last executing test programs:

17m52.02124291s ago: executing program 0 (id=678):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0x0)

17m49.116337316s ago: executing program 0 (id=685):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000400)={[{@uni_xlate}, {@shortname_winnt}, {@shortname_lower}, {}, {@shortname_mixed}, {@numtail}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@shortname_win95}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@numtail}, {@rodir}]}, 0x2, 0x2ae, &(0x7f0000001980)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="acf5646d636f6d706f73652c6e6f62617272696572266e6c733d637031323531"], 0x1, 0x5c8, &(0x7f00000006c0)="$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")
getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x9b)
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000580)=[{0x18, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x1, @svalue=0x3}, {0x2, @uvalue=0x4}, {0x1, @uvalue=0x6}]}, 0x87}, {0x15, '\x00', @st={0x4, [{0x1, @uvalue=0x9}, {0x2, @svalue=0x3}, {0x0, @svalue=0x1}, {0x1, @svalue=0x400}]}, 0x6}, {0xc, '\x00', @data=0x7, 0x6}, {0x3, '\x00', @data=0xa, 0x2b1d}]})
close(0xffffffffffffffff)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000180)={@private, @multicast1}, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x1400c0c0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

17m41.926932419s ago: executing program 0 (id=696):
openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa6242, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
eventfd(0xfffffff9)
r2 = fsopen(&(0x7f0000000380)='binder\x00', 0x1)
close(r2)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019c80)=""/102384, 0x18ff0)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

17m30.479788019s ago: executing program 0 (id=712):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0)

17m24.843861026s ago: executing program 0 (id=718):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = getpgrp(0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x0)
setrlimit(0xa, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x1001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000340)={0x1})
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000c2, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x3c5f, 0x0, 0x0, 0x0, 0x0)
keyctl$session_to_parent(0x12)
fcntl$getownex(r0, 0x10, 0x0)
ptrace$poke(0x5, 0x0, 0x0, 0x2)
bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000002c0)={0x42, 0x4, 0x2}, 0x10)
bind$tipc(r6, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
writev(r0, 0x0, 0x0)

17m22.083913699s ago: executing program 0 (id=721):
socket$inet6(0xa, 0x80002, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0x1ff, 0x0, 0xfe, "0062baad630400"})
syz_open_pts(r0, 0x80)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x62, 0x80800})
read(0xffffffffffffffff, 0x0, 0x0)

17m6.516896772s ago: executing program 32 (id=721):
socket$inet6(0xa, 0x80002, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0x1ff, 0x0, 0xfe, "0062baad630400"})
syz_open_pts(r0, 0x80)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x62, 0x80800})
read(0xffffffffffffffff, 0x0, 0x0)

16m10.270375167s ago: executing program 1 (id=823):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)

16m5.397979437s ago: executing program 1 (id=825):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_settime(0x0, &(0x7f0000000040))

15m50.577362193s ago: executing program 1 (id=841):
r0 = timerfd_create(0x7, 0x80000)
socket$kcm(0xa, 0x3, 0x87)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
chown(0x0, 0x0, 0x0)
ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f)
syz_open_dev$evdev(0x0, 0x1bbc, 0x801)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_io_uring_setup(0x2af8, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000))
io_getevents(0x0, 0x3, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x5, 0x4, 0x9, 0x4080, <r2=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x4)
r3 = syz_open_dev$sg(0x0, 0x0, 0x8002)
fcntl$dupfd(r3, 0x0, r3)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r0, &(0x7f0000000240))

15m48.446985181s ago: executing program 1 (id=843):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r3 = io_uring_setup(0x2314, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0xda)
ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40010)

15m46.637348832s ago: executing program 1 (id=845):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0xe, 0x7fff0000}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x74, 0x43, 0x2}, 0x50)
socket(0x40000000015, 0x5, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000016c0)={'wlan0\x00', <r4=>0x0})
io_uring_setup(0xaa7, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x8, 0x0, 0x225})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x4c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x18, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x28008004)
syz_open_dev$dri(0x0, 0x4, 0x129343)

15m45.020154369s ago: executing program 2 (id=847):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./bus\x00', 0x200800, &(0x7f00000001c0)={[{@bsdgroups}, {}, {@filestreams}, {@prjquota}, {@usrquota}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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")
r0 = open(&(0x7f0000002840)='./file0\x00', 0x577982, 0x240)
ftruncate(r0, 0x2007ffc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x1c3)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r2, 0x2007ffb)
sendfile(r2, r2, 0x0, 0x1000000201005)
copy_file_range(r1, 0x0, r0, 0x0, 0xfffffbffa003e458, 0x100000000000000)

15m41.235871615s ago: executing program 2 (id=852):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0)

15m39.931041844s ago: executing program 2 (id=853):
r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
shmctl$IPC_RMID(r0, 0x0)

15m33.987713369s ago: executing program 1 (id=860):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000800)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r4)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x48000, 0x9, 0x6, 0x4, 0x2ffff}, 0x8d23}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x40, 0x20}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4094)

15m33.977040559s ago: executing program 2 (id=861):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xa0000)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0})
socket$phonet_pipe(0x23, 0x5, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x7d, 0x0, 0x7ffe, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
close(0x4)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfdffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x3, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x7, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x7, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x81, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0x80ffff, 0x10, 0x7f, 0x104, 0x9606, 0x4, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

15m27.219183252s ago: executing program 2 (id=865):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000600)={0x2020}, 0x2020)

15m24.274095569s ago: executing program 2 (id=867):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
socket(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000100), 0x84000)
socket(0x1, 0x803, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240403, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00')
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x109001, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0)

15m18.893150401s ago: executing program 33 (id=860):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000800)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r4)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x48000, 0x9, 0x6, 0x4, 0x2ffff}, 0x8d23}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x40, 0x20}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4094)

15m8.742062811s ago: executing program 34 (id=867):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
socket(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000100), 0x84000)
socket(0x1, 0x803, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240403, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00')
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x109001, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0)

9m1.998413213s ago: executing program 5 (id=1407):
open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a"], 0x0)
prlimit64(0x0, 0xc, 0x0, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
shutdown(r1, 0x1)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfe, &(0x7f0000000040))
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r3 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x14801)
signalfd(r5, &(0x7f00000000c0)={[0x2]}, 0x8)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

9m0.848334359s ago: executing program 5 (id=1409):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{0x0}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}}], 0x2, 0x48000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00')
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}})
sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xfffd, r3, 0x0}])
write(r3, 0x0, 0x0)
connect$unix(r4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, 0x0, 0x51)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8)

8m52.470467238s ago: executing program 5 (id=1423):
socket(0x10, 0x803, 0x0)
close(0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24040040}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000120000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}}, 0x2000800)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

8m52.162979336s ago: executing program 5 (id=1424):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x4004014)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)

8m51.583858299s ago: executing program 5 (id=1427):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x3})

8m49.529820615s ago: executing program 5 (id=1428):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x4319f197ebc53b9, &(0x7f0000000080)={0x9, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
syz_open_dev$sndmidi(0x0, 0xe85c, 0xfc6c3)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000040)=0x2b)

8m33.134546737s ago: executing program 35 (id=1428):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x4319f197ebc53b9, &(0x7f0000000080)={0x9, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
syz_open_dev$sndmidi(0x0, 0xe85c, 0xfc6c3)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000040)=0x2b)

19.460006337s ago: executing program 3 (id=2282):
syz_emit_ethernet(0xda4, &(0x7f0000000a00)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x6, 0x1, 0x2}, {0x8100, 0x1, 0x1, 0x4}}, {@ipv6={0x86dd, @generic={0x7, 0x6, "e58a39", 0xd66, 0x3c, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[], "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"}}}}}, 0x0)

18.86124415s ago: executing program 3 (id=2284):
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0x40505331, &(0x7f0000000200)={0x3, 0xfffffffd, 0x4, 0xbf})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mount$binder(0x0, 0x0, 0x0, 0x1000810, 0x0)
mount$binder(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10901a, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d7461904000000e4e2bae9275486a670"], 0x38}}, 0x40040)

16.713674s ago: executing program 3 (id=2287):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

16.22862183s ago: executing program 6 (id=2290):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00')
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4010, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x3)
fchdir(r2)
r3 = fanotify_init(0x1a, 0x1)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fanotify_mark(r3, 0x1, 0x13, r4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r6, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x2000067}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010)

14.005755731s ago: executing program 7 (id=2294):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x6, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4)
sendmmsg$inet6(r1, &(0x7f000000e280)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000980)='x', 0x1}], 0x1}}], 0x1, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

12.905559666s ago: executing program 7 (id=2297):
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0x40505331, &(0x7f0000000200)={0x3, 0xfffffffd, 0x4, 0xbf})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mount$binder(0x0, 0x0, 0x0, 0x1000810, 0x0)
mount$binder(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10901a, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d7461904000000e4e2bae9275486a670"], 0x38}}, 0x40040)

10.759923995s ago: executing program 7 (id=2301):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001c)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

9.379238807s ago: executing program 3 (id=2303):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r0, &(0x7f00000083c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000176adf8b63123c5400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8d59}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents(r2, 0x0, 0x0)

8.895864137s ago: executing program 3 (id=2305):
openat$nullb(0xffffffffffffff9c, 0x0, 0xa6242, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
fsopen(&(0x7f0000000380)='binder\x00', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019c80)=""/102384, 0x18ff0)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$inet(r0, 0x0, 0x0)

8.234761072s ago: executing program 6 (id=2307):
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x11, 0x18, 0x0, 0x1, 0xc, 0x6, @local}, 0x14)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0x1, 0x6f7, 0x809d, 0xfff9})
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, &(0x7f0000000140))
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x2b, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8.168797294s ago: executing program 4 (id=2308):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000400)={[{@uni_xlate}, {@shortname_winnt}, {@shortname_lower}, {}, {@shortname_mixed}, {@numtail}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@shortname_win95}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@numtail}, {@rodir}]}, 0x2, 0x2ae, &(0x7f0000001980)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="acf5646d636f6d706f73652c6e6f62617272696572266e6c733d637031323531"], 0x1, 0x5c8, &(0x7f00000006c0)="$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")
getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/46, 0x2e)
getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x9b)
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000580)=[{0x18, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x1, @svalue=0x3}, {0x2, @uvalue=0x4}, {0x1, @uvalue=0x6}]}, 0x87}, {0x15, '\x00', @st={0x4, [{0x1, @uvalue=0x9}, {0x2, @svalue=0x3}, {0x0, @svalue=0x1}, {0x1, @svalue=0x400}]}, 0x6}, {0xc, '\x00', @data=0x7, 0x6}, {0x3, '\x00', @data=0xa, 0x2b1d}]})
close(0xffffffffffffffff)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000180)={@private, @multicast1}, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x1400c0c0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

7.115328548s ago: executing program 7 (id=2309):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24040040}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="03000000120000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}}, 0x2000800)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

7.0309811s ago: executing program 7 (id=2311):
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0x40505331, &(0x7f0000000200)={0x3, 0xfffffffd, 0x4, 0xbf})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mount$binder(0x0, 0x0, 0x0, 0x1000810, 0x0)
mount$binder(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10901a, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d7461904000000e4e2bae9275486a670"], 0x38}}, 0x40040)

6.60915971s ago: executing program 4 (id=2312):
syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f000001f900)='./file1\x00', 0x2200400, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16], 0xfe, 0x15b, &(0x7f0000000640)="$eJzs0LtrWmEYx/Hve87rBarYUgtSaBW62ErBC+3WwVMqdZADLV06Cfb0AoqlQutWpXTLIGR1yGWVQP4CjQZCQJfkn8jiFshoOJfcSP6E57O9v+fh98D77s0iq7jytt36+cvpdJwvmQ92rfLxZDwuu3kYurs35v7+pAzf0Uw0LPuwD8zi8PVH0zEa7aa7tixDBLDuBTmtxMU9K6npayhgeu/sM5g+8vYM9+12XsucEiFv77EGK+FneWC1GfX7HvhZATgFt1WpcHDsicn/ai79UEF3mNsZRYLcWStWBs9jKTP3F7awVPRg9u3YDKaL+Qi7Zi9KxeLrUr5g8OrIK+wN0O9jv+GzAu32GcwPqy9fhEk91Z/gn4J179ZyT8WB6caZ3Ypc/nXvj5kBlR426qnQdj1538DManey4g7a/0UhhBBCCCGEEEIIIYQQQgghhBDitvMAAAD//9FGTmE=")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

6.548298841s ago: executing program 3 (id=2313):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

6.475546532s ago: executing program 6 (id=2314):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0xda4, &(0x7f0000000a00)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x6, 0x1, 0x2}, {0x8100, 0x1, 0x1, 0x4}}, {@ipv6={0x86dd, @generic={0x7, 0x6, "e58a39", 0xd66, 0x3c, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[], "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"}}}}}, 0x0)

5.287580429s ago: executing program 6 (id=2315):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r0, &(0x7f00000083c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000176adf8b63123c5400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8d59}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents(r2, 0x0, 0x0)

5.043964825s ago: executing program 6 (id=2317):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00')
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4010, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x3)
fchdir(r2)
r3 = fanotify_init(0x1a, 0x1)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fanotify_mark(r3, 0x1, 0x13, r4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r6, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x2000067}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010)

