last executing test programs:

7m29.470824457s ago: executing program 32 (id=4876):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

7m22.224470997s ago: executing program 33 (id=4895):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r9 = accept(r6, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r8, 0x0, 0x0, 0x4100, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122)
connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x100000000})

7m5.505508441s ago: executing program 34 (id=4910):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = eventfd(0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
r5 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r3)

6m22.755930727s ago: executing program 5 (id=4964):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_icmp(0x2, 0x2, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x18, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x1, 0x5}, 0x50)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4)

6m22.355071868s ago: executing program 5 (id=4965):
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
r0 = fsopen(&(0x7f0000000080)='romfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c)

6m20.757420307s ago: executing program 5 (id=4966):
r0 = creat(0x0, 0xd931d3864d39ddc4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000800)={0x0, &(0x7f00000007c0)})
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00')
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0xadc)

6m6.385277767s ago: executing program 35 (id=4963):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xd6ca, 0x80, 0x0, 0x255}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1})
syz_usb_connect(0x3, 0x0, 0x0, 0x0)

6m5.810548842s ago: executing program 5 (id=4978):
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@utf8no}, {@numtail}, {@shortname_mixed}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@utf8no}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_win95}, {@uni_xlateno}, {@numtail}, {@shortname_win95}, {@shortname_winnt}, {@utf8no}]}, 0x1, 0x34b, &(0x7f0000000700)="$eJzs3TtoZNUbAPBv9uYN+0+KPwStRjtBlk3EQquEZYXFFLoy+GocTNZH7riQwYFskdlpFEvFRtDKzkLLrcVCxM7C1hVkVWzcbmEXr8zcm5k7j2hWTOKyv18RPr5zvjnn3HvC3LxOXlmL7c3puHTz5o2Ym6vE1Nq5tbhViaU4FUnkrsaIzmgCALiX3Mqy+D3LldLLk3t/sLAfzRzD3ACAo9F7/3/t9CAxe5KzAQCOwwFf/496ZmL28pFNCwA4QmPv/w8PNY98m3+q/zsBAMC967kXX3p6fSPiYrU6F9F4t1Vr1eLJQfv6pXgj0tiKs7EYdyLyB4X8aaH78akLG+fPVrt+Xopat6JVi2i0W7X8SWE96dXPxkosxlJRn/Xrk279Sq++GhFX273xo1Fp1aZjoRj/h4XYitVYjP+P1Udc2Di/Wi1eoNbYr29HdGJufxHd+Z+Jxfju1bgcaWxGt3Yw/72VavVctlGqr/d+ELJ5EjcEAAAAAAAAAAAAAAAAAAAAAID7wplq31L//Jus0W69c3G0w1L5fJ1WLW8uzgfq5OcDZbP7p/O8l4yeDzR8Pk+rNhWnTnTlAAAAAAAAAAAAAAAAAAAA8N/R3J2Jeppu7TR3r2yXg3Yp89Y3n381H6N93kwGmZjKX26oT5GLUlUS/fKsX54lQ32KIIkYdP7sWn/GeSaZsJaxVcz2FljOVIo51dP09EM/fTw26O6V7T8GmSTGLstwUClGLjU1/pen/qLq4GD1b/pcz7LsoPK9j8arohIxNXbj/o3g6xuvP/BYc/nxXubL4tCHRx5dfP76h5/+ul1Po7g0aTqz07yT/eOxktL+qRTXuRITNtvEoDPIdHaau/Xk+99eePD9b4f6zI9tkiLIypm394O54dtdT9MvRkefyYPuNA+z0ukJm39y8PLt/u69+4u5/Mla/drej78ctqr0ieWgDgAAAAAAAAAAAAAAAAAAOBalvxW/C088e3QzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjN/j//6WgM5Y5THC7HeNNs1s7zQMHnz/WpQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcB/7MwAA//+xzHAn")
statfs(&(0x7f0000000000)='./file1\x00', 0x0)

6m4.705766667s ago: executing program 5 (id=4983):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1f8, 0x100, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0x0, 0x0, 0xff000000], [0xffffff00, 0xff, 0xff000000, 0xff], 'pim6reg\x00', 'erspan0\x00', {}, {}, 0x0, 0x6, 0x6, 0x54}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private2, @mcast2, [0xffffff00, 0xff000000, 0x80ffff7f, 0xffffff00], [0xff000000, 0xff000000, 0xff, 0xffffffff], 'veth0_to_batadv\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x5c, 0xb, 0x0, 0x9}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xb, 0xa, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

5m58.233654511s ago: executing program 5 (id=4987):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x40ab}, 0x94)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x20000023892)
syz_genetlink_get_family_id$batadv(0x0, r0)
r8 = fsopen(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00')
socketpair$unix(0x1, 0x1, 0x0, 0x0)
fsmount(r8, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5m42.304772024s ago: executing program 36 (id=4985):
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0x1, 0x0)
vmsplice(r6, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0)
vmsplice(r7, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)

5m41.806762941s ago: executing program 37 (id=4987):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x40ab}, 0x94)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x20000023892)
syz_genetlink_get_family_id$batadv(0x0, r0)
r8 = fsopen(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00')
socketpair$unix(0x1, 0x1, 0x0, 0x0)
fsmount(r8, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4m44.585578153s ago: executing program 9 (id=4995):
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x982, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
read(r2, &(0x7f00000003c0)=""/163, 0xa3)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000))
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x1b)
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x200)
ioctl$TCXONC(r3, 0x540a, 0x2)

4m27.064822678s ago: executing program 38 (id=4995):
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x982, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
read(r2, &(0x7f00000003c0)=""/163, 0xa3)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000))
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x1b)
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x200)
ioctl$TCXONC(r3, 0x540a, 0x2)

1m40.137250578s ago: executing program 8 (id=5361):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000500)={0x40000000, 0x7, "7ce1d75e75ecc40dcd842b45fe389815170b90f765320f4ede588a84d3b6114a", 0x3, 0x7, 0x4, 0x8, 0x2, 0xf0, 0xa, 0x8000, [0x1, 0x2d6, 0xa, 0xc0]})

1m39.558336635s ago: executing program 8 (id=5363):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xfff2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004080}, 0x0)

1m38.785215498s ago: executing program 4 (id=5365):
syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x5bd, &(0x7f0000000680)="$eJzs3U9sHFcdB/Dfm3jtdRonmzR1CwR1paoqCiKKHdomNhKYGFeIqLFwHBFOmHgTlvpPZCfIqQD1BgckxIEDBySEhBSBQIgj4kBPcEDcgXt74OIDEhIHhGZ21ruxt8Sqs3Fdfz5SvLNvfvPmzRwifffNvg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOLzX5g6P5b2exQAAABAP70+9+Xz4/I/AAAAfKhdM/8PAAAAAAAAAAddiiy+Fym+NLmZjhXvW6pXmiv3NuanZ3ofNpyKI48U9fm/6tj4hU+//MqrF9uv///4x+0jcXXu2lT98urynbXG+npjsT6/0ry5utjYdQ97PX67s8UNqC+/cW/x1q31+vi5Cw/t3qi9M/TUaG3y4sSNWrt2fnpmZq6rZqDyvs++gyc8AAAADrfByOL1SPH2n3+TRiIii71n4Ud8dtBvw1HL83dxEfPTM8WFLDUXVu7mO2fbQbhWXmtpsJ2Rn0AW35OfRZzKxzoo0QMAALB7lSIFp3jtd5vpeEQcaefgTxYLA773gfUnOMge8nGeiYgX4gBkdgAAANhnQ5HFTyPF8olqnMgz834PCAAAAHjsBiKLVyPFvyY3U614HiAizs5Pz9SvXK9/ceXWalftbCpn1A/69wOeJM8mAAAA8AFQjSxGiif+N9PJ/R4MAAAA0BfDkcVfI8XHnv9Wsa5cFOvSn5i8NDg+1r3C3LOP6CevPRcRz+zyO/mVcq3B2TSbUvb4rwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDDZShl8d9I8Z3r9U5jLUUWkdpvq/mf2fS54/szRAAAAAAAAADgUVIWP44UP6lspiwiNmrvDD01Wpu8OHGjdiSOFA8BpO76q3PXpuqXV5fvrDXW1xuL9fmV5s3VxcZuT1e90ly5tzE/PdOXi3mk4T6Pf7h6efXO/bXm7W/c7bn/aHXq6+t31xZu9t4dw1GPONLdcrYY8Pz0TDHopebCSnHobNrtiAEAACCikrL4T6R4sf4gbeXO1vP/A603nTT6i89E3l6obs+fxecGx4vPDVrbJyYvVcZf6t7uGVnPFoE6D7gzc13NA5Wdpfk5U8piKlK8O/FcMbIUR2NHZo5W3Uik+OFXz5R12WDUItrd1lo93mouNc7ntT+KFKdvtGujqK2WtU93asfy2qG832sP1w6Xtac7teN57Uyk+MdrvWuf6dReyGs3IsWDB/V27dG8dqSsHe3Unru5urTY61YCAAAAAAAAcHhVUha/ihR//EM9tefGB1rzzzvn/7/d+S7AW9s7eo85/73O/9e62t4q5/V/kI/im88Vc/nF/H+t9/z/VKT4y9UzZV1r7n2w3H+y+NuZ/78eKd5efbh2qKw91akd2/WNBQAAgA+QPP+fiRTf/9PvB9rZuMz/ZQLvnf8/OrCtoz7l/5Ndbfk51++/+cbC0lJjzYYNGza2Nvb+fyEAAHzY5fm/ESl+/re/b813l/n/WOtdJ///+7ud/D+xvaM+5f9TXW0T5VqElYGI6t3lO5XRiOr6/Tc/1VxeuN243VgZu/TK+MXx82MvVwbbc/udrT3fKgAAADiw8vw/Fyl+/c9fbq13t5v5/6PbO+pT/n+6qy0/Z2fSb8+XDgAAAIdGnv8vRYqvPP/brXXpH87/ndSe5//2+v+feKH12vnNgP7k/9NdbbXyvDs+ewAAAAAAAAAAAAAAAAAAAIADrpKyeClSvPjuQBop23az/t/i9o769P3/0a62xXgyv/+355sKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcSllk0YwUH392M302b/haxLHuVwAAAODA+18AAAD//0qnGWg=")
r0 = open(&(0x7f0000000080)='./bus\x00', 0x62142, 0x0)
pwrite64(r0, &(0x7f0000000300)='_', 0x1, 0x10000000005)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x14107e, 0x0)
sendfile(r1, r1, 0x0, 0x100000000)
creat(&(0x7f0000000000)='./bus\x00', 0x41)

1m37.645017672s ago: executing program 8 (id=5366):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
syz_clone(0x200, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
getdents(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x160, 0x0, 0x148, 0x0, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88, 0x1}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x3, 0x76, 0xb75e, 0x5a3e, 0x4, 0x20}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0xffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000600)='hybla', 0x5)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1m35.513947429s ago: executing program 4 (id=5372):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38)

1m34.147842005s ago: executing program 8 (id=5373):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022d00010000000009040000035883b200"], 0x0)

1m33.153289972s ago: executing program 4 (id=5376):
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0)

1m29.699224033s ago: executing program 8 (id=5378):
syz_open_procfs$pagemap(0x0, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x28a400)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
socket$inet(0x2, 0x3, 0x1)
creat(&(0x7f0000000040)='./file7\x00', 0x1a2)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00')
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16], 0x0)

1m28.432750776s ago: executing program 4 (id=5380):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000003c0)=0x14)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/195, 0xc3}], 0x1)

1m27.102792735s ago: executing program 4 (id=5385):
r0 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

1m27.053902478s ago: executing program 8 (id=5386):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040844)
recvmmsg(r1, 0x0, 0x0, 0x2101, 0x0)
r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r2, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
lseek(r2, 0x0, 0x4)

1m25.657459159s ago: executing program 4 (id=5390):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e24, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
r5 = shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0)
r7 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6)
mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
shmdt(r5)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040)
poll(0x0, 0x0, 0x7)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x8811)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6)
syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50)

1m19.793770591s ago: executing program 7 (id=5399):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4fc927bd7000fedbdf251600000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000a001a"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x240040d0)

1m18.979215106s ago: executing program 7 (id=5401):
io_uring_setup(0x7, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)
preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/35, 0x23}], 0x1, 0x0, 0x10)

1m18.073905115s ago: executing program 7 (id=5404):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r1, &(0x7f0000000040)="06", 0x1)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8)

1m14.142864552s ago: executing program 7 (id=5406):
r0 = syz_io_uring_setup(0xb, 0x0, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r4, 0x0)
io_uring_enter(r0, 0x847ba, 0x63, 0xe, 0x0, 0x0)

1m13.504323487s ago: executing program 7 (id=5408):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff0400d1000800000008000300", @ANYRES32=r2], 0x20}}, 0x0)

1m12.477878182s ago: executing program 7 (id=5412):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
read$msr(0xffffffffffffffff, &(0x7f0000003040)=""/102399, 0x18fff)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2000000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0))
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

1m9.429845004s ago: executing program 39 (id=5386):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040844)
recvmmsg(r1, 0x0, 0x0, 0x2101, 0x0)
r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r2, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
lseek(r2, 0x0, 0x4)

1m8.763039529s ago: executing program 40 (id=5390):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e24, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
r5 = shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0)
r7 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6)
mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
shmdt(r5)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040)
poll(0x0, 0x0, 0x7)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x8811)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6)
syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50)

