last executing test programs:

2m17.652656317s ago: executing program 0 (id=191):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0)

2m16.746170389s ago: executing program 0 (id=196):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000040)={0x0, 0x526d630517582f21, 0x4})

2m15.867364918s ago: executing program 0 (id=200):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000108, 0x0, 0x32feb97c}]})
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000180))

2m15.596135365s ago: executing program 0 (id=205):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0)

2m15.579053927s ago: executing program 2 (id=206):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xb20, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x7d, 0x0, 0x0, 0x0, "dc5a0ed20407f2bd0690bfe106dae015ddf047a63e388c3a17049dc942345089ee93f6223918195704fd22e15c26b0555e6a957c3f2dc86a355f4806c9e4f761"}}, 0x80}}, 0x40000)

2m15.355278079s ago: executing program 0 (id=209):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

2m15.255946419s ago: executing program 2 (id=210):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0'}, 0xb)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2)

2m14.44985332s ago: executing program 0 (id=219):
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0))
sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
rt_sigaction(0x8, &(0x7f0000000080)={0x0, 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x60}}, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

2m14.344794561s ago: executing program 2 (id=222):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvfrom(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0)

2m13.425378904s ago: executing program 2 (id=232):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x80001)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r1, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x738})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000200)={{&(0x7f0000463000/0x4000)=nil, 0x4000}, 0x1})

2m13.282508109s ago: executing program 2 (id=235):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0xa10411, &(0x7f0000001a00)=ANY=[], 0xfd, 0x21c, &(0x7f0000000480)="$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")
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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")
write$P9_RSTATu(r0, &(0x7f0000000500)={0x5d, 0x7d, 0x2, {{0x0, 0x45, 0x900, 0x4, {0x10, 0x0, 0x8}, 0x1200000, 0x2, 0x56df, 0xa, 0xa, '/dev/fuse\x00', 0x2, '-/', 0x3, '#! ', 0x3, 'lo\x00'}, 0x3, 'lo\x00', 0x0, 0xee00}}, 0x5d)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0701000007000000170000003e868c8e19a07c254b01d0f64fd7f3fbfa6663171fc7af86ccebb3100a7945866751f70b26a8823b6b3285ce6d42bdad53c0d9af89ca46f8a3b2e8dc528451fb4013846193643a6aad3f37d513d90fef4272139d8b261efb58f7a5357575f07464cbca217e2f8b8282e18b640202dd90d1f1b0f38eadd9ad2d1a4334b75bee3fba7de584e1087bb46ca14eaa8cb5a4b7e5dc27b92da26b4866b1628dadbcaf3f557eccd8505d17567525fd1863fd74372452a48568c0e66f1869f0d4796fdc6784005b799f3bff5c354f187b25e9a2d26a9c5bc486", @ANYBLOB, @ANYRES64=0x0], 0x20)

2m12.856751921s ago: executing program 2 (id=236):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8020, 0x0)

2m12.762930991s ago: executing program 32 (id=236):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8020, 0x0)

1m59.324008006s ago: executing program 33 (id=219):
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0))
sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
rt_sigaction(0x8, &(0x7f0000000080)={0x0, 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x60}}, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

22.31296249s ago: executing program 5 (id=1043):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000180)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000007ff, 0x0, 0x0, 0x1, 0x2000000d, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca71ea8000000000070cf00b00b0000000000000000000000000000000000000000ba00", "2809e8dbe108598948224b084afbc11d87313c5240f45f819e01177d3d458dd4192c61ac0000001000", "91be4ab3060000000000400000000000000100008000", [0x8, 0x9]}})

22.225929228s ago: executing program 5 (id=1045):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0004"], 0x2a)

21.943353627s ago: executing program 5 (id=1049):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

17.761473588s ago: executing program 5 (id=1096):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$btrfs(&(0x7f0000000180), &(0x7f0000005140)='./file1\x00', 0x0, &(0x7f0000000140)={[{}, {@nossd}, {@nodatasum}, {@barrier}, {@notreelog}]}, 0x1, 0x50ed, &(0x7f000000a2c0)="$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")
link(0x0, 0x0)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r1, &(0x7f00000009c0), 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x3ffff)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})

16.468899709s ago: executing program 5 (id=1106):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x2c, r5, 0x7, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

15.952536871s ago: executing program 5 (id=1113):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="435d21e2fd5f7318ed9017520298cc307013e6427ccd10294414d120d141bf253933db99b5e8507fced2cb6e4f71831672b78be97cfbb623420aa5326308b9d3ad301a9b5bb23cc64b2d65eae5cb704813d027f3dfac3fb9d6a46afff97a3286e0b88e", 0x63}], 0x1}}], 0x1, 0x400008c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x7c, 0xff, 0x0, '\x00', 0x0, 0x1})

15.783607008s ago: executing program 34 (id=1113):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="435d21e2fd5f7318ed9017520298cc307013e6427ccd10294414d120d141bf253933db99b5e8507fced2cb6e4f71831672b78be97cfbb623420aa5326308b9d3ad301a9b5bb23cc64b2d65eae5cb704813d027f3dfac3fb9d6a46afff97a3286e0b88e", 0x63}], 0x1}}], 0x1, 0x400008c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x7c, 0xff, 0x0, '\x00', 0x0, 0x1})