5.043717225s ago: executing program 4 (id=2318):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x2, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x11, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000140))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000280), &(0x7f0000000500)=r1}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0)

4.795962551s ago: executing program 8 (id=2319):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001c)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

4.79492296s ago: executing program 7 (id=2320):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000404112155000"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="002205000000c3"], 0x0}, 0x0)

3.790439413s ago: executing program 4 (id=2321):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24040040}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf", @ANYRES32=0x0, @ANYBLOB="03000000120000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}}, 0x2000800)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

3.553284469s ago: executing program 8 (id=2322):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000400)={[{@uni_xlate}, {@shortname_winnt}, {@shortname_lower}, {}, {@shortname_mixed}, {@numtail}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@shortname_win95}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@numtail}, {@rodir}]}, 0x2, 0x2ae, &(0x7f0000001980)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="acf5646d636f6d706f73652c6e6f62617272696572266e6c733d637031323531"], 0x1, 0x5c8, &(0x7f00000006c0)="$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")
getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/46, 0x2e)
getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x9b)
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000580)=[{0x18, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x1, @svalue=0x3}, {0x2, @uvalue=0x4}, {0x1, @uvalue=0x6}]}, 0x87}, {0x15, '\x00', @st={0x4, [{0x1, @uvalue=0x9}, {0x2, @svalue=0x3}, {0x0, @svalue=0x1}, {0x1, @svalue=0x400}]}, 0x6}, {0xc, '\x00', @data=0x7, 0x6}, {0x3, '\x00', @data=0xa, 0x2b1d}]})
close(0xffffffffffffffff)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000180)={@private, @multicast1}, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x1400c0c0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.473305771s ago: executing program 4 (id=2323):
openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa6242, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
fsopen(&(0x7f0000000380)='binder\x00', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019c80)=""/102384, 0x18ff0)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$inet(r0, 0x0, 0x0)

2.19285995s ago: executing program 8 (id=2324):
writev(0xffffffffffffffff, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x2200060, 0x0, 0x11, 0x0, &(0x7f0000000200))
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000240)=ANY=[@ANYBLOB="0226d839", @ANYRESDEC=0x0, @ANYBLOB=',adinicb,mode=00000000000000000000010,longad,utf8,unhide,undelete,iocharset=utf8,uid=forget,rootdir=00000000000000000006,gid=forget,nostrict,session=00000000000000000000,gid=forget,\x00'], 0x1, 0xc34, &(0x7f0000001bc0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x148, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@private=0xa010101, @in6=@empty, 0x0, 0x2, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in=@loopback, 0xfe, 0x32}, @in6=@empty, {0x6, 0x6, 0xfffffffffffffefd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x9, 0x7fffffffffffffff, 0x3}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @mark={0xc, 0x15, {0x35075d, 0xfffffff8}}]}, 0x148}}, 0x4000004)

746.076932ms ago: executing program 8 (id=2325):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0xda4, &(0x7f0000000a00)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x6, 0x1, 0x2}, {0x8100, 0x1, 0x1, 0x4}}, {@ipv6={0x86dd, @generic={0x7, 0x6, "e58a39", 0xd66, 0x3c, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[], "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"}}}}}, 0x0)

451.701139ms ago: executing program 4 (id=2326):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'})
recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000280)=""/159, 0x9f}, 0x3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0)

378.710331ms ago: executing program 8 (id=2327):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r0, &(0x7f00000083c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000176adf8b63123c5400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8d59}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents(r2, 0x0, 0x0)

42.070579ms ago: executing program 6 (id=2328):
r0 = socket$kcm(0x23, 0x5, 0x0)
listen(r0, 0x800)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = accept4(r0, 0x0, 0x0, 0x80000)
setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x40, &(0x7f0000000000)={@link_local={0x3}, @random="0633d825765e", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, 'K$'}}}}}, 0x0)
close_range(r1, r3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r5, 0x0, 0x40)
socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
connect$unix(r4, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e)

0s ago: executing program 8 (id=2329):
syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f000001f900)='./file1\x00', 0x2200400, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16], 0xfe, 0x15b, &(0x7f0000000640)="$eJzs0LtrWmEYx/Hve87rBarYUgtSaBW62ErBC+3WwVMqdZADLV06Cfb0AoqlQutWpXTLIGR1yGWVQP4CjQZCQJfkn8jiFshoOJfcSP6E57O9v+fh98D77s0iq7jytt36+cvpdJwvmQ92rfLxZDwuu3kYurs35v7+pAzf0Uw0LPuwD8zi8PVH0zEa7aa7tixDBLDuBTmtxMU9K6npayhgeu/sM5g+8vYM9+12XsucEiFv77EGK+FneWC1GfX7HvhZATgFt1WpcHDsicn/ai79UEF3mNsZRYLcWStWBs9jKTP3F7awVPRg9u3YDKaL+Qi7Zi9KxeLrUr5g8OrIK+wN0O9jv+GzAu32GcwPqy9fhEk91Z/gn4J179ZyT8WB6caZ3Ypc/nXvj5kBlR426qnQdj1538DManey4g7a/0UhhBBCCCGEEEIIIYQQQgghhBDitvMAAAD//9FGTmE=")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

kernel console output (not intermixed with test programs):