55.789243326s ago: executing program 41 (id=5412):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
read$msr(0xffffffffffffffff, &(0x7f0000003040)=""/102399, 0x18fff)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2000000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0))
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

9.221538623s ago: executing program 0 (id=5489):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x111, 0x0, &(0x7f0000000a00)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240080cd4f4e5b5da601596c31f137d2ce6ca74fd87f90ea0be786fe13ac0805807dd6853458eccc84575e9af5fee935d3bc54f9bdf5cf073b5a597a9df9cb422ce2ab5ff0700000000000093b110a54f32ad69d05a805194380816a626940f933c95e9c48cc620627041732f2eb0e4c6b6ed2449161c8b447829e7110b031b2e42528ed9aaacacae558272260c6b6ab183dd433a628de952e48b76d92cb36789fa2048c18441e99f6d3928bbcba48129e9c76ea7bafde2f322a406679edc8807a1ac048371092e", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

8.802976134s ago: executing program 0 (id=5492):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = inotify_init1(0x80000)
close(r2)
socket(0x28, 0x5, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x5411, 0xfffffffffffffffa)
socket(0x400000000010, 0x3, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r7], 0x4c}}, 0x40000)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_pidfd_open(0x0, 0x0)
openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000001740), 0x800, 0x0)

8.081202553s ago: executing program 2 (id=5495):
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0)

7.057901919s ago: executing program 2 (id=5498):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd4f00ffdbdf2502000000080001000300fa"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)

6.325869186s ago: executing program 6 (id=5500):
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
epoll_create(0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYRES32], 0x54}}, 0x0)
syz_emit_ethernet(0xf1, &(0x7f0000000500)=ANY=[], 0x0)

6.18656365s ago: executing program 2 (id=5501):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r1, 0x0, 0x1c, 0x3, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r1, 0x3, 0x1c})

5.474009943s ago: executing program 6 (id=5502):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x111, 0x0, &(0x7f0000000a00)="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", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

5.349221109s ago: executing program 0 (id=5503):
syz_open_procfs$pagemap(0x0, &(0x7f0000000100))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x28a400)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
socket(0x10, 0x3, 0x6)
socket$inet(0x2, 0x3, 0x1)
creat(&(0x7f0000000040)='./file7\x00', 0x1a2)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00')
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0)

5.270640695s ago: executing program 2 (id=5504):
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000695000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000695000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcefb, 0xc000, 0x4000002, 0x1000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5.074178448s ago: executing program 3 (id=5505):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x5c2, 0x0, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}})
io_uring_enter(r2, 0x6e2, 0x620, 0x1, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x3ec0)

4.982214635s ago: executing program 6 (id=5506):
r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
write$P9_RLOPEN(r0, 0x0, 0x0)

4.88866754s ago: executing program 1 (id=5507):
getresgid(0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
mlock2(&(0x7f0000245000/0x1000)=nil, 0x1000, 0x1)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x0, 0x2, 0x40, 0xce})

4.786542382s ago: executing program 3 (id=5508):
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0)

4.747571648s ago: executing program 2 (id=5509):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000200000000040020", @ANYRES32], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x3b, &(0x7f00000000c0)=ANY=[])
syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0])
read$FUSE(r4, 0x0, 0x0)
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0)
syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r5, &(0x7f0000000000)=[{0x0}], 0x1)
close(r4)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)

4.597502362s ago: executing program 6 (id=5510):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = dup3(0xffffffffffffffff, r0, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0x11, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff00, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x8005, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x6, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x35, 0x800082, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0xc, 0x80a2ed, 0x3, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x3, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x5, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

4.554502258s ago: executing program 1 (id=5511):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, 0x0, 0x8000)

4.461005469s ago: executing program 3 (id=5512):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r2, 0x25, 0x8, @val=@iter={0x0}}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40)

4.262714017s ago: executing program 1 (id=5513):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0)

4.115040855s ago: executing program 3 (id=5514):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r1, 0x0, 0x1c, 0x3, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r1, 0x3, 0x1c})

2.883357759s ago: executing program 6 (id=5515):
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)

2.811531383s ago: executing program 3 (id=5516):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x111, 0x0, &(0x7f0000000a00)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240080cd4f4e5b5da601596c31f137d2ce6ca74fd87f90ea0be786fe13ac0805807dd6853458eccc84575e9af5fee935d3bc54f9bdf5cf073b5a597a9df9cb422ce2ab5ff0700000000000093b110a54f32ad69d05a805194380816a626940f933c95e9c48cc620627041732f2eb0e4c6b6ed2449161c8b447829e7110b031b2e42528ed9aaacacae558272260c6b6ab183dd433a628de952e48b76d92cb36789fa2048c18441e99f6d3928bbcba48129e9c76ea7bafde2f322a406679edc8807a1ac048371092e", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

1.81797855s ago: executing program 3 (id=5517):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029730000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x8, 0x3, &(0x7f00000001c0)={0x8, "c6c1f7b51030c4b7c54bbc5100"}})

1.578634785s ago: executing program 0 (id=5518):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x5c2, 0x0, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}})
io_uring_enter(r2, 0x6e2, 0x620, 0x1, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x3ec0)

1.578370083s ago: executing program 1 (id=5519):
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000695000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000695000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcefb, 0xc000, 0x4000002, 0x1000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.401228657s ago: executing program 2 (id=5520):
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000)
r2 = memfd_secret(0x0)
ftruncate(r2, 0x581)
ftruncate(r2, 0x0)
mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r3 = io_uring_setup(0x3454, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})

1.331231745s ago: executing program 6 (id=5521):
getresgid(0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
mlock2(&(0x7f0000245000/0x1000)=nil, 0x1000, 0x1)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x0, 0x2, 0x40, 0xce})

1.3113307s ago: executing program 0 (id=5522):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x60d3, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1})
io_uring_enter(r1, 0x47ba, 0x0, 0x28, 0x0, 0x0)

1.117479396s ago: executing program 1 (id=5523):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, 0x0, 0x8000)

34.583369ms ago: executing program 1 (id=5524):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
syslog(0x2, &(0x7f0000001500)=""/43, 0x2b)

0s ago: executing program 0 (id=5525):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = dup3(0xffffffffffffffff, r0, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0x11, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff00, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x8005, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x6, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x35, 0x800082, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0xc, 0x80a2ed, 0x3, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x3, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x5, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

