprio_get$pid(0x2, r0)
openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4c0, &(0x7f00000006c0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
preadv2(r4, &(0x7f0000000680)=[{&(0x7f0000000d00)=""/4102, 0x1006}], 0x1, 0xf, 0x3, 0x1e)

288.819581ms ago: executing program 1 (id=742):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef)
splice(r4, 0x0, r3, 0x0, 0x4010d00, 0x0)

0s ago: executing program 2 (id=743):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10)
r0 = creat(0x0, 0x30)
connect$unix(r0, 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a)
write(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r5, &(0x7f00000091c0)=""/16384, 0x4000)

kernel console output (not intermixed with test programs):

sim3: renamed from eth3
[   87.391481][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.427339][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.445618][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.482121][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.492308][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.547561][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.610382][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   87.638254][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.645638][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.704851][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   87.728485][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.735688][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.782170][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.789431][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.824995][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.854945][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.862214][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.975134][ T5778] 8021q: adding VLAN 0 to HW filter on device team0
[   88.050646][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.057890][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.092659][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.099958][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.156623][ T5790] Bluetooth: hci1: command tx timeout
[   88.177851][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.235529][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   88.238372][ T5790] Bluetooth: hci0: command tx timeout
[   88.248027][ T5783] Bluetooth: hci3: command tx timeout
[   88.253648][ T5783] Bluetooth: hci2: command tx timeout
[   88.334726][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.342000][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.392674][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.399984][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.503463][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.749723][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.762133][ T5777] veth0_vlan: entered promiscuous mode
[   88.792489][ T5777] veth1_vlan: entered promiscuous mode
[   88.834110][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.935390][ T5775] veth0_vlan: entered promiscuous mode
[   88.944110][ T5777] veth0_macvtap: entered promiscuous mode
[   88.985315][ T5775] veth1_vlan: entered promiscuous mode
[   89.001340][ T5777] veth1_macvtap: entered promiscuous mode
[   89.080836][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.102670][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.115150][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.132534][ T5778] veth0_vlan: entered promiscuous mode
[   89.150809][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.160863][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.169977][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.179716][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.215643][ T5778] veth1_vlan: entered promiscuous mode
[   89.231351][ T5775] veth0_macvtap: entered promiscuous mode
[   89.264579][ T5775] veth1_macvtap: entered promiscuous mode
[   89.332600][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.349939][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.363620][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.377570][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.388652][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.400287][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.450025][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.467604][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.486429][ T5778] veth0_macvtap: entered promiscuous mode
[   89.503492][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.514510][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.523809][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.534104][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.557523][ T5776] veth0_vlan: entered promiscuous mode
[   89.566993][ T5778] veth1_macvtap: entered promiscuous mode
[   89.615071][ T5776] veth1_vlan: entered promiscuous mode
[   89.633955][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.651863][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.678108][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.699882][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.711181][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.724107][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.737992][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.755137][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.768744][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.781482][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.792076][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.803658][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.844943][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.867235][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.883624][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.893087][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.948436][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.982941][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.027595][ T5776] veth0_macvtap: entered promiscuous mode
[   90.063110][ T5776] veth1_macvtap: entered promiscuous mode
[   90.080956][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.106631][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.135728][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.149299][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.167640][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.185082][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.200039][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.211154][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.227921][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.236636][ T5088] Bluetooth: hci1: command tx timeout
[   90.263048][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.275214][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.277013][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.310223][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.320507][ T5088] Bluetooth: hci2: command tx timeout
[   90.320564][ T5088] Bluetooth: hci0: command tx timeout
[   90.320589][ T5088] Bluetooth: hci3: command tx timeout
[   90.345407][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.356172][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.367636][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.378922][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.414147][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.455900][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.464703][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.504088][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.518872][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.565984][ T5847] syz.0.1[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   90.594623][ T5847] loop0: detected capacity change from 0 to 512
[   90.630810][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.649952][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.683749][ T5847] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   90.724754][ T5847] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   90.774053][ T5847] EXT4-fs (loop0): 1 truncate cleaned up
[   90.782086][ T5847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.998000][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.037824][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.278219][ T5854] loop2: detected capacity change from 0 to 512
[   91.316506][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.392954][ T5854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   91.398139][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.460753][ T5854] System zones: 1-12
[   91.471788][ T5854] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.3: missing EA_INODE flag
[   91.489134][ T5854] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3: error while reading EA inode 12 err=-117
[   91.524063][ T5854] EXT4-fs (loop2): 1 orphan inode deleted
[   91.581723][ T5854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.064299][ T5854] sched: RT throttling activated
[   93.077564][ T5783] Bluetooth: hci1: command tx timeout
[   93.083044][ T5783] Bluetooth: hci3: command tx timeout
[   93.086808][ T5088] Bluetooth: hci0: command tx timeout
[   93.090171][ T5783] Bluetooth: hci2: command tx timeout
[   93.828962][   T27] cfg80211: failed to load regulatory.db
[   94.491637][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.853389][ T5873] loop3: detected capacity change from 0 to 256
[   94.883606][ T5873] =======================================================
[   94.883606][ T5873] WARNING: The mand mount option has been deprecated and
[   94.883606][ T5873]          and is ignored by this kernel. Remove the mand
[   94.883606][ T5873]          option from the mount to silence this warning.
[   94.883606][ T5873] =======================================================
[   94.980885][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.424304][ T5874] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   95.595898][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   96.838374][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'.
[   97.088025][ T5874] usb 2-1: Using ep0 maxpacket: 16
[   98.752477][ T5874] usb 2-1: device descriptor read/all, error -71
[   98.862871][ T5897] loop0: detected capacity change from 0 to 512
[   98.926756][ T5897] EXT4-fs (loop0): invalid journal inode
[   98.932574][ T5897] EXT4-fs (loop0): can't get journal size
[   99.016376][ T5897] EXT4-fs (loop0): 1 truncate cleaned up
[   99.065066][ T5897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.941045][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.136058][   T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  101.366170][   T23] usb 2-1: Using ep0 maxpacket: 32
[  101.378034][   T23] usb 2-1: config 0 has no interfaces?
[  101.415523][   T23] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  101.453662][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.499775][   T23] usb 2-1: Product: syz
[  101.504030][   T23] usb 2-1: Manufacturer: syz
[  101.518651][   T23] usb 2-1: SerialNumber: syz
[  101.567760][   T23] usb 2-1: config 0 descriptor??
[  101.881193][ T5925] loop3: detected capacity change from 0 to 16
[  101.896989][ T5925] erofs: (device loop3): mounted with root inode @ nid 36.
[  102.225103][   T23] usb 2-1: USB disconnect, device number 4
[  102.356515][ T5920] loop0: detected capacity change from 0 to 40427
[  102.386231][ T5920] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  102.415727][ T5920] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  102.427411][ T5920] F2FS-fs (loop0): heap/no_heap options were deprecated
[  102.452691][ T5920] F2FS-fs (loop0): invalid crc value
[  102.686590][ T5929] Illegal XDP return value 4294967294 on prog  (id 3) dev syz_tun, expect packet loss!
[  102.804195][ T5920] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[  102.829721][ T5920] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  102.943562][ T5935] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  103.124173][ T5874] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  103.214927][ T5766] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  103.326000][ T5874] usb 4-1: Using ep0 maxpacket: 16
[  103.466951][ T5766] usb 3-1: Using ep0 maxpacket: 16
[  105.064320][ T5874] usb 4-1: config 0 has no interfaces?
[  105.075722][ T5874] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  106.056467][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.077351][ T5874] usb 4-1: Product: syz
[  106.081604][ T5874] usb 4-1: Manufacturer: syz
[  106.082627][ T5766] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.136052][ T5874] usb 4-1: SerialNumber: syz
[  106.144173][ T5874] usb 4-1: config 0 descriptor??
[  106.295669][ T5766] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  106.370860][ T5874] usb 4-1: can't set config #0, error -71
[  106.376619][ T5766] usb 3-1: string descriptor 0 read error: -71
[  106.376727][ T5766] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  106.376753][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  106.429125][ T5766] usb 3-1: can't set config #1, error -71
[  106.456614][ T5766] usb 3-1: USB disconnect, device number 2
[  106.498773][ T5942] loop1: detected capacity change from 0 to 512
[  106.532059][ T5947] random: crng reseeded on system resumption
[  106.557130][ T5874] usb 4-1: USB disconnect, device number 2
[  106.819158][ T5942] EXT4-fs (loop1): Test dummy encryption mode enabled
[  106.831779][ T5942] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  106.871881][ T5942] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.29: bad orphan inode 131083
[  106.901566][ T5942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.675632][ T5941] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.158791][ T5839] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  114.140429][ T6004] loop3: detected capacity change from 0 to 2048
[  114.518132][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'.
[  114.527223][ T6003] netlink: 60 bytes leftover after parsing attributes in process `syz.2.42'.
[  114.584399][ T6003] ip6tnl1: entered promiscuous mode
[  114.589849][ T6003] ip6tnl1: entered allmulticast mode
[  115.070672][ T5839] usb 1-1: Using ep0 maxpacket: 16
[  115.083235][ T5839] usb 1-1: device descriptor read/all, error -71
[  116.420887][ T6004] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3.
[  116.643121][ T6008] loop0: detected capacity change from 0 to 256
[  116.759087][ T6008] FAT-fs (loop0): Directory bread(block 64) failed
[  116.770901][ T6008] FAT-fs (loop0): Directory bread(block 65) failed
[  116.797077][ T6008] FAT-fs (loop0): Directory bread(block 66) failed
[  116.820514][ T6008] FAT-fs (loop0): Directory bread(block 67) failed
[  116.837634][ T6008] FAT-fs (loop0): Directory bread(block 68) failed
[  116.844386][ T6008] FAT-fs (loop0): Directory bread(block 69) failed
[  116.851218][ T6008] FAT-fs (loop0): Directory bread(block 70) failed
[  116.857946][ T6008] FAT-fs (loop0): Directory bread(block 71) failed
[  116.864731][ T6008] FAT-fs (loop0): Directory bread(block 72) failed
[  116.873066][ T6008] FAT-fs (loop0): Directory bread(block 73) failed
[  117.790938][ T6024] loop2: detected capacity change from 0 to 512
[  117.916201][ T6024] EXT4-fs (loop2): invalid journal inode
[  117.922940][ T6024] EXT4-fs (loop2): can't get journal size
[  117.984286][ T6024] EXT4-fs (loop2): 1 truncate cleaned up
[  118.010899][ T6024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.391437][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.795717][ T6041] Zero length message leads to an empty skb
[  119.846019][ T5839] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  120.049361][ T5839] usb 3-1: Using ep0 maxpacket: 16
[  120.068598][ T5839] usb 3-1: config 0 has no interfaces?
[  120.123324][ T5839] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  120.145583][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.166115][ T5839] usb 3-1: Product: syz
[  120.174827][ T5839] usb 3-1: Manufacturer: syz
[  120.180235][ T5839] usb 3-1: SerialNumber: syz
[  120.341995][ T5839] usb 3-1: config 0 descriptor??