.536078][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.547019][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.555761][ T8271] device bridge_slave_0 entered promiscuous mode
[  680.572160][ T5059] bond0 speed is unknown, defaulting to 1000
[  680.594965][ T8226] device hsr_slave_0 entered promiscuous mode
[  680.603764][ T8226] device hsr_slave_1 entered promiscuous mode
[  680.620385][ T8226] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  680.628169][ T8226] Cannot create hsr debugfs directory
[  680.639655][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state
[  680.717255][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.726204][ T8271] device bridge_slave_1 entered promiscuous mode
[  680.788998][ T8271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  680.822198][ T8271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  680.925478][ T8359] loop4: detected capacity change from 0 to 512
[  680.951785][ T8359] EXT4-fs: Ignoring removed mblk_io_submit option
[  681.003386][ T8359] EXT4-fs: Ignoring removed bh option
[  681.056715][ T8194] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  681.153886][ T8271] team0: Port device team_slave_0 added
[  681.206642][ T8359] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  681.315115][ T8359] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  681.367959][ T8271] team0: Port device team_slave_1 added
[  681.957725][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_0
[  682.106995][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  682.388059][ T8271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  683.869551][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  683.909378][ T8194] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  683.947349][ T8194] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  684.042305][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_1
[  684.055632][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  684.129527][ T8271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  684.164930][ T8194] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  684.178707][ T8377] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  684.203232][ T8377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  684.219677][ T8377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  684.241646][ T8377] device bridge_slave_0 left promiscuous mode
[  684.261929][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state
[  684.289437][ T8377] device bridge_slave_1 left promiscuous mode
[  684.301493][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state
[  684.346442][ T8377] bond0: (slave bond_slave_0): Releasing backup interface
[  684.402339][ T8377] bond0: (slave bond_slave_1): Releasing backup interface
[  684.530274][ T8377] team0: Port device team_slave_0 removed
[  684.564050][ T8377] team0: Port device team_slave_1 removed
[  684.588441][ T8377] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  684.609879][ T8377] batman_adv: batadv0: Removing interface: batadv_slave_0
[  684.631032][ T8377] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  684.638528][ T8377] batman_adv: batadv0: Removing interface: batadv_slave_1
[  684.728479][ T8379] device vlan0 entered promiscuous mode
[  685.051672][ T8379] team0: Port device vlan0 added
[  685.595607][ T8271] device hsr_slave_0 entered promiscuous mode
[  685.654259][ T8271] device hsr_slave_1 entered promiscuous mode
[  685.670160][ T8271] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  685.677796][ T8271] Cannot create hsr debugfs directory
[  685.699074][ T8393] loop3: detected capacity change from 0 to 16
[  685.712771][ T8393] erofs: (device loop3): mounted with root inode @ nid 36.
[  685.963759][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  685.970177][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  685.985071][ T8379] syz.4.902 (8379) used greatest stack depth: 19856 bytes left
[  686.968070][ T4290] Bluetooth: hci3: command 0x0405 tx timeout
[  687.092019][ T8226] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  687.136335][ T8194] 8021q: adding VLAN 0 to HW filter on device bond0
[  687.494527][ T4416] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.704114][ T8226] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  688.084521][ T8411] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  688.151262][ T4416] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.192946][ T8194] 8021q: adding VLAN 0 to HW filter on device team0
[  688.221432][ T8411] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  688.228212][ T8226] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  688.244359][ T8411] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  688.303307][ T8226] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  688.316419][ T8411] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  688.335227][ T8411] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  688.351186][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  688.363071][ T8411] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  688.390613][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  688.402479][ T8411] Bluetooth: hci5: Suspend notifier action (1) failed: -4
[  688.431707][ T8411] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  688.455858][ T8411] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  688.479855][ T8411] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  688.491988][ T8411] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  688.501603][ T4416] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.529071][ T8411] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  688.559531][ T8411] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  688.625511][ T4416] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.677316][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  688.691091][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  688.701357][ T4456] bridge0: port 1(bridge_slave_0) entered blocking state
[  688.708524][ T4456] bridge0: port 1(bridge_slave_0) entered forwarding state
[  688.716849][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  688.733919][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  688.743371][ T4456] bridge0: port 2(bridge_slave_1) entered blocking state
[  688.750751][ T4456] bridge0: port 2(bridge_slave_1) entered forwarding state
[  688.815642][ T8271] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  690.092048][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout
[  690.149761][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  690.168066][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  690.182443][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  690.216100][ T8271] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  690.234749][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  690.261360][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  690.279423][ T4290] Bluetooth: hci1: command 0x0c1a tx timeout
[  690.297174][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  690.313276][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  690.347545][ T8271] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  690.369733][ T4290] Bluetooth: hci5: command 0x0c1a tx timeout
[  690.410199][ T8271] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  690.432083][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  690.444610][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  690.463525][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  690.492875][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  690.519450][ T4290] Bluetooth: hci3: command 0x0c1a tx timeout
[  690.525544][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout
[  690.550909][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  690.597199][ T8194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  690.818442][ T8226] 8021q: adding VLAN 0 to HW filter on device bond0
[  691.023815][ T8226] 8021q: adding VLAN 0 to HW filter on device team0
[  691.062922][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  691.090642][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  691.355197][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  691.372684][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  691.405048][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state
[  691.412230][ T4442] bridge0: port 1(bridge_slave_0) entered forwarding state
[  691.460854][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  692.177456][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  692.369592][ T4290] Bluetooth: hci1: command 0x0406 tx timeout
[  692.439491][ T4290] Bluetooth: hci5: command 0x0406 tx timeout
[  692.599518][ T4277] Bluetooth: hci3: command 0x0406 tx timeout
[  692.605678][ T4290] Bluetooth: hci2: command 0x0406 tx timeout
[  693.449086][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  693.800188][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state
[  693.807355][ T4442] bridge0: port 2(bridge_slave_1) entered forwarding state
[  693.819973][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  693.830126][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  693.856806][ T8271] 8021q: adding VLAN 0 to HW filter on device bond0
[  693.998954][ T8271] 8021q: adding VLAN 0 to HW filter on device team0
[  694.019399][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  694.052535][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  694.068416][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  694.079813][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  694.088687][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  694.097794][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  694.106697][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  694.123439][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  694.136235][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  694.145406][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  694.160249][ T8226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  694.180237][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  694.258286][ T8446] loop4: detected capacity change from 0 to 256
[  694.264851][ T5148] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  694.331863][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  694.369903][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  694.396403][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state
[  694.404929][ T4466] bridge0: port 1(bridge_slave_0) entered forwarding state
[  694.446141][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  694.454591][ T5148] usb 4-1: Using ep0 maxpacket: 32
[  694.467052][ T5148] usb 4-1: config 0 has no interfaces?
[  694.492347][ T5148] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  694.502772][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  694.525893][ T8194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  694.532453][ T5148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.552930][ T5148] usb 4-1: Product: syz
[  694.557176][ T5148] usb 4-1: Manufacturer: syz
[  694.577270][ T5148] usb 4-1: SerialNumber: syz
[  694.598894][ T5148] usb 4-1: config 0 descriptor??
[  694.722364][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  694.731658][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  694.742667][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  694.753314][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state
[  694.760500][ T4466] bridge0: port 2(bridge_slave_1) entered forwarding state
[  694.780920][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  696.139271][ T4317] usb 4-1: USB disconnect, device number 6
[  696.230374][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  696.281080][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  696.307269][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  696.397403][ T8271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  696.501598][ T8271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  696.557867][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  696.586215][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  696.702590][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  696.723188][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  696.735650][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  696.748764][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  696.757707][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  696.831551][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  696.852291][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  696.876188][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  697.017724][ T8226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  698.229114][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  698.539185][ T8489] xt_cgroup: path and classid specified
[  698.982609][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  699.504347][ T8194] device veth0_vlan entered promiscuous mode
[  699.511792][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  699.530183][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  699.593065][ T8271] 8021q: adding VLAN 0 to HW filter on device batadv0
[  699.636674][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  699.667666][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  699.694120][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  699.729557][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  699.738592][ T8499] ieee802154 phy0 wpan0: encryption failed: -22
[  699.795600][ T4416] device hsr_slave_0 left promiscuous mode
[  699.822051][ T4416] device hsr_slave_1 left promiscuous mode
[  699.838419][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0
[  699.862485][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1
[  699.904968][ T4416] device bridge_slave_1 left promiscuous mode
[  699.923315][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.946874][ T4416] device bridge_slave_0 left promiscuous mode
[  699.959555][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.985913][ T4416] device hsr_slave_0 left promiscuous mode
[  700.028073][ T4416] device hsr_slave_1 left promiscuous mode
[  700.035248][ T8504] loop3: detected capacity change from 0 to 512
[  700.066687][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  700.080232][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.089997][ T8504] EXT4-fs: Ignoring removed mblk_io_submit option
[  700.096487][ T8504] EXT4-fs: Ignoring removed bh option
[  700.102876][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  700.111131][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.122898][ T4416] device bridge_slave_1 left promiscuous mode
[  700.136521][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state
[  700.152031][ T8504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  700.154309][ T4416] device bridge_slave_0 left promiscuous mode
[  700.170301][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.225445][ T4416] device veth1_macvtap left promiscuous mode
[  700.231455][ T8504] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  700.242121][ T4416] device veth0_macvtap left promiscuous mode
[  700.248285][ T4416] device veth1_vlan left promiscuous mode
[  700.255056][ T4416] device veth0_vlan left promiscuous mode
[  700.747179][ T4416] team0 (unregistering): Port device team_slave_1 removed
[  700.786742][ T4416] team0 (unregistering): Port device team_slave_0 removed
[  700.865417][ T4271] EXT4-fs (loop3): unmounting filesystem.
[  700.913350][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  700.977625][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  701.099231][ T4416] bond0 (unregistering): Released all slaves
[  702.583663][ T4416] team0 (unregistering): Port device team_slave_1 removed
[  702.646070][ T4416] team0 (unregistering): Port device team_slave_0 removed
[  702.707266][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  702.762916][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  703.135271][ T4416] bond0 (unregistering): Released all slaves
[  703.250075][ T8194] device veth1_vlan entered promiscuous mode
[  703.265331][ T8518] device wg1 entered promiscuous mode
[  703.344148][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  703.380155][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  703.435245][ T8194] device veth0_macvtap entered promiscuous mode
[  703.476278][ T8226] device veth0_vlan entered promiscuous mode
[  703.497110][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  703.518593][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  703.548527][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  703.664272][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  703.848390][ T8194] device veth1_macvtap entered promiscuous mode
[  703.971426][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  704.020976][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  704.384979][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  704.400650][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  704.426628][ T8226] device veth1_vlan entered promiscuous mode
[  704.450159][ T8530] smc: net device vlan1 applied user defined pnetid SYZ2
[  704.485775][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  704.526209][ T8194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  704.571909][ T8194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  704.614411][ T8194] batman_adv: batadv0: Interface activated: batadv_slave_0
[  704.665590][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  704.725766][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  704.754122][ T8194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  704.779101][ T8194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  704.821353][ T8194] batman_adv: batadv0: Interface activated: batadv_slave_1
[  704.844805][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  704.875043][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  704.892508][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  704.930343][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  704.942997][ T8194] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  704.969031][ T8194] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  704.994305][ T8194] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  705.008639][ T8194] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  705.032389][ T8542] loop4: detected capacity change from 0 to 1024
[  705.043828][ T8542] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  705.092095][ T8226] device veth0_macvtap entered promiscuous mode
[  705.154080][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  705.220353][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  705.259839][ T8545] loop3: detected capacity change from 0 to 64
[  705.277226][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  705.315742][ T8226] device veth1_macvtap entered promiscuous mode
[  705.440681][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  705.497246][ T8545] hfs: request for non-existent node 131072 in B*Tree
[  705.507910][ T8545] hfs: request for non-existent node 131072 in B*Tree
[  705.677360][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  705.687796][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  705.699026][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  705.711402][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  705.728270][ T8271] device veth0_vlan entered promiscuous mode