 2(bridge_slave_1) entered disabled state
[ 1819.321988][T20557] bridge_slave_1: entered allmulticast mode
[ 1819.332399][T20557] bridge_slave_1: entered promiscuous mode
[ 1819.359449][T20558] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1819.367280][T20558] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1819.380833][T20558] bridge_slave_1: entered allmulticast mode
[ 1819.391021][T20558] bridge_slave_1: entered promiscuous mode
[ 1819.521324][T15402] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1819.548366][T20588] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1819.875403][T20558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1820.007490][T15402] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1820.101986][T20243] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1820.112699][T20557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1820.151117][T20558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1820.277986][T20557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1820.562791][ T5791] Bluetooth: hci5: command tx timeout
[ 1820.819528][ T5791] Bluetooth: hci2: command tx timeout
[ 1820.869169][T15402] team0: left allmulticast mode
[ 1820.876112][T15402] bridge0: port 1(team0) entered disabled state
[ 1821.401878][T15402] bond0 (unregistering): (slave dummy0): Releasing backup interface
[ 1821.417444][T15402] bond0 (unregistering): Released all slaves
[ 1821.458821][T20558] team0: Port device team_slave_0 added
[ 1821.547506][T20557] team0: Port device team_slave_0 added
[ 1821.568164][T20564] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1821.585362][T20558] team0: Port device team_slave_1 added
[ 1821.733281][T20557] team0: Port device team_slave_1 added
[ 1821.818468][T20564] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1821.827711][T15402] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[ 1821.829763][T20564] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1821.851089][T20564] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1472, setting to 1024
[ 1821.863021][T20564] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1821.876476][T20564] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[ 1821.885926][T20564] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1821.998959][T20564] usb 8-1: config 0 descriptor??
[ 1822.259316][T20564] usb 8-1: USB disconnect, device number 5
[ 1822.283449][T20558] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1822.291885][T20558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1822.319041][T20558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1822.430328][T20557] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1822.441664][T20557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1822.469296][T20557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1822.500227][T20558] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1822.507501][T20558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1822.539464][T20558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1822.602552][T20557] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1822.612878][T20557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1822.641935][T20557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1822.736967][T15402] hsr_slave_0: left promiscuous mode
[ 1822.759156][T15402] hsr_slave_1: left promiscuous mode
[ 1822.819820][T15402] veth1_macvtap: left promiscuous mode
[ 1822.825795][T15402] veth0_macvtap: left promiscuous mode
[ 1822.831944][T15402] veth1_vlan: left promiscuous mode
[ 1822.837562][T15402] veth0_vlan: left promiscuous mode
[ 1824.282981][T20605] loop7: detected capacity change from 0 to 32768
[ 1824.939413][T20558] hsr_slave_0: entered promiscuous mode
[ 1824.950069][T20558] hsr_slave_1: entered promiscuous mode
[ 1825.156561][T20507] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1825.260994][T20557] hsr_slave_0: entered promiscuous mode
[ 1825.274760][T20557] hsr_slave_1: entered promiscuous mode
[ 1825.289997][T20557] debugfs: 'hsr0' already exists in 'hsr'
[ 1825.295937][T20557] Cannot create hsr debugfs directory
[ 1825.512020][ T4380] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1825.782525][ T4380] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1825.807731][T20252] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1826.017648][T20252] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1826.028269][T20252] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1826.061779][T20252] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1826.071320][T20252] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1826.079746][T20252] usb 7-1: SerialNumber: syz
[ 1826.089172][ T4380] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1826.288053][ T4380] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1826.591356][T20617] loop7: detected capacity change from 0 to 4096
[ 1826.637206][T20617] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1826.732098][T20617] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix.
[ 1826.750025][T20617] EXT4-fs (loop7): mount failed
[ 1827.913142][ T4380] bridge_slave_1: left allmulticast mode
[ 1827.919815][ T4380] bridge_slave_1: left promiscuous mode
[ 1827.926479][ T4380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1827.996604][ T4380] bridge_slave_0: left allmulticast mode
[ 1828.002610][ T4380] bridge_slave_0: left promiscuous mode
[ 1828.009624][ T4380] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1828.120857][T20252] usb 7-1: 0:2 : does not exist
[ 1828.126055][T20252] usb 7-1: unit 5 not found!
[ 1828.310879][T20252] usb 7-1: USB disconnect, device number 3
[ 1828.747688][ T4380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1828.767681][ T4380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1828.792406][ T4380] bond0 (unregistering): Released all slaves
[ 1829.621915][ T4380] hsr_slave_0: left promiscuous mode
[ 1829.641984][ T4380] hsr_slave_1: left promiscuous mode
[ 1829.651488][ T4380] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1829.659158][ T4380] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1829.689023][ T4380] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1829.698914][ T4380] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1829.851378][ T4380] veth1_macvtap: left promiscuous mode
[ 1829.858512][ T4380] veth0_macvtap: left promiscuous mode
[ 1829.865087][ T4380] veth1_vlan: left promiscuous mode
[ 1829.870870][ T4380] veth0_vlan: left promiscuous mode
[ 1830.588993][ T4380] team0 (unregistering): Port device team_slave_1 removed
[ 1830.698174][ T4380] team0 (unregistering): Port device team_slave_0 removed
[ 1830.846274][T20623] loop6: detected capacity change from 0 to 32768
[ 1831.112822][   T30] audit: type=1800 audit(1768210746.583:41): pid=20623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5006" name="bus" dev="loop6" ino=7 res=0 errno=0
[ 1831.457793][T20507] veth0_vlan: entered promiscuous mode
[ 1831.547345][T20557] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1831.594451][T20557] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1831.655966][T20558] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1831.735873][T20558] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1831.791148][T20507] veth1_vlan: entered promiscuous mode
[ 1831.809707][T20557] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1831.859282][T20558] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1831.890575][T20557] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1831.946237][T20558] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1832.537408][T20507] veth0_macvtap: entered promiscuous mode
[ 1832.606225][T20507] veth1_macvtap: entered promiscuous mode
[ 1832.981073][T20507] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1833.111826][T20557] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1833.230489][T20507] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1833.392873][ T4075] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1833.447467][T20557] 8021q: adding VLAN 0 to HW filter on device team0
[ 1833.460985][ T4075] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1833.471924][ T4075] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1833.517039][ T4075] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1833.557676][T16029] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1833.565306][T16029] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1833.661395][T16029] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1833.669220][T16029] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1834.554049][T20558] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1834.837096][T20558] 8021q: adding VLAN 0 to HW filter on device team0
[ 1835.090367][T20538] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1835.098025][T20538] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1835.267659][T20538] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1835.275329][T20538] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1836.200794][T20557] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1844.563640][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1844.570328][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1845.574464][T20558] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1846.185280][T20671] loop6: detected capacity change from 0 to 256
[ 1846.369210][T20558] veth0_vlan: entered promiscuous mode
[ 1846.649078][T20671] FAT-fs (loop6): Directory bread(block 64) failed
[ 1846.655891][T20671] FAT-fs (loop6): Directory bread(block 65) failed
[ 1846.663575][T20671] FAT-fs (loop6): Directory bread(block 66) failed
[ 1846.670727][T20671] FAT-fs (loop6): Directory bread(block 67) failed
[ 1846.677660][T20671] FAT-fs (loop6): Directory bread(block 68) failed
[ 1846.684568][T20671] FAT-fs (loop6): Directory bread(block 69) failed
[ 1846.691809][T20671] FAT-fs (loop6): Directory bread(block 70) failed
[ 1846.698535][T20671] FAT-fs (loop6): Directory bread(block 71) failed
[ 1846.705722][T20671] FAT-fs (loop6): Directory bread(block 72) failed
[ 1846.712601][T20671] FAT-fs (loop6): Directory bread(block 73) failed
[ 1846.810039][T20169] Bluetooth: hci6: command 0x0406 tx timeout
[ 1846.884885][T20558] veth1_vlan: entered promiscuous mode
[ 1847.149797][T20557] veth0_vlan: entered promiscuous mode
[ 1847.345436][T20557] veth1_vlan: entered promiscuous mode
[ 1847.445281][T20558] veth0_macvtap: entered promiscuous mode
[ 1847.499148][T20558] veth1_macvtap: entered promiscuous mode
[ 1847.710524][T20558] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1847.787449][T20558] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1847.818016][T20557] veth0_macvtap: entered promiscuous mode
[ 1847.887218][T20331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1847.901401][T20557] veth1_macvtap: entered promiscuous mode
[ 1847.974984][T20331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1848.001282][T20331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1848.065336][T20657] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1848.170448][T20557] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1848.237253][T20557] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1848.384510][T15262] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1848.433342][T15262] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1848.442426][T15262] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1853.479442][ T4380] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1855.449743][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1855.461495][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1855.527271][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1855.548187][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1855.562290][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1856.594313][T20690] chnl_net:caif_netlink_parms(): no params data found
[ 1857.788175][T20169] Bluetooth: hci0: command tx timeout
[ 1858.109295][ T1098] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1858.361584][ T1098] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1858.446843][T20690] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1858.457578][T20690] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1858.465745][T20690] bridge_slave_0: entered allmulticast mode
[ 1858.475947][T20690] bridge_slave_0: entered promiscuous mode
[ 1858.501563][T20169] Bluetooth: hci1: command 0x0406 tx timeout
[ 1858.510623][T20690] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1858.518487][T20690] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1858.526528][T20690] bridge_slave_1: entered allmulticast mode
[ 1858.536743][T20690] bridge_slave_1: entered promiscuous mode
[ 1858.679529][ T1098] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1858.787966][T20690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1858.880555][ T1098] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1858.955285][T20690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1859.077441][T20564] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1859.376606][T20690] team0: Port device team_slave_0 added
[ 1859.393103][T20564] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1859.404331][T20564] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1859.458352][T20564] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1859.467966][T20564] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1859.478520][T20564] usb 8-1: SerialNumber: syz
[ 1859.506037][T20690] team0: Port device team_slave_1 added
[ 1859.791783][ T1098] bridge_slave_1: left allmulticast mode
[ 1859.798014][ T1098] bridge_slave_1: left promiscuous mode
[ 1859.805386][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1859.837613][ T1098] bridge_slave_0: left allmulticast mode
[ 1859.843965][ T1098] bridge_slave_0: left promiscuous mode
[ 1859.852374][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1860.002004][ T5791] Bluetooth: hci0: command tx timeout
[ 1860.541196][T20564] usb 8-1: 0:2 : does not exist
[ 1860.546675][T20564] usb 8-1: unit 5 not found!
[ 1860.560294][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1860.611803][T20564] usb 8-1: USB disconnect, device number 6
[ 1860.633054][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1860.681475][ T1098] bond0 (unregistering): Released all slaves
[ 1860.722778][T20722] loop7: detected capacity change from 0 to 512
[ 1860.740187][T20690] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1860.747485][T20690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1860.775698][T20690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1860.835698][T20690] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1860.842884][T20690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1860.871615][T20690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1860.986108][T20722] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback.
[ 1860.999248][T20722] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1861.144280][T20722] Quota error (device loop7): do_check_range: Getting block 67108864 out of range 0-5
[ 1861.215881][ T1098] hsr_slave_0: left promiscuous mode
[ 1861.234284][ T1098] hsr_slave_1: left promiscuous mode
[ 1861.248848][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1861.256847][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1861.290904][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1861.301574][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1861.404198][ T1098] veth1_macvtap: left promiscuous mode
[ 1861.412789][ T1098] veth0_macvtap: left promiscuous mode
[ 1861.418737][ T1098] veth1_vlan: left promiscuous mode
[ 1861.424573][ T1098] veth0_vlan: left promiscuous mode
[ 1861.548154][T20243] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0007-000000000000.
[ 1861.851977][T20733] loop6: detected capacity change from 0 to 4096
[ 1862.213444][   T30] audit: type=1326 audit(1768210775.646:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.7.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7df8f749 code=0x7ffc0000
[ 1862.236610][   T30] audit: type=1326 audit(1768210775.646:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.7.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7df8f749 code=0x7ffc0000
[ 1862.259454][   T30] audit: type=1326 audit(1768210775.665:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.7.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7ffa7df8f749 code=0x7ffc0000
[ 1862.282322][   T30] audit: type=1326 audit(1768210775.665:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.7.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7df8f749 code=0x7ffc0000
[ 1862.289169][ T5791] Bluetooth: hci0: command tx timeout
[ 1862.794771][ T1098] team0 (unregistering): Port device team_slave_1 removed
[ 1862.862118][ T1098] team0 (unregistering): Port device team_slave_0 removed
[ 1863.187151][T20690] hsr_slave_0: entered promiscuous mode
[ 1863.197920][T20690] hsr_slave_1: entered promiscuous mode
[ 1863.206873][T20690] debugfs: 'hsr0' already exists in 'hsr'
[ 1863.212915][T20690] Cannot create hsr debugfs directory
[ 1863.879268][T16029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1863.887522][T16029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1864.435558][ T4075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1864.444156][ T4075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1864.543298][ T5791] Bluetooth: hci0: command tx timeout
[ 1865.688325][T20564] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1865.931458][T20564] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1865.942207][T20564] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1866.033163][T20564] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1866.042832][T20564] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1866.051326][T20564] usb 7-1: SerialNumber: syz
[ 1866.237289][T20690] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1866.270342][T20690] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1866.284550][T20758] loop7: detected capacity change from 0 to 512
[ 1866.291862][    T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1866.347483][T20564] usb 7-1: 0:2 : does not exist
[ 1866.378501][T20564] usb 7-1: USB disconnect, device number 4
[ 1866.385063][T20690] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1866.467598][T20758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback.
[ 1866.481585][T20758] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1866.498396][T20690] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1866.537308][    T9] usb 2-1: Using ep0 maxpacket: 16
[ 1866.550746][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1866.563294][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1866.588752][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1866.597180][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1866.685447][T20758] Quota error (device loop7): do_check_range: Getting block 67108864 out of range 0-5