[  120.491994][ T6050] loop3: detected capacity change from 0 to 2048
[  123.080067][ T6050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.093936][ T6050] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  123.174883][ T6050] fs-verity: sha512 using implementation "sha512-avx2"
[  123.956243][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.994075][   T23] usb 3-1: USB disconnect, device number 3
[  124.096558][ T6064] loop2: detected capacity change from 0 to 1024
[  124.153487][ T6064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  124.228326][ T6064] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.884301][ T6064] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.59: Freeing blocks not in datazone - block = 0, count = 16
[  125.291417][ T3469] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm kworker/u4:9: bg 0: block 112: padding at end of block bitmap is not set
[  125.424526][ T3469] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  125.498204][ T3469] EXT4-fs (loop2): This should not happen!! Data will be lost
[  125.498204][ T3469] 
[  125.559098][ T3469] EXT4-fs (loop2): Total free blocks count 0
[  125.565185][ T3469] EXT4-fs (loop2): Free/Dirty block details
[  125.931649][ T3469] EXT4-fs (loop2): free_blocks=16
[  126.765367][ T3469] EXT4-fs (loop2): dirty_blocks=16
[  127.315619][ T3469] EXT4-fs (loop2): Block reservation details
[  127.362425][ T3469] EXT4-fs (loop2): i_reserved_data_blocks=1
[  127.731332][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  128.836770][ T6097] loop0: detected capacity change from 0 to 2048
[  129.592419][ T6097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.606438][ T6097] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  130.269968][ T6107] loop3: detected capacity change from 0 to 1024
[  130.318103][ T6107] EXT4-fs: Ignoring removed orlov option
[  130.385616][ T6107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.966041][   T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  131.069981][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.186537][   T27] usb 3-1: Using ep0 maxpacket: 32
[  131.194295][   T27] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  131.218634][   T27] usb 3-1: config 0 has no interface number 0
[  131.229170][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.246341][   T27] usb 3-1: config 0 interface 12 has no altsetting 0
[  131.269713][   T27] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  131.283961][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.298364][ T6117] loop3: detected capacity change from 0 to 512
[  131.305002][   T27] usb 3-1: Product: syz
[  131.311191][   T27] usb 3-1: Manufacturer: syz
[  131.332381][   T27] usb 3-1: SerialNumber: syz
[  131.347274][   T27] usb 3-1: config 0 descriptor??
[  131.368437][ T6117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  131.416214][ T6117] System zones: 1-12
[  131.453183][ T6117] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.69: missing EA_INODE flag
[  131.508496][ T6117] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.69: error while reading EA inode 12 err=-117
[  131.562165][ T6117] EXT4-fs (loop3): 1 orphan inode deleted
[  131.584794][ T6117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.840858][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  133.877604][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  134.038775][   T27] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -32
[  134.076251][   T27] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32
[  134.092480][   T27] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32
[  134.120367][   T27] f81534: probe of 3-1:0.12 failed with error -32
[  134.694264][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.915048][ T6142] loop3: detected capacity change from 0 to 256
[  134.937697][ T6142] exfat: Bad value for 'uid'
[  134.986188][ T5943] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  135.109675][ T5822] usb 3-1: USB disconnect, device number 4
[  136.129173][ T6141] loop0: detected capacity change from 0 to 40427
[  136.201048][ T6141] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  136.223160][ T6141] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  136.245603][ T6141] F2FS-fs (loop0): invalid crc value
[  136.286940][ T6141] F2FS-fs (loop0): Found nat_bits in checkpoint
[  136.406247][  T789] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  136.465779][ T6141] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  136.473140][ T6141] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  136.607714][  T789] usb 4-1: Using ep0 maxpacket: 16
[  136.628498][  T789] usb 4-1: unable to get BOS descriptor or descriptor too short
[  136.652260][  T789] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  136.675528][  T789] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  136.707649][  T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.730197][  T789] usb 4-1: Product: syz
[  136.734464][  T789] usb 4-1: Manufacturer: syz
[  136.756203][  T789] usb 4-1: SerialNumber: syz
[  136.897965][ T6159] loop2: detected capacity change from 0 to 40427
[  136.947839][ T6159] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  136.955676][ T6159] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  137.023728][  T789] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  137.046337][  T789] usb 4-1: MIDIStreaming interface descriptor not found
[  137.055982][ T6159] F2FS-fs (loop2): invalid crc value
[  137.114068][ T6159] F2FS-fs (loop2): Found nat_bits in checkpoint
[  137.327192][  T789] usb 4-1: USB disconnect, device number 3
[  137.362112][ T6159] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  137.398770][ T6159] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  140.536264][ T5779] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  140.911128][ T5779] usb 4-1: Using ep0 maxpacket: 32
[  140.928527][ T5779] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  140.937025][ T5779] usb 4-1: config 0 has no interface number 0
[  140.944795][ T5779] usb 4-1: config 0 interface 12 has no altsetting 0
[  140.964568][ T5779] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  140.974610][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.985443][ T5779] usb 4-1: Product: syz
[  140.990070][ T5779] usb 4-1: Manufacturer: syz
[  141.268077][ T5779] usb 4-1: SerialNumber: syz
[  141.490312][ T5779] usb 4-1: config 0 descriptor??
[  142.548572][ T6244] process 'syz.2.93' launched './file0' with NULL argv: empty string added
[  142.574203][ T6244] Invalid argument reading file caps for ./file0
[  143.577213][ T5779] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  143.657625][ T5779] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  143.665029][ T5779] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  143.673397][ T5779] f81534: probe of 4-1:0.12 failed with error -71
[  143.694286][ T5779] usb 4-1: USB disconnect, device number 4
[  146.232464][ T6268] loop3: detected capacity change from 0 to 40427
[  146.403076][ T5793] Bluetooth: hci4: command 0x1003 tx timeout
[  146.537895][ T5783] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  147.778395][ T6268] F2FS-fs (loop3): invalid crc value
[  147.783975][ T6268] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4)
[  148.499146][ T6301] xt_hashlimit: size too large, truncated to 1048576
[  152.995496][   T28] audit: type=1326 audit(1790999176.837:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.1.112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fd19e159 code=0x7ffc0000
[  153.154237][   T28] audit: type=1326 audit(1790999176.877:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.1.112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fd19e159 code=0x7ffc0000
[  153.300864][   T28] audit: type=1326 audit(1790999176.877:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.1.112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f08fd19e159 code=0x7ffc0000
[  154.095589][   T28] audit: type=1326 audit(1790999176.877:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.1.112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f08fd19e159 code=0x7ffc0000
[  154.766205][ T6350] loop2: detected capacity change from 0 to 512
[  154.991779][ T6350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.271959][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.556732][ T6369] input: syz0 as /devices/virtual/input/input7
[  156.905341][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'.
[  158.536669][ T6376] loop2: detected capacity change from 0 to 16
[  158.571037][ T6376] erofs: (device loop2): mounted with root inode @ nid 36.
[  158.652751][ T5783] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[  158.704964][ T6376] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  158.771638][   T28] audit: type=1800 audit(1790999182.627:6): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.121" name="file2" dev="loop2" ino=89 res=0 errno=0
[  158.820943][ T6376] syz.2.121 (6376) used greatest stack depth: 20472 bytes left
[  160.239456][ T6394] loop2: detected capacity change from 0 to 2048
[  160.491807][ T6394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.504787][ T6394] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  161.437141][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  161.449054][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  161.457399][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  161.467237][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  161.475967][ T5793] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  161.483878][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  162.065327][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.419974][ T1322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.664919][ T1322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.754820][ T6402] chnl_net:caif_netlink_parms(): no params data found
[  162.927897][ T1322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.091756][ T1322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.139443][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.161748][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.174842][ T6402] bridge_slave_0: entered allmulticast mode
[  163.190037][ T6402] bridge_slave_0: entered promiscuous mode
[  163.365484][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.402408][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.420911][ T6402] bridge_slave_1: entered allmulticast mode
[  163.440308][ T6402] bridge_slave_1: entered promiscuous mode
[  163.515976][ T5793] Bluetooth: hci4: command tx timeout
[  163.644556][ T6402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.759192][ T6402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.079914][ T6437] loop2: detected capacity change from 0 to 512
[  164.101464][ T6402] team0: Port device team_slave_0 added
[  164.118252][ T6437] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  164.164412][ T6437] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e01c, mo2=0002]
[  164.192836][ T6437] EXT4-fs (loop2): orphan cleanup on readonly fs
[  164.200196][ T6437] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.137: bad orphan inode 3
[  164.215499][ T6402] team0: Port device team_slave_1 added
[  164.235291][ T6437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  164.324316][ T6442] loop3: detected capacity change from 0 to 512
[  164.363962][ T6437] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.137: dx entry: limit 0 != root limit 125
[  164.421459][ T6437] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.137: Corrupt directory, running e2fsck is recommended
[  164.439957][ T6442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.526078][ T6442] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.528361][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.581616][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.621374][ T6402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.638340][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  164.708539][ T6441] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  164.723202][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.737249][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.810971][ T6402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.961833][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.998967][ T6402] hsr_slave_0: entered promiscuous mode
[  165.024635][ T6402] hsr_slave_1: entered promiscuous mode
[  165.065430][ T6402] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.085556][ T6402] Cannot create hsr debugfs directory
[  165.094775][ T6451] loop3: detected capacity change from 0 to 256
[  165.174853][ T6348] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  165.595928][ T5793] Bluetooth: hci4: command tx timeout
[  165.663858][ T6456] loop3: detected capacity change from 0 to 512
[  165.726354][ T6456] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.142: missing EA_INODE flag
[  165.757143][ T6456] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.142: error while reading EA inode 12 err=-117
[  165.780676][ T6456] EXT4-fs (loop3): 1 orphan inode deleted
[  165.797627][ T6456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.736071][ T5793] Bluetooth: hci4: command tx timeout
[  168.231365][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.757987][ T5793] Bluetooth: hci4: command tx timeout
[  170.333544][ T6402] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  170.423766][ T6402] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  170.625968][ T6402] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  170.716624][ T6402] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  171.302585][ T1322] hsr_slave_0: left promiscuous mode
[  171.316336][ T1322] hsr_slave_1: left promiscuous mode
[  171.376931][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.384520][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.414744][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.444170][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.509423][ T1322] bridge_slave_1: left allmulticast mode
[  171.555365][ T1322] bridge_slave_1: left promiscuous mode
[  171.622816][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.713622][ T1322] bridge_slave_0: left allmulticast mode
[  171.727731][ T1322] bridge_slave_0: left promiscuous mode
[  171.736953][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.039721][ T1322] veth1_macvtap: left promiscuous mode
[  172.052246][ T1322] veth0_macvtap: left promiscuous mode
[  172.074792][ T1322] veth1_vlan: left promiscuous mode
[  172.085151][ T1322] veth0_vlan: left promiscuous mode
[  175.759036][ T6545] loop3: detected capacity change from 0 to 16
[  175.776840][ T6545] erofs: (device loop3): mounted with root inode @ nid 36.