[  705.772769][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  705.835777][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  705.865475][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  705.918930][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  705.941620][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  705.984518][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.005488][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.038890][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.065421][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.082296][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  706.111477][ T4466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  706.134293][ T4466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  706.145730][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  706.165990][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  706.180037][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  706.194858][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  706.204348][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  706.216518][ T8226] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  706.225846][ T8226] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  706.241073][ T8226] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  706.253479][ T8226] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  706.277247][ T8271] device veth1_vlan entered promiscuous mode
[  706.407931][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  706.427197][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  706.477677][ T8271] device veth0_macvtap entered promiscuous mode
[  706.511435][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  706.542734][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  706.558167][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  706.568190][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  706.597587][ T8271] device veth1_macvtap entered promiscuous mode
[  706.678606][ T5687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  706.722698][ T5687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  706.743558][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  706.772605][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  706.866401][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.909226][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.054133][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  707.065374][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.076672][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  707.097967][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  708.037916][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_0
[  708.048327][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  708.068733][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  708.098056][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  708.125572][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  708.150343][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  708.199296][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  708.278510][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_1
[  708.283349][ T8569] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  709.027881][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  709.060819][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  709.080157][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  709.092559][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  709.105263][ T8271] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  709.117044][ T8271] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  709.136411][ T8271] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  709.206466][ T8271] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  709.294052][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.570177][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.761305][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  709.860274][ T5687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.868181][ T5687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  710.059701][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  710.181448][ T5687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  710.201195][ T5687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  710.252471][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  717.562495][ T8631] random: crng reseeded on system resumption
[  718.112264][   T27] audit: type=1326 audit(1784284467.204:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.7.946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f285339de99 code=0x0
[  728.469247][ T4769] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  729.090631][ T4769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  729.139861][ T4769] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  729.184396][ T4769] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  729.278930][ T4769] usb 5-1: config 0 interface 0 has no altsetting 0
[  729.309578][ T4769] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  729.318699][ T4769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.498251][ T4769] usb 5-1: config 0 descriptor??
[  729.899229][ T4321] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  730.089305][ T4321] usb 4-1: Using ep0 maxpacket: 8
[  730.096844][ T4321] usb 4-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  730.123989][ T4321] usb 4-1: config 0 interface 0 has no altsetting 0
[  730.217143][ T4769] usbhid 5-1:0.0: can't add hid device: -71
[  730.241628][ T4321] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00
[  730.251369][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.265266][ T4769] usbhid: probe of 5-1:0.0 failed with error -71
[  730.267510][ T4321] usb 4-1: config 0 descriptor??
[  730.305963][ T4769] usb 5-1: USB disconnect, device number 5
[  730.868306][ T4321] hid (null): invalid report_count 2060869942
[  731.078448][ T4321] logitech-djreceiver 0003:046D:C52B.0001: collection stack underflow
[  731.976528][ T4321] logitech-djreceiver 0003:046D:C52B.0001: item 0 2 0 12 parsing failed
[  731.997329][ T4321] logitech-djreceiver 0003:046D:C52B.0001: logi_dj_probe: parse failed
[  732.005992][ T4321] logitech-djreceiver: probe of 0003:046D:C52B.0001 failed with error -22
[  732.044888][ T4321] usb 4-1: USB disconnect, device number 7
[  738.286799][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'.
[  739.301312][ T8750] loop5: detected capacity change from 0 to 4096
[  739.461214][ T8750] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  739.676251][ T8759] comedi comedi0: Minor 3 could not be opened
[  744.139479][ T8271] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  747.574668][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  747.581428][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  747.754695][ T8798] binder: 8797:8798 ioctl 4018620d 0 returned -22
[  747.762618][ T8798] binder: 8797:8798 ioctl c0306201 0 returned -14
[  747.769728][ T8798] binder: 8797:8798 ioctl c0306201 0 returned -14
[  747.981692][ T8816] bond1: (slave macvlan2): Opening slave failed
[  749.749690][ T8827] input: syz0 as /devices/virtual/input/input16
[  751.807050][ T8845] loop6: detected capacity change from 0 to 64
[  752.133693][ T8845] MINIX-fs: mounting file system with errors, running fsck is recommended
[  760.526289][ T8900] loop3: detected capacity change from 0 to 256
[  763.993883][ T8935] loop3: detected capacity change from 0 to 512
[  766.649376][ T8935] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  766.742597][ T8935] EXT4-fs (loop3): Test dummy encryption mode enabled
[  766.924244][ T8935] EXT4-fs: failed to create workqueue
[  767.727086][ T8935] EXT4-fs (loop3): mount failed
[  770.051938][ T8974] loop4: detected capacity change from 0 to 256
[  770.754890][ T8981] loop7: detected capacity change from 0 to 16
[  770.875252][ T8981] erofs: Unknown parameter '…*bs'
[  771.169837][ T8981] loop7: detected capacity change from 0 to 2048
[  771.240055][ T8981] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  777.125787][ T8226] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  778.440061][ T8226] EXT4-fs (loop7): unmounting filesystem.
[  780.199452][ T4290] Bluetooth: hci5: command 0x0406 tx timeout
[  781.845340][ T9047] loop5: detected capacity change from 0 to 512
[  781.880404][ T9047] EXT4-fs: Ignoring removed mblk_io_submit option
[  781.887632][ T9047] EXT4-fs: Ignoring removed bh option
[  783.808146][ T9047] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  784.736797][ T9047] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  784.976648][ T9063] loop7: detected capacity change from 0 to 256
[  784.990355][ T8271] EXT4-fs (loop5): unmounting filesystem.
[  785.254056][ T9067] IPVS: stopping backup sync thread 9071 ...
[  788.196320][ T9103] loop5: detected capacity change from 0 to 256
[  788.391442][ T9108] loop4: detected capacity change from 0 to 1024
[  789.752489][ T9108] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  790.439245][ T7542] Bluetooth: hci2: command 0x0406 tx timeout
[  793.848689][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state
[  794.674582][ T9133] loop7: detected capacity change from 0 to 256
[  795.692602][ T4290] Bluetooth: hci3: command 0x0406 tx timeout
[  798.154715][ T9169] loop7: detected capacity change from 0 to 1024
[  798.576978][  T129] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  798.877562][ T9169] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  799.569812][ T4769] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  799.982528][    C1] raw-gadget.1 gadget.6: ignoring, device is not running
[  800.191687][ T4769] usb 7-1: device descriptor read/64, error -32
[  801.489203][ T4769] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  801.496947][    C1] raw-gadget.1 gadget.6: ignoring, device is not running
[  801.630853][  T129] usb 6-1: unable to read config index 0 descriptor/start: -71
[  801.639386][  T129] usb 6-1: can't read configurations, error -71
[  801.659191][ T4769] usb 7-1: device descriptor read/64, error -32
[  801.789709][ T4769] usb usb7-port1: attempt power cycle
[  802.057773][ T9183] loop5: detected capacity change from 0 to 512
[  802.119416][ T9185] loop4: detected capacity change from 0 to 256
[  802.127384][ T9183] EXT4-fs: Ignoring removed mblk_io_submit option
[  802.192825][ T9183] EXT4-fs: Ignoring removed bh option
[  802.229279][ T4769] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  804.579291][ T4769] usb 7-1: device descriptor read/8, error -71
[  804.587422][ T9183] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  804.649469][ T9183] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  805.840833][ T8271] EXT4-fs (loop5): unmounting filesystem.
[  808.842933][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  808.849424][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  815.475754][ T9274] loop4: detected capacity change from 0 to 512
[  815.696430][ T9274] EXT4-fs: Ignoring removed mblk_io_submit option
[  815.860568][ T9274] EXT4-fs: Ignoring removed bh option
[  816.480221][ T9274] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  818.294783][ T9274] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  818.456725][ T9292] loop5: detected capacity change from 0 to 128
[  818.577534][ T9292] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  818.593481][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  818.675870][ T9292] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  824.274280][ T9328] loop7: detected capacity change from 0 to 256
[  825.129191][   T27] audit: type=1800 audit(1784284574.227:25): pid=9329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1098" name="file0" dev="loop7" ino=1048813 res=0 errno=0
[  826.842312][ T9344] loop7: detected capacity change from 0 to 256
[  833.349230][  T129] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  833.478359][ T9392] loop3: detected capacity change from 0 to 512
[  833.520297][ T9392] EXT4-fs: Ignoring removed mblk_io_submit option
[  833.526914][ T9392] EXT4-fs: Ignoring removed bh option
[  833.569276][  T129] usb 6-1: Using ep0 maxpacket: 8
[  835.277582][ T9392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  835.302207][ T9392] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  835.313049][  T129] usb 6-1: device descriptor read/all, error -71
[  836.551786][ T4271] EXT4-fs (loop3): unmounting filesystem.
[  836.615882][ T9409] loop5: detected capacity change from 0 to 256
[  836.815930][ T9414] loop6: detected capacity change from 0 to 256
[  843.974877][ T9458] loop7: detected capacity change from 0 to 256
[  844.936535][ T4321] libceph: connect (1)[c::]:6789 error -101
[  844.959307][ T4321] libceph: mon0 (1)[c::]:6789 connect error
[  844.966087][ T9464] ceph: No mds server is up or the cluster is laggy
[  845.251482][ T9474] loop7: detected capacity change from 0 to 256
[  846.217999][ T9480] loop5: detected capacity change from 0 to 512
[  846.254775][ T9480] EXT4-fs: Ignoring removed mblk_io_submit option
[  846.389914][ T9480] EXT4-fs: Ignoring removed bh option
[  846.459758][ T9484] loop3: detected capacity change from 0 to 1024
[  846.471161][ T9484] hfsplus: unable to parse mount options
[  846.758274][ T9480] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  846.944098][ T9480] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  847.695670][ T8271] EXT4-fs (loop5): unmounting filesystem.
[  852.337143][ T9536] loop7: detected capacity change from 0 to 1024
[  852.346543][ T9536] hfsplus: unable to parse mount options
[  855.132096][ T9533] option changes via remount are deprecated (pid=9532 comm=syz.5.1138)
[  856.485425][ T9555] loop7: detected capacity change from 0 to 512
[  856.529442][ T9555] EXT4-fs: Ignoring removed mblk_io_submit option
[  856.591192][ T9555] EXT4-fs: Ignoring removed bh option
[  856.701855][ T9560] loop3: detected capacity change from 0 to 256
[  856.869308][ T9555] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  856.880360][ T9555] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  859.182351][ T9576] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[  859.200246][ T8226] EXT4-fs (loop7): unmounting filesystem.
[  862.695804][ T9599] loop5: detected capacity change from 0 to 1024
[  862.706711][ T9599] hfsplus: unable to parse mount options
[  866.063909][ T9604] option changes via remount are deprecated (pid=9603 comm=syz.3.1152)
[  867.031392][ T9624] loop5: detected capacity change from 0 to 512
[  867.038654][ T9624] EXT4-fs: Ignoring removed mblk_io_submit option
[  867.065954][ T9624] EXT4-fs: Ignoring removed bh option
[  867.072675][ T9625] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  867.139860][ T9624] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  867.159427][ T9624] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  867.698595][ T9637] loop4: detected capacity change from 0 to 256
[  867.770629][ T9640] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[  867.847897][ T9641] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[  868.653634][ T8271] EXT4-fs (loop5): unmounting filesystem.
[  868.886943][ T9647] loop5: detected capacity change from 0 to 256
[  870.282554][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  870.289110][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  870.972546][ T9661] loop3: detected capacity change from 0 to 256
[  873.152549][ T9682] xt_cgroup: path and classid specified
[  874.512334][ T9685] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  874.546008][ T9688] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  875.900157][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout
[  876.022527][ T9685] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  876.040012][ T9685] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  876.064568][ T9685] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  876.103035][ T9685] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  876.461847][ T9702] loop5: detected capacity change from 0 to 256
[  878.970284][ T4290] Bluetooth: hci5: command 0x0c1a tx timeout
[  878.976589][ T4290] Bluetooth: hci1: command 0x0c1a tx timeout
[  878.982874][ T7542] Bluetooth: hci3: command 0x0c1a tx timeout
[  878.989006][ T7542] Bluetooth: hci2: command 0x0c1a tx timeout
[  879.303312][ T9721] loop4: detected capacity change from 0 to 256
[  881.264907][ T9724] loop5: detected capacity change from 0 to 256
[  882.716910][ T9748] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[  882.910650][ T9749] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[  884.705779][ T9757] loop6: detected capacity change from 0 to 1024
[  884.713781][ T9757] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  886.135787][ T9763] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  886.174650][ T9763] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  886.181295][ T9763] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  886.187437][ T9763] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  886.193928][ T9763] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  886.564437][ T9775] loop6: detected capacity change from 0 to 256
[  888.046982][ T9715] Bluetooth: hci0: command 0x0c1a tx timeout
[  888.199346][ T9715] Bluetooth: hci3: command 0x0c1a tx timeout
[  888.205547][ T9715] Bluetooth: hci2: command 0x0c1a tx timeout
[  888.210027][ T4277] Bluetooth: hci5: command 0x0c1a tx timeout
[  888.217604][ T4277] Bluetooth: hci1: command 0x0c1a tx timeout
[  888.838209][ T4321] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  889.320383][ T4321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  889.940760][ T4321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  889.951001][ T4321] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  889.960403][ T4321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  889.976735][ T4321] usb 6-1: config 0 descriptor??
[  890.192764][ T4321] usbhid 6-1:0.0: can't add hid device: -71
[  890.198896][ T4321] usbhid: probe of 6-1:0.0 failed with error -71
[  890.259168][ T4321] usb 6-1: USB disconnect, device number 6
[  890.746314][ T9801] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[  890.909143][ T4321] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  891.013239][ T9803] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[  891.099008][ T4321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  891.574032][ T4321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  891.584287][ T4321] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  891.585513][ T9806] loop7: detected capacity change from 0 to 16
[  891.593404][ T4321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.600557][ T4321] usb 6-1: config 0 descriptor??
[  891.703303][ T9806] erofs: Unknown parameter '…*bs'
[  891.772506][ T8687] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  891.797696][ T9806] loop7: detected capacity change from 0 to 2048
[  891.818879][ T4321] usb 6-1: can't set config #0, error -71
[  891.856629][ T4321] usb 6-1: USB disconnect, device number 7
[  892.019969][ T9806] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  892.645082][ T9821] loop5: detected capacity change from 0 to 1024
[  892.655048][ T9821] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  892.716595][ T9829] loop3: detected capacity change from 0 to 256