[ 1866.694578][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1866.704673][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1866.712912][    T9] usb 2-1: Product: syz
[ 1866.717563][    T9] usb 2-1: Manufacturer: syz
[ 1866.722355][    T9] usb 2-1: SerialNumber: syz
[ 1866.815600][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1866.824212][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1866.967043][    T9] usb 2-1: 0:2 : does not exist
[ 1867.047214][T20243] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0007-000000000000.
[ 1867.060073][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 1867.194519][    T9] usb 2-1: USB disconnect, device number 48
[ 1867.607298][T20690] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1867.752983][T20690] 8021q: adding VLAN 0 to HW filter on device team0
[ 1867.844670][T20026] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1867.852119][T20026] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1868.033105][T20026] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1868.040728][T20026] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1869.558088][T20789] loop1: detected capacity change from 0 to 1764
[ 1869.696236][T20789] iso9660: Corrupted directory entry in block 14 of inode 1920
[ 1869.970374][T20792] loop7: detected capacity change from 0 to 512
[ 1870.138263][T20792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback.
[ 1870.151950][T20792] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1870.313871][T20797] loop6: detected capacity change from 0 to 512
[ 1870.395711][T20792] Quota error (device loop7): do_check_range: Getting block 67108864 out of range 0-5
[ 1870.442143][T20690] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1870.559401][T20797] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.5037: corrupted in-inode xattr: invalid ea_ino
[ 1870.577693][T20797] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5037: couldn't read orphan inode 15 (err -117)
[ 1870.615413][T20797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1870.819232][T20243] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0007-000000000000.
[ 1870.915752][T20183] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1870.980966][T20513] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1871.271920][T20513] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1871.283026][T20513] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1871.351980][T20513] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1871.364504][T20513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1871.377210][T20513] usb 2-1: SerialNumber: syz
[ 1871.869664][T20169] Bluetooth: hci2: command 0x0406 tx timeout
[ 1881.973931][T20513] usb 2-1: can't set config #1, error -71
[ 1881.996478][T20513] usb 2-1: USB disconnect, device number 49
[ 1885.303301][T20690] veth0_vlan: entered promiscuous mode
[ 1885.426558][T20690] veth1_vlan: entered promiscuous mode
[ 1885.455396][T14058] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1885.669873][T14058] usb 8-1: Using ep0 maxpacket: 16
[ 1885.754606][T14058] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1885.765344][T14058] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1885.780676][T20690] veth0_macvtap: entered promiscuous mode
[ 1885.835127][T14058] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1885.844818][T14058] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1885.853276][T14058] usb 8-1: Product: syz
[ 1885.857658][T14058] usb 8-1: Manufacturer: syz
[ 1885.863017][T14058] usb 8-1: SerialNumber: syz
[ 1885.894069][T20690] veth1_macvtap: entered promiscuous mode
[ 1886.002508][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1886.048551][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1886.066606][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1886.085979][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1886.102818][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1886.402705][T20690] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1886.441879][T14058] usb 8-1: 0:2 : does not exist
[ 1886.456854][T20690] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1886.528714][T14058] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[ 1886.580011][T15893] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1886.614668][T15893] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1886.628566][T15893] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1886.681848][T15893] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1886.752846][T14058] usb 8-1: USB disconnect, device number 7
[ 1888.355222][T20827] chnl_net:caif_netlink_parms(): no params data found
[ 1888.408213][T20169] Bluetooth: hci3: command tx timeout
[ 1890.476647][T20827] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1890.484158][T20827] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1890.492279][T20827] bridge_slave_0: entered allmulticast mode
[ 1890.502078][T20827] bridge_slave_0: entered promiscuous mode
[ 1890.518634][T20847] loop7: detected capacity change from 0 to 512
[ 1890.609673][T20169] Bluetooth: hci3: command tx timeout
[ 1890.684953][T20827] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1890.692540][T20827] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1890.701986][T20827] bridge_slave_1: entered allmulticast mode
[ 1890.711059][T20827] bridge_slave_1: entered promiscuous mode
[ 1890.775995][T20847] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback.
[ 1890.789693][T20847] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1891.049215][T20847] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[ 1891.060447][T20847] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[ 1891.070355][T20847] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5048: Failed to acquire dquot type 0
[ 1891.170046][T20855] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[ 1891.181289][T20855] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[ 1891.195574][T20855] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5048: Failed to acquire dquot type 0
[ 1891.274690][T20827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1891.352738][T20827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1891.685754][T20827] team0: Port device team_slave_0 added
[ 1891.742494][T20243] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0007-000000000000.
[ 1891.834178][T20827] team0: Port device team_slave_1 added
[ 1892.841975][T20169] Bluetooth: hci3: command tx timeout
[ 1892.904145][T20827] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1892.911573][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1892.947098][T20827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1895.798701][T20827] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1895.805968][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1895.832352][T20827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1895.899617][T20169] Bluetooth: hci3: command tx timeout
[ 1897.124233][T20827] hsr_slave_0: entered promiscuous mode
[ 1897.135228][T20827] hsr_slave_1: entered promiscuous mode
[ 1897.144878][T20827] debugfs: 'hsr0' already exists in 'hsr'
[ 1897.151253][T20827] Cannot create hsr debugfs directory
[ 1897.788832][T20873] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1897.799209][T20873] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1897.813250][T20873] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1897.823252][T20873] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1897.835626][T20873] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1897.845764][T20873] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1897.857652][T20873] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1897.872374][T20873] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1897.885690][T20873] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1)
[ 1900.127939][T20564] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1900.523312][T20876] loop7: detected capacity change from 0 to 1024
[ 1900.666707][T20564] usb 7-1: device descriptor read/all, error -71
[ 1900.692930][T20876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1900.726952][T15262] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1900.858483][T15262] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1900.956325][   T30] audit: type=1800 audit(1768210811.902:46): pid=20876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5053" name="file1" dev="loop7" ino=15 res=0 errno=0
[ 1900.994658][T15262] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1901.132874][T15262] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1901.893799][T20243] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1902.039528][T20889] syz.1.5056 (20889) used greatest stack depth: 2344 bytes left
[ 1902.250139][T15262] bridge_slave_1: left allmulticast mode
[ 1902.256043][T15262] bridge_slave_1: left promiscuous mode
[ 1902.262910][T15262] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1902.360383][T15262] bridge_slave_0: left allmulticast mode
[ 1902.366385][T15262] bridge_slave_0: left promiscuous mode
[ 1902.373274][T15262] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1903.354191][T15262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1903.401138][T15262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1903.426150][T15262] bond0 (unregistering): Released all slaves
[ 1904.775200][T15262] hsr_slave_0: left promiscuous mode
[ 1904.798877][T15262] hsr_slave_1: left promiscuous mode
[ 1904.809931][T15262] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1904.817681][T15262] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1904.935927][T15262] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1904.944274][T15262] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1905.160302][T15262] veth1_macvtap: left promiscuous mode
[ 1905.166201][T15262] veth0_macvtap: left promiscuous mode
[ 1905.172998][T15262] veth1_vlan: left promiscuous mode
[ 1905.179076][T15262] veth0_vlan: left promiscuous mode
[ 1905.578187][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1905.585131][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1910.034500][T15262] team0 (unregistering): Port device team_slave_1 removed
[ 1910.116309][T20909] loop7: detected capacity change from 0 to 32768
[ 1911.079084][T15262] team0 (unregistering): Port device team_slave_0 removed
[ 1911.492298][T20912] read_mapping_page failed!
[ 1912.735314][ T1891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1912.743826][ T1891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1912.865440][T20564] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1912.904210][ T1891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1912.912478][ T1891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1912.962464][T20915] loop6: detected capacity change from 0 to 1024
[ 1913.040608][T20827] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1913.070762][T20564] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1913.085283][T20564] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1913.146291][T20827] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1913.197877][T20915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1913.221326][T20827] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1913.247087][T20564] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1913.256680][T20564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1913.264983][T20564] usb 2-1: SerialNumber: syz
[ 1913.330166][T20827] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1913.672490][T20183] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1913.687813][T20564] usb 2-1: 0:2 : does not exist
[ 1913.828746][T20564] usb 2-1: USB disconnect, device number 50
[ 1914.630913][T20827] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1915.354141][T20827] 8021q: adding VLAN 0 to HW filter on device team0
[ 1915.445604][T14805] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1915.453125][T14805] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1915.529074][T14805] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1915.536740][T14805] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1916.394159][T20252] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1916.638544][T20252] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1916.649180][T20252] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1916.659852][T20252] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1916.670162][T20252] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1916.683597][T20252] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[ 1916.696563][T20252] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1916.893203][T20252] usb 8-1: config 0 descriptor??
[ 1917.150505][T20252] usb 8-1: USB disconnect, device number 8
[ 1917.668403][T20827] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1918.146960][T14058] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1918.967016][T20945] loop7: detected capacity change from 0 to 32768
[ 1919.017017][T14058] usb 9-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[ 1919.028355][T14058] usb 9-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[ 1919.040546][T14058] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1919.052913][T14058] usb 9-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[ 1919.066567][T14058] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1919.075900][T14058] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1919.570672][T14058] ath6kl: Failed to submit usb control message: -71
[ 1919.577753][T14058] ath6kl: unable to send the bmi data to the device: -71
[ 1919.585377][T14058] ath6kl: Unable to send get target info: -71
[ 1919.637367][T14058] ath6kl: Failed to init ath6kl core: -71
[ 1919.656684][T14058] ath6kl_usb 9-1:4.0: probe with driver ath6kl_usb failed with error -71
[ 1919.720965][T14058] usb 9-1: USB disconnect, device number 2
[ 1921.138218][T20827] veth0_vlan: entered promiscuous mode
[ 1921.315305][T20827] veth1_vlan: entered promiscuous mode
[ 1921.516592][T14058] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1921.627133][T20958] loop8: detected capacity change from 0 to 1024
[ 1921.669860][T20827] veth0_macvtap: entered promiscuous mode
[ 1921.716913][T20827] veth1_macvtap: entered promiscuous mode
[ 1921.717362][T14058] usb 2-1: Using ep0 maxpacket: 16
[ 1921.804824][T14058] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1921.815619][T14058] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1921.876214][T14058] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1921.885786][T14058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1921.894339][T14058] usb 2-1: Product: syz
[ 1921.898978][T14058] usb 2-1: Manufacturer: syz
[ 1921.903906][T14058] usb 2-1: SerialNumber: syz
[ 1921.995329][T20958] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1922.093655][T20827] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1922.162738][T14058] usb 2-1: 0:2 : does not exist
[ 1922.207365][T20827] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1922.238872][T14058] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 1922.304089][T20538] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1922.423600][T20538] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1922.437459][T20331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1922.457272][T14058] usb 2-1: USB disconnect, device number 51
[ 1922.473671][T20331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1922.898304][T20690] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1923.195698][T20972] input: syz0 as /devices/virtual/input/input67
[ 1926.591618][T20979] sp0: Synchronizing with TNC
[ 1926.874930][T20513] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1927.095612][T20513] usb 9-1: Using ep0 maxpacket: 16
[ 1927.186120][T20513] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1927.200572][T20513] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1927.369021][T20513] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1927.378514][T20513] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1927.388511][T20513] usb 9-1: Product: syz
[ 1927.393000][T20513] usb 9-1: Manufacturer: syz
[ 1927.399160][T20513] usb 9-1: SerialNumber: syz
[ 1928.127413][T20983] loop6: detected capacity change from 0 to 32768
[ 1929.694297][T20987] loop1: detected capacity change from 0 to 32768
[ 1929.756096][T20987] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1929.764659][T20987] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1929.787549][T20989] INFO: The task syz.6.5083:20989 has been waiting for writeback completion for more than 1 seconds.
[ 1929.787687][T20989] INFO: The task syz.6.5083:20989 has been waiting for writeback completion for more than 1 seconds.
[ 1929.807129][T20989] INFO: The task syz.6.5083:20989 has been waiting for writeback completion for more than 1 seconds.
[ 1929.818552][T20989] INFO: The task syz.6.5083:20989 has been waiting for writeback completion for more than 1 seconds.
[ 1929.835568][T20989] INFO: The task syz.6.5083:20989 has been waiting for writeback completion for more than 1 seconds.
[ 1929.884358][T20987] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 1929.919224][T20564] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1929.926226][T20564] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1930.475735][T20513] usb 9-1: 0:2 : does not exist
[ 1930.553703][T20513] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 1930.714118][T20513] usb 9-1: USB disconnect, device number 3
[ 1930.796203][T20564] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 813ms
[ 1930.813288][T20564] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1930.832466][T20987] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1931.294047][T20987] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 1934.061352][T20558] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402
[ 1934.078419][T20558] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 1934.092387][T20558] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:20558 [syz-executor] gfs2_quota_sync+0x6b7/0xb30
[ 1934.106610][T20558] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[ 1934.116477][T20558] CPU: 1 UID: 0 PID: 20558 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) 
[ 1934.116641][T20558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1934.116730][T20558] Call Trace:
[ 1934.116786][T20558]  <TASK>
[ 1934.116839][T20558]  __dump_stack+0x26/0x30
[ 1934.117017][T20558]  dump_stack_lvl+0x14c/0x1c0
[ 1934.117191][T20558]  dump_stack+0x1e/0x25
[ 1934.117351][T20558]  gfs2_withdraw+0xd5/0x270
[ 1934.117527][T20558]  gfs2_consist_inode_i+0x1a9/0x240
[ 1934.117756][T20558]  inode_go_instantiate+0x13bf/0x1ed0
[ 1934.117996][T20558]  ? __pfx_inode_go_instantiate+0x10/0x10
[ 1934.118201][T20558]  gfs2_instantiate+0x24f/0x4b0
[ 1934.118425][T20558]  gfs2_glock_wait+0x26a/0x3b0
[ 1934.118568][T20558]  gfs2_glock_nq+0x1263/0x2c90
[ 1934.118705][T20558]  ? kmsan_get_metadata+0xfb/0x160