6.513556313s ago: executing program 4 (id=1177):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
truncate(0x0, 0x0)
open(0x0, 0x143142, 0x80)
rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0)
rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

6.416688703s ago: executing program 4 (id=1179):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
write(r0, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/6, 0x6}], 0x7}, 0x5}], 0x1, 0x2000, 0x0)

6.304909774s ago: executing program 4 (id=1180):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000080))

6.14221737s ago: executing program 4 (id=1181):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$btrfs(&(0x7f0000000180), &(0x7f0000005140)='./file1\x00', 0x0, &(0x7f0000000140)={[{}, {@nossd}, {@nodatasum}, {@barrier}, {@notreelog}]}, 0x1, 0x50ed, &(0x7f000000a2c0)="$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")
link(0x0, 0x0)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r1, &(0x7f00000009c0), 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x3ffff)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})

3.27044712s ago: executing program 4 (id=1195):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)

2.439278194s ago: executing program 7 (id=1114):
r0 = epoll_create1(0x80000)
r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0)
syz_read_part_table(0x1050, &(0x7f0000000b80)="$eJzszzGqAjEUhtH/PWbIiI37sLfXVlsrN2FvYetGXJurkJEYQV2AiHBOlY/cBG74qr9k8qwxyVAPfZL/8j46fY31dV+SxWG8yzC24eUs59U8NXa1N+1+OPbp2sPL9vHDqXTlo6sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwM+4BQAA///qiBUU")
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0)
futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2)
futex(&(0x7f0000000140)=0x1, 0x6, 0x6, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x2)

2.27509126s ago: executing program 6 (id=1199):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x2003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x268}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x6, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

2.241524754s ago: executing program 4 (id=1200):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x612, 0x6d, 0xc, 0x44, 0x20, 0xaf0, 0x7601, 0x536c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9, 0xb, 0x50, 0x9d, [{{0x9, 0x4, 0xfe, 0x2, 0x1, 0x32, 0x8a, 0x2c, 0x6, [], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x4, 0x2, 0x8}}]}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})

1.854333553s ago: executing program 6 (id=1203):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
capset(&(0x7f0000000040)={0x20080522}, 0x0)

1.738930554s ago: executing program 3 (id=1205):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)

1.681512s ago: executing program 6 (id=1206):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491c3248040000f858dbb8a1", 0x2a}, {&(0x7f0000000200)="c082b44eb524", 0x6}, {&(0x7f0000000240)="a43b2eaab40000000000800065588002e7f0", 0x12}], 0x3)

1.665814512s ago: executing program 3 (id=1208):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x2})

1.533400635s ago: executing program 3 (id=1209):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0})

1.476473481s ago: executing program 3 (id=1210):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491c3248040000f858dbb8a1", 0x2a}, {&(0x7f0000000200)="c082b44eb524", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000000006558", 0xe}], 0x3)

1.471301252s ago: executing program 6 (id=1211):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r3, &(0x7f0000000080)={0x2, @long={0x3, 0xffff}}, 0x14)

1.436678215s ago: executing program 7 (id=1212):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000005c0)="46b83076ca", 0x5, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0xe0}, 0x14)

1.431643345s ago: executing program 1 (id=1213):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000000300))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

1.353860903s ago: executing program 6 (id=1214):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40041)
recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)

1.245888604s ago: executing program 3 (id=1215):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ptype\x00')
read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020)

1.217402037s ago: executing program 1 (id=1216):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r4, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.197241129s ago: executing program 3 (id=1217):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x13, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x4)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000008f00304004000010203010902"], 0x0)

1.164099973s ago: executing program 7 (id=1218):
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$key(0xffffffffffffffff, 0x0, 0x4040004)
sendto$inet6(r1, &(0x7f0000000000)='X', 0x1, 0x24008010, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @local, 0x3}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0xfc, 0xfe, 0x1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xe)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)

924.360176ms ago: executing program 1 (id=1219):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38)

277.249462ms ago: executing program 6 (id=1220):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_pressure(r3, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000180)={'full', 0x25, 0x8, 0x20, 0x1921}, 0x2f)

158.270494ms ago: executing program 1 (id=1221):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000380)={@link_local, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast2, @random="bf2de9bd5efe", @broadcast}}}}, 0x0)

30.917006ms ago: executing program 1 (id=1222):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x0)
r3 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=1223):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x54, r7, 0x1, 0x0, 0x10, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x36, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac}, @vht_group_id={0x15, 0x1, {0x800, "5584d2f515d56c029a92908b231c387c"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x0)

kernel console output (not intermixed with test programs):