[  175.946237][ T5793] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[  175.962911][ T6545] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  176.021542][   T28] audit: type=1800 audit(1790999199.877:7): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.159" name="file2" dev="loop3" ino=89 res=0 errno=0
[  177.905675][ T1322] team0 (unregistering): Port device team_slave_1 removed
[  177.977525][ T1322] team0 (unregistering): Port device team_slave_0 removed
[  178.061914][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.150732][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.782262][ T1322] bond0 (unregistering): Released all slaves
[  179.469869][ T6566] loop2: detected capacity change from 0 to 256
[  179.536104][ T6560] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  179.885508][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.894610][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.821185][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.866007][ T6581] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  180.923745][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.767076][ T6552] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.777431][ T6552] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.787102][ T6552] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.796437][ T6552] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.040740][ T6552] syz.3.163 (6552) used greatest stack depth: 20232 bytes left
[  182.092648][ T6402] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.197026][ T6402] 8021q: adding VLAN 0 to HW filter on device team0
[  182.230957][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.238547][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.313172][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.320477][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.507730][   T28] audit: type=1800 audit(1790999206.347:8): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.173" name="syzkaller0" dev="sda1" ino=2044 res=0 errno=0
[  183.455194][ T6602] syz.2.173 (6602) used greatest stack depth: 19880 bytes left
[  185.263826][ T6402] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.643434][ T6637] loop2: detected capacity change from 0 to 256
[  186.807434][ T6560] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  187.166401][ T6644] loop2: detected capacity change from 0 to 512
[  187.537044][ T6647] loop3: detected capacity change from 0 to 2048
[  188.076124][ T6647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.088978][ T6647] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  188.551407][ T6402] veth0_vlan: entered promiscuous mode
[  188.690540][ T6402] veth1_vlan: entered promiscuous mode
[  188.905775][ T6402] veth0_macvtap: entered promiscuous mode
[  188.957864][ T6402] veth1_macvtap: entered promiscuous mode
[  189.083607][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.141634][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.192547][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.348320][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.394578][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.477868][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.532496][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.593569][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.638951][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.705967][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.711525][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.723489][ T6402] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.733614][ T6402] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.755931][ T6402] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.764842][ T6402] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.974022][   T28] audit: type=1326 audit(1790999213.827:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b939e159 code=0x7ffc0000
[  190.072299][   T28] audit: type=1326 audit(1790999213.867:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b939e159 code=0x7ffc0000
[  190.136915][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.144836][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.174934][   T28] audit: type=1326 audit(1790999213.867:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b939e159 code=0x7ffc0000
[  190.227483][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.254324][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.288795][   T28] audit: type=1326 audit(1790999213.867:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b939e159 code=0x7ffc0000
[  190.583498][   T28] audit: type=1326 audit(1790999213.877:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f53b939e159 code=0x7ffc0000
[  191.336013][   T28] audit: type=1326 audit(1790999213.877:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b939e159 code=0x7ffc0000
[  191.412120][ T6672] loop3: detected capacity change from 0 to 1024
[  191.487643][ T6672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.521034][   T28] audit: type=1326 audit(1790999213.877:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b939e159 code=0x7ffc0000
[  191.987903][   T28] audit: type=1326 audit(1790999213.877:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f53b939e159 code=0x7ffc0000
[  193.236079][   T28] audit: type=1326 audit(1790999213.877:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f53b939e159 code=0x7ffc0000
[  193.551117][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.614255][ T6693] loop3: detected capacity change from 0 to 1024
[  194.663029][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  194.669586][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  194.809200][ T6693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  194.885533][ T6693] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.245121][ T6691] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.185: lblock 0 mapped to illegal pblock 0 (length 1)
[  195.818647][ T6705] loop2: detected capacity change from 0 to 256
[  195.998881][ T6703] netlink: 72 bytes leftover after parsing attributes in process `syz.1.187'.
[  196.238971][ T6691] EXT4-fs (loop3): Remounting filesystem read-only
[  196.558169][ T6569] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  196.658760][ T6710] loop4: detected capacity change from 0 to 512
[  196.712632][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  196.732819][ T6710] EXT4-fs (loop4): invalid journal inode
[  196.758135][ T6710] EXT4-fs (loop4): can't get journal size
[  196.778232][ T6710] EXT4-fs (loop4): 1 truncate cleaned up
[  196.801059][ T6569] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d99, bcdDevice=fb.a5
[  196.812030][ T6569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.829366][ T6569] usb 3-1: Product: syz
[  196.833623][ T6569] usb 3-1: Manufacturer: syz
[  196.838338][ T6569] usb 3-1: SerialNumber: syz
[  196.866576][ T6710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.455768][ T6569] usb 3-1: USB disconnect, device number 6
[  200.864231][ T6402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.056274][ T6569] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  201.260838][ T6569] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.276159][ T6581] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  201.284601][ T6569] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  201.315646][ T6569] usb 3-1: config 0 interface 0 has no altsetting 0
[  201.334655][ T6569] usb 3-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00
[  201.357015][ T6569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.381623][ T6569] usb 3-1: config 0 descriptor??
[  201.479697][ T6581] usb 5-1: Using ep0 maxpacket: 16
[  201.492105][ T6581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  201.499429][ T6748] loop3: detected capacity change from 0 to 16
[  201.518007][ T6581] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  201.545362][ T6581] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.563264][ T6581] usb 5-1: Product: syz
[  201.583235][ T6581] usb 5-1: Manufacturer: syz
[  201.584670][ T6748] erofs: (device loop3): mounted with root inode @ nid 36.
[  201.599653][ T6581] usb 5-1: SerialNumber: syz
[  201.615643][ T6581] usb 5-1: config 0 descriptor??
[  201.652498][ T6581] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  201.682469][ T6581] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  201.930078][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.946334][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.068883][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'.
[  202.775627][ T6569] wacom 0003:056A:0044.0001: Unknown device_type for 'HID 056a:0044'. Assuming pen.
[  202.816523][ T6581] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  202.831968][ T6569] wacom 0003:056A:0044.0001: hidraw0: USB HID v0.02 Device [HID 056a:0044] on usb-dummy_hcd.2-1/input0
[  202.991196][ T6569] input: Wacom Intuos2 12x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0044.0001/input/input8
[  203.166590][ T6569] usb 3-1: USB disconnect, device number 7
[  203.292573][ T6581] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  203.323009][ T6581] em28xx 5-1:0.0: board has no eeprom
[  203.614033][ T6767] 9pnet_fd: Insufficient options for proto=fd
[  204.584738][ T6581] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  204.606187][ T6581] em28xx 5-1:0.0: dvb set to bulk mode.
[  204.612231][  T173] em28xx 5-1:0.0: Binding DVB extension
[  205.534411][ T6738] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5)
[  206.998737][ T5780] Bluetooth: hci0: command 0x0406 tx timeout
[  207.004877][ T5780] Bluetooth: hci1: command 0x0406 tx timeout
[  207.011049][ T5783] Bluetooth: hci2: command 0x0406 tx timeout
[  207.092987][ T6792] loop2: detected capacity change from 0 to 512
[  207.183808][ T6792] EXT4-fs: Ignoring removed bh option
[  207.232287][ T5820] usb 5-1: USB disconnect, device number 2
[  207.262987][ T5820] em28xx 5-1:0.0: Disconnecting em28xx
[  207.417145][ T6792] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  207.496583][ T6792] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  207.561018][ T6792] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.203: Corrupt directory, running e2fsck is recommended
[  207.663666][ T6792] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  207.727465][ T6792] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.203: corrupted in-inode xattr: e_name out of bounds
[  207.812244][ T6792] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.203: couldn't read orphan inode 15 (err -117)
[  207.891803][ T6792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.040972][  T173] em28xx 5-1:0.0: Registering input extension
[  208.050913][ T5820] em28xx 5-1:0.0: Closing input extension
[  208.229116][ T5820] em28xx 5-1:0.0: Freeing device
[  208.377886][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.079921][ T6822] loop2: detected capacity change from 0 to 256
[  209.236179][  T173] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  209.441465][  T173] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.463093][  T173] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  209.508878][  T173] usb 4-1: config 0 interface 0 has no altsetting 0
[  209.515721][  T173] usb 4-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00
[  209.565943][  T173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.604156][  T173] usb 4-1: config 0 descriptor??
[  209.689456][ T6833] loop2: detected capacity change from 0 to 256
[  209.836823][ T6833] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d)
[  210.037516][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.070271][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.122386][  T173] wacom 0003:056A:0044.0002: Unknown device_type for 'HID 056a:0044'. Assuming pen.
[  210.214795][  T173] wacom 0003:056A:0044.0002: hidraw0: USB HID v0.02 Device [HID 056a:0044] on usb-dummy_hcd.3-1/input0
[  210.258690][  T173] input: Wacom Intuos2 12x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0044.0002/input/input12
[  210.416486][  T173] usb 4-1: USB disconnect, device number 5
[  210.592509][ T6838] fido_id[6838]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  211.095989][ T6572] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  211.218328][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'.
[  213.475934][ T6572] usb 3-1: Using ep0 maxpacket: 16
[  213.489062][ T6572] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  213.502013][ T6572] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  213.525900][ T6572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.534005][ T6572] usb 3-1: Product: syz
[  213.547135][ T6572] usb 3-1: Manufacturer: syz
[  213.552002][ T6572] usb 3-1: SerialNumber: syz
[  213.578630][ T6572] usb 3-1: config 0 descriptor??
[  213.608934][ T6572] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  213.636231][ T6572] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  214.212216][ T6572] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  214.643906][ T6572] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  214.665550][ T6572] em28xx 3-1:0.0: board has no eeprom
[  215.046092][ T6572] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  215.072196][ T6572] em28xx 3-1:0.0: dvb set to bulk mode.
[  215.097177][  T173] em28xx 3-1:0.0: Binding DVB extension
[  215.344833][ T6892] netlink: 'syz.4.220': attribute type 3 has an invalid length.
[  216.246631][ T6847] em28xx 3-1:0.0: reading from i2c device at 0xe failed (error=-5)
[  216.328730][ T5820] usb 3-1: USB disconnect, device number 8
[  216.337177][ T5820] em28xx 3-1:0.0: Disconnecting em28xx
[  216.457031][  T173] em28xx 3-1:0.0: Registering input extension
[  216.464665][ T5820] em28xx 3-1:0.0: Closing input extension
[  216.531412][ T5820] em28xx 3-1:0.0: Freeing device
[  216.884862][ T6905] loop4: detected capacity change from 0 to 8192
[  217.979329][ T6922] loop3: detected capacity change from 0 to 512
[  218.010178][ T6922] EXT4-fs: Ignoring removed bh option
[  218.071645][ T6922] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  218.084060][ T6922] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  218.095095][ T6922] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.226: Corrupt directory, running e2fsck is recommended
[  218.127186][ T6922] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  218.152190][ T6922] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.226: corrupted in-inode xattr: e_name out of bounds
[  218.182264][ T6922] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.226: couldn't read orphan inode 15 (err -117)
[  218.258011][ T6922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.348197][ T6928] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  218.566117][ T6572] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  218.652960][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.756094][ T6572] usb 3-1: Using ep0 maxpacket: 32
[  218.769989][ T6572] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  218.784516][ T6572] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  218.811706][ T6572] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  218.824373][ T6572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.838540][ T6572] usb 3-1: Product: syz
[  218.842921][ T6572] usb 3-1: Manufacturer: syz
[  218.849687][ T6572] usb 3-1: SerialNumber: syz
[  218.861307][ T6572] usb 3-1: config 0 descriptor??
[  219.069718][ T6939] loop3: detected capacity change from 0 to 2048
[  219.144261][ T6939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.158269][ T6939] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  219.529671][  T173] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  219.658550][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.565926][  T173] usb 5-1: Using ep0 maxpacket: 32
[  220.582503][  T173] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  220.591746][  T173] usb 5-1: config 0 has no interface number 0
[  220.623544][  T173] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  220.656347][  T173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.664439][  T173] usb 5-1: Product: syz
[  220.689397][  T173] usb 5-1: Manufacturer: syz
[  220.697441][  T173] usb 5-1: SerialNumber: syz
[  220.751807][  T173] usb 5-1: config 0 descriptor??
[  220.774690][  T173] smsc95xx v2.0.0
[  221.183973][  T173] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  221.209320][  T173] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  221.221733][  T173] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  221.239557][  T173] smsc95xx: probe of 5-1:0.67 failed with error -71
[  221.259427][  T173] usb 5-1: USB disconnect, device number 3
[  221.268156][ T6581] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  221.458596][ T6581] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.474361][ T6581] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  221.496523][ T6581] usb 4-1: config 0 interface 0 has no altsetting 0
[  221.510282][ T6581] usb 4-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00
[  221.522223][ T6581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.539503][ T6581] usb 4-1: config 0 descriptor??