[ 1934.118970][T20558]  do_sync+0x6c4/0x1610
[ 1934.119122][T20558]  ? gfs2_quota_sync+0x6b7/0xb30
[ 1934.119307][T20558]  ? kmsan_get_metadata+0xfb/0x160
[ 1934.119493][T20558]  ? gfs2_quota_sync+0x6b7/0xb30
[ 1934.119664][T20558]  gfs2_quota_sync+0x6b7/0xb30
[ 1934.119820][T20558]  ? writeback_inodes_sb+0x3a6/0x410
[ 1934.119982][T20558]  gfs2_sync_fs+0x57/0x100
[ 1934.120129][T20558]  ? __pfx_gfs2_sync_fs+0x10/0x10
[ 1934.120265][T20558]  sync_filesystem+0x131/0x3c0
[ 1934.120451][T20558]  ? shrink_dcache_for_umount+0xf9/0x210
[ 1934.120595][T20558]  generic_shutdown_super+0x8d/0x4b0
[ 1934.120763][T20558]  kill_block_super+0x42/0xd0
[ 1934.120927][T20558]  gfs2_kill_sb+0x4aa/0x580
[ 1934.121115][T20558]  ? __pfx_gfs2_kill_sb+0x10/0x10
[ 1934.121305][T20558]  deactivate_locked_super+0xcb/0x3c0
[ 1934.121483][T20558]  deactivate_super+0x12f/0x140
[ 1934.121659][T20558]  cleanup_mnt+0x7a2/0x820
[ 1934.121799][T20558]  ? __pfx___cleanup_mnt+0x10/0x10
[ 1934.121932][T20558]  __cleanup_mnt+0x22/0x30
[ 1934.122053][T20558]  task_work_run+0x209/0x2b0
[ 1934.122225][T20558]  exit_to_user_mode_loop+0x301/0x1b70
[ 1934.122417][T20558]  ? user_path_at+0x241/0x3e0
[ 1934.122579][T20558]  ? __x64_sys_umount+0x1dc/0x250
[ 1934.122769][T20558]  do_syscall_64+0x1e1/0xf80
[ 1934.122952][T20558]  ? clear_bhb_loop+0x40/0x90
[ 1934.123105][T20558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1934.123254][T20558] RIP: 0033:0x7fbb0b590a77
[ 1934.123360][T20558] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1934.123483][T20558] RSP: 002b:00007ffdd8526858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1934.123618][T20558] RAX: 0000000000000000 RBX: 00007fbb0b613d7d RCX: 00007fbb0b590a77
[ 1934.123711][T20558] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd8526910
[ 1934.123798][T20558] RBP: 00007ffdd8526910 R08: 0000000000000000 R09: 0000000000000000
[ 1934.123886][T20558] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd85279a0
[ 1934.123979][T20558] R13: 00007fbb0b613d7d R14: 00000000001c4900 R15: 00007ffdd85279e0
[ 1934.124114][T20558]  </TASK>
[ 1934.411006][T20558] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 1935.239458][T21013] loop6: detected capacity change from 0 to 128
[ 1935.323367][T21013] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1935.391548][T21013] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1936.590837][T14058] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1936.823086][T14058] usb 7-1: Using ep0 maxpacket: 16
[ 1936.887350][T14058] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1936.899034][T14058] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1936.908635][T14058] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1936.993195][T14058] usb 7-1: config 0 descriptor??
[ 1937.788802][T14058] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[ 1938.188107][T21019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1938.197731][T21019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1938.303600][T21019] i2c i2c-1: unsupported multi-msg i2c transaction
[ 1938.410143][T14058] usb 7-1: USB disconnect, device number 7
[ 1938.687100][T14805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1938.699300][T14805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1939.012752][ T1891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1939.021309][ T1891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1940.891669][T21037] loop6: detected capacity change from 0 to 32768
[ 1946.876136][T21056] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[ 1946.886460][T21056] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[ 1946.900054][T21056] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[ 1946.915566][T21056] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[ 1946.929844][T21056] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[ 1946.940197][T21056] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[ 1946.952007][T21056] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[ 1946.962076][T21056] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[ 1946.972041][T21056] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1)
[ 1949.491620][T14058] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[ 1949.708644][T14058] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1949.717928][T14058] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1949.728804][T14058] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1949.738281][T14058] usb 2-1: config 1 has no interface number 1
[ 1949.744626][T14058] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1949.763494][T14058] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1949.927383][T14058] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1949.937151][T14058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1949.945697][T14058] usb 2-1: Product: syz
[ 1949.950101][T14058] usb 2-1: Manufacturer: syz
[ 1949.955191][T14058] usb 2-1: SerialNumber: syz
[ 1950.601197][T21067] loop4: detected capacity change from 0 to 32768
[ 1950.691859][T20252] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1950.723874][T21069] 9p: Bad value for 'rfdno'
[ 1951.102192][T20252] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1951.112781][T20252] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1951.343949][T20252] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1951.353460][T20252] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1951.361861][T20252] usb 9-1: SerialNumber: syz
[ 1951.452083][T14058] usb 2-1: can't set config #1, error -71
[ 1951.471119][T14058] usb 2-1: USB disconnect, device number 52
[ 1951.752149][T20252] usb 9-1: 0:2 : does not exist
[ 1951.918108][T20252] usb 9-1: USB disconnect, device number 4
[ 1951.984274][T21075] loop6: detected capacity change from 0 to 256
[ 1952.165688][T14058] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[ 1952.442052][T14058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10
[ 1952.513177][T14058] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[ 1952.522839][T14058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1952.531804][T14058] usb 2-1: Product: syz
[ 1952.536194][T14058] usb 2-1: Manufacturer: syz
[ 1952.541321][T14058] usb 2-1: SerialNumber: syz
[ 1952.636705][T14058] usb 2-1: config 0 descriptor??
[ 1952.726527][T14058] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1960.117991][T20026] usb 2-1: Failed to submit usb control message: -110
[ 1960.125110][T20026] usb 2-1: unable to send the bmi data to the device: -110
[ 1960.132881][T20026] usb 2-1: unable to get target info from device
[ 1960.139645][T20026] usb 2-1: could not get target info (-110)
[ 1960.145881][T20026] usb 2-1: could not probe fw (-110)
[ 1960.220377][T14058] usb 2-1: USB disconnect, device number 53
[ 1961.829606][T21092] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1961.839653][T21092] block device autoloading is deprecated and will be removed.
[ 1961.851437][T21089] md: md2 stopped.
[ 1961.858016][T21089] md: md2 stopped.
[ 1962.405901][ T8663] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1962.417616][T20252] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1962.598471][ T8663] usb 2-1: Using ep0 maxpacket: 16
[ 1962.684919][ T8663] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1962.695630][ T8663] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1962.734864][ T8663] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1962.744883][ T8663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1962.753540][ T8663] usb 2-1: Product: syz
[ 1962.757983][ T8663] usb 2-1: Manufacturer: syz
[ 1962.763086][ T8663] usb 2-1: SerialNumber: syz
[ 1962.770500][T20252] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1962.783536][T20252] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1962.805704][T20252] usb 9-1: config 0 descriptor??
[ 1963.163038][T20252] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1963.177281][ T8663] usb 2-1: 0:2 : does not exist
[ 1963.189182][T20252] [drm:udl_init] *ERROR* Selecting channel failed
[ 1963.253820][ T8663] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 1963.300796][T20252] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2
[ 1963.307982][T20252] [drm] Initialized udl on minor 2
[ 1963.441584][T20252] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1963.451252][T20252] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[ 1963.463242][T20513] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1963.473128][T20513] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1963.482126][T20513] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[ 1963.507726][ T8663] usb 2-1: USB disconnect, device number 54
[ 1963.567422][T20252] usb 9-1: USB disconnect, device number 5
[ 1964.698348][T21105] loop1: detected capacity change from 0 to 764
[ 1966.061011][T21109] loop8: detected capacity change from 0 to 32768
[ 1966.525402][T21111] 9p: Bad value for 'rfdno'
[ 1967.612314][T14058] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1968.347461][T14058] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1968.358284][T14058] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1968.426731][T14058] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1968.438205][T14058] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1968.447702][T14058] usb 8-1: SerialNumber: syz
[ 1968.858668][T14058] usb 8-1: 0:2 : does not exist
[ 1971.193625][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1971.200156][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1971.230877][T14058] usb 8-1: USB disconnect, device number 9
[ 1975.514504][T21144] loop6: detected capacity change from 0 to 512
[ 1975.575846][T21144] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[ 1975.584007][T21144] UDF-fs: Scanning with blocksize 512 failed
[ 1975.622693][T21144] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[ 1975.630739][T21144] UDF-fs: Scanning with blocksize 1024 failed
[ 1975.644025][T21144] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[ 1975.652166][T21144] UDF-fs: Scanning with blocksize 2048 failed
[ 1975.686510][T21144] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[ 1975.768346][T21144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1976.618461][T21147] loop7: detected capacity change from 0 to 32768
[ 1977.145272][T21152] 9p: Bad value for 'wfdno'
[ 1977.771961][T21157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1977.781620][T21157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1978.063239][T21157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1978.090489][T21157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1978.552088][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5141'.
[ 1978.803425][ T4380] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1978.893490][T21164] team0: Port device team_slave_1 removed
[ 1978.948084][ T4380] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1979.009189][ T4380] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1979.050343][ T4380] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1979.371772][ T8663] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 1979.452274][T21169] loop7: detected capacity change from 0 to 512
[ 1979.505826][T21169] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1979.542777][T20169] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[ 1979.602809][ T8663] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1979.614491][ T8663] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1979.624778][ T8663] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1979.634274][ T8663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1979.672303][ T8663] usb 2-1: config 0 descriptor??
[ 1979.758075][T21169] EXT4-fs (loop7): 1 truncate cleaned up
[ 1979.766378][T21169] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1979.889862][   T30] audit: type=1800 audit(1768210885.762:47): pid=21169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5139" name="file1" dev="loop7" ino=15 res=0 errno=0
[ 1980.028609][T21178] EXT4-fs (loop7): shut down requested (1)
[ 1980.152644][ T8663] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0
[ 1980.160205][ T8663] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0
[ 1980.168128][ T8663] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0
[ 1980.175687][ T8663] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0
[ 1980.183082][ T8663] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0
[ 1980.346584][ T8663] hid-steam 0003:28DE:1142.0017: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[ 1980.383672][T20243] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1980.474695][ T8663] usb 2-1: USB disconnect, device number 55
[ 1980.946371][T21183] loop7: detected capacity change from 0 to 512
[ 1981.491171][T21186] loop4: detected capacity change from 0 to 32768
[ 1981.548986][T21183] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[ 1981.556936][T21183] UDF-fs: Scanning with blocksize 512 failed
[ 1981.602692][T21183] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[ 1981.615240][T21183] UDF-fs: Scanning with blocksize 1024 failed
[ 1981.689850][T21183] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[ 1981.697947][T21183] UDF-fs: Scanning with blocksize 2048 failed
[ 1981.781149][T21183] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[ 1981.870524][T21193] 9p: Bad value for 'wfdno'
[ 1981.954465][T21183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1983.778370][T20169] Bluetooth: hci6: unexpected event 0x03 length: 1 < 11
[ 1984.120301][T21199] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1984.130369][T21199] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1984.329780][T21199] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1984.359214][T21199] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1984.666740][T20169] Bluetooth: hci3: unexpected cc 0x042d length: 1 < 7
[ 1984.934321][T21210] loop7: detected capacity change from 0 to 128
[ 1984.965785][T21210] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[ 1985.017341][T21210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1985.535549][T20749] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1985.602490][T20749] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1985.661969][T20749] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1985.706480][T20749] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1993.763992][T20564] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1994.360208][T21228] loop6: detected capacity change from 0 to 512
[ 1994.400864][T21228] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[ 1994.408961][T21228] UDF-fs: Scanning with blocksize 512 failed
[ 1994.506386][T21228] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[ 1994.514367][T21228] UDF-fs: Scanning with blocksize 1024 failed
[ 1994.599340][T21228] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[ 1994.607277][T21228] UDF-fs: Scanning with blocksize 2048 failed
[ 1994.661621][T21228] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[ 1994.687486][T21230] loop7: detected capacity change from 0 to 1024
[ 1994.759682][T21230] EXT4-fs: inline encryption not supported
[ 1994.781824][T21228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1994.915219][T21230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1995.655157][T20169] Bluetooth: hci0: unexpected cc 0x042d length: 1 < 7
[ 1995.704504][T20243] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1996.785496][T21251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5173'.
[ 2001.002642][T21258] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2001.012585][T21258] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2001.191256][ T5791] Bluetooth: hci0: command 0x0406 tx timeout
[ 2001.365539][T21258] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2001.399896][T21258] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2002.734919][T20331] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2002.767469][T20331] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2002.799098][T20331] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2002.829948][T20331] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2002.901143][T21268] loop8: detected capacity change from 0 to 512
[ 2003.367875][T21268] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found
[ 2003.376629][T21268] UDF-fs: Scanning with blocksize 512 failed
[ 2003.716188][T21268] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found
[ 2003.723935][T21268] UDF-fs: Scanning with blocksize 1024 failed
[ 2004.112545][T21268] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found
[ 2004.121093][T21268] UDF-fs: Scanning with blocksize 2048 failed
[ 2004.227349][T20252] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 2004.258720][T21268] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 2004.406955][T21268] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2004.422544][T20252] usb 8-1: Using ep0 maxpacket: 16
[ 2004.465097][T20252] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2004.475921][T20252] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2004.572930][T20252] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2004.582631][T20252] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2004.591245][T20252] usb 8-1: Product: syz
[ 2004.595631][T20252] usb 8-1: Manufacturer: syz
[ 2004.600454][T20252] usb 8-1: SerialNumber: syz
[ 2005.420717][T21277] loop1: detected capacity change from 0 to 32768
[ 2005.472899][T20252] usb 8-1: 0:2 : does not exist
[ 2005.539636][T20252] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[ 2005.954640][T21280] loop6: detected capacity change from 0 to 512
[ 2005.972704][T21281] 9p: Bad value for 'wfdno'
[ 2006.043717][T21280] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 2006.083073][T20252] usb 8-1: USB disconnect, device number 11
[ 2006.247378][T21280] EXT4-fs (loop6): 1 truncate cleaned up
[ 2006.255902][T21280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2007.363264][   T30] audit: type=1800 audit(1768210911.457:48): pid=21280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5184" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 2009.279287][T20183] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2010.718528][ T8663] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 2010.950696][ T8663] usb 8-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[ 2010.962612][ T8663] usb 8-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[ 2010.974701][ T8663] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 2010.986137][ T8663] usb 8-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[ 2010.999628][ T8663] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 2011.009189][ T8663] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2011.369247][ T8663] ath6kl: Failed to submit usb control message: -71
[ 2011.376581][ T8663] ath6kl: unable to send the bmi data to the device: -71
[ 2011.384240][ T8663] ath6kl: Unable to send get target info: -71