70.950230][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.960709][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.970105][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   70.978270][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.986811][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.994670][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.003030][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.012578][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.029047][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.041092][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.051996][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.063414][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.073341][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.083903][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.095779][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.111018][ T3042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.130754][ T3042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.134790][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.149590][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.162473][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.192055][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.213529][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.223500][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.232547][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.254684][ T4194] device veth0_macvtap entered promiscuous mode
[   71.269611][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.280763][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.287661][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.290107][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.318380][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.343049][ T4194] device veth1_macvtap entered promiscuous mode
[   71.398186][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.444394][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.461039][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.497297][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.536885][ T4303] qnx4: no qnx4 filesystem (no root dir).
[   71.548253][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.564047][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.594490][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.603511][ T4305] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   71.605861][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.632312][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.642988][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.661447][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.681118][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.716848][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.726326][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.735120][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.773611][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.814393][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.835312][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.865980][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.895055][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.915385][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.938510][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.954264][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.967609][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.994462][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.029488][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.099753][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.113260][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.134889][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.169361][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.179609][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.188142][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.203892][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.213692][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.222926][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.232021][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.495746][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.515904][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.575216][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.640137][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.662866][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.728577][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.807426][   T23] Bluetooth: hci1: command 0x0419 tx timeout
[   72.819890][   T23] Bluetooth: hci3: command 0x0419 tx timeout
[   72.836819][   T23] Bluetooth: hci2: command 0x0419 tx timeout
[   72.846756][ T4333] program syz.2.16 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.863372][   T23] Bluetooth: hci4: command 0x0419 tx timeout
[   72.889470][   T23] Bluetooth: hci0: command 0x0419 tx timeout
[   73.334188][ T4356] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   73.449255][   T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   73.866327][   T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.886007][   T23] usb 2-1: config 0 has no interfaces?
[   73.891561][   T23] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   73.943341][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.995445][   T23] usb 2-1: config 0 descriptor??
[   74.328685][ T4236] usb 2-1: USB disconnect, device number 2
[   74.855427][ T4393] loop4: detected capacity change from 0 to 8192
[   74.870513][ T4397] 
[   74.910384][ T4393] =======================================================
[   74.910384][ T4393] WARNING: The mand mount option has been deprecated and
[   74.910384][ T4393]          and is ignored by this kernel. Remove the mand
[   74.910384][ T4393]          option from the mount to silence this warning.
[   74.910384][ T4393] =======================================================
[   75.316176][   T23] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[   75.533072][ T4423] binder: 4421:4423 ioctl c0306201 2000000004c0 returned -22
[   75.726778][   T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   75.734834][   T23] usb 2-1: config 0 has no interface number 0
[   75.767185][   T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   75.826783][   T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[   75.861926][   T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   75.886214][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.936913][   T23] usb 2-1: config 0 descriptor??
[   75.956720][ T4403] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   75.997443][   T23] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   76.214880][   T23] usb 2-1: USB disconnect, device number 3
[   76.235966][    C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[   76.236482][ T2307] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   76.291386][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   76.310029][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[   76.328372][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[   76.350492][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[   76.365347][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[   76.382832][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[   76.397281][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[   76.739407][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   77.144942][ T4451] tap0: tun_chr_ioctl cmd 1074025675
[   77.167573][ T4451] tap0: persist enabled
[   77.305261][ T4458] device syzkaller0 entered promiscuous mode
[   77.315255][ T4461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'.
[   77.333888][ T4461] Zero length message leads to an empty skb
[   77.373199][ T4457] tipc: Started in network mode