[  222.680218][ T5820] usb 3-1: USB disconnect, device number 9
[  223.059000][ T5766] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  223.276128][ T5766] usb 5-1: Using ep0 maxpacket: 16
[  223.292945][ T5766] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  223.576780][ T5766] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  223.651452][ T7006] loop2: detected capacity change from 0 to 2048
[  223.692398][ T7006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.705101][ T7006] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  223.750863][ T5766] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.766928][ T5766] usb 5-1: Product: syz
[  223.771572][ T5766] usb 5-1: Manufacturer: syz
[  223.776809][ T5766] usb 5-1: SerialNumber: syz
[  223.790092][ T5766] usb 5-1: config 0 descriptor??
[  223.846263][ T5766] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  223.902266][ T5766] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  224.013571][ T6581] logitech-djreceiver 0003:046D:C71E.0003: collection stack underflow
[  224.025452][ T6581] logitech-djreceiver 0003:046D:C71E.0003: item 0 0 0 12 parsing failed
[  224.036264][ T6581] logitech-djreceiver 0003:046D:C71E.0003: logi_dj_probe: parse failed
[  224.044700][ T6581] logitech-djreceiver: probe of 0003:046D:C71E.0003 failed with error -22
[  224.099081][ T6581] usb 4-1: USB disconnect, device number 6
[  224.217965][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.265118][ T7016] loop3: detected capacity change from 0 to 512
[  224.274381][ T7016] EXT4-fs (loop3): Test dummy encryption mode enabled
[  224.282438][ T7016] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  224.480957][ T7016] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.246: bad orphan inode 131083
[  224.542676][ T7016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.962885][ T5766] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  226.243763][ T7015] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.263902][ T5766] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  226.412084][ T5766] em28xx 5-1:0.0: board has no eeprom
[  226.976389][ T5766] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  226.990708][ T5766] em28xx 5-1:0.0: dvb set to bulk mode.
[  227.012506][ T5820] em28xx 5-1:0.0: Binding DVB extension
[  227.958318][ T7042] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5)
[  228.259318][ T5766] usb 5-1: USB disconnect, device number 4
[  228.316993][ T5766] em28xx 5-1:0.0: Disconnecting em28xx
[  228.370332][ T5820] em28xx 5-1:0.0: Registering input extension
[  228.406653][ T5766] em28xx 5-1:0.0: Closing input extension
[  228.455329][ T5766] em28xx 5-1:0.0: Freeing device
[  229.075232][ T7079] loop4: detected capacity change from 0 to 2048
[  229.125504][ T7079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.138334][ T7079] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  229.609265][ T6402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.070876][ T7104] loop2: detected capacity change from 0 to 256
[  231.191144][ T7104] exfat: Bad value for 'uid'
[  231.446228][   T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  231.686241][   T27] usb 5-1: Using ep0 maxpacket: 16
[  231.736807][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  231.776882][   T27] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  231.800449][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.810338][   T27] usb 5-1: Product: syz
[  231.814727][   T27] usb 5-1: Manufacturer: syz
[  231.824472][   T27] usb 5-1: SerialNumber: syz
[  231.848230][   T27] usb 5-1: config 0 descriptor??
[  231.918306][   T27] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  231.968987][   T27] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  232.007227][ T7112] loop2: detected capacity change from 0 to 2048
[  232.185557][ T7112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  232.460208][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.522602][   T27] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  233.105996][   T27] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  233.114217][   T27] em28xx 5-1:0.0: board has no eeprom
[  234.111028][   T27] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  234.122327][   T27] em28xx 5-1:0.0: dvb set to bulk mode.
[  234.139047][ T5766] em28xx 5-1:0.0: Binding DVB extension
[  234.736735][ T7107] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5)
[  235.036410][   T27] usb 5-1: USB disconnect, device number 5
[  235.104588][   T27] em28xx 5-1:0.0: Disconnecting em28xx
[  235.274498][ T5766] em28xx 5-1:0.0: Registering input extension
[  235.315468][   T27] em28xx 5-1:0.0: Closing input extension
[  235.429912][   T27] em28xx 5-1:0.0: Freeing device
[  235.956073][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'.
[  236.005938][ T7171] netlink: 60 bytes leftover after parsing attributes in process `syz.4.275'.
[  236.023108][ T7171] ip6tnl1: entered promiscuous mode
[  236.032956][ T7171] ip6tnl1: entered allmulticast mode
[  237.005983][ T5766] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  237.461929][ T5766] usb 5-1: Using ep0 maxpacket: 32
[  237.488301][ T5766] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  237.505861][ T5766] usb 5-1: config 0 has no interface number 0
[  237.519459][ T5766] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  237.539113][ T5766] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.555899][ T5766] usb 5-1: Product: syz
[  237.570451][ T5766] usb 5-1: Manufacturer: syz
[  237.585938][ T5766] usb 5-1: SerialNumber: syz
[  237.607978][ T5766] usb 5-1: config 0 descriptor??
[  237.651450][ T5766] smsc95xx v2.0.0
[  238.082916][ T5766] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  238.112355][ T5766] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  238.133899][ T5766] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  238.155491][ T5766] smsc95xx: probe of 5-1:0.67 failed with error -71
[  238.174185][ T5766] usb 5-1: USB disconnect, device number 6
[  239.506008][  T173] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  239.685758][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'.
[  239.705894][  T173] usb 5-1: Using ep0 maxpacket: 16
[  239.715545][ T7225] netlink: 60 bytes leftover after parsing attributes in process `syz.1.285'.
[  239.716366][  T173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  239.749142][  T173] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  239.758637][  T173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.767996][  T173] usb 5-1: Product: syz
[  239.778244][  T173] usb 5-1: Manufacturer: syz
[  239.787495][  T173] usb 5-1: SerialNumber: syz
[  239.792927][ T7225] ip6tnl1: entered promiscuous mode
[  239.807980][  T173] usb 5-1: config 0 descriptor??
[  239.815972][ T7225] ip6tnl1: entered allmulticast mode
[  239.837796][  T173] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  239.868693][  T173] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  240.445083][  T173] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  240.872387][  T173] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  240.880901][  T173] em28xx 5-1:0.0: board has no eeprom
[  241.246281][  T173] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  241.260601][  T173] em28xx 5-1:0.0: dvb set to bulk mode.
[  241.266955][ T5821] em28xx 5-1:0.0: Binding DVB extension
[  241.574213][  T173] usb 5-1: USB disconnect, device number 7
[  241.597503][  T173] em28xx 5-1:0.0: Disconnecting em28xx
[  241.668665][ T5821] em28xx 5-1:0.0: Registering input extension
[  241.686719][  T173] em28xx 5-1:0.0: Closing input extension
[  241.719594][  T173] em28xx 5-1:0.0: Freeing device
[  242.216014][ T6581] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  242.408820][ T6581] usb 3-1: unable to get BOS descriptor or descriptor too short
[  242.424656][ T6581] usb 3-1: not running at top speed; connect to a high speed hub
[  242.444345][ T6581] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  242.465040][ T6581] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 240, changing to 4
[  242.485870][ T6581] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  242.500025][ T6581] usb 3-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40
[  242.515884][ T6581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.534198][ T6581] usb 3-1: Product: syz
[  242.555908][ T6581] usb 3-1: Manufacturer: syz
[  242.561218][ T6581] usb 3-1: SerialNumber: syz
[  242.706316][ T7259] FAULT_INJECTION: forcing a failure.
[  242.706316][ T7259] name failslab, interval 1, probability 0, space 0, times 1
[  242.726088][ T7259] CPU: 0 PID: 7259 Comm: syz.4.298 Not tainted syzkaller #0
[  242.733572][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  242.743808][ T7259] Call Trace:
[  242.747227][ T7259]  <TASK>
[  242.750287][ T7259]  dump_stack_lvl+0x18c/0x250
[  242.755221][ T7259]  ? show_regs_print_info+0x20/0x20
[  242.760546][ T7259]  ? load_image+0x420/0x420
[  242.765149][ T7259]  ? __lock_acquire+0x7d80/0x7d80
[  242.770288][ T7259]  should_fail_ex+0x394/0x4c0
[  242.775163][ T7259]  should_failslab+0x9/0x20
[  242.779757][ T7259]  slab_pre_alloc_hook+0x59/0x300
[  242.784890][ T7259]  ? ip6_setup_cork+0x62b/0xff0
[  242.790029][ T7259]  ? ip6_setup_cork+0x62b/0xff0
[  242.795108][ T7259]  __kmem_cache_alloc_node+0x53/0x250
[  242.800572][ T7259]  ? ip6_setup_cork+0x62b/0xff0
[  242.805577][ T7259]  __kmalloc_node_track_caller+0xa4/0x230
[  242.811468][ T7259]  kmemdup+0x2b/0x70
[  242.815572][ T7259]  ip6_setup_cork+0x62b/0xff0
[  242.820707][ T7259]  ip6_append_data+0x21a/0x350
[  242.825722][ T7259]  ? rawv6_send_hdrinc+0x1660/0x1660
[  242.831180][ T7259]  rawv6_sendmsg+0x1229/0x1740
[  242.836055][ T7259]  ? compat_rawv6_ioctl+0x70/0x70
[  242.841153][ T7259]  ? __lock_acquire+0x7d80/0x7d80
[  242.846264][ T7259]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  242.852787][ T7259]  ? aa_sock_msg_perm+0x94/0x150
[  242.857798][ T7259]  ? inet_sendmsg+0x7e/0x2a0
[  242.862681][ T7259]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  242.868248][ T7259]  sock_write_iter+0x2dc/0x420
[  242.873249][ T7259]  ? sock_read_iter+0x3f0/0x3f0
[  242.878182][ T7259]  ? common_file_perm+0x198/0x1f0
[  242.883381][ T7259]  vfs_write+0x474/0x9a0
[  242.887873][ T7259]  ? file_end_write+0x250/0x250
[  242.892880][ T7259]  ? __fget_files+0x3fc/0x460
[  242.897662][ T7259]  ? __fdget_pos+0x1d8/0x330
[  242.902315][ T7259]  ? ksys_write+0x74/0x260
[  242.906800][ T7259]  ksys_write+0x151/0x260
[  242.911287][ T7259]  ? __ia32_sys_read+0x90/0x90
[  242.916149][ T7259]  ? lockdep_hardirqs_on+0x98/0x150
[  242.921582][ T7259]  do_syscall_64+0x55/0xb0
[  242.926294][ T7259]  ? clear_bhb_loop+0x40/0x90
[  242.931167][ T7259]  ? clear_bhb_loop+0x40/0x90
[  242.935922][ T7259]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  242.942066][ T7259] RIP: 0033:0x7efc6999e159
[  242.946619][ T7259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.966441][ T7259] RSP: 002b:00007efc6a906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  242.974993][ T7259] RAX: ffffffffffffffda RBX: 00007efc69c25fa0 RCX: 00007efc6999e159
[  242.986697][ T7259] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003
[  242.994915][ T7259] RBP: 00007efc69a3506b R08: 0000000000000000 R09: 0000000000000000
[  243.003413][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.011454][ T7259] R13: 00007efc69c26038 R14: 00007efc69c25fa0 R15: 00007fffe1624a18
[  243.019762][ T7259]  </TASK>
[  243.051458][ T6581] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  243.088584][ T6581] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  243.105748][ T6581] usb 3-1: 2:1 : invalid channels 0
[  243.154450][ T6581] usb 3-1: USB disconnect, device number 10
[  244.147014][ T6841] udevd[6841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  244.223895][ T7271] loop2: detected capacity change from 0 to 512
[  244.257724][ T7271] EXT4-fs: Ignoring removed orlov option
[  244.318496][ T7271] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  244.384200][ T7271] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #11: comm syz.2.302: corrupted inode contents
[  244.400986][ T7271] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #11: comm syz.2.302: mark_inode_dirty error
[  244.426272][ T7271] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.302: invalid indirect mapped block 1 (level 1)
[  244.456106][ T7271] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #11: comm syz.2.302: corrupted inode contents
[  244.491984][ T7271] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  244.535713][ T7271] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #11: comm syz.2.302: corrupted inode contents
[  244.556367][ T7271] EXT4-fs error (device loop2): ext4_truncate:4314: inode #11: comm syz.2.302: mark_inode_dirty error
[  244.585682][ T7271] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  244.602597][ T7271] EXT4-fs (loop2): 1 truncate cleaned up
[  244.617476][ T7271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.733852][ T7271] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz.2.302: iget: bogus i_mode (3355)
[  244.844082][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.147994][ T7276] loop4: detected capacity change from 0 to 40427
[  247.167974][ T7276] F2FS-fs (loop4): LFS is not compatible with checkpoint=disable
[  247.281233][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'.