[ 2011.481230][ T8663] ath6kl: Failed to init ath6kl core: -71
[ 2011.494317][ T8663] ath6kl_usb 8-1:4.0: probe with driver ath6kl_usb failed with error -71
[ 2011.580793][ T8663] usb 8-1: USB disconnect, device number 12
[ 2011.646903][T21314] loop1: detected capacity change from 0 to 512
[ 2011.673005][T21314] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 2011.681696][T21314] UDF-fs: Scanning with blocksize 512 failed
[ 2011.692591][T21314] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 2011.700360][T21314] UDF-fs: Scanning with blocksize 1024 failed
[ 2011.709675][T21314] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 2011.718018][T21314] UDF-fs: Scanning with blocksize 2048 failed
[ 2011.756288][T21314] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 2011.815463][T21314] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2012.085176][ T8663] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 2012.253588][T21320] loop4: detected capacity change from 0 to 512
[ 2012.289414][ T8663] usb 7-1: Using ep0 maxpacket: 16
[ 2012.304614][ T8663] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2012.315341][ T8663] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2012.317845][T21320] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 2012.367544][ T8663] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2012.377256][ T8663] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2012.385928][ T8663] usb 7-1: Product: syz
[ 2012.390392][ T8663] usb 7-1: Manufacturer: syz
[ 2012.395950][ T8663] usb 7-1: SerialNumber: syz
[ 2012.450475][T21320] EXT4-fs (loop4): 1 truncate cleaned up
[ 2012.459685][T21320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2012.490276][   T30] audit: type=1800 audit(1768210916.246:49): pid=21320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5199" name="file1" dev="loop4" ino=15 res=0 errno=0
[ 2012.719431][ T8663] usb 7-1: 0:2 : does not exist
[ 2012.760935][ T8663] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 2012.906596][ T8663] usb 7-1: USB disconnect, device number 8
[ 2013.519140][T21330] loop7: detected capacity change from 0 to 32768
[ 2014.031510][T21331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2014.042166][T21331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2014.301924][T21331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2014.345023][T21331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2014.384691][T20827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2015.036480][ T4380] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2015.089949][ T4380] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2015.144196][ T4380] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2015.195755][ T4380] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2015.538086][T21347] loop1: detected capacity change from 0 to 512
[ 2015.579479][T21347] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 2015.588898][T21347] UDF-fs: Scanning with blocksize 512 failed
[ 2015.823189][T21347] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 2015.831159][T21347] UDF-fs: Scanning with blocksize 1024 failed
[ 2015.912093][T21347] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 2015.919813][T21347] UDF-fs: Scanning with blocksize 2048 failed
[ 2016.012983][T21347] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 2016.384460][T21347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2017.185110][T20169] Bluetooth: hci3: command 0x0406 tx timeout
[ 2017.305127][T21359] loop6: detected capacity change from 0 to 32768
[ 2017.330238][ T8663] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 2026.329146][ T8663] usb 5-1: Using ep0 maxpacket: 16
[ 2026.779660][ T8663] usb 5-1: device descriptor read/all, error -71
[ 2028.858801][   T30] audit: type=1800 audit(1768210931.559:50): pid=21390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5228" name="SYSV798dd836" dev="tmpfs" ino=0 res=0 errno=0
[ 2028.948774][T21393] loop4: detected capacity change from 0 to 512
[ 2028.973167][T21393] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[ 2028.981044][T21393] UDF-fs: Scanning with blocksize 512 failed
[ 2029.002119][ T8663] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 2029.023241][T21393] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[ 2029.031141][T21393] UDF-fs: Scanning with blocksize 1024 failed
[ 2029.077868][T21393] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[ 2029.089559][T21393] UDF-fs: Scanning with blocksize 2048 failed
[ 2029.136286][T21393] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 2029.171990][T21393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2029.192741][ T8663] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[ 2029.204814][ T8663] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[ 2029.216550][ T8663] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 2029.227948][ T8663] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[ 2029.241529][ T8663] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 2029.251018][ T8663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2029.652124][ T8663] ath6kl: Failed to submit usb control message: -71
[ 2029.659115][ T8663] ath6kl: unable to send the bmi data to the device: -71
[ 2029.666712][ T8663] ath6kl: Unable to send get target info: -71
[ 2029.735295][ T8663] ath6kl: Failed to init ath6kl core: -71
[ 2029.752018][ T8663] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71
[ 2029.865740][ T8663] usb 2-1: USB disconnect, device number 56
[ 2031.880184][T21434] loop1: detected capacity change from 0 to 2048
[ 2031.961421][T21434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 2032.183655][ T8663] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 2032.253889][T21434] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 2032.313587][T21434] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 222 with error 28
[ 2032.326918][T21434] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 2032.326918][T21434] 
[ 2032.336960][T21434] EXT4-fs (loop1): Total free blocks count 0
[ 2032.343184][T21434] EXT4-fs (loop1): Free/Dirty block details
[ 2032.349569][T21434] EXT4-fs (loop1): free_blocks=2415919104
[ 2032.359787][T21434] EXT4-fs (loop1): dirty_blocks=224
[ 2032.365327][T21434] EXT4-fs (loop1): Block reservation details
[ 2032.371496][T21434] EXT4-fs (loop1): i_reserved_data_blocks=14
[ 2032.425296][ T8663] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[ 2032.436577][ T8663] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[ 2032.448911][ T8663] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 2032.460111][ T8663] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[ 2032.473650][ T8663] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 2032.483078][ T8663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2032.751447][T20558] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[ 2032.827670][ T8663] ath6kl: Failed to submit usb control message: -71
[ 2032.834667][ T8663] ath6kl: unable to send the bmi data to the device: -71
[ 2032.842210][ T8663] ath6kl: Unable to send get target info: -71
[ 2032.859228][ T8663] ath6kl: Failed to init ath6kl core: -71
[ 2032.871530][ T8663] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71
[ 2032.892122][ T8663] usb 5-1: USB disconnect, device number 124
[ 2033.165959][T21454] loop6: detected capacity change from 0 to 128
[ 2033.196798][T21454] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 2033.277519][T21454] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 2033.955501][T21470] program syz.7.5261 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2034.731831][T21488] loop1: detected capacity change from 0 to 128
[ 2035.035367][T20564] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 2035.095926][T14058] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 2035.234308][T20564] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[ 2035.245833][T20564] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[ 2035.259796][T20564] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 2035.271983][T20564] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[ 2035.285624][T20564] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 2035.295145][T20564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2035.369211][T14058] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 2035.381833][T14058] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2035.393379][T14058] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2035.404001][T14058] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 2035.446083][T21503] program syz.6.5277 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2035.519207][T14058] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 2035.528735][T14058] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 2035.537735][T14058] usb 9-1: Manufacturer: syz
[ 2035.550410][T14058] usb 9-1: config 0 descriptor??
[ 2035.725305][T20564] ath6kl: Failed to submit usb control message: -71
[ 2035.732783][T20564] ath6kl: unable to send the bmi data to the device: -71
[ 2035.740174][T20564] ath6kl: Unable to send get target info: -71
[ 2035.755585][T20564] ath6kl: Failed to init ath6kl core: -71
[ 2035.777463][T20564] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71
[ 2035.808622][T20564] usb 5-1: USB disconnect, device number 125
[ 2036.058350][T14058] usbhid 9-1:0.0: can't add hid device: -71
[ 2036.065313][T14058] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 2036.094840][T14058] usb 9-1: USB disconnect, device number 6
[ 2036.317980][T21520] loop7: detected capacity change from 0 to 128
[ 2036.900806][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 2036.907645][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 2036.945789][T21530] program syz.6.5290 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2038.855993][   T30] audit: type=1800 audit(1768210940.903:51): pid=21558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5303" name="SYSV798dd82e" dev="tmpfs" ino=0 res=0 errno=0
[ 2038.961177][T14058] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 2039.186040][T14058] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 2039.198805][T14058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2039.210972][T14058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2039.221094][T14058] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 2039.273236][T14058] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 2039.279224][T21566] program syz.4.5305 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2039.283360][T14058] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 2039.305139][T14058] usb 2-1: Manufacturer: syz
[ 2039.323460][T14058] usb 2-1: config 0 descriptor??
[ 2039.793574][T14058] usbhid 2-1:0.0: can't add hid device: -71
[ 2039.800549][T14058] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2039.837132][T14058] usb 2-1: USB disconnect, device number 57
[ 2039.840094][ T8663] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 2039.899730][T21574] Process accounting resumed
[ 2040.030734][ T8663] usb 8-1: Using ep0 maxpacket: 16
[ 2040.094860][ T8663] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2040.105921][ T8663] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2040.518920][ T8663] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2040.528726][ T8663] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2040.537472][ T8663] usb 8-1: Product: syz
[ 2040.541838][ T8663] usb 8-1: Manufacturer: syz
[ 2040.546771][ T8663] usb 8-1: SerialNumber: syz
[ 2040.945351][ T8663] usb 8-1: 0:2 : does not exist
[ 2041.037620][ T8663] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[ 2041.200185][ T8663] usb 8-1: USB disconnect, device number 13
[ 2041.797888][T21596] program syz.4.5321 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2042.553360][ T8663] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 2042.803755][ T8663] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 2042.815250][ T8663] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2042.830272][ T8663] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2042.840470][ T8663] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 2042.926284][ T8663] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 2042.936295][ T8663] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 2042.947912][ T8663] usb 7-1: Manufacturer: syz
[ 2042.989921][ T8663] usb 7-1: config 0 descriptor??
[ 2043.517727][ T8663] usbhid 7-1:0.0: can't add hid device: -71
[ 2043.524538][ T8663] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2043.559985][ T8663] usb 7-1: USB disconnect, device number 9
[ 2043.676696][T20564] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 2043.872508][T20564] usb 2-1: Using ep0 maxpacket: 16
[ 2043.900814][T20564] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2043.914223][T20564] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2043.960490][T20564] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2043.970083][T20564] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2043.978524][T20564] usb 2-1: Product: syz
[ 2043.982925][T20564] usb 2-1: Manufacturer: syz
[ 2043.988195][T20564] usb 2-1: SerialNumber: syz
[ 2044.254829][T20564] usb 2-1: 0:2 : does not exist
[ 2044.300487][T20564] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 2044.391479][T20564] usb 2-1: USB disconnect, device number 58
[ 2045.964643][T21664] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2045.972377][T21664] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 2046.012189][T21664] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2046.018787][T21664] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 2046.073173][T21664] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2046.080189][T21664] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 2046.192917][T21664] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2046.200498][T21664] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2046.246421][T21664] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2046.254366][T21664] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 2046.552451][T21673] loop1: detected capacity change from 0 to 512
[ 2046.664339][T21673] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 2046.672454][T21673] UDF-fs: Scanning with blocksize 512 failed
[ 2046.808131][T21673] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 2046.815911][T21673] UDF-fs: Scanning with blocksize 1024 failed
[ 2046.887018][T21673] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 2046.895758][T21673] UDF-fs: Scanning with blocksize 2048 failed
[ 2046.973666][T21673] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 2047.059661][T21673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2047.125848][ T5791] Bluetooth: hci6: command 0x0406 tx timeout
[ 2048.230204][ T5791] Bluetooth: hci2: command 0x0406 tx timeout
[ 2048.231880][T20169] Bluetooth: hci1: command 0x0406 tx timeout
[ 2048.401196][T20169] Bluetooth: hci3: command 0x0406 tx timeout
[ 2048.403533][ T5791] Bluetooth: hci0: command 0x0406 tx timeout
[ 2049.342842][ T5791] Bluetooth: hci6: command 0x0406 tx timeout
[ 2050.202286][T21698] binder: BINDER_SET_CONTEXT_MGR already set
[ 2050.208731][T21698] binder: 21696:21698 ioctl 4018620d 200000000180 returned -16
[ 2050.481793][ T5791] Bluetooth: hci2: command 0x0406 tx timeout
[ 2050.492063][ T5791] Bluetooth: hci1: command 0x0406 tx timeout
[ 2050.637684][ T5791] Bluetooth: hci0: command 0x0406 tx timeout
[ 2050.646488][T20169] Bluetooth: hci3: command 0x0406 tx timeout
[ 2050.674526][   T30] audit: type=1326 audit(1768210951.726:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21688 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a718f749 code=0x7ffc0000
[ 2050.699473][   T30] audit: type=1326 audit(1768210951.726:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21688 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a718f749 code=0x7ffc0000
[ 2050.723391][   T30] audit: type=1326 audit(1768210951.726:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21688 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a718f749 code=0x7ffc0000
[ 2050.746494][   T30] audit: type=1326 audit(1768210951.726:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21688 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34a718f749 code=0x7ffc0000
[ 2050.769363][   T30] audit: type=1326 audit(1768210951.726:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21688 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a718f749 code=0x7ffc0000
[ 2050.792147][   T30] audit: type=1326 audit(1768210951.726:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21688 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a718f749 code=0x7ffc0000
[ 2050.817249][   T30] audit: type=1326 audit(1768210951.726:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21688 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a718f749 code=0x7ffc0000
[ 2050.840047][   T30] audit: type=1326 audit(1768210951.726:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21688 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34a718df90 code=0x7ffc0000
[ 2050.862993][   T30] audit: type=1326 audit(1768210951.726:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21688 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f34a7190f77 code=0x7ffc0000
[ 2050.887495][   T30] audit: type=1326 audit(1768210951.726:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21688 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34a718f749 code=0x7ffc0000
[ 2051.971720][T20564] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 2052.187925][T20564] usb 7-1: Using ep0 maxpacket: 16
[ 2052.227242][T20564] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2052.238769][T20564] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2052.322456][T20564] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2052.333636][T20564] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2052.342993][T20564] usb 7-1: Product: syz
[ 2052.347756][T20564] usb 7-1: Manufacturer: syz
[ 2052.352565][T20564] usb 7-1: SerialNumber: syz
[ 2052.757857][T20564] usb 7-1: 0:2 : does not exist
[ 2053.252122][T20564] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 2053.843836][T20564] usb 7-1: USB disconnect, device number 10
[ 2054.109110][T21717] loop4: detected capacity change from 0 to 512
[ 2054.242410][T21717] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[ 2054.251263][T21717] UDF-fs: Scanning with blocksize 512 failed
[ 2054.347516][T21717] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[ 2054.355441][T21717] UDF-fs: Scanning with blocksize 1024 failed
[ 2054.399913][T21717] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[ 2054.407530][T21717] UDF-fs: Scanning with blocksize 2048 failed
[ 2054.424714][T21717] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 2055.360616][T21717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2055.538725][T21726] No such timeout policy "syz1"