[   77.384369][ T4457] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   77.395574][ T4457] tipc: Enabled bearer <udp:syz0>, priority 10
[   77.546169][ T2307] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[   77.554437][ T2307] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   77.574538][ T2307] usb 3-1: config 0 has no interface number 0
[   77.582194][ T2307] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   77.606394][ T2307] usb 3-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   77.846660][ T2307] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[   77.869363][ T2307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.908021][ T2307] usb 3-1: Product: syz
[   77.923316][ T4488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'.
[   77.928421][ T2307] usb 3-1: Manufacturer: syz
[   77.940196][ T2307] usb 3-1: SerialNumber: syz
[   77.960216][ T4488] device bridge_slave_1 left promiscuous mode
[   77.972206][ T2307] usb 3-1: config 0 descriptor??
[   77.974960][ T4488] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.005800][ T4488] device bridge_slave_0 left promiscuous mode
[   78.016323][ T4441] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   78.018395][ T4488] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.048161][ T2307] plusb: probe of 3-1:0.231 failed with error -22
[   78.206078][ T4188] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   78.306041][ T4257] usb 3-1: USB disconnect, device number 2
[   78.407030][ T2307] tipc: Node number set to 1
[   78.429604][ T4502] loop0: detected capacity change from 0 to 16
[   78.446133][ T4188] usb 4-1: Using ep0 maxpacket: 32
[   78.473754][ T4502] erofs: (device loop0): mounted with root inode @ nid 36.
[   78.566123][ T4188] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[   78.574515][ T4506] binder: Bad value for 'max'
[   78.574875][ T4188] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   78.602462][ T4188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[   78.612657][ T4188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   78.639030][ T4188] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   78.648916][ T4188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   78.663693][ T4188] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   78.673920][ T4188] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   78.687783][ T4188] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   78.696964][ T4188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.716859][ T4188] usb 4-1: config 0 descriptor??
[   79.000085][ T4188] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   79.043681][ T4188] usb 4-1: USB disconnect, device number 2
[   79.090116][ T4188] usblp0: removed
[   79.256115][ T4236] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   79.696163][ T4188] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   79.776078][ T4236] usb 2-1: config 0 has no interfaces?
[   79.781841][ T4236] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   79.794754][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.936088][ T4188] usb 4-1: Using ep0 maxpacket: 32
[   80.066584][ T4188] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[   80.112269][ T4188] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   80.172978][ T4188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[   80.218895][ T4188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   80.409060][ T4236] usb 2-1: config 0 descriptor??
[   80.414905][ T4188] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   80.424688][ T4188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   80.435481][ T4188] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   80.478541][ T4188] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   80.530131][ T4539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'.
[   80.562815][ T4188] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   80.592094][ T4188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.615547][ T4188] usb 4-1: config 0 descriptor??
[   80.668642][ T4257] usb 2-1: USB disconnect, device number 4
[   80.730326][ T4547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.105'.
[   80.884339][ T4188] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   80.908049][ T4188] usb 4-1: USB disconnect, device number 3
[   80.946316][ T4188] usblp0: removed
[   81.173554][ T4570] loop5: detected capacity change from 0 to 7
[   81.202555][ T4570] Dev loop5: unable to read RDB block 7
[   81.223452][ T4570]  loop5: unable to read partition table
[   81.240413][ T4570] loop5: partition table beyond EOD, truncated
[   81.269983][ T4570] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5)
[   81.526699][ T4188] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   81.774375][ T4585] loop0: detected capacity change from 0 to 128
[   81.886091][ T4188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   81.900312][ T4188] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   81.922245][ T4585] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   81.931528][ T4188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.946338][ T4585] ext4 filesystem being mounted at /28/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   82.132271][ T4188] usb 2-1: config 0 descriptor??
[   82.138977][ T4595] loop3: detected capacity change from 0 to 512
[   82.160968][ T4573] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   82.236920][ T4595] EXT4-fs (loop3): Ignoring removed orlov option
[   82.251801][ T4595] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   82.306037][ T4595] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[   82.365152][ T4595] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.119: corrupted in-inode xattr
[   82.476631][ T4595] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.119: couldn't read orphan inode 15 (err -117)
[   82.502190][ T4595] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[   82.654161][ T4188] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[   82.839804][ T4611] loop4: detected capacity change from 0 to 512
[   82.858449][ T2307] usb 2-1: USB disconnect, device number 5
[   82.960798][ T4611] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.126: bad orphan inode 11862016
[   82.980487][ T4612] fido_id[4612]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   83.006559][ T4611] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   83.026298][ T4611] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.069603][ T4622] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   83.858895][ T4658] virtio-fs: tag </dev/sg0> not found
[   83.973870][ T4660] loop4: detected capacity change from 0 to 2048
[   84.015780][ T4660] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.320897][ T4644] loop0: detected capacity change from 0 to 32768
[   84.414813][ T4677] No source specified
[   84.528925][ T4644] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   84.582157][ T4687] loop3: detected capacity change from 0 to 2048
[   84.636231][ T4188] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   84.685609][ T4691] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.871585][ T4687] NILFS (loop3): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0
[   84.901775][ T4183] ocfs2: Unmounting device (7,0) on (node local)
[   84.916431][ T4687] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   84.958989][ T4687] Remounting filesystem read-only
[   84.972424][ T4687] NILFS (loop3): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0
[   84.983449][ T4687] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16)
[   85.012325][ T4188] usb 5-1: config 0 has an invalid interface number: 182 but max is 1
[   85.020869][ T4188] usb 5-1: config 0 has no interface number 1
[   85.034186][ T4687] NILFS (loop3): error -5 truncating bmap (ino=16)
[   85.071938][ T4188] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[   85.077564][ T4701] binder: 4700:4701 ioctl 40046210 0 returned -14
[   85.084052][ T4188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.147601][ T4188] usb 5-1: config 0 descriptor??