[  247.290176][ T7297] netlink: 60 bytes leftover after parsing attributes in process `syz.3.308'.
[  247.304641][ T7297] ip6tnl1: entered promiscuous mode
[  247.310085][ T7297] ip6tnl1: entered allmulticast mode
[  250.737484][ T7329] mmap: syz.3.319 (7329): VmData 37597184 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  252.386800][ T7345] loop4: detected capacity change from 0 to 2048
[  252.497620][ T7345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.510437][ T7345] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  253.562470][ T6402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.763297][ T7384] ip_tables: iptables: counters copy to user failed while replacing table
[  256.093541][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  256.099940][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  259.307977][ T7424] loop2: detected capacity change from 0 to 2048
[  259.447450][ T7424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.459728][ T7424] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  259.556886][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.240741][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'.
[  264.664528][ T7471] loop4: detected capacity change from 0 to 4096
[  264.733882][ T7471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.020084][ T6402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.827090][ T7494] loop2: detected capacity change from 0 to 16
[  265.838455][ T7494] erofs: (device loop2): mounted with root inode @ nid 36.
[  267.311973][ T7506] loop2: detected capacity change from 0 to 2048
[  268.297279][ T7506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.310046][ T7506] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  271.430398][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.658718][   T28] audit: type=1326 audit(1790999295.517:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.2.382" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f439e159 code=0x7ffc0000
[  271.724825][   T28] audit: type=1326 audit(1790999295.517:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.2.382" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f439e159 code=0x7ffc0000
[  271.778115][   T28] audit: type=1326 audit(1790999295.547:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.2.382" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f79f439e159 code=0x7ffc0000
[  271.786259][ T5821] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  271.858227][   T28] audit: type=1326 audit(1790999295.547:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.2.382" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f439e159 code=0x7ffc0000
[  272.027961][ T5821] usb 5-1: Using ep0 maxpacket: 32
[  272.040862][ T5821] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  272.051485][ T5821] usb 5-1: config 0 has no interface number 0
[  272.061818][ T5821] usb 5-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping
[  272.074336][ T5821] usb 5-1: config 0 interface 12 has no altsetting 0
[  272.119021][ T5821] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  272.136183][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.159533][ T5821] usb 5-1: Product: syz
[  272.163887][ T5821] usb 5-1: Manufacturer: syz
[  272.176080][ T6572] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  272.194199][ T5821] usb 5-1: SerialNumber: syz
[  272.215981][ T5821] usb 5-1: config 0 descriptor??
[  273.739067][ T5821] f81534 5-1:0.12: required endpoints missing
[  274.375984][ T6572] usb 3-1: Using ep0 maxpacket: 32
[  274.388481][ T6572] usb 3-1: config 0 has no interfaces?
[  274.399780][ T6572] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  274.409459][ T6572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.418201][ T6572] usb 3-1: Product: syz
[  274.422625][ T6572] usb 3-1: Manufacturer: syz
[  274.429273][ T6572] usb 3-1: SerialNumber: syz
[  274.438832][ T6572] usb 3-1: config 0 descriptor??
[  275.535459][ T5821] usb 5-1: USB disconnect, device number 8
[  275.802596][ T7587] loop4: detected capacity change from 0 to 1024
[  275.918286][ T7587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  275.931094][ T7587] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.965042][ T7585] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.398: lblock 0 mapped to illegal pblock 0 (length 1)
[  275.983721][ T7585] EXT4-fs (loop4): Remounting filesystem read-only
[  276.042444][ T6402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  278.357708][ T5766] usb 3-1: USB disconnect, device number 11
[  279.049324][ T7603] loop2: detected capacity change from 0 to 256
[  280.996168][ T5766] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  281.235996][ T5766] usb 3-1: Using ep0 maxpacket: 32
[  281.252493][ T5766] usb 3-1: config 0 has no interfaces?
[  281.277416][ T5766] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  281.299763][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.320181][ T5766] usb 3-1: Product: syz
[  281.324448][ T5766] usb 3-1: Manufacturer: syz
[  281.344187][ T5766] usb 3-1: SerialNumber: syz
[  281.365078][ T5766] usb 3-1: config 0 descriptor??
[  283.386242][ T6572] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  283.775501][ T5793] Bluetooth: hci4: command 0x0406 tx timeout
[  284.521148][ T6581] usb 3-1: USB disconnect, device number 12
[  284.530238][ T6572] usb 5-1: Using ep0 maxpacket: 32
[  284.566378][ T6572] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  284.574562][ T6572] usb 5-1: config 0 has no interface number 0
[  284.848308][ T6572] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  284.877010][ T6572] usb 5-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  284.920567][ T6572] usb 5-1: config 0 interface 12 has no altsetting 0
[  284.963604][ T6572] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  285.000238][ T6572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.034280][ T6572] usb 5-1: Product: syz
[  285.063881][ T6572] usb 5-1: Manufacturer: syz
[  285.098163][ T6572] usb 5-1: SerialNumber: syz
[  285.135654][ T6572] usb 5-1: config 0 descriptor??
[  285.173354][ T6572] f81534 5-1:0.12: unsupported endpoint max packet size
[  286.099000][ T7663] loop2: detected capacity change from 0 to 40427
[  286.142516][ T7663] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  286.190740][ T7663] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  286.199229][ T7663] F2FS-fs (loop2): heap/no_heap options were deprecated
[  286.212684][ T7663] F2FS-fs (loop2): invalid crc value
[  287.799575][ T5766] usb 5-1: USB disconnect, device number 9
[  287.900581][ T7663] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[  287.948984][ T7663] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  289.402028][ T7710] loop4: detected capacity change from 0 to 256
[  291.739045][   T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  292.345851][ T7713] capability: warning: `syz.1.437' uses deprecated v2 capabilities in a way that may be insecure
[  293.556950][   T23] usb 3-1: device not accepting address 13, error -71
[  293.990496][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'.
[  293.999610][ T7730] netlink: 60 bytes leftover after parsing attributes in process `syz.1.442'.
[  294.934856][ T7734] loop2: detected capacity change from 0 to 512
[  294.980954][ T7734] EXT4-fs (loop2): Test dummy encryption mode enabled
[  294.996804][ T7734] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  295.036822][ T7734] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.444: bad orphan inode 131083
[  295.055331][ T7734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.060694][ T5766] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  296.159514][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.209987][ T7751] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  296.337545][ T5766] usb 5-1: Using ep0 maxpacket: 32
[  296.347741][ T5766] usb 5-1: config 0 has no interfaces?
[  296.356572][ T5766] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  296.367710][ T5766] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.376066][ T5766] usb 5-1: Product: syz
[  296.380447][ T5766] usb 5-1: Manufacturer: syz
[  296.385192][ T5766] usb 5-1: SerialNumber: syz
[  296.394109][ T5766] usb 5-1: config 0 descriptor??
[  299.239652][ T5766] usb 5-1: USB disconnect, device number 10
[  299.353302][ T7773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.456'.
[  299.612487][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'.
[  299.621699][ T7776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.455'.
[  299.694544][ T7773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.456'.
[  301.496070][ T6572] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  301.575806][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  303.262884][ T7809] loop2: detected capacity change from 0 to 512
[  303.341194][ T7809] EXT4-fs (loop2): 1 truncate cleaned up
[  303.392507][ T7809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  303.533990][   T28] audit: type=1800 audit(1790999327.387:22): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.467" name="file1" dev="loop2" ino=13 res=0 errno=0
[  303.565007][ T7809] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.467: bg 0: block 465: padding at end of block bitmap is not set
[  303.613173][ T7809] EXT4-fs error (device loop2) in ext4_setattr:5695: error 28
[  303.646242][ T7812] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.467: invalid indirect mapped block 234881024 (level 0)
[  303.821560][ T6572] usb 5-1: Using ep0 maxpacket: 16
[  303.841541][ T6572] usb 5-1: device descriptor read/all, error -71
[  303.879800][ T7812] overlayfs: missing 'workdir'
[  304.001915][ T7819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.470'.
[  304.014233][ T7819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.470'.
[  304.056433][ T7821] loop4: detected capacity change from 0 to 256
[  304.103172][ T7536] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  304.158834][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.790958][ T7839] loop4: detected capacity change from 0 to 2048
[  306.028049][ T7839]  loop4: p1 < > p4
[  306.028049][ T7839]  p4: <netbsd: >
[  306.060143][ T7839] loop4: p4 size 722688 extends beyond EOD, truncated
[  308.403463][ T7846] loop4: detected capacity change from 0 to 512
[  308.452251][ T7846] EXT4-fs (loop4): Test dummy encryption mode enabled
[  308.495332][ T7846] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  308.559512][ T7846] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.479: bad orphan inode 131083
[  308.647510][ T7846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.914048][ T7851] fuse: Unknown parameter '0xffffffffffffffff'
[  308.970842][ T6402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.000390][ T7851] loop2: detected capacity change from 0 to 512
[  309.032343][ T7851] EXT4-fs: Ignoring removed mblk_io_submit option
[  309.079069][ T7851] EXT4-fs: Ignoring removed bh option
[  309.110519][ T7851] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  309.404288][ T7851] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6
[  309.877309][ T7856] loop4: detected capacity change from 0 to 256
[  313.640561][ T7880] loop4: detected capacity change from 0 to 16
[  313.658201][ T7880] erofs: (device loop4): mounted with root inode @ nid 36.
[  317.763114][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  317.775992][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  318.278982][ T7908] capability: warning: `syz.3.496' uses 32-bit capabilities (legacy support in use)
[  318.501549][ T7910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.497'.
[  318.529413][ T7910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.497'.
[  319.291374][ T7924] loop2: detected capacity change from 0 to 256
[  319.351113][ T7926] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  321.066728][ T7937] loop2: detected capacity change from 0 to 256
[  321.905385][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'.
[  322.426234][ T7954] netlink: 'syz.1.508': attribute type 12 has an invalid length.
[  322.466044][ T7954] netlink: 'syz.1.508': attribute type 29 has an invalid length.
[  322.503512][ T7954] netlink: 148 bytes leftover after parsing attributes in process `syz.1.508'.
[  322.555413][ T7956] netlink: 'syz.4.509': attribute type 1 has an invalid length.
[  323.882062][ T7956] syz.4.509 (7956): drop_caches: 2
[  325.704042][ T7981] loop4: detected capacity change from 0 to 256
[  325.833672][ T7981] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  326.258072][ T7984] loop4: detected capacity change from 0 to 256
[  326.787524][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'.
[  327.850500][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'.
[  328.434547][ T8005] netlink: 'syz.2.523': attribute type 1 has an invalid length.