[  893.747859][ T8226] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  894.732711][ T9840] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  894.739650][ T9840] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  894.889364][ T9840] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  894.896228][ T8226] EXT4-fs (loop7): unmounting filesystem.
[  894.935304][ T9840] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  894.969619][ T9840] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  895.879179][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout
[  896.789247][ T7542] Bluetooth: hci5: command 0x0c1a tx timeout
[  896.789349][ T4277] Bluetooth: hci1: command 0x0c1a tx timeout
[  896.999479][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout
[  896.999653][ T7542] Bluetooth: hci2: command 0x0c1a tx timeout
[  898.303183][ T9868] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[  898.377827][ T9870] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[  901.195602][ T9895] random: crng reseeded on system resumption
[  903.619490][   T27] audit: type=1326 audit(1784284652.727:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.4.1208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f215619de99 code=0x0
[  908.612094][ T9940] loop6: detected capacity change from 0 to 256
[  909.896863][ T9946] loop4: detected capacity change from 0 to 256
[  912.527860][ T9958] smc: net device vlan1 applied user defined pnetid SYZ2
[  913.016286][ T9959] loop3: detected capacity change from 0 to 16
[  913.092051][ T9961] loop6: detected capacity change from 0 to 256
[  913.151268][ T9959] erofs: Unknown parameter '…*bs'
[  917.005454][ T9973] loop3: detected capacity change from 0 to 256
[  920.850342][ T9992] loop7: detected capacity change from 0 to 256
[  922.978383][T10008] smc: net device vlan1 applied user defined pnetid SYZ2
[  927.617163][T10037] loop5: detected capacity change from 0 to 256
[  928.158413][T10041] loop3: detected capacity change from 0 to 256
[  929.007487][   T27] audit: type=1800 audit(1784284678.107:27): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1243" name="file0" dev="loop5" ino=1048857 res=0 errno=0
[  930.267972][T10061] device wg1 entered promiscuous mode
[  931.372904][T10063] loop3: detected capacity change from 0 to 256
[  931.736295][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  931.819192][   T27] audit: type=1326 audit(1784284680.917:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.6.1251" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe855f9de99 code=0x0
[  931.936035][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  934.179777][ T7542] Bluetooth: hci3: command 0x0405 tx timeout
[  935.657122][T10093] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  935.735298][T10093] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  935.865516][T10102] loop3: detected capacity change from 0 to 256
[  935.926637][T10093] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  935.989502][T10093] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  936.235951][T10093] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  938.149217][   T27] audit: type=1326 audit(1784284686.737:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10120 comm="syz.6.1262" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe855f9de99 code=0x0
[  938.300105][ T7542] Bluetooth: hci0: command 0x0c1a tx timeout
[  938.306223][ T7542] Bluetooth: hci1: command 0x0c1a tx timeout
[  938.312691][ T9715] Bluetooth: hci5: command 0x0c1a tx timeout
[  938.318736][ T9715] Bluetooth: hci2: command 0x0c1a tx timeout
[  938.324807][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout
[  939.429785][T10139] loop6: detected capacity change from 0 to 256
[  942.129930][T10168] loop3: detected capacity change from 0 to 256
[  942.850673][T10165] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  942.993285][T10165] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  943.225287][T10165] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  943.591320][T10165] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  943.914941][T10165] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  944.199127][T10127] Bluetooth: hci0: command 0x0c1a tx timeout
[  944.587986][   T27] audit: type=1326 audit(1784284693.687:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.4.1275" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f215619de99 code=0x0
[  944.999128][ T7542] Bluetooth: hci1: command 0x0c1a tx timeout
[  945.239352][T10127] Bluetooth: hci5: command 0x0c1a tx timeout
[  945.639153][T10127] Bluetooth: hci2: command 0x0c1a tx timeout
[  945.960496][T10127] Bluetooth: hci3: command 0x0c1a tx timeout
[  947.029132][T10075] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  947.293507][T10075] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  947.382906][T10210] loop3: detected capacity change from 0 to 512
[  947.399357][T10075] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  947.577444][T10075] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  947.604085][T10210] EXT4-fs: Ignoring removed mblk_io_submit option
[  947.698763][T10210] EXT4-fs: Ignoring removed bh option
[  947.725048][T10075] usb 7-1: config 0 interface 0 has no altsetting 0
[  947.910909][T10075] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  947.921467][T10075] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  947.932205][T10075] usb 7-1: config 0 descriptor??
[  947.967775][T10210] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  947.979562][T10210] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  948.548803][T10228] device wg1 entered promiscuous mode
[  948.881542][T10075] usbhid 7-1:0.0: can't add hid device: -71
[  948.887653][T10075] usbhid: probe of 7-1:0.0 failed with error -71
[  948.997074][T10075] usb 7-1: USB disconnect, device number 6
[  949.406670][T10239] overlayfs: overlapping lowerdir path
[  950.053467][T10236] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  950.083022][T10236] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  950.095031][T10241] loop5: detected capacity change from 0 to 256
[  950.230672][T10236] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  950.290763][T10231] loop4: detected capacity change from 0 to 32768
[  950.319435][T10236] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  950.333369][T10236] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  950.956946][   T27] audit: type=1326 audit(1784284700.057:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10247 comm="syz.6.1288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe855f9de99 code=0x0
[  951.479413][T10127] Bluetooth: hci0: command 0x0c1a tx timeout
[  951.717329][T10231] XFS (loop4): Mounting V5 Filesystem
[  951.783716][T10231] XFS (loop4): Ending clean mount
[  951.852154][ T4271] EXT4-fs (loop3): unmounting filesystem.
[  952.120301][T10127] Bluetooth: hci1: command 0x0c1a tx timeout
[  952.425164][ T7542] Bluetooth: hci5: command 0x0c1a tx timeout
[  952.432066][ T4290] Bluetooth: hci3: command 0x0c1a tx timeout
[  952.438139][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout
[  952.496307][ T4272] XFS (loop4): Unmounting Filesystem
[  956.752003][T10290] loop5: detected capacity change from 0 to 256
[  958.852845][T10302] loop3: detected capacity change from 0 to 512
[  958.860514][T10302] EXT4-fs: Ignoring removed mblk_io_submit option
[  958.867091][T10302] EXT4-fs: Ignoring removed bh option
[  959.771750][T10302] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  959.824445][T10302] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  960.185573][T10315] loop4: detected capacity change from 0 to 256
[  961.063037][   T27] audit: type=1326 audit(1784284710.167:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10317 comm="syz.7.1299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f285339de99 code=0x0
[  963.070360][ T4271] EXT4-fs (loop3): unmounting filesystem.
[  963.504923][T10342] loop3: detected capacity change from 0 to 256
[  964.861517][T10356] loop5: detected capacity change from 0 to 256
[  967.497336][   T27] audit: type=1800 audit(1784284716.597:33): pid=10362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1309" name="file0" dev="loop5" ino=1048880 res=0 errno=0
[  967.601952][T10369] loop4: detected capacity change from 0 to 256
[  968.784388][T10379] loop7: detected capacity change from 0 to 512
[  968.791740][T10379] EXT4-fs: Ignoring removed mblk_io_submit option
[  968.798227][T10379] EXT4-fs: Ignoring removed bh option
[  969.008794][T10379] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  969.114278][   T27] audit: type=1326 audit(1784284718.217:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10377 comm="syz.6.1314" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe855f9de99 code=0x0
[  969.617001][T10379] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  970.747969][T10403] loop5: detected capacity change from 0 to 256
[  974.895693][ T8226] EXT4-fs (loop7): unmounting filesystem.
[  975.601801][   T27] audit: type=1326 audit(1784284724.707:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.3.1329" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2865b9de99 code=0x0
[  976.922815][T10451] loop3: detected capacity change from 0 to 256
[  983.426270][   T27] audit: type=1326 audit(1784284732.527:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.3.1342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2865b9de99 code=0x0
[  986.543273][T10510] xt_cgroup: path and classid specified
[  991.750626][   T27] audit: type=1326 audit(1784284739.727:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.7.1354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f285339de99 code=0x0
[  994.421962][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  994.428342][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  996.819364][T10595] loop6: detected capacity change from 0 to 512
[  996.960807][T10595] EXT4-fs: Ignoring removed mblk_io_submit option
[  997.009520][T10595] EXT4-fs: Ignoring removed bh option
[  997.560857][T10595] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  997.629255][T10595] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  997.989258][   T27] audit: type=1326 audit(1784284747.087:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f285339de99 code=0x0
[ 1002.620155][ T8194] EXT4-fs (loop6): unmounting filesystem.
[ 1003.209463][T10639] loop5: detected capacity change from 0 to 256
[ 1003.296142][T10642] loop7: detected capacity change from 0 to 256
[ 1008.969304][   T27] audit: type=1326 audit(1784284757.847:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10680 comm="syz.7.1376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f285339de99 code=0x0
[ 1010.397312][T10697] loop4: detected capacity change from 0 to 512
[ 1010.631889][T10697] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1010.638421][T10697] EXT4-fs: Ignoring removed bh option
[ 1013.281999][T10697] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4.
[ 1013.713939][ T8704] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1013.864143][T10717] device wg1 entered promiscuous mode
[ 1014.999190][ T4763] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[ 1015.240236][ T4763] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1015.304865][ T4763] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1015.405078][ T4763] usb 8-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1015.419272][ T4763] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1015.426141][ T4763] usb 8-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1015.435793][ T4763] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.481139][ T4763] usb 8-1: config 0 descriptor??
[ 1015.953086][T10730] loop5: detected capacity change from 0 to 256
[ 1018.789965][ T4763] usbhid 8-1:0.0: can't add hid device: -71
[ 1018.797279][ T4763] usbhid: probe of 8-1:0.0 failed with error -71
[ 1018.942519][   T27] audit: type=1326 audit(1784284768.047:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.3.1390" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2865b9de99 code=0x0
[ 1019.471966][ T4763] usb 8-1: USB disconnect, device number 2
[ 1021.146645][T10789] loop7: detected capacity change from 0 to 512
[ 1021.255039][T10789] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1021.288247][T10792] loop5: detected capacity change from 0 to 256
[ 1021.335642][T10789] EXT4-fs: Ignoring removed bh option
[ 1023.650330][T10789] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1023.777017][T10789] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1025.381947][ T8226] EXT4-fs (loop7): unmounting filesystem.
[ 1025.832946][T10826] loop4: detected capacity change from 0 to 256
[ 1026.369323][   T27] audit: type=1326 audit(1784284775.337:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.7.1403" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f285339de99 code=0x0
[ 1029.718785][T10852] loop3: detected capacity change from 0 to 256
[ 1031.120456][T10869] loop7: detected capacity change from 0 to 256
[ 1031.280561][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'.
[ 1035.321717][T10897] loop4: detected capacity change from 0 to 512
[ 1037.702470][T10908] loop4: detected capacity change from 0 to 256
[ 1038.935325][T10920] loop3: detected capacity change from 0 to 256
[ 1039.329157][ T4769] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[ 1039.356545][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1423'.
[ 1039.531820][ T4769] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1039.573244][ T4769] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1039.622937][ T4769] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1039.692792][ T4769] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1039.713024][ T4769] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1039.789141][ T4769] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1039.854965][ T4769] usb 7-1: config 0 descriptor??
[ 1042.347092][T10944] loop4: detected capacity change from 0 to 256
[ 1043.842481][ T4769] usbhid 7-1:0.0: can't add hid device: -71
[ 1043.848628][ T4769] usbhid: probe of 7-1:0.0 failed with error -71
[ 1043.897843][ T4769] usb 7-1: USB disconnect, device number 7
[ 1048.272817][T10971] loop3: detected capacity change from 0 to 256
[ 1054.329651][T11008] overlayfs: missing 'lowerdir'
[ 1054.603280][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.609746][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.658439][T11011] loop7: detected capacity change from 0 to 256
[ 1058.572945][T11028] loop4: detected capacity change from 0 to 256
[ 1059.586179][ T4411] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1061.943405][T10127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1061.954688][T10127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1061.972224][T10127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1061.982229][T10127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1061.991879][T10127] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1062.012070][T10127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1062.099834][ T4411] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.292914][ T4411] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1063.331267][ T4411] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1064.770873][ T4290] Bluetooth: hci2: command 0x0405 tx timeout
[ 1064.773842][T10127] Bluetooth: hci3: command 0x0409 tx timeout
[ 1066.072248][T11071] loop4: detected capacity change from 0 to 256
[ 1066.839112][T10127] Bluetooth: hci3: command 0x041b tx timeout
[ 1067.078430][T11084] loop4: detected capacity change from 0 to 1024
[ 1067.113759][T11084] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1067.143690][T11084] autofs4:pid:11084:autofs_fill_super: called with bogus options
[ 1067.806000][T11041] chnl_net:caif_netlink_parms(): no params data found
[ 1068.094402][T11088] overlayfs: missing 'lowerdir'
[ 1068.350647][T11073] loop3: detected capacity change from 0 to 32768
[ 1068.521348][T11073] XFS (loop3): Mounting V5 Filesystem
[ 1068.555289][T11041] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1068.562699][T11041] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1068.571457][T11041] device bridge_slave_0 entered promiscuous mode
[ 1068.699571][T11041] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1068.718529][T11041] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1068.975234][T10127] Bluetooth: hci3: command 0x040f tx timeout
[ 1069.016760][T11073] XFS (loop3): Ending clean mount
[ 1069.025406][T11041] device bridge_slave_1 entered promiscuous mode
[ 1070.032927][ T4271] XFS (loop3): Unmounting Filesystem
[ 1070.147412][T11041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1071.984244][T10127] Bluetooth: hci3: command 0x0419 tx timeout
[ 1072.066509][T11041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1075.363251][T11041] team0: Port device team_slave_0 added
[ 1075.391554][T11041] team0: Port device team_slave_1 added
[ 1075.906257][T11041] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1075.918126][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1076.005884][T11041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1076.064855][T11041] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1076.082317][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1076.155942][T11041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1076.295830][T11154] loop4: detected capacity change from 0 to 256
[ 1076.404243][T11155] loop6: detected capacity change from 0 to 1024
[ 1076.416964][T11155] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1076.462575][T11155] autofs4:pid:11155:autofs_fill_super: called with bogus options
[ 1077.407475][T11041] device hsr_slave_0 entered promiscuous mode
[ 1077.480157][T11161] loop7: detected capacity change from 0 to 256
[ 1077.497341][T11041] device hsr_slave_1 entered promiscuous mode
[ 1077.538540][T11041] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1077.580646][T11041] Cannot create hsr debugfs directory
[ 1077.609279][ T4411] device hsr_slave_0 left promiscuous mode
[ 1077.642563][ T4411] device hsr_slave_1 left promiscuous mode
[ 1077.933205][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1078.074189][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1078.286124][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1078.326226][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1078.353712][ T4411] device bridge_slave_1 left promiscuous mode
[ 1078.366972][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1078.386183][ T4411] device bridge_slave_0 left promiscuous mode
[ 1078.392813][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1078.497556][T11148] loop3: detected capacity change from 0 to 32768
[ 1078.535493][ T4411] device veth1_macvtap left promiscuous mode
[ 1078.549474][ T4411] device veth0_macvtap left promiscuous mode
[ 1078.575445][ T4411] device veth1_vlan left promiscuous mode
[ 1078.591618][ T4411] device veth0_vlan left promiscuous mode
[ 1078.604194][T11174] loop7: detected capacity change from 0 to 256
[ 1078.678875][T11148] XFS (loop3): Mounting V5 Filesystem
[ 1078.760428][T11148] XFS (loop3): Ending clean mount
[ 1078.929914][ T4271] XFS (loop3): Unmounting Filesystem
[ 1083.658718][ T4411] smc: removing net device vlan1 with user defined pnetid SYZ2
[ 1084.823660][ T4411] team0 (unregistering): Port device team_slave_1 removed
[ 1084.957083][ T4411] team0 (unregistering): Port device team_slave_0 removed
[ 1085.158468][ T4411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1085.302816][T11222] loop4: detected capacity change from 0 to 256