[   85.213935][ T4185] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[   85.441261][ T4188] usb 5-1: USB disconnect, device number 2
[   85.877971][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'.
[   85.938434][ T4236] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   86.317467][ T4236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.338287][ T4236] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   86.354668][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.461953][ T4236] usb 4-1: config 0 descriptor??
[   87.319437][ T4236] pwc: Askey VC010 type 2 USB webcam detected.
[   87.422586][ T1108] cfg80211: failed to load regulatory.db
[   87.506099][ T4236] pwc: recv_control_msg error -32 req 02 val 2b00
[   87.546533][ T4772] device syzkaller0 entered promiscuous mode
[   87.557060][ T4236] pwc: recv_control_msg error -32 req 02 val 2700
[   87.606241][ T4236] pwc: recv_control_msg error -32 req 02 val 2c00
[   87.646200][ T4236] pwc: recv_control_msg error -32 req 04 val 1000
[   87.686182][ T4236] pwc: recv_control_msg error -32 req 04 val 1300
[   87.726157][ T4236] pwc: recv_control_msg error -32 req 04 val 1400
[   87.766145][ T4236] pwc: recv_control_msg error -32 req 02 val 2000
[   87.806069][ T4236] pwc: recv_control_msg error -32 req 02 val 2100
[   87.851055][ T4769] loop4: detected capacity change from 0 to 32768
[   87.858666][ T4236] pwc: recv_control_msg error -32 req 04 val 1500
[   87.948991][ T4769] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.185 (4769)
[   87.996428][ T4769] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   88.018296][ T4769] BTRFS info (device loop4): using free space tree
[   88.026510][ T4769] BTRFS info (device loop4): has skinny extents
[   88.105374][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   88.126156][ T4236] pwc: recv_control_msg error -71 req 02 val 2400
[   88.207822][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   88.310202][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   88.517640][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   88.652440][ T4769] BTRFS info (device loop4): enabling ssd optimizations
[   89.216242][ T4236] pwc: recv_control_msg error -71 req 02 val 2600
[   89.236100][ T4236] pwc: recv_control_msg error -71 req 02 val 2900
[   89.256351][ T4236] pwc: recv_control_msg error -71 req 02 val 2800
[   89.263639][ T4769] BTRFS error (device loop4): target device  is invalid!
[   89.276144][ T4236] pwc: recv_control_msg error -71 req 04 val 1100
[   89.326037][ T4236] pwc: recv_control_msg error -71 req 04 val 1200
[   89.337215][ T4236] pwc: Registered as video103.
[   89.343617][ T4236] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[   89.358695][ T4818] syz.3.197 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   89.389658][   T26] audit: type=1800 audit(1763237823.430:2): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.185" name="file1" dev="loop4" ino=260 res=0 errno=0
[   89.409075][ T4236] usb 4-1: USB disconnect, device number 4
[   89.628967][ T4826] device syz_tun entered promiscuous mode
[   89.694230][ T4829] binder: 4828:4829 ioctl 4018620d 0 returned -22
[   90.419149][ T4864] netlink: 92 bytes leftover after parsing attributes in process `syz.4.202'.
[   90.769429][ T4876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'.
[   90.947916][ T4410] Bluetooth: hci5: Frame reassembly failed (-84)
[   90.954736][ T4410] Bluetooth: hci5: Frame reassembly failed (-84)
[   91.445369][ T4895] netlink: 48 bytes leftover after parsing attributes in process `syz.4.226'.
[   91.727966][ T4903] loop4: detected capacity change from 0 to 512
[   91.781869][ T4903] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback.
[   91.802247][ T4903] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.407998][ T4915] mmap: syz.4.234 (4915) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   92.575586][ T4763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.675425][ T4763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.761198][ T4763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.857723][ T4763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.956174][ T2307] Bluetooth: hci5: command 0x1003 tx timeout
[   92.962530][ T4197] Bluetooth: hci5: sending frame failed (-49)
[   93.583373][ T4917] chnl_net:caif_netlink_parms(): no params data found
[   93.911398][ T4917] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.927859][ T4917] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.942860][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   94.044609][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   94.079558][ T4917] device bridge_slave_0 entered promiscuous mode
[   94.196994][ T4963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'.
[   94.249408][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   94.269911][ T4917] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.295713][ T4917] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.361624][ T4917] device bridge_slave_1 entered promiscuous mode
[   94.454303][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   94.944819][ T4917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.036257][ T2307] Bluetooth: hci1: command 0x0409 tx timeout
[   95.047404][ T2307] Bluetooth: hci5: command 0x1001 tx timeout
[   95.086322][ T4197] Bluetooth: hci5: sending frame failed (-49)
[   95.109567][ T4917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.190078][ T4917] team0: Port device team_slave_0 added
[   95.200931][ T4917] team0: Port device team_slave_1 added
[   95.325025][ T4917] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.333268][ T4917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.407903][ T4917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.440915][ T4917] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.456239][ T4917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.491389][ T4917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.699849][ T4917] device hsr_slave_0 entered promiscuous mode
[   95.717496][ T4917] device hsr_slave_1 entered promiscuous mode
[   95.731328][ T4917] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.743289][ T4917] Cannot create hsr debugfs directory
[   95.886080][ T4763] device hsr_slave_0 left promiscuous mode
[   95.919919][ T4763] device hsr_slave_1 left promiscuous mode
[   95.939360][ T4763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.948000][ T4763] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.977332][ T4763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.984875][ T4763] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.004620][ T4763] device bridge_slave_1 left promiscuous mode
[   96.012512][ T4763] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.027958][ T4763] device bridge_slave_0 left promiscuous mode
[   96.034337][ T4763] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.054932][ T4763] device veth1_macvtap left promiscuous mode
[   96.061696][ T4763] device veth0_macvtap left promiscuous mode
[   96.069244][ T4763] device veth1_vlan left promiscuous mode
[   96.075417][ T4763] device veth0_vlan left promiscuous mode
[   96.291241][ T4763] team0 (unregistering): Port device team_slave_1 removed
[   96.305663][ T4763] team0 (unregistering): Port device team_slave_0 removed
[   96.321985][ T4763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.344502][ T4763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.422124][ T4763] bond0 (unregistering): Released all slaves
[   96.728969][ T4917] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   96.756806][ T4917] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   96.790487][ T4917] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   96.800723][ T4917] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   97.126079][ T2307] Bluetooth: hci5: command 0x1009 tx timeout
[   97.132215][ T2307] Bluetooth: hci1: command 0x041b tx timeout