[  330.603908][ T8007] syz.2.523 (8007): drop_caches: 2
[  331.389083][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'.
[  332.563988][ T8027] loop2: detected capacity change from 0 to 256
[  334.379603][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'.
[  335.646632][ T8042] netlink: 'syz.1.534': attribute type 1 has an invalid length.
[  336.401335][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  336.416073][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  336.425724][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  336.447940][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  336.455919][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  336.463369][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  337.989083][ T8056] chnl_net:caif_netlink_parms(): no params data found
[  338.449142][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.496008][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.526097][ T8056] bridge_slave_0: entered allmulticast mode
[  338.547981][ T8056] bridge_slave_0: entered promiscuous mode
[  338.566001][ T5793] Bluetooth: hci2: command tx timeout
[  338.612684][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.656461][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.703000][ T8056] bridge_slave_1: entered allmulticast mode
[  338.713346][ T8056] bridge_slave_1: entered promiscuous mode
[  338.757897][ T8056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.772471][ T8056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.840944][ T8056] team0: Port device team_slave_0 added
[  338.867337][ T8056] team0: Port device team_slave_1 added
[  338.935436][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.948340][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.982377][ T8056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.002737][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.011196][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.043937][ T8056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.141071][ T8056] hsr_slave_0: entered promiscuous mode
[  339.151029][ T8056] hsr_slave_1: entered promiscuous mode
[  339.157797][ T8056] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  339.165430][ T8056] Cannot create hsr debugfs directory
[  339.527458][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'.
[  340.620006][ T8056] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  340.636099][ T5793] Bluetooth: hci2: command tx timeout
[  340.670208][ T8056] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  340.709149][ T8056] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  340.719382][ T8098] netlink: 'syz.2.544': attribute type 1 has an invalid length.
[  340.735718][ T8056] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  341.792341][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.878759][ T8056] 8021q: adding VLAN 0 to HW filter on device team0
[  341.979024][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.987584][ T8088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.113626][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.120934][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.716291][ T5793] Bluetooth: hci2: command tx timeout
[  344.252143][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.758525][ T8124] loop4: detected capacity change from 0 to 2048
[  345.735848][ T5793] Bluetooth: hci2: command tx timeout
[  345.808951][ T8101] syz.2.544 (8101): drop_caches: 2
[  346.801640][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'.
[  347.393147][ T8139] netlink: 'syz.4.552': attribute type 322 has an invalid length.
[  347.956246][ T8056] veth0_vlan: entered promiscuous mode
[  348.539092][ T8056] veth1_vlan: entered promiscuous mode
[  348.593560][ T8056] veth0_macvtap: entered promiscuous mode
[  348.605707][ T8056] veth1_macvtap: entered promiscuous mode
[  348.668995][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.735859][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.754055][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.765301][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.775930][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.786764][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.836181][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.909045][ T8155] netlink: 'syz.1.558': attribute type 1 has an invalid length.
[  348.942887][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.987613][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.033046][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  349.084814][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.118515][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  349.129687][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.141265][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.152942][ T8056] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.161910][ T8056] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.170942][ T8056] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.179843][ T8056] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.085150][ T8162] loop2: detected capacity change from 0 to 256
[  351.489388][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'.
[  351.779751][ T8029] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  352.007917][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.041997][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.236829][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.261394][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.561848][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.531'.
[  352.599957][ T8181] loop4: detected capacity change from 0 to 512
[  352.637038][ T8181] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  352.739273][ T8181] EXT4-fs (loop4): 1 truncate cleaned up
[  352.783068][ T8181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  352.998612][ T6402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.789803][ T8198] netlink: 'syz.2.568': attribute type 1 has an invalid length.
[  356.624638][ T8204] loop4: detected capacity change from 0 to 2048
[  356.819027][ T8204]  loop4: p1 < > p4
[  356.819027][ T8204]  p4: <netbsd: >
[  356.837972][ T8204] loop4: p4 size 722688 extends beyond EOD, truncated
[  359.674210][ T8198] syz.2.568 (8198): drop_caches: 2
[  359.769789][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'.
[  359.789192][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.571'.
[  360.688627][ T8223] loop2: detected capacity change from 0 to 1024
[  360.706827][ T8223] EXT4-fs: quotafile must be on filesystem root
[  362.100126][ T5821] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  362.110122][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.117979][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.311266][ T5821] usb 6-1: Using ep0 maxpacket: 16
[  362.348041][ T5821] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  362.378844][ T5821] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  362.407725][ T5821] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  362.433944][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  362.454382][ T5821] usb 6-1: SerialNumber: syz
[  362.479717][ T5821] usb 6-1: 0:2 : does not exist
[  362.511597][ T5821] usb 6-1: unit 5 not found!
[  362.853490][ T8218] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  362.964574][ T8218] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  363.694259][ T8218] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.703843][ T8218] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.712905][ T8218] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.721907][ T8218] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.962648][  T173] usb 6-1: USB disconnect, device number 2
[  364.154664][ T8246] loop5: detected capacity change from 0 to 256
[  364.278990][ T8246] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  364.326557][ T8246] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  364.344708][ T8246] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  364.368490][   T28] audit: type=1800 audit(1790999388.227:23): pid=8246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.578" name="file1" dev="loop5" ino=1048618 res=0 errno=0
[  364.646363][ T5820] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  365.519144][ T5820] usb 5-1: Using ep0 maxpacket: 32
[  365.550391][ T5820] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  365.583414][ T5820] usb 5-1: config 0 has no interface number 0
[  365.609251][ T5820] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  365.628857][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.645959][ T5820] usb 5-1: Product: syz
[  365.650214][ T5820] usb 5-1: Manufacturer: syz
[  365.654860][ T5820] usb 5-1: SerialNumber: syz
[  365.680445][ T5820] usb 5-1: config 0 descriptor??
[  365.689007][ T5820] smsc95xx v2.0.0
[  365.992760][ T8260] tipc: Started in network mode
[  365.998586][ T8260] tipc: Node identity 2000004, cluster identity 4711
[  366.005344][ T8260] tipc: Node number set to 33554436
[  366.035931][ T5839] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  366.095056][ T5820] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  366.115872][ T5820] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  366.256007][ T5839] usb 3-1: Using ep0 maxpacket: 16
[  366.266162][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  366.301095][ T5839] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  366.323060][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.349023][ T5839] usb 3-1: Product: syz
[  366.363446][ T5839] usb 3-1: Manufacturer: syz
[  366.378173][ T5839] usb 3-1: SerialNumber: syz
[  366.476103][ T5839] usb 3-1: config 0 descriptor??
[  366.497641][ T5839] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  366.515871][ T5839] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  367.328538][ T5820] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  367.356214][ T5820] smsc95xx: probe of 5-1:0.67 failed with error -71
[  367.389691][ T5820] usb 5-1: USB disconnect, device number 13
[  367.619580][ T5839] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  368.316810][ T8278] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  369.373201][ T5839] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  369.395110][ T5839] em28xx 3-1:0.0: board has no eeprom
[  370.305890][ T5839] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  370.313814][ T5839] em28xx 3-1:0.0: dvb set to bulk mode.
[  370.331489][  T173] em28xx 3-1:0.0: Binding DVB extension
[  370.365916][ T5839] usb 3-1: USB disconnect, device number 15
[  370.414457][ T5839] em28xx 3-1:0.0: Disconnecting em28xx
[  370.540505][  T173] em28xx 3-1:0.0: Registering input extension
[  370.567156][ T5839] em28xx 3-1:0.0: Closing input extension
[  370.597663][ T5839] em28xx 3-1:0.0: Freeing device
[  370.716034][  T173] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  372.745870][  T173] usb 5-1: Using ep0 maxpacket: 16
[  372.767620][  T173] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.798233][  T173] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  372.828669][  T173] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  372.855841][  T173] usb 5-1: config 0 interface 0 has no altsetting 0
[  372.869589][  T173] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  372.884610][  T173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.902282][  T173] usb 5-1: config 0 descriptor??
[  374.949780][ T8308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'.
[  375.046078][ T8224] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  375.208099][  T173] usbhid 5-1:0.0: can't add hid device: -71
[  375.229765][  T173] usbhid: probe of 5-1:0.0 failed with error -71
[  375.248601][  T173] usb 5-1: USB disconnect, device number 14
[  375.355851][ T8224] usb 3-1: Using ep0 maxpacket: 32
[  375.365445][ T8224] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  375.384167][ T8224] usb 3-1: config 0 has no interface number 0
[  375.390995][ T8313] loop4: detected capacity change from 0 to 16
[  375.400034][ T8224] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  375.420494][ T8224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.430215][ T8224] usb 3-1: Product: syz
[  375.434458][ T8224] usb 3-1: Manufacturer: syz
[  375.439571][ T8224] usb 3-1: SerialNumber: syz
[  375.447153][ T8224] usb 3-1: config 0 descriptor??
[  375.452879][ T8313] erofs: (device loop4): mounted with root inode @ nid 36.
[  375.468639][ T8224] smsc95xx v2.0.0
[  375.649004][ T8318] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  376.625913][ T8224] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  376.638663][ T8224] smsc95xx: probe of 3-1:0.67 failed with error -71
[  376.657457][ T8224] usb 3-1: USB disconnect, device number 16
[  377.425363][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'.
[  377.434424][ T8333] netlink: 60 bytes leftover after parsing attributes in process `syz.4.605'.
[  377.861209][ T8338] loop5: detected capacity change from 0 to 256
[  377.966059][ T8224] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  378.246013][ T5820] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  378.759758][ T8208] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  379.127157][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  379.136252][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  379.646197][ T8224] usb 3-1: Using ep0 maxpacket: 16
[  379.659678][ T5820] usb 5-1: config 1 has an invalid interface number: 1 but max is 0
[  379.845768][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  380.304860][ T5820] usb 5-1: config 1 has no interface number 0
[  380.395770][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  380.497760][ T5820] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  380.539968][ T8224] usb 3-1: unable to read config index 0 descriptor/start: -71
[  380.547851][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.566328][ T8224] usb 3-1: can't read configurations, error -71
[  380.572843][ T5820] usb 5-1: Product: syz
[  380.594181][ T5820] usb 5-1: Manufacturer: syz
[  380.609547][ T5820] usb 5-1: SerialNumber: syz
[  381.027001][ T8340] loop4: detected capacity change from 0 to 4096
[  381.072914][ T8340] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal
[  381.660727][ T5820] snd-usb-audio: probe of 5-1:1.1 failed with error -71
[  381.674971][ T5820] usb 5-1: USB disconnect, device number 15
[  381.884048][ T8363] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  382.142402][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'.
[  382.151331][ T8368] netlink: 60 bytes leftover after parsing attributes in process `syz.2.614'.
[  382.419800][ T8370] loop4: detected capacity change from 0 to 1024
[  382.522996][ T8370] overlayfs: failed to resolve '/½wQY4%���H��tY�PC�O����r': -2
[  382.896773][ T5820] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  382.942462][ T8224] kernel write not supported for file /uinput (pid: 8224 comm: kworker/1:10)
[  383.015901][ T6581] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  383.042200][ T8379] lo: entered promiscuous mode
[  383.106375][ T8379] tunl0: entered promiscuous mode
[  383.111666][ T5820] usb 6-1: Using ep0 maxpacket: 32
[  383.119155][ T5820] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  383.135795][ T5820] usb 6-1: config 0 has no interface number 0
[  383.155265][ T5820] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  383.174759][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.202776][ T5820] usb 6-1: Product: syz
[  383.207365][ T8379] gre0: entered promiscuous mode
[  383.208145][ T5820] usb 6-1: Manufacturer: syz
[  383.213551][ T6581] usb 5-1: Using ep0 maxpacket: 16
[  383.226430][ T5820] usb 6-1: SerialNumber: syz
[  383.234846][ T5820] usb 6-1: config 0 descriptor??