[ 1085.340516][ T4411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1085.627391][T11225] loop6: detected capacity change from 0 to 256
[ 1086.527864][T11230] loop4: detected capacity change from 0 to 2048
[ 1086.653065][T11230] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1087.244453][T11232] loop6: detected capacity change from 0 to 32768
[ 1088.411385][T11232] XFS (loop6): Mounting V5 Filesystem
[ 1088.474843][T11232] XFS (loop6): Ending clean mount
[ 1088.640876][ T4411] bond0 (unregistering): Released all slaves
[ 1089.181993][ T8194] XFS (loop6): Unmounting Filesystem
[ 1090.009839][T11041] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1090.040181][T11041] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1090.082617][T11041] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1090.166374][T11041] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1091.379402][T11041] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1091.539905][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1091.589903][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1091.622114][T11041] 8021q: adding VLAN 0 to HW filter on device team0
[ 1091.689997][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1091.747487][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1091.796465][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1091.803713][ T4443] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1091.865068][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1091.957471][T11250] loop7: detected capacity change from 0 to 32768
[ 1091.970530][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1092.028051][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1092.060830][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1092.068041][ T4443] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1092.147776][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1092.235750][T11250] XFS (loop7): Mounting V5 Filesystem
[ 1092.254812][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1093.780094][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1093.845580][T11250] XFS (loop7): log mount failed
[ 1093.972057][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1094.030246][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1094.077146][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1094.110834][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1094.162798][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1094.246814][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1094.277874][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1094.307913][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1094.342164][T11041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1095.110962][T11299] loop7: detected capacity change from 0 to 256
[ 1095.205081][T11301] loop3: detected capacity change from 0 to 16
[ 1095.858023][T11301] erofs: Unknown parameter '…*bs'
[ 1096.804328][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1096.822295][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1096.885690][T11041] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1097.111834][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1495'.
[ 1101.943521][T11346] loop7: detected capacity change from 0 to 256
[ 1102.391341][T11353] loop4: detected capacity change from 0 to 256
[ 1102.467434][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1102.494515][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1102.612422][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1102.645188][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1102.694906][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1103.693266][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1103.733605][T11041] device veth0_vlan entered promiscuous mode
[ 1103.831055][T11041] device veth1_vlan entered promiscuous mode
[ 1103.877592][T11365] loop7: detected capacity change from 0 to 256
[ 1103.933412][T11041] device veth0_macvtap entered promiscuous mode
[ 1103.983537][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1104.179515][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1104.379648][T11041] device veth1_macvtap entered promiscuous mode
[ 1104.520788][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1104.606783][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1104.728253][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1104.739203][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1104.749469][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1104.760923][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1104.771032][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1104.781581][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1104.793872][T11041] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1104.811335][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1104.821961][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1104.832806][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1104.854805][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1104.865476][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1104.889052][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1104.936207][T11041] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1104.962103][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1104.991019][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1105.005770][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1105.950664][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1105.967486][T11041] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1106.019244][T11041] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1106.028042][T11041] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1106.085642][T11041] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1106.350372][ T4474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1106.358275][ T4474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1106.409870][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1106.480244][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1106.488151][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1106.537288][T11364] loop3: detected capacity change from 0 to 32768
[ 1106.539908][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1106.735689][T11364] XFS (loop3): Mounting V5 Filesystem
[ 1106.956164][T11364] XFS (loop3): Ending clean mount
[ 1107.287643][ T4271] XFS (loop3): Unmounting Filesystem
[ 1109.868568][T11420] loop8: detected capacity change from 0 to 256
[ 1117.051971][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1117.058340][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.155430][T11456] loop3: detected capacity change from 0 to 32768
[ 1117.363919][T11477] loop4: detected capacity change from 0 to 1024
[ 1117.376506][T11477] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1117.404625][T11477] autofs4:pid:11477:autofs_fill_super: called with bogus options
[ 1117.464200][T11456] XFS (loop3): Mounting V5 Filesystem
[ 1118.096680][T11456] XFS (loop3): Ending clean mount
[ 1118.249718][ T4271] XFS (loop3): Unmounting Filesystem
[ 1120.390198][T11502] loop6: detected capacity change from 0 to 256
[ 1121.622007][T11507] loop8: detected capacity change from 0 to 32768
[ 1121.662843][T11507] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1121.671584][T11507] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1121.842421][T11507] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 1121.864758][  T129] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1121.881963][  T129] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1123.356008][T11516] IPVS: stopping backup sync thread 9625 ...
[ 1124.256324][  T129] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 2374ms
[ 1124.266895][  T129] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1124.273795][T11507] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1124.376005][T11507] gfs2: fsid=syz:syz.0: can't start quotad thread: -4
[ 1125.032758][T11538] loop6: detected capacity change from 0 to 1024
[ 1125.058614][T11538] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1125.085293][T11538] autofs4:pid:11538:autofs_fill_super: called with bogus options
[ 1129.291694][T11556] loop8: detected capacity change from 0 to 16
[ 1129.344006][T11556] erofs: Unknown parameter '…*bs'
[ 1130.413507][T11566] loop7: detected capacity change from 0 to 256
[ 1133.334815][T11595] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[ 1133.336315][T11596] IPVS: stopping backup sync thread 11595 ...
[ 1136.575612][   T27] audit: type=1326 audit(1784284885.157:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11621 comm="syz.6.1550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe855f9de99 code=0x0
[ 1144.250637][   T27] audit: type=1326 audit(1784284892.547:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz.4.1561" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f215619de99 code=0x0
[ 1145.256249][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1563'.
[ 1147.036756][T11718] xt_cgroup: path and classid specified
[ 1150.676198][T11751] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1150.789119][T11751] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1152.273004][T11758] loop6: detected capacity change from 0 to 256
[ 1153.439862][T11776] xt_cgroup: path and classid specified
[ 1155.298250][T11772] loop8: detected capacity change from 0 to 32768
[ 1157.444526][T11803] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1157.619674][T11803] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1157.689238][T11803] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1157.722925][T11803] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1157.743116][T11803] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1157.806313][T11803] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1157.912840][T11803] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[ 1158.367083][T11821] loop4: detected capacity change from 0 to 256
[ 1158.727730][T10127] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1159.151278][T11830] loop7: detected capacity change from 0 to 1024
[ 1159.649170][T10127] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1159.655437][T10127] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1159.809119][ T7542] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1159.815324][T10127] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1159.934695][T11830] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1159.974067][T11830] autofs4:pid:11830:autofs_fill_super: called with bogus options
[ 1160.310633][T11835] loop8: detected capacity change from 0 to 256
[ 1161.879038][T10127] Bluetooth: hci3: command 0x0406 tx timeout
[ 1163.284519][T11854] xt_cgroup: path and classid specified
[ 1163.849186][ T4317] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[ 1163.959135][T10127] Bluetooth: hci3: command 0x0405 tx timeout
[ 1164.043267][ T4317] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1164.762032][T11857] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1164.762246][ T4317] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1164.779421][ T4317] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1164.792608][ T4317] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1164.799646][ T4317] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1164.808732][ T4317] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1164.825540][ T4317] usb 9-1: config 0 descriptor??
[ 1164.939548][T11857] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1164.979514][T11857] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1165.021437][T11857] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1165.068520][T11857] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1165.095586][T11857] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1165.305649][ T4317] usbhid 9-1:0.0: can't add hid device: -71
[ 1165.321050][ T4317] usbhid: probe of 9-1:0.0 failed with error -71
[ 1165.454993][ T4317] usb 9-1: USB disconnect, device number 2
[ 1165.474357][T11857] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[ 1165.566110][T11863] smc: net device vlan1 applied user defined pnetid SYZ2
[ 1167.259050][T10127] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1167.265162][T10127] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1167.273607][ T4290] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1167.273629][ T7542] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1167.279832][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1169.319419][T11872] Bluetooth: hci3: command 0x0406 tx timeout
[ 1169.404036][T11882] loop7: detected capacity change from 0 to 32768
[ 1170.371036][T11882] XFS (loop7): Mounting V5 Filesystem
[ 1170.462032][T11882] XFS (loop7): Ending clean mount
[ 1171.480591][T11915] loop3: detected capacity change from 0 to 1024
[ 1171.495818][T11915] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1171.512488][T11915] autofs4:pid:11915:autofs_fill_super: called with bogus options
[ 1171.532355][ T8226] XFS (loop7): Unmounting Filesystem
[ 1172.528284][T11918] device wg1 entered promiscuous mode
[ 1173.601719][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'.
[ 1174.725774][T11927] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1174.756447][T11938] loop7: detected capacity change from 0 to 256
[ 1174.914608][T11927] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1174.963360][T11927] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1175.010161][T11927] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1175.033918][T11927] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1176.039270][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1176.341531][T11952] loop7: detected capacity change from 0 to 256
[ 1176.919066][ T4277] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1176.999172][ T4277] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1177.079399][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1177.085481][T11872] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1177.484031][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.491934][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1179.409092][T10075] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[ 1179.529096][ T4317] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1179.611486][T10075] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1179.639977][T10075] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1179.669254][T10075] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1179.707797][T10075] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1179.719538][ T4317] usb 8-1: Using ep0 maxpacket: 32
[ 1179.726686][ T4317] usb 8-1: config 0 has an invalid interface number: 132 but max is 0
[ 1179.739231][T10075] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1179.772152][ T4317] usb 8-1: config 0 has no interface number 0
[ 1179.790073][T10075] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1179.810230][ T4317] usb 8-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1179.875986][T10075] usb 7-1: config 0 descriptor??
[ 1181.515446][ T4317] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1181.622746][ T4317] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1181.734846][ T4317] usb 8-1: Product: syz
[ 1181.787017][ T4317] usb 8-1: Manufacturer: syz
[ 1181.844500][ T4317] usb 8-1: SerialNumber: syz
[ 1182.072527][ T4317] usb 8-1: config 0 descriptor??
[ 1182.287643][T10075] usbhid 7-1:0.0: can't add hid device: -71
[ 1182.314871][T10075] usbhid: probe of 7-1:0.0 failed with error -71
[ 1182.436274][T11979] loop4: detected capacity change from 0 to 256
[ 1182.453572][T10075] usb 7-1: USB disconnect, device number 8
[ 1182.538752][ T4321] usb 8-1: USB disconnect, device number 3
[ 1182.856488][T11986] loop7: detected capacity change from 0 to 256
[ 1183.049508][T11990] loop8: detected capacity change from 0 to 1024
[ 1183.076119][T11990] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1183.308542][T11990] autofs4:pid:11990:autofs_fill_super: called with bogus options
[ 1184.385958][T12009] loop7: detected capacity change from 0 to 256
[ 1184.806075][T12028] loop8: detected capacity change from 0 to 256
[ 1187.509029][ T4321] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1189.249016][ T4321] usb 9-1: Using ep0 maxpacket: 32
[ 1189.256351][ T4321] usb 9-1: config 0 has an invalid interface number: 132 but max is 0
[ 1189.291924][T12055] loop4: detected capacity change from 0 to 256
[ 1189.317405][ T4321] usb 9-1: config 0 has no interface number 0
[ 1189.365811][ T4321] usb 9-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1189.465093][ T4321] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1189.529060][ T4321] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1189.562946][ T4321] usb 9-1: Product: syz
[ 1189.582291][ T4321] usb 9-1: Manufacturer: syz
[ 1189.598170][ T4321] usb 9-1: SerialNumber: syz
[ 1189.619379][ T4321] usb 9-1: config 0 descriptor??
[ 1190.689805][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1632'.
[ 1191.617601][T12074] loop4: detected capacity change from 0 to 1024
[ 1191.628787][T12074] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1191.655801][T12074] autofs4:pid:12074:autofs_fill_super: called with bogus options
[ 1192.149227][T12053] usb 9-1: USB disconnect, device number 3
[ 1192.337744][T12079] loop4: detected capacity change from 0 to 256
[ 1192.372250][   T27] audit: type=1326 audit(1784284941.477:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12076 comm="syz.6.1634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe855f9de99 code=0x0
[ 1193.221066][T12090] loop7: detected capacity change from 0 to 256
[ 1193.738989][T12099] smc: net device vlan1 applied user defined pnetid SYZ2
[ 1194.235181][T12103] loop3: detected capacity change from 0 to 256
[ 1197.936803][T12126] loop4: detected capacity change from 0 to 256
[ 1199.064501][T12136] loop8: detected capacity change from 0 to 256
[ 1199.273019][T12140] loop4: detected capacity change from 0 to 256
[ 1204.104991][T12166] loop4: detected capacity change from 0 to 256
[ 1204.288128][T12169] loop6: detected capacity change from 0 to 256
[ 1205.529098][ T5148] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[ 1205.812177][T12198] loop4: detected capacity change from 0 to 256
[ 1205.842292][ T5148] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1205.908201][ T5148] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1206.775132][ T5148] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1206.805876][ T5148] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1206.822991][ T5148] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1206.846953][ T5148] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1206.880289][ T5148] usb 9-1: config 0 descriptor??
[ 1207.497031][ T5148] usbhid 9-1:0.0: can't add hid device: -71
[ 1207.576283][T12215] smc: net device vlan1 applied user defined pnetid SYZ2
[ 1207.654794][ T5148] usbhid: probe of 9-1:0.0 failed with error -71
[ 1208.806180][ T5148] usb 9-1: USB disconnect, device number 4
[ 1212.012347][T12230] loop8: detected capacity change from 0 to 256
[ 1212.804538][T12243] loop8: detected capacity change from 0 to 256
[ 1212.937507][T12224] loop6: detected capacity change from 0 to 32768
[ 1214.873243][T12256] loop3: detected capacity change from 0 to 256
[ 1216.095076][T12270] loop7: detected capacity change from 0 to 1024