[   97.145848][ T4917] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.214798][ T4917] 8021q: adding VLAN 0 to HW filter on device team0
[   97.247100][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.276346][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.290452][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   97.325083][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   97.341349][ T3042] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.348495][ T3042] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.395475][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   97.410984][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   97.433517][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   97.459568][ T4968] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.466715][ T4968] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.507506][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   97.525324][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   97.560493][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   97.593942][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   97.624660][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   97.663678][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   97.685783][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   97.749537][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   97.769662][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   97.784941][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   97.802502][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   97.817849][ T5064] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   98.211608][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   98.240802][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   98.300630][ T4917] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.535264][ T5095] loop4: detected capacity change from 0 to 128
[   98.616983][ T5098] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   98.654253][ T5095] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   98.691799][ T5095] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   98.901588][ T5106] EXT4-fs (loop4): shut down requested (1)
[   98.938259][ T5106] fscrypt (loop4, inode 12): Error -5 getting encryption context
[   98.961192][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   99.001284][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   99.030587][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   99.075072][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   99.094371][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   99.117054][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   99.163343][ T4917] device veth0_vlan entered promiscuous mode
[   99.169146][ T5115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.277'.
[   99.196550][ T4917] device veth1_vlan entered promiscuous mode
[   99.205960][   T13] Bluetooth: hci1: command 0x040f tx timeout
[   99.308672][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   99.329518][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   99.348992][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   99.388833][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   99.429845][ T5122] netlink: 'syz.4.278': attribute type 4 has an invalid length.
[   99.446391][ T5122] netlink: 'syz.4.278': attribute type 5 has an invalid length.
[   99.458369][ T5122] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.278'.
[   99.471367][ T4917] device veth0_macvtap entered promiscuous mode
[   99.505577][ T4917] device veth1_macvtap entered promiscuous mode
[   99.573817][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.605656][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.625797][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.647766][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.664041][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.674873][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.712813][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.752476][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.781761][ T4917] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.812549][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   99.855888][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   99.887158][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   99.906764][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   99.949033][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.990545][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.021699][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.046060][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.065955][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.130905][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.154911][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.175854][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.188275][ T4917] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.198829][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  100.222643][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  100.238142][ T4917] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.285050][ T4917] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.305466][ T4917] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.332565][ T4917] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.535094][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.581534][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.607797][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.624566][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.629732][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  100.658538][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  100.758063][ T5158] loop4: detected capacity change from 0 to 64
[  100.832521][ T5158] hfs: unable to locate alternate MDB
[  100.843049][ T5158] hfs: continuing without an alternate MDB
[  101.280745][    T7] Bluetooth: hci1: command 0x0419 tx timeout
[  101.836005][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!!
[  103.904313][ T5210] loop5: detected capacity change from 0 to 16
[  104.147540][ T5210] erofs: (device loop5): mounted with root inode @ nid 36.
[  105.299560][ T5234] binder_alloc: 5231: pid 5231 spamming oneway? 1 buffers allocated for a total size of 4096
[  105.328105][ T5238] loop4: detected capacity change from 0 to 16
[  105.355205][ T5239] netlink: 'syz.3.306': attribute type 4 has an invalid length.
[  105.419614][ T5238] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version
[  105.504709][ T5242] netlink: 'syz.3.306': attribute type 4 has an invalid length.
[  105.529864][ T5246] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer.
[  106.097566][ T2307] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  106.506403][ T2307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.541537][ T2307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.594421][ T2307] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  106.628108][ T2307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.670640][ T2307] usb 6-1: config 0 descriptor??
[  107.088369][ T5309] syz.4.326 (5309) used greatest stack depth: 18472 bytes left
[  107.256280][ T2307] usbhid 6-1:0.0: can't add hid device: -71
[  107.262425][ T2307] usbhid: probe of 6-1:0.0 failed with error -71
[  107.331871][ T2307] usb 6-1: USB disconnect, device number 2
[  107.414171][ T5325] loop3: detected capacity change from 0 to 764
[  107.688259][ T5300] chnl_net:caif_netlink_parms(): no params data found
[  108.575561][ T5300] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.623454][ T5300] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.650945][ T5300] device bridge_slave_0 entered promiscuous mode
[  108.673726][ T5300] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.706008][ T5300] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.707250][ T5300] device bridge_slave_1 entered promiscuous mode