[ 2056.346457][T20564] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 2056.579271][T20564] usb 2-1: Using ep0 maxpacket: 16
[ 2056.625065][T20564] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2056.638766][T20564] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[ 2056.648444][T20564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2057.566259][T20564] usb 2-1: config 0 descriptor??
[ 2058.097828][T20564] usbhid 2-1:0.0: can't add hid device: -71
[ 2058.104842][T20564] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2058.144052][T20564] usb 2-1: USB disconnect, device number 59
[ 2058.204420][ T8663] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 2058.448974][ T8663] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2058.459623][ T8663] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 2058.473029][ T8663] usb 9-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[ 2058.482468][ T8663] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2058.579097][ T8663] usb 9-1: config 0 descriptor??
[ 2059.352853][ T8663] usb 9-1: USB disconnect, device number 7
[ 2062.997365][T20252] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 2063.257459][T20252] usb 9-1: Using ep0 maxpacket: 16
[ 2063.310689][T20252] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2063.321402][T20252] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2063.416981][T20252] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2063.426590][T20252] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2063.435304][T20252] usb 9-1: Product: syz
[ 2063.439624][T20252] usb 9-1: Manufacturer: syz
[ 2063.444514][T20252] usb 9-1: SerialNumber: syz
[ 2063.757003][T20252] usb 9-1: 0:2 : does not exist
[ 2063.837070][T20252] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 2063.966465][T20252] usb 9-1: USB disconnect, device number 8
[ 2066.340358][T20252] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 2066.600626][T20252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2066.611418][T20252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 2066.621978][T20252] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2066.635335][T20252] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[ 2066.644897][T20252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2066.889432][T20252] usb 2-1: config 0 descriptor??
[ 2067.165099][T20252] usb 2-1: USB disconnect, device number 60
[ 2072.070025][T20564] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 2073.668260][T21818] binder: 21816:21818 ioctl c0306201 0 returned -14
[ 2075.023805][T21823] netlink: 'syz.1.5403': attribute type 10 has an invalid length.
[ 2075.049213][T21823] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 2077.265657][T21829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5405'.
[ 2078.577626][T21836] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5408'.
[ 2079.767640][T20252] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 2082.303146][T20252] usb 7-1: Using ep0 maxpacket: 16
[ 2082.351511][T20252] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2082.362284][T20252] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2082.717256][T20252] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2082.726937][T20252] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2082.839010][T20252] usb 7-1: can't set config #1, error -71
[ 2082.881641][T20252] usb 7-1: USB disconnect, device number 11
[ 2085.145579][T20169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2085.155457][T20169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2085.166431][T20169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2085.182247][T20169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2085.194013][T20169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2086.696837][T20169] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2086.706318][T20252] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 2086.727692][T20169] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2086.761284][T20169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2086.839980][T20169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2086.852954][T20169] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2086.937012][T20252] usb 7-1: config 0 has no interfaces?
[ 2086.943233][T20252] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 2086.952778][T20252] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2087.113773][T20252] usb 7-1: config 0 descriptor??
[ 2087.507925][T21856] chnl_net:caif_netlink_parms(): no params data found
[ 2087.554707][T21863] Bluetooth: MGMT ver 1.23
[ 2087.633805][T20564] usb 7-1: USB disconnect, device number 12
[ 2087.882246][T21872] program syz.1.5420 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2088.000320][ T5791] Bluetooth: hci4: command tx timeout
[ 2088.641201][T21865] chnl_net:caif_netlink_parms(): no params data found
[ 2088.782749][T21878] loop1: detected capacity change from 0 to 1024
[ 2088.867401][T21878] EXT4-fs: inline encryption not supported
[ 2088.952949][T21878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2089.025280][ T5791] Bluetooth: hci5: command tx timeout
[ 2090.218069][T20558] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2090.233330][ T5791] Bluetooth: hci4: command tx timeout
[ 2090.266311][T21856] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2090.274057][T21856] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2090.282421][T21856] bridge_slave_0: entered allmulticast mode
[ 2090.292570][T21856] bridge_slave_0: entered promiscuous mode
[ 2090.484152][T21856] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2090.492192][T21856] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2090.500005][T21856] bridge_slave_1: entered allmulticast mode
[ 2090.508977][T21856] bridge_slave_1: entered promiscuous mode
[ 2090.970474][T21856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2091.099362][T21856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2091.259799][ T5791] Bluetooth: hci5: command tx timeout
[ 2092.446338][ T5791] Bluetooth: hci4: command tx timeout
[ 2092.609608][T20564] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 2093.472772][ T5791] Bluetooth: hci5: command tx timeout
[ 2094.072098][T21865] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2094.079504][T21865] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2094.087588][T21865] bridge_slave_0: entered allmulticast mode
[ 2094.096845][T21865] bridge_slave_0: entered promiscuous mode
[ 2094.115706][T20564] usb 7-1: Using ep0 maxpacket: 16
[ 2094.136682][T21856] team0: Port device team_slave_0 added
[ 2094.172076][T21856] team0: Port device team_slave_1 added
[ 2094.382256][T21865] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2094.389945][T21865] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2094.399700][T21865] bridge_slave_1: entered allmulticast mode
[ 2094.411089][T21865] bridge_slave_1: entered promiscuous mode
[ 2094.553786][T20564] usb 7-1: device descriptor read/all, error -71
[ 2094.583220][T21856] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2094.594465][T21856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2094.621114][T21856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2094.670246][ T5791] Bluetooth: hci4: command tx timeout
[ 2095.080125][T21856] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2095.087416][T21856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2095.114128][T21856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2095.230620][T21865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2095.366157][T21865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2095.635597][T21865] team0: Port device team_slave_0 added
[ 2095.654532][T21865] team0: Port device team_slave_1 added
[ 2095.686091][T21856] hsr_slave_0: entered promiscuous mode
[ 2095.695441][T21856] hsr_slave_1: entered promiscuous mode
[ 2095.703922][T21856] debugfs: 'hsr0' already exists in 'hsr'
[ 2095.710041][T21856] Cannot create hsr debugfs directory
[ 2095.718605][T20014] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 2095.750175][ T5791] Bluetooth: hci5: command tx timeout
[ 2096.001916][T20014] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 2096.013210][T20014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2096.071844][T20014] usb 2-1: config 0 descriptor??
[ 2096.092694][T21865] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2096.099839][T21865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2096.127785][T21865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2096.305068][T20014] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 2096.313876][T20014] [drm:udl_init] *ERROR* Selecting channel failed
[ 2096.378184][T20014] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[ 2096.385802][T20014] [drm] Initialized udl on minor 2
[ 2096.445185][T20014] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2096.454269][T20014] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 2096.464574][T20564] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2096.477722][T20564] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2096.486001][T20564] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 2096.522538][T20014] usb 2-1: USB disconnect, device number 62
[ 2096.613371][T21865] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2096.620757][T21865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2096.648098][T21865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2097.216029][T21909] program syz.6.5429 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2097.245346][T21865] hsr_slave_0: entered promiscuous mode
[ 2097.254552][T21865] hsr_slave_1: entered promiscuous mode
[ 2097.262526][T21865] debugfs: 'hsr0' already exists in 'hsr'
[ 2097.268456][T21865] Cannot create hsr debugfs directory
[ 2097.599598][T20564] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 2097.771536][T20564] usb 2-1: device descriptor read/64, error -71
[ 2098.110716][T20564] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 2098.275439][T20169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2098.286928][T20564] usb 2-1: device descriptor read/64, error -71
[ 2098.297990][T20169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2098.363692][T20169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2098.406959][T20169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2098.437144][T20564] usb usb2-port1: attempt power cycle
[ 2098.483810][T20169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2099.031724][T20564] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 2099.089257][T20564] usb 2-1: device descriptor read/8, error -71
[ 2099.383595][T20564] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 2099.436343][T20564] usb 2-1: device descriptor read/8, error -71
[ 2099.570988][T20564] usb usb2-port1: unable to enumerate USB device
[ 2100.013577][T21856] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2100.135393][T21916] chnl_net:caif_netlink_parms(): no params data found
[ 2100.190538][T21856] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2100.358446][T21856] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2100.522102][T21856] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2100.626306][T21865] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2100.822930][T21865] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2100.832064][T20169] Bluetooth: hci0: command tx timeout
[ 2100.968764][T21865] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2101.095649][T21865] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2102.768754][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 2103.811164][T20169] Bluetooth: hci0: command tx timeout
[ 2104.801932][T20169] Bluetooth: hci2: unexpected event for opcode 0x0c12
[ 2105.123096][T21916] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2105.132034][T21916] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2105.140731][T21916] bridge_slave_0: entered allmulticast mode
[ 2105.149500][T21916] bridge_slave_0: entered promiscuous mode
[ 2105.300046][T21916] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2105.307851][T21916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2105.315758][T21916] bridge_slave_1: entered allmulticast mode
[ 2105.326460][T21916] bridge_slave_1: entered promiscuous mode
[ 2105.369461][T21856] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2105.878574][T15987] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2105.914856][T21916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2105.963963][T20169] Bluetooth: hci0: command tx timeout
[ 2106.015776][T21916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2106.056370][T15987] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2106.233864][T15987] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2106.319123][T21856] 8021q: adding VLAN 0 to HW filter on device team0
[ 2106.374898][T15987] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2106.501372][T21916] team0: Port device team_slave_0 added
[ 2106.523280][T20307] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2106.530909][T20307] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2106.558814][T21916] team0: Port device team_slave_1 added
[ 2106.804028][T20307] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2106.811789][T20307] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2106.828308][T15987] bridge_slave_1: left allmulticast mode
[ 2106.834214][T15987] bridge_slave_1: left promiscuous mode
[ 2106.841390][T15987] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2106.861998][T15987] bridge_slave_0: left allmulticast mode
[ 2106.868145][T15987] bridge_slave_0: left promiscuous mode
[ 2106.874482][T15987] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2107.103432][T20252] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 2107.264715][T15987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2107.289755][T20252] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 2107.299728][T20252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2107.303472][T15987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2107.325573][T15987] bond0 (unregistering): Released all slaves
[ 2107.326984][T20252] usb 2-1: config 0 descriptor??
[ 2107.364385][T21916] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2107.371832][T21916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2107.401948][T21916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2107.487025][T21916] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2107.495540][T21916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2107.522370][T21916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2107.597686][T20252] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 2107.608234][T20252] [drm:udl_init] *ERROR* Selecting channel failed
[ 2107.652675][T20252] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[ 2107.659938][T20252] [drm] Initialized udl on minor 2
[ 2107.746891][T20252] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2107.756747][T20252] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 2107.769941][T20513] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2107.779756][T20513] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2107.789946][T20513] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 2107.805250][T20252] usb 2-1: USB disconnect, device number 67
[ 2107.916296][T21865] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2108.030470][T21947] program syz.6.5438 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2108.183215][T20169] Bluetooth: hci0: command tx timeout
[ 2108.222894][T15987] hsr_slave_0: left promiscuous mode
[ 2108.247163][T15987] hsr_slave_1: left promiscuous mode
[ 2108.255828][T15987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2108.263578][T15987] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2108.303741][T15987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2108.311757][T15987] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2108.399427][T15987] veth1_macvtap: left promiscuous mode
[ 2108.405321][T15987] veth0_macvtap: left promiscuous mode
[ 2108.411603][T15987] veth1_vlan: left promiscuous mode
[ 2108.417168][T15987] veth0_vlan: left promiscuous mode
[ 2108.756728][T20513] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 2109.119628][T15987] team0 (unregistering): Port device team_slave_0 removed
[ 2109.495632][T20513] usb 2-1: Using ep0 maxpacket: 32
[ 2109.528987][T20513] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 2109.540664][T20513] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 2109.554051][T20513] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2109.566515][T20513] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 2109.623191][T21916] hsr_slave_0: entered promiscuous mode
[ 2109.635981][T21916] hsr_slave_1: entered promiscuous mode
[ 2109.645471][T21916] debugfs: 'hsr0' already exists in 'hsr'
[ 2109.651592][T21916] Cannot create hsr debugfs directory
[ 2109.727099][T21865] 8021q: adding VLAN 0 to HW filter on device team0
[ 2109.804999][T21856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2109.848888][T20513] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 2109.858738][T20513] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2109.867573][T20513] usb 2-1: Product: syz
[ 2109.872753][T20513] usb 2-1: Manufacturer: syz
[ 2109.877585][T20513] usb 2-1: SerialNumber: syz
[ 2109.964390][T20779] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2109.972212][T20779] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2110.025468][    C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 2110.036126][T20513] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input68
[ 2110.095688][T20779] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2110.103361][T20779] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2110.771909][T21959] Mount JFS Failure: -5
[ 2113.462745][T20513] imon:send_packet: packet tx failed (-71)
[ 2113.525313][T20513] imon 2-1:155.0: panel buttons/knobs setup failed
[ 2113.540653][T20513] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 2113.550003][T20513]  (id 0x00)
[ 2113.947750][T20513] rc_core: IR keymap rc-imon-pad not found
[ 2113.953813][T20513] Registered IR keymap rc-empty
[ 2113.959526][T20513] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 2113.970273][T20513] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 2114.021193][T15987] bridge_slave_1: left allmulticast mode
[ 2114.027105][T15987] bridge_slave_1: left promiscuous mode
[ 2114.034111][T15987] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2114.041789][T20513] imon:send_packet: packet tx failed (-71)
[ 2114.085896][T20513] imon 2-1:155.0: remote input dev register failed
[ 2114.093435][T20513] imon 2-1:155.0: imon_init_intf0: rc device setup failed
[ 2114.247534][T15987] bridge_slave_0: left allmulticast mode
[ 2114.253429][T15987] bridge_slave_0: left promiscuous mode
[ 2114.262742][T15987] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2114.340992][T20513] imon 2-1:155.0: unable to initialize intf0, err 0