[ 1216.116403][T12270] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1216.380308][   T27] audit: type=1326 audit(1784284965.487:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.6.1677" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe855f9de99 code=0x0
[ 1219.275708][T12279] loop3: detected capacity change from 0 to 256
[ 1220.005781][T12292] loop6: detected capacity change from 0 to 256
[ 1223.241641][T12330] loop8: detected capacity change from 0 to 256
[ 1224.192975][   T27] audit: type=1800 audit(1784284973.297:46): pid=12333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1690" name="file0" dev="loop8" ino=1049013 res=0 errno=0
[ 1226.596146][T12343] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1226.642851][T12343] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1226.689817][T12343] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1226.702758][T12343] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1226.774285][T12343] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1227.078989][ T4762] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[ 1227.320417][ T4762] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1227.423883][ T4762] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1227.456084][ T4762] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1227.599088][ T4762] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1227.605897][ T4762] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1227.615303][ T4762] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1227.626437][ T4762] usb 9-1: config 0 descriptor??
[ 1228.599163][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1228.681267][ T4290] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1228.759057][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1228.765156][ T4290] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1228.839053][ T4290] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1228.891837][ T4762] usbhid 9-1:0.0: can't add hid device: -71
[ 1228.897895][ T4762] usbhid: probe of 9-1:0.0 failed with error -71
[ 1228.979357][ T4762] usb 9-1: USB disconnect, device number 5
[ 1230.104239][T12384] loop7: detected capacity change from 0 to 256
[ 1233.075005][   T27] audit: type=1800 audit(1784284982.177:47): pid=12391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1704" name="file0" dev="loop7" ino=1049015 res=0 errno=0
[ 1234.557065][T12401] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1234.749467][T12401] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1234.769915][T12401] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1234.782824][T12401] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1234.851621][T12401] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1235.797864][T12399] loop8: detected capacity change from 0 to 32768
[ 1235.879041][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1236.128994][T12399] XFS (loop8): Mounting V5 Filesystem
[ 1236.456517][T12399] XFS (loop8): Ending clean mount
[ 1237.040850][ T4290] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1237.046964][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1237.053775][ T4290] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1237.059886][ T4290] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1238.647178][T11041] XFS (loop8): Unmounting Filesystem
[ 1238.932325][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.938774][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1245.189152][T12481] loop3: detected capacity change from 0 to 256
[ 1245.736503][T12465] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1246.085883][T12465] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1246.122591][T12465] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1246.220652][T12465] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1246.255169][T12465] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1246.582353][   T14] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[ 1246.679257][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1246.796517][   T14] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1246.906792][   T14] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1246.928790][   T14] usb 8-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1246.959158][   T14] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1246.976206][   T14] usb 8-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1247.007319][   T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1247.030388][   T14] usb 8-1: config 0 descriptor??
[ 1247.702963][   T14] usbhid 8-1:0.0: can't add hid device: -71
[ 1247.733966][   T14] usbhid: probe of 8-1:0.0 failed with error -71
[ 1248.119277][T11872] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1248.199180][T11872] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1248.289098][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1248.296619][T11872] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1249.521515][   T14] usb 8-1: USB disconnect, device number 4
[ 1254.733252][T12561] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1254.923056][T12561] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1254.936202][T12561] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1254.979849][T12565] loop8: detected capacity change from 0 to 256
[ 1254.997459][T12561] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1255.011054][T12561] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1255.606825][T12573] loop6: detected capacity change from 0 to 256
[ 1256.455277][T11872] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1256.999183][T11872] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1257.005291][T11872] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1257.011595][ T4277] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1257.079395][T11872] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1257.228998][T11083] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[ 1257.472229][T11083] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1257.543340][T11083] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1257.555610][T11083] usb 8-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1257.570758][T11083] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1257.586661][T11083] usb 8-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1257.608154][T11083] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1257.721724][T11083] usb 8-1: config 0 descriptor??
[ 1259.852954][T11083] usbhid 8-1:0.0: can't add hid device: -71
[ 1259.867001][T11083] usbhid: probe of 8-1:0.0 failed with error -71
[ 1259.890298][T11083] usb 8-1: USB disconnect, device number 5
[ 1262.915610][T12631] loop6: detected capacity change from 0 to 256
[ 1265.797415][T12640] loop4: detected capacity change from 0 to 256
[ 1266.511875][T12642] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1267.879090][T11872] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1268.569955][T12642] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1268.730068][T12642] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1268.979702][T12642] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1269.003590][T12642] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1269.439014][ T5148] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[ 1269.647005][ T5148] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1269.701372][ T5148] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1269.761715][ T5148] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1269.855569][ T5148] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1269.884191][ T5148] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1270.787604][T11872] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1270.789400][ T4290] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1270.794575][ T5148] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1270.810115][ T5148] usb 9-1: config 0 descriptor??
[ 1270.919290][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1271.079003][ T4290] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1272.033258][ T5148] usbhid 9-1:0.0: can't add hid device: -71
[ 1272.048429][ T5148] usbhid: probe of 9-1:0.0 failed with error -71
[ 1272.091394][ T5148] usb 9-1: USB disconnect, device number 6
[ 1275.623757][T12704] loop8: detected capacity change from 0 to 1024
[ 1275.660386][T12704] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1278.613655][T12716] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1278.799371][T12716] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1279.859148][T12716] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1279.866060][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1279.911081][T12716] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1279.917247][T12716] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1280.386693][T12741] xt_cgroup: path and classid specified
[ 1280.849138][T11872] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1281.057546][T12749] loop6: detected capacity change from 0 to 256
[ 1281.888960][ T4290] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1281.959339][ T4290] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1281.959345][T11872] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1283.210923][T12765] loop7: detected capacity change from 0 to 256
[ 1286.499320][   T14] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[ 1286.829813][   T14] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1286.900244][   T14] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1286.954131][   T14] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1287.007981][   T14] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1287.046771][   T14] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1287.078828][   T14] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1287.107893][   T14] usb 9-1: config 0 descriptor??
[ 1287.930949][   T14] usbhid 9-1:0.0: can't add hid device: -71
[ 1287.937015][   T14] usbhid: probe of 9-1:0.0 failed with error -71
[ 1287.967829][   T14] usb 9-1: USB disconnect, device number 7
[ 1288.069198][T12816] loop4: detected capacity change from 0 to 256
[ 1289.149417][T12830] loop8: detected capacity change from 0 to 256
[ 1295.259911][T11083] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[ 1295.619442][T12873] loop4: detected capacity change from 0 to 256
[ 1295.940332][T11083] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1296.521849][T11083] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1297.465793][T11083] usb 8-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1297.579058][T11083] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1297.585754][T11083] usb 8-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1297.659616][T11083] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1297.720535][T11083] usb 8-1: config 0 descriptor??
[ 1297.749255][T11083] usb 8-1: can't set config #0, error -71
[ 1297.769194][T11083] usb 8-1: USB disconnect, device number 6
[ 1298.807469][T12895] loop6: detected capacity change from 0 to 1024
[ 1298.953844][T12895] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1300.368354][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.374882][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.432697][T12917] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1807'.
[ 1309.547645][T12962] loop6: detected capacity change from 0 to 256
[ 1312.007150][T12973] loop4: detected capacity change from 0 to 256
[ 1312.074869][T12977] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1827'.
[ 1316.774986][T13014] device wg1 entered promiscuous mode
[ 1320.045550][T13029] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1841'.
[ 1320.518546][T13034] loop3: detected capacity change from 0 to 256
[ 1326.000335][T13095] loop4: detected capacity change from 0 to 512
[ 1326.056385][T13095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022]
[ 1326.071988][T13095] System zones: 1-12
[ 1326.105459][T13095] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.1852: Directory hole found for htree index block 0
[ 1326.236193][T13095] EXT4-fs (loop4): Remounting filesystem read-only
[ 1326.270535][T13095] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[ 1326.423460][T13095] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.1852: Directory hole found for htree index block 0
[ 1326.622541][T13095] EXT4-fs (loop4): Remounting filesystem read-only
[ 1326.764369][T13095] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[ 1326.902215][T13095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1327.130190][ T4272] EXT4-fs (loop4): unmounting filesystem.
[ 1327.396662][T13110] loop4: detected capacity change from 0 to 256
[ 1327.400494][T13112] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1856'.
[ 1335.186774][T13156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1869'.
[ 1335.610167][T13163] loop3: detected capacity change from 0 to 256
[ 1342.660120][T13193] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1881'.
[ 1346.458232][T13217] loop6: detected capacity change from 0 to 256
[ 1347.385610][   T27] audit: type=1800 audit(1784285096.427:48): pid=13220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1886" name="file0" dev="loop6" ino=1049043 res=0 errno=0
[ 1351.751446][T13250] loop8: detected capacity change from 0 to 16
[ 1351.839107][ T4769] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[ 1351.902602][T13250] erofs: Unknown parameter '…*bs'
[ 1352.135573][ T4769] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1352.634010][ T4769] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1352.768715][ T4769] usb 7-1: can't read configurations, error -71
[ 1355.071726][T13269] loop4: detected capacity change from 0 to 256
[ 1361.803557][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.810673][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.396646][T13330] loop3: detected capacity change from 0 to 16
[ 1362.418115][T13330] erofs: Unknown parameter '…*bs'
[ 1366.809702][ T5151] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[ 1367.875837][ T5151] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1367.928047][ T5151] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1368.024391][ T5151] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1368.072113][ T5151] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1368.097506][ T5151] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1368.106821][ T5151] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1368.133229][ T5151] usb 9-1: config 0 descriptor??
[ 1369.297013][ T5151] usbhid 9-1:0.0: can't add hid device: -71
[ 1369.308600][ T5151] usbhid: probe of 9-1:0.0 failed with error -71
[ 1369.332069][ T5151] usb 9-1: USB disconnect, device number 8
[ 1369.622384][T13383] loop7: detected capacity change from 0 to 16
[ 1369.643416][T13383] erofs: Unknown parameter '…*bs'
[ 1371.572341][T13392] loop7: detected capacity change from 0 to 256
[ 1376.065863][T13402] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1376.103290][T13402] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1376.129131][T13402] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1376.140154][T13402] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1376.161124][T13402] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1376.522383][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1376.659013][ T4768] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[ 1376.991322][ T4768] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1377.656077][ T4768] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1377.688352][ T4768] usb 8-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1377.816554][ T4768] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1377.839427][ T4768] usb 8-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1379.009732][T11872] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1379.009752][ T4290] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1379.015806][T11872] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1379.021993][ T4277] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1379.094595][ T4768] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1379.158640][ T4768] usb 8-1: config 0 descriptor??
[ 1380.583437][ T4768] usb 8-1: can't set config #0, error -71
[ 1380.613665][ T4768] usb 8-1: USB disconnect, device number 7
[ 1381.436699][T13446] loop6: detected capacity change from 0 to 512
[ 1381.602657][T13446] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1381.635201][T13446] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1381.936097][ T8194] EXT4-fs (loop6): unmounting filesystem.
[ 1384.566079][T11872] Bluetooth: hci5: unexpected event for opcode 0x2043
[ 1385.315009][T13460] loop7: detected capacity change from 0 to 2048
[ 1385.322707][T13460] UDF-fs: bad mount option "&Ø900000000000000000000" or missing value
[ 1386.817945][T11872] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1386.831442][T13455] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1386.908421][T13455] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1388.252964][T13455] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1388.400165][T13455] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1388.422340][T13455] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1388.919460][T11872] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1389.164015][ T5059] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[ 1389.414225][ T5059] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1389.503266][ T5059] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1389.602298][ T5059] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1389.885500][ T5059] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1390.033427][ T5059] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1390.093255][ T5059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1390.179436][ T5059] usb 4-1: config 0 descriptor??
[ 1391.603986][T11872] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1391.610259][T11872] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1391.616307][T11872] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1391.830751][ T5059] usbhid 4-1:0.0: can't add hid device: -71
[ 1391.894483][ T5059] usbhid: probe of 4-1:0.0 failed with error -71
[ 1391.969605][ T5059] usb 4-1: USB disconnect, device number 8
[ 1393.793237][T13526] overlayfs: missing 'lowerdir'
[ 1403.598838][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1976'.
[ 1403.607971][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1976'.
[ 1403.782074][ T4346] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[ 1405.340825][ T4346] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1405.369650][T13570] loop7: detected capacity change from 0 to 512
[ 1405.377731][ T4346] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1405.407231][T13570] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1405.418963][ T4346] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1405.469997][ T4346] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1405.498128][T13570] EXT4-fs error (device loop7): ext4_orphan_get:1431: comm syz.7.1977: bad orphan inode 131083
[ 1405.514737][ T4346] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1405.534625][T13570] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1405.577855][ T4346] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1405.596931][T13570] syz.7.1977 (pid 13570) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[ 1405.641137][ T4346] usb 9-1: config 0 descriptor??
[ 1405.815148][ T8226] EXT4-fs (loop7): unmounting filesystem.
[ 1407.455043][ T4346] usbhid 9-1:0.0: can't add hid device: -71