[  383.255637][ T5820] smsc95xx v2.0.0
[  383.262403][ T6581] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  383.298218][ T6581] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  383.327356][ T8379] gretap0: entered promiscuous mode
[  383.334348][ T6581] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  383.361871][ T6581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  383.394962][ T6581] usb 5-1: SerialNumber: syz
[  383.413224][ T6581] usb 5-1: 0:2 : does not exist
[  383.429313][ T8379] erspan0: entered promiscuous mode
[  383.574110][ T8379] ip_vti0: entered promiscuous mode
[  383.670486][ T5820] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  383.698711][ T5820] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  383.717056][ T5820] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  383.745969][ T5820] smsc95xx: probe of 6-1:0.67 failed with error -71
[  383.766428][ T5820] usb 6-1: USB disconnect, device number 3
[  383.943187][ T8384] overlayfs: statfs failed on './file0'
[  384.775225][ T8388] syz.2.619 (8388): drop_caches: 2
[  384.788545][ T8388] syz.2.619 (8388): drop_caches: 2
[  385.576036][ T6587] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  386.847436][ T8232] usb 5-1: USB disconnect, device number 16
[  386.911919][ T6587] usb 3-1: unable to get BOS descriptor or descriptor too short
[  386.935003][ T6587] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[  386.944951][ T6587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.962123][ T6587] usb 3-1: Product: syz
[  386.980383][ T6587] usb 3-1: Manufacturer: syz
[  386.985525][ T6587] usb 3-1: SerialNumber: syz
[  387.789834][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.625'.
[  387.798805][ T8414] netlink: 60 bytes leftover after parsing attributes in process `syz.5.625'.
[  387.815120][ T8414] ip6tnl1: entered promiscuous mode
[  387.820578][ T8414] ip6tnl1: entered allmulticast mode
[  388.078974][ T6587] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  388.113715][ T6587] usb 3-1: MIDIStreaming interface descriptor not found
[  388.221769][ T6587] usb 3-1: USB disconnect, device number 19
[  388.299896][ T8359] udevd[8359]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  389.322598][ T8424] netlink: 'syz.5.629': attribute type 1 has an invalid length.
[  389.347299][ T8424] netlink: 'syz.5.629': attribute type 1 has an invalid length.
[  389.469561][ T8424] syz.5.629 (8424): drop_caches: 2
[  389.497228][ T8424] syz.5.629 (8424): drop_caches: 2
[  389.527353][ T8410] loop4: detected capacity change from 0 to 40427
[  389.579651][ T8410] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  389.616807][ T8410] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  389.657681][ T8410] F2FS-fs (loop4): invalid crc value
[  389.703942][ T8410] F2FS-fs (loop4): Found nat_bits in checkpoint
[  389.964210][ T8410] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  389.984050][ T8410] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  391.153758][ T8443] loop5: detected capacity change from 0 to 16
[  391.171377][ T8443] erofs: (device loop5): mounted with root inode @ nid 36.
[  391.538004][ T8445] overlayfs: failed to get metacopy (-117)
[  391.567945][ T8445] tunl0: entered allmulticast mode
[  391.584723][ T8445] tunl0: left allmulticast mode
[  395.611207][ T5874] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  395.815844][ T5874] usb 5-1: Using ep0 maxpacket: 32
[  395.823518][ T5874] usb 5-1: config 0 has no interfaces?
[  395.832820][ T5874] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  396.908515][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.935927][ T5874] usb 5-1: Product: syz
[  396.951112][ T5874] usb 5-1: Manufacturer: syz
[  396.966691][ T5874] usb 5-1: SerialNumber: syz
[  397.016115][ T5874] usb 5-1: config 0 descriptor??
[  397.054535][ T5874] usb 5-1: can't set config #0, error -71
[  397.100190][ T5874] usb 5-1: USB disconnect, device number 17
[  400.867259][ T8499] loop4: detected capacity change from 0 to 128
[  401.015432][ T6587] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  401.866493][ T6587] usb 3-1: Using ep0 maxpacket: 32
[  401.960677][ T6587] usb 3-1: config 0 has no interfaces?
[  402.033985][ T6587] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  402.095655][ T6587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.163363][ T6587] usb 3-1: Product: syz
[  402.199621][ T6587] usb 3-1: Manufacturer: syz
[  402.234179][ T6587] usb 3-1: SerialNumber: syz
[  402.398271][ T6587] usb 3-1: config 0 descriptor??
[  404.865601][ T5820] usb 3-1: USB disconnect, device number 20
[  404.946058][ T6587] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  405.376557][ T6587] usb 6-1: Using ep0 maxpacket: 16
[  405.694532][ T6587] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  405.720835][ T6587] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  405.743082][ T6587] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  405.762691][ T6587] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.781249][ T6587] usb 6-1: Product: syz
[  405.785591][ T6587] usb 6-1: Manufacturer: syz
[  405.805268][ T6587] usb 6-1: SerialNumber: syz
[  406.060249][ T6587] usb 6-1: 0:2 : does not exist
[  406.083400][ T6587] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  406.169403][ T6587] usb 6-1: USB disconnect, device number 4
[  406.255149][ T8493] udevd[8493]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  407.629279][ T5820] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  407.689572][ T8546] loop2: detected capacity change from 0 to 40427
[  407.712907][ T8546] F2FS-fs (loop2): invalid crc value
[  407.748370][ T8546] F2FS-fs (loop2): Found nat_bits in checkpoint
[  407.835838][ T5820] usb 6-1: Using ep0 maxpacket: 32
[  407.843698][ T5820] usb 6-1: config 0 has no interfaces?
[  407.856562][ T5820] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  407.885903][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.900681][ T5820] usb 6-1: Product: syz
[  407.909827][ T5820] usb 6-1: Manufacturer: syz
[  407.915069][ T5820] usb 6-1: SerialNumber: syz
[  407.924217][ T5820] usb 6-1: config 0 descriptor??
[  407.931720][ T8546] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  408.141608][ T5778] syz-executor: attempt to access beyond end of device
[  408.141608][ T5778] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  408.167280][ T5778] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  410.749970][ T8224] usb 6-1: USB disconnect, device number 5
[  411.474235][ T8579] netlink: 'syz.1.675': attribute type 322 has an invalid length.
[  413.846096][ T5820] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  414.147645][ T5820] usb 5-1: Using ep0 maxpacket: 32
[  414.236329][ T5820] usb 5-1: config 0 has no interfaces?
[  414.597911][ T5820] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  414.615958][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.624054][ T5820] usb 5-1: Product: syz
[  414.628373][ T5820] usb 5-1: Manufacturer: syz
[  414.633023][ T5820] usb 5-1: SerialNumber: syz
[  414.653753][ T5820] usb 5-1: config 0 descriptor??
[  414.761360][ T8611] loop2: detected capacity change from 0 to 256
[  414.868059][ T8611] FAT-fs (loop2): Directory bread(block 64) failed
[  414.875914][ T8611] FAT-fs (loop2): Directory bread(block 65) failed
[  414.896069][ T8611] FAT-fs (loop2): Directory bread(block 66) failed
[  414.908845][ T8611] FAT-fs (loop2): Directory bread(block 67) failed
[  414.923855][ T8611] FAT-fs (loop2): Directory bread(block 68) failed
[  414.938595][ T8611] FAT-fs (loop2): Directory bread(block 69) failed
[  414.952463][ T8611] FAT-fs (loop2): Directory bread(block 70) failed
[  414.973379][ T8611] FAT-fs (loop2): Directory bread(block 71) failed
[  415.002089][ T8611] FAT-fs (loop2): Directory bread(block 72) failed
[  415.026017][ T8611] FAT-fs (loop2): Directory bread(block 73) failed
[  417.623904][ T8224] usb 5-1: USB disconnect, device number 18
[  417.665277][ T8625] netlink: 'syz.1.688': attribute type 322 has an invalid length.
[  417.909489][ T8627] loop4: detected capacity change from 0 to 512
[  418.667587][ T8627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.736655][ T8627] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  418.891209][ T6402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.006416][ T8637] loop2: detected capacity change from 0 to 1024
[  419.038051][ T8637] EXT4-fs: inline encryption not supported
[  419.087445][ T8637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  419.130462][ T8637] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  420.006336][ T8644] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  422.391463][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  422.615413][ T8661] loop2: detected capacity change from 0 to 512
[  422.658276][ T8661] EXT4-fs (loop2): Test dummy encryption mode enabled
[  422.691485][ T8661] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  422.750461][ T8661] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.697: bad orphan inode 131083
[  422.763927][ T8661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  423.799239][ T8674] netlink: 'syz.4.701': attribute type 322 has an invalid length.
[  424.837904][ T8661] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  424.905007][ T8672] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.697: path /172/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  425.346592][ T8224] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  425.557003][ T8224] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d99, bcdDevice=fb.a5
[  425.566719][ T8224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.574891][ T8224] usb 3-1: Product: syz
[  425.583874][ T8224] usb 3-1: Manufacturer: syz
[  425.599106][ T8224] usb 3-1: SerialNumber: syz
[  428.380522][ T8224] usb 3-1: USB disconnect, device number 21
[  428.506882][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.700826][ T8690] loop4: detected capacity change from 0 to 40427
[  428.897672][ T8690] F2FS-fs (loop4): invalid crc value
[  429.491662][ T8690] F2FS-fs (loop4): Found nat_bits in checkpoint
[  429.972555][ T8690] F2FS-fs (loop4): Start checkpoint disabled!
[  430.156183][ T6587] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  430.370615][ T6587] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  430.406545][ T6587] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  430.432209][ T6587] usb 3-1: config 0 interface 0 has no altsetting 0
[  430.452572][ T6587] usb 3-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00
[  430.465981][ T6587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.477695][ T6587] usb 3-1: config 0 descriptor??
[  430.927079][ T8721] netlink: 'syz.4.712': attribute type 322 has an invalid length.
[  431.151572][ T6587] usb 3-1: USB disconnect, device number 22
[  432.046788][ T8735] loop5: detected capacity change from 0 to 16
[  432.081999][ T8735] erofs: (device loop5): mounted with root inode @ nid 36.
[  432.451764][ T8741] overlayfs: failed to get metacopy (-117)
[  432.483595][ T8735] tunl0: entered allmulticast mode
[  432.489760][ T8734] tunl0: left allmulticast mode
[  436.325019][ T8762] loop2: detected capacity change from 0 to 256
[  437.587618][ T8775] loop2: detected capacity change from 0 to 16
[  437.607632][ T8775] erofs: (device loop2): mounted with root inode @ nid 36.
[  437.895906][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  437.913094][ T8778] overlayfs: failed to get metacopy (-117)
[  437.921465][ T8778] tunl0: entered allmulticast mode
[  438.480377][ T8774] tunl0: left allmulticast mode
[  438.815926][    T9] usb 5-1: Using ep0 maxpacket: 32
[  438.843317][    T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  438.881460][    T9] usb 5-1: config 0 has no interface number 0
[  438.915978][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  438.950386][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.014954][    T9] usb 5-1: Product: syz
[  439.045788][    T9] usb 5-1: Manufacturer: syz
[  439.081084][    T9] usb 5-1: SerialNumber: syz
[  439.213219][    T9] usb 5-1: config 0 descriptor??
[  439.359997][ T8783] loop2: detected capacity change from 0 to 256
[  439.389830][    T9] smsc95xx v2.0.0
[  439.751519][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'.