[ 2114.347977][T20513] imon:imon_probe: failed to initialize context!
[ 2114.354697][T20513] imon 2-1:155.0: unable to register, err -19
[ 2114.424279][T20513] usb 2-1: USB disconnect, device number 68
[ 2114.727924][T15987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2114.747184][T15987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2114.799297][T15987] bond0 (unregistering): Released all slaves
[ 2115.332128][T21977] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5445'.
[ 2115.373785][T21856] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2115.562365][T21865] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2115.758163][T15987] hsr_slave_0: left promiscuous mode
[ 2115.806023][T15987] hsr_slave_1: left promiscuous mode
[ 2115.814052][T15987] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2115.839992][T15987] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2115.884640][T21979] program syz.6.5446 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2116.128411][T15987] team0 (unregistering): Port device team_slave_1 removed
[ 2116.227800][T15987] team0 (unregistering): Port device team_slave_0 removed
[ 2116.840010][T21856] veth0_vlan: entered promiscuous mode
[ 2117.118642][T21916] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2117.156030][T21916] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2117.182307][T21916] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2117.275954][T21856] veth1_vlan: entered promiscuous mode
[ 2117.306436][T20513] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 2117.323460][T21916] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2117.362693][T21865] veth0_vlan: entered promiscuous mode
[ 2117.444685][T21865] veth1_vlan: entered promiscuous mode
[ 2117.534766][T20513] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 2117.544329][T20513] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2117.624823][T20513] usb 7-1: config 0 descriptor??
[ 2117.731663][T21856] veth0_macvtap: entered promiscuous mode
[ 2117.849438][T21856] veth1_macvtap: entered promiscuous mode
[ 2117.894240][T20513] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 2117.922350][T20513] [drm:udl_init] *ERROR* Selecting channel failed
[ 2117.930965][T21865] veth0_macvtap: entered promiscuous mode
[ 2118.040627][T21865] veth1_macvtap: entered promiscuous mode
[ 2118.049221][T20513] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2
[ 2118.058130][T20513] [drm] Initialized udl on minor 2
[ 2118.094474][T20513] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2118.103995][T20513] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[ 2118.130732][T21856] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2118.141956][T11562] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2118.185808][T11562] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2118.195104][T11562] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[ 2118.223874][T21856] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2118.267975][T20513] usb 7-1: USB disconnect, device number 15
[ 2118.372693][T20331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2118.414963][ T4380] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2118.477805][T21865] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2118.485571][ T4380] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2118.551449][T21865] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2118.593511][T20331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2118.676909][T20331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2118.715124][ T4380] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2118.799730][ T4380] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2118.808835][ T4380] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2119.112407][T21916] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2119.337453][T21916] 8021q: adding VLAN 0 to HW filter on device team0
[ 2119.492515][T15402] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2119.500013][T15402] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2119.596703][T16029] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2119.604288][T16029] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2121.611039][T20252] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 2121.717405][T21916] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2121.824138][T20252] usb 7-1: Using ep0 maxpacket: 16
[ 2121.890547][T20252] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2121.902037][T20252] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2121.983569][T20252] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2121.993094][T20252] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2122.001670][T20252] usb 7-1: Product: syz
[ 2122.006164][T20252] usb 7-1: Manufacturer: syz
[ 2122.010993][T20252] usb 7-1: SerialNumber: syz
[ 2122.137262][T21916] veth0_vlan: entered promiscuous mode
[ 2122.248026][T21916] veth1_vlan: entered promiscuous mode
[ 2122.350596][T20252] usb 7-1: 0:2 : does not exist
[ 2122.440554][T20252] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 2122.606197][T21916] veth0_macvtap: entered promiscuous mode
[ 2122.631410][T20252] usb 7-1: USB disconnect, device number 16
[ 2122.678594][T21916] veth1_macvtap: entered promiscuous mode
[ 2122.822334][T21916] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2122.905432][T21916] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2123.032711][ T4380] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2123.042249][ T4380] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2123.104418][ T4380] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2123.148411][ T4380] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2127.854968][T22047] program syz.1.5454 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2128.264142][T20564] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 2128.482187][T20564] usb 7-1: config 8 has an invalid interface number: 130 but max is 1
[ 2128.494924][T20564] usb 7-1: config 8 has an invalid interface number: 130 but max is 1
[ 2128.503359][T20564] usb 7-1: config 8 has 1 interface, different from the descriptor's value: 2
[ 2128.513065][T20564] usb 7-1: config 8 has no interface number 0
[ 2128.519559][T20564] usb 7-1: config 8 interface 130 has no altsetting 1
[ 2128.526637][T20564] usb 7-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=46.a2
[ 2128.536163][T20564] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2128.587433][ T1891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2128.598617][ T1891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2128.771510][T20749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2128.782491][T20749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2129.061535][T20538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2129.070461][T20538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2129.170703][T20564] usb 7-1: string descriptor 0 read error: -71
[ 2129.187358][T20564] HFC-S_USB 7-1:8.130: probe with driver HFC-S_USB failed with error -5
[ 2129.245359][T20564] usb 7-1: USB disconnect, device number 17
[ 2129.404545][T16029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2129.412618][T16029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2130.072665][T20564] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 2130.309801][T20564] usb 2-1: Using ep0 maxpacket: 16
[ 2130.380932][T20564] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2130.394904][T20564] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2130.515733][T20564] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2130.525321][T20564] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2130.534015][T20564] usb 2-1: Product: syz
[ 2130.538629][T20564] usb 2-1: Manufacturer: syz
[ 2130.543537][T20564] usb 2-1: SerialNumber: syz
[ 2130.992349][T22077] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[ 2131.044519][T20564] usb 2-1: 0:2 : does not exist
[ 2131.117493][T20564] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 2131.229770][T20564] usb 2-1: USB disconnect, device number 69
[ 2131.471445][T20014] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 2131.752090][T20014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2131.763833][T20014] usb 3-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00
[ 2131.774244][T20014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2131.914757][T20014] usb 3-1: config 0 descriptor??
[ 2132.627715][T20014] usbhid 3-1:0.0: can't add hid device: -71
[ 2132.634905][T20014] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2132.807461][T20014] usb 3-1: USB disconnect, device number 123
[ 2133.128739][T22089] program syz.6.5463 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2133.637811][T22094] syz_tun: entered allmulticast mode
[ 2133.822659][T22097] program syz.3.5464 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2133.963218][T20779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2133.972161][T20779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2134.562473][ T4075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2134.571095][ T4075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2138.427048][T22094] syz_tun: left allmulticast mode
[ 2139.048424][T22116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5472'.
[ 2139.381042][T22119] program syz.0.5474 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2139.830466][T20014] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 2139.896273][T22121] loop3: detected capacity change from 0 to 4096
[ 2140.011609][T20014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2140.023854][T20014] usb 2-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00
[ 2140.034158][T20014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2140.075348][T20014] usb 2-1: config 0 descriptor??
[ 2140.134164][T22121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2140.256443][T22121] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5476: bg 0: block 363: padding at end of block bitmap is not set
[ 2140.276159][T22121] fs-verity (loop3, inode 15): ext4_end_enable_verity() failed with err -117
[ 2140.558266][T20014] wacom 0003:056A:00E6.0018: unknown main item tag 0x0
[ 2140.568143][T20014] wacom 0003:056A:00E6.0018: unknown main item tag 0x0
[ 2140.576336][T20014] wacom 0003:056A:00E6.0018: unknown main item tag 0x0
[ 2140.583539][T20014] wacom 0003:056A:00E6.0018: unknown main item tag 0x0
[ 2140.591068][T20014] wacom 0003:056A:00E6.0018: unknown main item tag 0x0
[ 2140.598607][T20014] wacom 0003:056A:00E6.0018: unknown main item tag 0x0
[ 2140.605764][T20014] wacom 0003:056A:00E6.0018: unknown main item tag 0x0
[ 2140.795003][T21856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2140.908263][T20014] usb 2-1: USB disconnect, device number 70
[ 2142.710609][T22164] program syz.0.5489 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2143.133253][T22170] binder: 22168:22170 ioctl c0306201 0 returned -14
[ 2143.232578][T22171] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5491'.
[ 2145.675265][T22191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5500'.
[ 2146.504711][T22196] program syz.6.5502 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2147.361352][T22215] binder: BINDER_SET_CONTEXT_MGR already set
[ 2147.369070][T22215] binder: 22211:22215 ioctl 4018620d 200000004a80 returned -16
[ 2147.475761][T22217] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 2147.492161][T20014] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 2147.674242][T20014] usb 3-1: Using ep0 maxpacket: 8
[ 2148.470113][T20014] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 2148.479361][T20014] usb 3-1: config 179 has no interface number 0
[ 2148.485892][T20014] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 2148.497771][T20014] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 2148.509902][T20014] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[ 2148.521704][T20014] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[ 2148.533524][T20014] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2148.547236][T20014] usb 3-1: config 179 interface 65 has no altsetting 0
[ 2148.556548][T20014] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 2148.566515][T20014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2149.018023][T20014] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input70
[ 2149.075370][ T5132] input input70: unable to receive magic message: -110
[ 2149.147434][ T5132] input input70: unable to receive magic message: -32
[ 2149.257162][ T5132] input input70: unable to receive magic message: -32
[ 2149.341652][ T5132] input input70: unable to receive magic message: -32
[ 2149.408539][T22227] program syz.3.5516 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2149.495932][T22210] fuse: Unknown parameter '0x000000000000000800000000000000000000'
[ 2149.619880][T20014] usb 3-1: USB disconnect, device number 124
[ 2149.626435][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 2150.496600][T20014] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 2150.707167][T20014] usb 4-1: Using ep0 maxpacket: 32
[ 2150.956637][T20014] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 2150.968317][T20014] usb 4-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0
[ 2150.977988][T20014] usb 4-1: Manufacturer: syz
[ 2151.139702][T20014] usb 4-1: config 0 descriptor??
[ 2151.492333][T20014] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 2151.527668][T20014] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2151.541544][T20014] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 2151.549805][T20014] usb 4-1: media controller created
[ 2151.615203][T20014] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2151.735333][T22230] =====================================================
[ 2151.743534][T22230] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120
[ 2151.751855][T22230]  _copy_to_user+0xcc/0x120
[ 2151.756583][T22230]  i2cdev_ioctl_smbus+0x586/0x660
[ 2151.762005][T22230]  i2cdev_ioctl+0xa14/0xf40
[ 2151.766746][T22230]  __se_sys_ioctl+0x23c/0x400
[ 2151.771801][T22230]  __x64_sys_ioctl+0x97/0xe0
[ 2151.776593][T22230]  x64_sys_call+0x18a7/0x3e70
[ 2151.783106][T22230]  do_syscall_64+0xd3/0xf80
[ 2151.788807][T22230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2151.795084][T22230] 
[ 2151.797522][T22230] Uninit was stored to memory at:
[ 2151.811561][T22230]  __i2c_smbus_xfer+0x24ba/0x2eb0
[ 2151.816815][T22230]  i2c_smbus_xfer+0x2cd/0x460
[ 2151.829376][T22230]  i2cdev_ioctl_smbus+0x4a1/0x660
[ 2151.838198][T22230]  i2cdev_ioctl+0xa14/0xf40
[ 2151.843837][T22230]  __se_sys_ioctl+0x23c/0x400
[ 2151.848836][T22230]  __x64_sys_ioctl+0x97/0xe0
[ 2151.853920][T22230]  x64_sys_call+0x18a7/0x3e70
[ 2151.858837][T22230]  do_syscall_64+0xd3/0xf80
[ 2151.863611][T22230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2151.869883][T22230] 
[ 2151.872322][T22230] Local variable msgbuf1.i created at:
[ 2151.878084][T22230]  __i2c_smbus_xfer+0x830/0x2eb0
[ 2151.883228][T22230]  i2c_smbus_xfer+0x2cd/0x460
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2151.888229][T22230] 
[ 2151.890651][T22230] Bytes 0-1 of 2 are uninitialized
[ 2151.895902][T22230] Memory access of size 2 starts at ffff88812dd8fd06
[ 2151.902897][T22230] Data copied to user address 00002000000001c0
[ 2151.910228][T22230] 
[ 2151.912676][T22230] CPU: 1 UID: 0 PID: 22230 Comm: syz.3.5517 Not tainted syzkaller #0 PREEMPT(none) 
[ 2151.922407][T22230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2151.932824][T22230] =====================================================
[ 2151.940139][T22230] Disabling lock debugging due to kernel taint
[ 2151.948026][T22230] Kernel panic - not syncing: kmsan.panic set ...
[ 2151.954627][T22230] CPU: 1 UID: 0 PID: 22230 Comm: syz.3.5517 Tainted: G    B               syzkaller #0 PREEMPT(none) 
[ 2151.965793][T22230] Tainted: [B]=BAD_PAGE
[ 2151.970065][T22230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2151.980274][T22230] Call Trace:
[ 2151.983681][T22230]  <TASK>
[ 2151.986728][T22230]  __dump_stack+0x26/0x30
[ 2151.991268][T22230]  dump_stack_lvl+0x50/0x1c0
[ 2151.996388][T22230]  ? dump_stack+0x12/0x25
[ 2152.000956][T22230]  dump_stack+0x1e/0x25
[ 2152.005333][T22230]  vpanic+0x435/0xd30
[ 2152.009612][T22230]  panic+0x15d/0x160
[ 2152.013783][T22230]  kmsan_report+0x31c/0x320
[ 2152.018538][T22230]  ? kmsan_internal_check_memory+0x1e1/0x230
[ 2152.024761][T22230]  ? kmsan_copy_to_user+0xf1/0x190
[ 2152.030097][T22230]  ? _copy_to_user+0xcc/0x120
[ 2152.034964][T22230]  ? i2cdev_ioctl_smbus+0x586/0x660
[ 2152.040374][T22230]  ? i2cdev_ioctl+0xa14/0xf40
[ 2152.045264][T22230]  ? __se_sys_ioctl+0x23c/0x400
[ 2152.050305][T22230]  ? __x64_sys_ioctl+0x97/0xe0
[ 2152.055262][T22230]  ? x64_sys_call+0x18a7/0x3e70
[ 2152.060358][T22230]  ? do_syscall_64+0xd3/0xf80
[ 2152.065278][T22230]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2152.071533][T22230]  ? kmsan_get_metadata+0xfb/0x160
[ 2152.076893][T22230]  ? __pfx_az6027_i2c_xfer+0x10/0x10
[ 2152.082406][T22230]  ? __i2c_transfer+0x1179/0x3110
[ 2152.087644][T22230]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 2152.094189][T22230]  ? kmsan_get_metadata+0xfb/0x160
[ 2152.099530][T22230]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 2152.105597][T22230]  ? __i2c_smbus_xfer+0x1e54/0x2eb0
[ 2152.110984][T22230]  ? kmsan_get_metadata+0xfb/0x160
[ 2152.116328][T22230]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 2152.122462][T22230]  kmsan_internal_check_memory+0x1e1/0x230
[ 2152.128506][T22230]  kmsan_copy_to_user+0xf1/0x190
[ 2152.133695][T22230]  _copy_to_user+0xcc/0x120
[ 2152.138406][T22230]  i2cdev_ioctl_smbus+0x586/0x660
[ 2152.143693][T22230]  i2cdev_ioctl+0xa14/0xf40
[ 2152.148410][T22230]  ? kmsan_get_shadow_origin_ptr+0x28/0xb0
[ 2152.154451][T22230]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 2152.159679][T22230]  __se_sys_ioctl+0x23c/0x400
[ 2152.164559][T22230]  __x64_sys_ioctl+0x97/0xe0
[ 2152.169381][T22230]  x64_sys_call+0x18a7/0x3e70
[ 2152.174301][T22230]  do_syscall_64+0xd3/0xf80
[ 2152.179045][T22230]  ? clear_bhb_loop+0x40/0x90
[ 2152.183908][T22230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2152.190071][T22230] RIP: 0033:0x7f967e38f749
[ 2152.194709][T22230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2152.214503][T22230] RSP: 002b:00007f967f1b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2152.223099][T22230] RAX: ffffffffffffffda RBX: 00007f967e5e5fa0 RCX: 00007f967e38f749
[ 2152.231305][T22230] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000004
[ 2152.239423][T22230] RBP: 00007f967e413f91 R08: 0000000000000000 R09: 0000000000000000
[ 2152.247531][T22230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2152.255633][T22230] R13: 00007f967e5e6038 R14: 00007f967e5e5fa0 R15: 00007fffc5f473e8
[ 2152.263798][T22230]  </TASK>
[ 2152.267545][T22230] Kernel Offset: disabled
[ 2152.271950][T22230] Rebooting in 86400 seconds..