[ 1407.463485][ T4346] usbhid: probe of 9-1:0.0 failed with error -71
[ 1407.499088][ T4346] usb 9-1: USB disconnect, device number 9
[ 1415.154568][ T4768] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[ 1416.790724][ T4768] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1416.823292][ T4768] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1416.849176][ T4768] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1416.889075][ T4768] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1416.895776][ T4768] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1416.929073][ T4768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1416.976993][ T4768] usb 7-1: config 0 descriptor??
[ 1418.643922][ T4768] usbhid 7-1:0.0: can't add hid device: -71
[ 1418.654520][ T4768] usbhid: probe of 7-1:0.0 failed with error -71
[ 1418.674025][ T4768] usb 7-1: USB disconnect, device number 11
[ 1423.734018][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.741226][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1430.718997][ T4762] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[ 1431.315467][T13704] IPVS: stopping backup sync thread 13705 ...
[ 1435.658973][ T5151] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[ 1436.380811][ T5151] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1436.428906][ T5151] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1436.438733][ T5151] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1436.509054][ T5151] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1436.515761][ T5151] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1436.556799][ T5151] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1437.688156][ T5151] usb 7-1: config 0 descriptor??
[ 1438.701856][ T5151] usbhid 7-1:0.0: can't add hid device: -71
[ 1438.709121][ T5151] usbhid: probe of 7-1:0.0 failed with error -71
[ 1438.717714][ T5151] usb 7-1: USB disconnect, device number 13
[ 1442.473834][T13804] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[ 1442.473868][T13805] IPVS: stopping backup sync thread 13804 ...
[ 1443.974202][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2046'.
[ 1445.767356][T13828] loop6: detected capacity change from 0 to 256
[ 1447.669773][   T22] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[ 1447.908742][   T22] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1448.114235][   T22] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1448.272414][   T22] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1448.285812][   T22] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1448.318968][   T22] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1448.328123][   T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1448.363342][   T22] usb 9-1: config 0 descriptor??
[ 1448.456720][T13847] xt_cgroup: path and classid specified
[ 1448.995399][   T22] usbhid 9-1:0.0: can't add hid device: -71
[ 1449.020216][   T22] usbhid: probe of 9-1:0.0 failed with error -71
[ 1449.066185][   T22] usb 9-1: USB disconnect, device number 10
[ 1449.648787][T13857] IPVS: stopping backup sync thread 13858 ...
[ 1452.224699][T13896] loop7: detected capacity change from 0 to 256
[ 1454.285430][T13913] xt_cgroup: path and classid specified
[ 1454.974717][T13917] IPVS: stopping backup sync thread 13918 ...
[ 1455.415014][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2072'.
[ 1456.897080][T13944] loop3: detected capacity change from 0 to 256
[ 1459.880347][T13968] IPVS: stopping backup sync thread 13965 ...
[ 1459.886621][T13965] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[ 1462.058686][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2084'.
[ 1463.138229][T14002] loop6: detected capacity change from 0 to 1024
[ 1463.164890][T14002] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1466.733924][T14014] loop3: detected capacity change from 0 to 256
[ 1478.962858][T14086] loop6: detected capacity change from 0 to 16
[ 1479.015820][T14088] loop8: detected capacity change from 0 to 256
[ 1479.039809][T14086] erofs: Unknown parameter '…*bs'
[ 1481.428471][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2120'.
[ 1481.917166][T14114] loop6: detected capacity change from 0 to 512
[ 1482.098129][T14114] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1482.113867][T14114] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1483.260461][ T8194] EXT4-fs (loop6): unmounting filesystem.
[ 1484.936814][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.943228][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1486.379321][T14151] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2133'.
[ 1486.542789][T14153] loop8: detected capacity change from 0 to 512
[ 1486.749462][T14153] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1486.774384][T14153] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1488.055058][T11041] EXT4-fs (loop8): unmounting filesystem.
[ 1492.370077][T14186] loop7: detected capacity change from 0 to 1024
[ 1492.484568][T14186] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1492.518685][T14186] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1492.677491][T14186] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2144: bg 0: block 112: padding at end of block bitmap is not set
[ 1492.775281][T14186] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[ 1492.833986][T14186] EXT4-fs (loop7): This should not happen!! Data will be lost
[ 1492.833986][T14186] 
[ 1492.878967][T14186] EXT4-fs (loop7): Total free blocks count 0
[ 1492.908967][T14186] EXT4-fs (loop7): Free/Dirty block details
[ 1492.915188][T14186] EXT4-fs (loop7): free_blocks=0
[ 1492.939595][T14186] EXT4-fs (loop7): dirty_blocks=64
[ 1492.959511][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2145'.
[ 1492.968902][T14186] EXT4-fs (loop7): Block reservation details
[ 1492.986615][T14186] EXT4-fs (loop7): i_reserved_data_blocks=4
[ 1494.493136][ T8226] EXT4-fs (loop7): unmounting filesystem.
[ 1494.516806][T14199] loop3: detected capacity change from 0 to 512
[ 1495.632953][T14199] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1495.669167][T14199] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1496.041343][ T4271] EXT4-fs (loop3): unmounting filesystem.
[ 1504.579100][T14282] loop3: detected capacity change from 0 to 1024
[ 1504.589681][T14282] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1509.124567][T14299] loop6: detected capacity change from 0 to 256
[ 1510.311346][T14311] loop7: detected capacity change from 0 to 16
[ 1510.355280][T14311] erofs: Unknown parameter '…*bs'
[ 1510.629732][T13453] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[ 1510.789380][T13453] usb 9-1: device descriptor read/64, error -71
[ 1511.059088][T13453] usb 9-1: new full-speed USB device number 12 using dummy_hcd
[ 1511.234265][T14327] loop7: detected capacity change from 0 to 1024
[ 1511.258948][T13453] usb 9-1: device descriptor read/64, error -71
[ 1511.272243][T14327] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1512.129048][T13453] usb usb9-port1: attempt power cycle
[ 1512.568979][T13453] usb 9-1: new full-speed USB device number 13 using dummy_hcd
[ 1513.086402][T13453] usb 9-1: device descriptor read/8, error -71
[ 1513.379418][T13453] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[ 1513.442873][T13453] usb 9-1: device descriptor read/8, error -71
[ 1513.659785][T13453] usb usb9-port1: unable to enumerate USB device
[ 1513.862374][T14348] loop8: detected capacity change from 0 to 256
[ 1513.910337][T14351] loop6: detected capacity change from 0 to 256
[ 1515.344243][   T27] audit: type=1800 audit(1784285264.447:49): pid=14357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2193" name="file0" dev="loop6" ino=1049062 res=0 errno=0
[ 1517.434824][T14385] loop3: detected capacity change from 0 to 1024
[ 1517.446822][T14385] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1517.579145][ T4763] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[ 1517.803645][ T4763] usb 7-1: device descriptor read/64, error -71
[ 1518.168897][ T4763] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[ 1518.389094][ T4763] usb 7-1: device descriptor read/64, error -71
[ 1518.513198][ T4763] usb usb7-port1: attempt power cycle
[ 1518.939070][ T4763] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[ 1519.105641][ T4763] usb 7-1: device descriptor read/8, error -71
[ 1520.058908][ T4763] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[ 1520.099459][ T4763] usb 7-1: device descriptor read/8, error -71
[ 1520.175909][T14412] loop4: detected capacity change from 0 to 16
[ 1520.183176][T14412] erofs: Unknown parameter '…*bs'
[ 1520.193770][T14410] loop3: detected capacity change from 0 to 256
[ 1520.259071][ T4763] usb usb7-port1: unable to enumerate USB device
[ 1521.560261][ T8704] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1523.180283][T14427] loop4: detected capacity change from 0 to 256
[ 1524.499393][T14438] loop7: detected capacity change from 0 to 4096
[ 1524.928993][T14438] NILFS (loop7): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0
[ 1524.939058][T14438] NILFS (loop7): error -5 getting root inode
[ 1525.059466][T14441] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1525.249083][ T9819] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1527.229049][ T4763] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[ 1527.418915][ T4763] usb 8-1: device descriptor read/64, error -71
[ 1527.568456][T14465] loop3: detected capacity change from 0 to 256
[ 1527.819384][ T4763] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[ 1528.008862][ T4763] usb 8-1: device descriptor read/64, error -71
[ 1528.129406][ T4763] usb usb8-port1: attempt power cycle
[ 1528.540876][ T4763] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[ 1528.589831][ T4763] usb 8-1: device descriptor read/8, error -71
[ 1528.919118][ T4763] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[ 1529.640466][ T4763] usb 8-1: device descriptor read/8, error -71
[ 1529.772857][ T4763] usb usb8-port1: unable to enumerate USB device
[ 1529.820497][T14499] fuse: Bad value for 'fd'
[ 1531.420835][T14513] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2235'.
[ 1534.268897][ T5059] usb 9-1: new full-speed USB device number 15 using dummy_hcd
[ 1534.438951][ T5059] usb 9-1: device descriptor read/64, error -71
[ 1535.698916][ T5059] usb 9-1: new full-speed USB device number 16 using dummy_hcd
[ 1535.918742][T14546] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2248'.
[ 1536.359038][ T5059] usb 9-1: device descriptor read/64, error -71
[ 1536.514818][ T5059] usb usb9-port1: attempt power cycle
[ 1538.129629][T14555] loop3: detected capacity change from 0 to 764
[ 1539.288504][T14564] loop8: detected capacity change from 0 to 256
[ 1542.914801][T14590] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2261'.
[ 1543.154100][T14598] loop8: detected capacity change from 0 to 2048
[ 1543.169732][T14598] UDF-fs: bad mount option "&Ø900000000000000000000" or missing value
[ 1544.199289][ T4321] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[ 1544.358971][ T4321] usb 8-1: device descriptor read/64, error -71
[ 1544.651115][ T4321] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[ 1544.859011][ T4321] usb 8-1: device descriptor read/64, error -71
[ 1545.015774][ T4321] usb usb8-port1: attempt power cycle
[ 1545.459079][ T4321] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[ 1545.489664][ T4321] usb 8-1: device descriptor read/8, error -71
[ 1545.759006][ T4321] usb 8-1: new full-speed USB device number 15 using dummy_hcd
[ 1545.806085][ T4321] usb 8-1: device descriptor read/8, error -71
[ 1545.939042][ T4321] usb usb8-port1: unable to enumerate USB device
[ 1547.270773][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1547.277143][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1548.632263][T14641] loop7: detected capacity change from 0 to 2048
[ 1548.657462][T14641] UDF-fs: bad mount option "&Ø900000000000000000000" or missing value
[ 1550.691515][T14655] loop4: detected capacity change from 0 to 1024
[ 1550.727723][T14655] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1552.768971][T14667] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2274'.
[ 1554.416704][ T4317] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[ 1554.668039][ T4317] usb 5-1: device descriptor read/64, error -71
[ 1555.183289][ T4317] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[ 1555.399825][ T4317] usb 5-1: device descriptor read/64, error -71
[ 1555.519152][ T4317] usb usb5-port1: attempt power cycle
[ 1555.666602][T14693] IPVS: stopping backup sync thread 9688 ...
[ 1556.118909][ T4317] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[ 1556.494144][ T4317] usb 5-1: device descriptor read/8, error -71
[ 1556.836277][T14702] loop7: detected capacity change from 0 to 1024
[ 1557.120582][T14702] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1558.754698][T14711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2296'.
[ 1562.608216][ T5059] usb 9-1: new full-speed USB device number 18 using dummy_hcd
[ 1562.873321][ T5059] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1562.913495][ T5059] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1562.939087][ T5059] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1562.958876][ T5059] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1563.019736][ T5059] usb 9-1: config 0 descriptor??
[ 1563.287649][  T129] usb 9-1: USB disconnect, device number 18
[ 1564.454139][T14751] loop4: detected capacity change from 0 to 256
[ 1564.523668][T14757] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2309'.
[ 1566.186067][T14769] loop4: detected capacity change from 0 to 16
[ 1566.226744][T14769] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 1566.419457][T14776] fuse: Bad value for 'fd'
[ 1566.511646][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2316'.
[ 1567.066699][T14787] IPVS: stopping backup sync thread 14788 ...
[ 1567.951133][T14793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2321'.
[ 1568.276623][T14796] loop8: detected capacity change from 0 to 256
[ 1569.308945][   T27] audit: type=1800 audit(1784285318.407:50): pid=14799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2322" name="file0" dev="loop8" ino=1049072 res=0 errno=0
[ 1570.072847][T14805] loop8: detected capacity change from 0 to 2048
[ 1570.125696][T14805] UDF-fs: bad mount option "&Ø900000000000000000000" or missing value
[ 1571.463656][T14819] fuse: Bad value for 'fd'
[ 1571.608073][T14822] netlink: 'syz.6.2328': attribute type 2 has an invalid length.
[ 1571.638940][ T4768] usb 8-1: new full-speed USB device number 16 using dummy_hcd
[ 1571.653446][T14824] loop8: detected capacity change from 0 to 16
[ 1571.740487][T14825] ------------[ cut here ]------------
[ 1571.746039][T14825] kernel BUG at net/phonet/socket.c:213!
[ 1571.753036][T14825] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 1571.759324][T14825] CPU: 1 PID: 14825 Comm: syz.6.2328 Not tainted syzkaller #0
[ 1571.766827][T14825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1571.776913][T14825] RIP: 0010:pn_socket_connect+0xb86/0xb90
[ 1571.782757][T14825] Code: 48 8b 7c 24 10 e9 6b fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 1a fd ff ff 4c 89 e7 e8 34 e6 66 f8 e9 0d fd ff ff e8 6a c0 15 f8 <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54
[ 1571.802437][T14825] RSP: 0018:ffffc9000c1efc40 EFLAGS: 00010283
[ 1571.808601][T14825] RAX: ffffffff896c6136 RBX: 0000000000000000 RCX: 0000000000080000
[ 1571.816590][T14825] RDX: ffffc9001c4ef000 RSI: 000000000000003c RDI: 000000000000003d
[ 1571.824582][T14825] RBP: ffffc9000c1efdb0 R08: ffff88802b782c5b R09: 1ffff110056f058b
[ 1571.832567][T14825] R10: dffffc0000000000 R11: ffffed10056f058c R12: ffff888025ade018
[ 1571.840557][T14825] R13: 1ffff9200183df98 R14: dffffc0000000000 R15: 1ffff11004b5bc03
[ 1571.848554][T14825] FS:  00007fe856ea66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1571.857497][T14825] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1571.864087][T14825] CR2: 000000110c2f570b CR3: 0000000024188000 CR4: 00000000003506e0
[ 1571.872077][T14825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1571.880073][T14825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1571.888064][T14825] Call Trace:
[ 1571.891426][T14825]  <TASK>
[ 1571.894437][T14825]  ? __might_fault+0xa6/0x120
[ 1571.899205][T14825]  ? pn_socket_sendmsg+0x230/0x230
[ 1571.904360][T14825]  ? aa_af_perm+0x340/0x340
[ 1571.908969][T14825]  ? tomoyo_socket_connect_permission+0x196/0x270
[ 1571.915455][T14825]  ? __might_fault+0xa6/0x120
[ 1571.920198][T14825]  ? bpf_lsm_socket_connect+0x5/0x10
[ 1571.925589][T14825]  ? security_socket_connect+0x7c/0xa0
[ 1571.931115][T14825]  ? pn_socket_sendmsg+0x230/0x230
[ 1571.936262][T14825]  __sys_connect+0x3cb/0x450
[ 1571.940945][T14825]  ? __sys_connect_file+0x170/0x170
[ 1571.946178][T14825]  __x64_sys_connect+0x76/0x80
[ 1571.950973][T14825]  do_syscall_64+0x4c/0xa0
[ 1571.955437][T14825]  ? clear_bhb_loop+0x60/0xb0
[ 1571.960212][T14825]  ? clear_bhb_loop+0x60/0xb0
[ 1571.964925][T14825]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1571.970840][T14825] RIP: 0033:0x7fe855f9de99
[ 1571.975297][T14825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1571.994923][T14825] RSP: 002b:00007fe856ea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1572.003359][T14825] RAX: ffffffffffffffda RBX: 00007fe856226090 RCX: 00007fe855f9de99
[ 1572.011354][T14825] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000007
[ 1572.019341][T14825] RBP: 00007fe856033eaf R08: 0000000000000000 R09: 0000000000000000
[ 1572.027339][T14825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1572.035332][T14825] R13: 00007fe856226128 R14: 00007fe856226090 R15: 00007ffd5bd86ef8
[ 1572.043325][T14825]  </TASK>
[ 1572.046364][T14825] Modules linked in:
[ 1572.054125][T14824] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1572.066061][T14825] ---[ end trace 0000000000000000 ]---
[ 1572.089627][ T4768] usb 8-1: no configurations
[ 1572.094377][ T4768] usb 8-1: can't read configurations, error -22
[ 1572.139177][T14825] RIP: 0010:pn_socket_connect+0xb86/0xb90
[ 1572.181101][T14825] Code: 48 8b 7c 24 10 e9 6b fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 1a fd ff ff 4c 89 e7 e8 34 e6 66 f8 e9 0d fd ff ff e8 6a c0 15 f8 <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54
[ 1572.250489][T14825] RSP: 0018:ffffc9000c1efc40 EFLAGS: 00010283
[ 1572.257054][T14825] RAX: ffffffff896c6136 RBX: 0000000000000000 RCX: 0000000000080000
[ 1572.266635][T14825] RDX: ffffc9001c4ef000 RSI: 000000000000003c RDI: 000000000000003d
[ 1572.275570][T14825] RBP: ffffc9000c1efdb0 R08: ffff88802b782c5b R09: 1ffff110056f058b
[ 1572.279241][ T4768] usb 8-1: new full-speed USB device number 17 using dummy_hcd
[ 1572.286190][T14825] R10: dffffc0000000000 R11: ffffed10056f058c R12: ffff888025ade018
[ 1572.301591][T14825] R13: 1ffff9200183df98 R14: dffffc0000000000 R15: 1ffff11004b5bc03
[ 1572.311355][T14825] FS:  00007fe856ea66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1572.322371][T14825] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1572.329307][T14825] CR2: 0000001b34d10ff8 CR3: 0000000024188000 CR4: 00000000003506f0
[ 1572.337473][T14825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1572.347420][T14825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1572.355954][T14825] Kernel panic - not syncing: Fatal exception
[ 1572.362617][T14825] Kernel Offset: disabled
[ 1572.366960][T14825] Rebooting in 86400 seconds..