[  440.655899][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  440.662494][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  441.756839][    T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  441.786991][    T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  444.603757][    T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  444.644733][    T9] smsc95xx: probe of 5-1:0.67 failed with error -71
[  444.663592][    T9] usb 5-1: USB disconnect, device number 19
[  444.738122][ T8806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.738'.
[  445.944134][   T28] audit: type=1800 audit(1790999468.887:24): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.736" name="protocol" dev="configfs" ino=17633 res=0 errno=0
[  446.506641][   T28] audit: type=1800 audit(1790999470.337:25): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.736" name="UDC" dev="configfs" ino=17643 res=0 errno=0
[  446.860054][ T8823] loop5: detected capacity change from 0 to 256
[  446.974626][ T8224] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  447.292841][ T8224] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.513716][ T8823] FAT-fs (loop5): Directory bread(block 64) failed
[  447.531831][ T8224] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  447.562707][ T8823] FAT-fs (loop5): Directory bread(block 65) failed
[  447.596297][ T8224] usb 1-1: Dual-Role OTG device on HNP port
[  447.613448][ T8823] FAT-fs (loop5): Directory bread(block 66) failed
[  447.633791][ T8224] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06
[  447.653493][ T8823] FAT-fs (loop5): Directory bread(block 67) failed
[  447.695891][ T8224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.705265][ T8823] FAT-fs (loop5): Directory bread(block 68) failed
[  447.712353][ T8823] FAT-fs (loop5): Directory bread(block 69) failed
[  447.719149][ T8823] FAT-fs (loop5): Directory bread(block 70) failed
[  447.726491][ T8823] FAT-fs (loop5): Directory bread(block 71) failed
[  447.733460][ T8823] FAT-fs (loop5): Directory bread(block 72) failed
[  447.740488][ T8823] FAT-fs (loop5): Directory bread(block 73) failed
[  447.851255][    C1] ------------[ cut here ]------------
[  447.857286][    C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
[  447.864636][    C1] WARNING: CPU: 1 PID: 5143 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x263/0x440
[  447.874856][    C1] Modules linked in:
[  447.878805][    C1] CPU: 1 PID: 5143 Comm: udevd Not tainted syzkaller #0
[  447.885795][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  447.895903][    C1] RIP: 0010:usb_ep_enable+0x263/0x440
[  447.901365][    C1] Code: 49 8b 0e 48 c7 c0 c0 0f 7b 8b 49 c7 c0 e0 0f 7b 8b 4c 0f 44 c0 48 c7 c7 80 0f 7b 8b 48 c7 c6 5c 27 a7 8c 89 ea e8 9d 03 95 fa <0f> 0b e9 e1 fe ff ff e8 91 3f cb fa 49 bc 00 00 00 00 00 fc ff df
[  447.921040][    C1] RSP: 0000:ffffc900102676d0 EFLAGS: 00010046
[  447.927174][    C1] RAX: 89b70778a03ddb00 RBX: ffff888143bf00e0 RCX: ffff888052169e00
[  447.935204][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  447.943234][    C1] RBP: 0000000000000081 R08: ffff8880b8f28c53 R09: 1ffff110171e518a
[  447.951272][    C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: dffffc0000000000
[  447.959299][    C1] R13: ffff888143bf010d R14: ffff888143bf00e8 R15: ffff88814c47923a
[  447.967324][    C1] FS:  00007f894d3d3880(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  447.976308][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  447.982947][    C1] CR2: 0000200000000140 CR3: 0000000019ecb000 CR4: 00000000003506e0
[  447.991001][    C1] Call Trace:
[  447.994350][    C1]  <TASK>
[  447.997331][    C1]  hidg_set_alt+0x12a/0xa10
[  448.002013][    C1]  ? usb_gadget_set_state+0x12c/0x2a0
[  448.007524][    C1]  set_config+0x735/0xff0
[  448.011929][    C1]  composite_setup+0x1df4/0x33a0
[  448.016932][    C1]  configfs_composite_setup+0xc7/0x100
[  448.022461][    C1]  dummy_timer+0x1324/0x34e0
[  448.027157][    C1]  ? __lock_acquire+0x7d80/0x7d80
[  448.032242][    C1]  ? lock_chain_count+0x20/0x20
[  448.037167][    C1]  ? dummy_free_streams+0x520/0x520
[  448.042436][    C1]  ? dummy_free_streams+0x520/0x520
[  448.047700][    C1]  __hrtimer_run_queues+0x525/0xc10
[  448.052972][    C1]  ? hrtimer_interrupt+0x980/0x980
[  448.058138][    C1]  ? read_tsc+0x9/0x20
[  448.062358][    C1]  hrtimer_run_softirq+0x177/0x290
[  448.067569][    C1]  handle_softirqs+0x27d/0x820
[  448.072419][    C1]  ? read_tsc+0x9/0x20
[  448.076548][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  448.081374][    C1]  ? do_softirq+0x1a0/0x1a0
[  448.085943][    C1]  __irq_exit_rcu+0xd3/0x190
[  448.090588][    C1]  ? irq_exit_rcu+0x20/0x20
[  448.095162][    C1]  irq_exit_rcu+0x9/0x20
[  448.099556][    C1]  sysvec_apic_timer_interrupt+0x56/0xc0
[  448.105261][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  448.111320][    C1] RIP: 0033:0x7f894cd7af95
[  448.115785][    C1] Code: 00 00 00 00 00 48 83 fa 01 7e 5e c4 41 01 ef ff 89 f8 09 f0 c1 e0 14 3d 00 00 00 f8 0f 87 c8 03 00 00 c5 fe 6f 07 c5 fd 74 0e <c5> 85 74 d0 c5 ed df c9 c5 fd d7 c9 48 83 fa 20 76 1f ff c1 74 75
[  448.135466][    C1] RSP: 002b:00007ffef4a42ac8 EFLAGS: 00000287
[  448.141687][    C1] RAX: 00000000b6f00000 RBX: 00007ffef4a4306b RCX: 0000000000000055
[  448.149711][    C1] RDX: 0000000000000007 RSI: 000055f523aeeb65 RDI: 00007ffef4a4306b
[  448.157733][    C1] RBP: 000055f548ce4830 R08: 0000000000000008 R09: 0000000000000000
[  448.165776][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffef4a4306b
[  448.173807][    C1] R13: 00000000000000c3 R14: 00007ffef4a4306b R15: 0000000000000000
[  448.181886][    C1]  </TASK>
[  448.184953][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  448.192421][    C1] CPU: 1 PID: 5143 Comm: udevd Not tainted syzkaller #0
[  448.199411][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  448.209519][    C1] Call Trace:
[  448.212844][    C1]  <TASK>
[  448.215814][    C1]  dump_stack_lvl+0x18c/0x250
[  448.220558][    C1]  ? show_regs_print_info+0x20/0x20
[  448.225819][    C1]  ? load_image+0x420/0x420
[  448.230401][    C1]  panic+0x2ca/0x720
[  448.234359][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  448.238934][    C1]  __warn+0x2e0/0x470
[  448.242966][    C1]  ? usb_ep_enable+0x263/0x440
[  448.247827][    C1]  ? usb_ep_enable+0x263/0x440
[  448.252633][    C1]  report_bug+0x2be/0x4f0
[  448.257110][    C1]  ? usb_ep_enable+0x263/0x440
[  448.261909][    C1]  ? usb_ep_enable+0x263/0x440
[  448.266698][    C1]  ? usb_ep_enable+0x265/0x440
[  448.271491][    C1]  handle_bug+0xcf/0x120
[  448.275777][    C1]  exc_invalid_op+0x1a/0x50
[  448.280326][    C1]  asm_exc_invalid_op+0x1a/0x20
[  448.285221][    C1] RIP: 0010:usb_ep_enable+0x263/0x440
[  448.290627][    C1] Code: 49 8b 0e 48 c7 c0 c0 0f 7b 8b 49 c7 c0 e0 0f 7b 8b 4c 0f 44 c0 48 c7 c7 80 0f 7b 8b 48 c7 c6 5c 27 a7 8c 89 ea e8 9d 03 95 fa <0f> 0b e9 e1 fe ff ff e8 91 3f cb fa 49 bc 00 00 00 00 00 fc ff df
[  448.310264][    C1] RSP: 0000:ffffc900102676d0 EFLAGS: 00010046
[  448.316400][    C1] RAX: 89b70778a03ddb00 RBX: ffff888143bf00e0 RCX: ffff888052169e00
[  448.324421][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  448.332428][    C1] RBP: 0000000000000081 R08: ffff8880b8f28c53 R09: 1ffff110171e518a
[  448.340517][    C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: dffffc0000000000
[  448.348516][    C1] R13: ffff888143bf010d R14: ffff888143bf00e8 R15: ffff88814c47923a
[  448.356555][    C1]  hidg_set_alt+0x12a/0xa10
[  448.361113][    C1]  ? usb_gadget_set_state+0x12c/0x2a0
[  448.366535][    C1]  set_config+0x735/0xff0
[  448.371094][    C1]  composite_setup+0x1df4/0x33a0
[  448.376080][    C1]  configfs_composite_setup+0xc7/0x100
[  448.381613][    C1]  dummy_timer+0x1324/0x34e0
[  448.386283][    C1]  ? __lock_acquire+0x7d80/0x7d80
[  448.391662][    C1]  ? lock_chain_count+0x20/0x20
[  448.396560][    C1]  ? dummy_free_streams+0x520/0x520
[  448.401795][    C1]  ? dummy_free_streams+0x520/0x520
[  448.407050][    C1]  __hrtimer_run_queues+0x525/0xc10
[  448.412299][    C1]  ? hrtimer_interrupt+0x980/0x980
[  448.417442][    C1]  ? read_tsc+0x9/0x20
[  448.421549][    C1]  hrtimer_run_softirq+0x177/0x290
[  448.426692][    C1]  handle_softirqs+0x27d/0x820
[  448.431484][    C1]  ? read_tsc+0x9/0x20
[  448.435586][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  448.440380][    C1]  ? do_softirq+0x1a0/0x1a0
[  448.444922][    C1]  __irq_exit_rcu+0xd3/0x190
[  448.449559][    C1]  ? irq_exit_rcu+0x20/0x20
[  448.454120][    C1]  irq_exit_rcu+0x9/0x20
[  448.458402][    C1]  sysvec_apic_timer_interrupt+0x56/0xc0
[  448.464069][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  448.470103][    C1] RIP: 0033:0x7f894cd7af95
[  448.474552][    C1] Code: 00 00 00 00 00 48 83 fa 01 7e 5e c4 41 01 ef ff 89 f8 09 f0 c1 e0 14 3d 00 00 00 f8 0f 87 c8 03 00 00 c5 fe 6f 07 c5 fd 74 0e <c5> 85 74 d0 c5 ed df c9 c5 fd d7 c9 48 83 fa 20 76 1f ff c1 74 75
[  448.494187][    C1] RSP: 002b:00007ffef4a42ac8 EFLAGS: 00000287
[  448.500297][    C1] RAX: 00000000b6f00000 RBX: 00007ffef4a4306b RCX: 0000000000000055
[  448.508304][    C1] RDX: 0000000000000007 RSI: 000055f523aeeb65 RDI: 00007ffef4a4306b
[  448.516302][    C1] RBP: 000055f548ce4830 R08: 0000000000000008 R09: 0000000000000000
[  448.524304][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffef4a4306b
[  448.532318][    C1] R13: 00000000000000c3 R14: 00007ffef4a4306b R15: 0000000000000000
[  448.540333][    C1]  </TASK>
[  448.543547][    C1] Kernel Offset: disabled
[  448.548000][    C1] Rebooting in 86400 seconds..