[  108.886360][ T4854] Bluetooth: hci5: command 0x0409 tx timeout
[  108.923021][ T5300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.000125][ T5300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.116689][ T5366] input: syz1 as /devices/virtual/input/input6
[  109.222160][ T5300] team0: Port device team_slave_0 added
[  109.401160][ T5300] team0: Port device team_slave_1 added
[  109.518902][ T5377] loop1: detected capacity change from 0 to 4096
[  109.543049][ T5377] ntfs3: Unknown parameter 'windows_names'
[  109.558377][ T5300] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.575602][ T5300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.601640][    C0] vkms_vblank_simulate: vblank timer overrun
[  109.656433][ T5300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.691643][ T5300] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.712306][ T5300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.738346][    C0] vkms_vblank_simulate: vblank timer overrun
[  109.838237][ T5300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.039879][ T5300] device hsr_slave_0 entered promiscuous mode
[  110.088396][  T154] Bluetooth: hci3: Frame reassembly failed (-84)
[  110.110606][ T5300] device hsr_slave_1 entered promiscuous mode
[  110.177281][ T5300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  110.194793][ T5300] Cannot create hsr debugfs directory
[  110.702659][ T4852] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  110.705395][ T5300] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  110.958653][ T4854] Bluetooth: hci5: command 0x041b tx timeout
[  111.076915][ T4852] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  111.137902][ T4852] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64
[  111.242197][ T4852] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23
[  111.549258][ T5300] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  111.621846][ T5300] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  111.650002][ T5300] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  111.666257][ T4852] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  111.683774][ T4852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  111.697695][ T4852] usb 2-1: SerialNumber: syz
[  111.747033][ T5402] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  111.767197][ T4852] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  111.859326][ T5420] device syzkaller0 entered promiscuous mode
[  111.990257][ T4852] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  112.029287][ T4852] usb 2-1: USB disconnect, device number 6
[  112.159354][ T4264] Bluetooth: hci3: command 0x1003 tx timeout
[  112.159434][ T5300] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.171436][  T146] Bluetooth: hci3: sending frame failed (-49)
[  112.207198][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  112.215847][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  112.232334][ T5300] 8021q: adding VLAN 0 to HW filter on device team0
[  112.244930][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  112.257221][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  112.265943][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.273038][ T4764] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.308753][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  112.329365][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  112.344409][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  112.354756][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.361899][ T4764] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.379624][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  112.413003][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  112.432397][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  112.444859][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  112.472296][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  112.489511][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  112.515322][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  112.537217][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  112.553040][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  112.585818][ T4763] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.623441][ T5300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.673442][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  112.683393][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  112.700872][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  112.767838][ T4763] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.772222][ T5437] loop1: detected capacity change from 0 to 256
[  112.844680][ T4763] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.899342][ T5437] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  112.950459][ T4763] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.977946][ T5437] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  113.036763][ T4264] Bluetooth: hci5: command 0x040f tx timeout
[  113.058521][ T5437] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d)
[  113.122405][ T5443] loop5: detected capacity change from 0 to 512
[  113.206346][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  113.233157][ T5443] EXT4-fs (loop5): Invalid log block size: 4294967295
[  113.247389][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  113.271382][ T5300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.529830][ T5451] loop1: detected capacity change from 0 to 512
[  113.662555][ T5451] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  113.691408][ T5451] EXT4-fs (loop1): inline encryption not supported
[  113.712113][ T5451] EXT4-fs (loop1): Test dummy encryption mode enabled
[  113.735081][ T5451] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  113.780317][ T5451] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  113.820802][ T5451] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  113.859619][ T5451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  113.876358][ T5451] System zones: 1-12
[  113.897983][ T5451] EXT4-fs (loop1): 1 truncate cleaned up
[  113.920272][ T5451] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,,errors=continue. Quota mode: none.
[  114.004400][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  114.065592][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  114.164260][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  114.184931][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  114.202150][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  114.215609][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  114.241468][ T4854] Bluetooth: hci3: command 0x1001 tx timeout
[  114.247732][  T146] Bluetooth: hci3: sending frame failed (-49)
[  114.257192][ T5300] device veth0_vlan entered promiscuous mode
[  114.310147][ T5300] device veth1_vlan entered promiscuous mode
[  114.414707][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  114.443466][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  114.457544][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  114.480448][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  114.502693][ T5300] device veth0_macvtap entered promiscuous mode
[  114.552273][ T5300] device veth1_macvtap entered promiscuous mode
[  114.611366][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.647685][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.665955][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.681398][ T5443] loop5: detected capacity change from 0 to 32768
[  114.697789][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.734429][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.773009][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.793240][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.813151][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.823591][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.835360][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.868921][ T5443] XFS (loop5): Mounting V5 Filesystem
[  114.902520][ T5300] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.940212][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  114.951276][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  114.982165][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  115.012739][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  115.063324][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.092986][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.115853][ T5443] XFS (loop5): Ending clean mount
[  115.121162][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.121845][ T4236] Bluetooth: hci5: command 0x0419 tx timeout
[  115.132668][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.148526][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.159657][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.168658][ T5443] XFS (loop5): Quotacheck needed: Please wait.
[  115.169940][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.194189][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.204498][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.217902][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.230745][ T5300] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.280166][ T5443] XFS (loop5): Quotacheck: Done.
[  115.298313][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  115.346893][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  115.358791][ T5300] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.376358][ T5300] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.395621][ T5300] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.419589][ T5300] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.487134][ T1110] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  115.512671][ T4763] device hsr_slave_0 left promiscuous mode
[  115.527254][ T4763] device hsr_slave_1 left promiscuous mode
[  115.544045][ T4763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.584771][ T4763] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.595005][ T4763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.608392][ T4763] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.627202][ T4763] device veth1_macvtap left promiscuous mode
[  115.633280][ T4763] device veth0_macvtap left promiscuous mode
[  115.639859][ T4763] device veth1_vlan left promiscuous mode
[  115.645873][ T4763] device veth0_vlan left promiscuous mode
[  115.746237][ T1110] usb 2-1: Using ep0 maxpacket: 8
[  115.876303][ T1110] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.892494][ T1110] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  115.912077][ T4917] XFS (loop5): Unmounting Filesystem
[  115.928909][ T5514] loop4: detected capacity change from 0 to 128
[  115.948296][ T1110] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  116.187271][ T1110] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  116.216268][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  116.224404][ T1110] usb 2-1: Product: syz
[  116.276014][ T1110] usb 2-1: Manufacturer: syz
[  116.285209][ T1110] usb 2-1: SerialNumber: syz
[  116.311782][ T1110] usb 2-1: config 0 descriptor??
[  116.316781][ T4854] Bluetooth: hci3: command 0x1009 tx timeout
[  116.371772][ T4763] team0 (unregistering): Port device team_slave_1 removed
[  116.392847][ T1110] radio-si470x 2-1:0.0: could not find interrupt in endpoint
[  116.403079][ T4763] team0 (unregistering): Port device team_slave_0 removed
[  116.404475][ T1110] radio-si470x: probe of 2-1:0.0 failed with error -5
[  116.463268][ T1110] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  116.494844][ T4763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.553227][ T4763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.617266][ T5533] blk_update_request: I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  116.647299][ T5533] EXT4-fs (loop4): unable to read superblock
[  116.683930][ T4763] bond0 (unregistering): Released all slaves
[  117.316497][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.353057][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.571678][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  117.887197][ T3042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.898519][ T3042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.943986][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  118.972411][ T2307] usb 2-1: USB disconnect, device number 7
[  119.521111][ T5589] loop5: detected capacity change from 0 to 1024
[  119.676048][ T4264] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  119.677289][ T5589] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  119.695742][ T5589] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.748966][ T5589] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.401: inode has both inline data and extents flags
[  120.036450][ T4264] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  120.055517][ T4264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.103901][ T4264] usb 2-1: config 0 has no interface number 0
[  120.126094][ T4264] usb 2-1: config 0 interface 41 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  120.143999][ T4264] usb 2-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  120.172513][ T4264] usb 2-1: config 0 interface 41 has no altsetting 0
[  120.345460][ T4264] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  120.354975][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.382909][ T4264] usb 2-1: Product: syz
[  120.387543][ T4264] usb 2-1: Manufacturer: syz
[  120.392172][ T4264] usb 2-1: SerialNumber: syz
[  120.417566][ T4264] usb 2-1: config 0 descriptor??
[  120.443076][ T5622] loop4: detected capacity change from 0 to 4096
[  120.467613][ T4264] CoreChips: probe of 2-1:0.41 failed with error -22
[  120.572387][   T13] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  120.682808][ T4264] usb 2-1: USB disconnect, device number 8
[  120.959727][ T5639] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  120.977010][   T13] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  121.009100][   T13] usb 6-1: config 1 has no interface number 0
[  121.030442][   T13] usb 6-1: config 1 interface 105 has no altsetting 0
[  121.100387][ T5638] overlayfs: upper fs does not support tmpfile.
[  121.157464][ T5638] overlayfs: workdir/#8 already exists
[  121.236403][   T13] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  121.255865][   T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.264725][   T13] usb 6-1: Product: syz
[  121.310611][ T5622] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  121.320064][   T13] usb 6-1: Manufacturer: syz
[  121.324785][   T13] usb 6-1: SerialNumber: syz
[  121.360874][ T5622] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  121.558814][ T5655] loop3: detected capacity change from 0 to 512
[  121.636616][   T13] aqc111: probe of 6-1:1.105 failed with error -22
[  121.683344][   T13] usb 6-1: USB disconnect, device number 3
[  121.723119][ T5655] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #16: comm syz.3.417: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2052(4), depth 0(0)
[  121.725886][ T5666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'.
[  121.854915][ T5666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.866500][ T5655] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.417: couldn't read orphan inode 16 (err -117)
[  121.893484][ T5666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.925980][ T5655] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  121.952397][ T5666] bond0 (unregistering): Released all slaves
[  121.973994][ T5655] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.169342][ T5682] loop5: detected capacity change from 0 to 512
[  124.844512][ T5677] sched: RT throttling activated
[  124.894413][ T5682] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  124.901762][ T5682] EXT4-fs (loop5): inline encryption not supported
[  124.908496][ T5682] EXT4-fs (loop5): Test dummy encryption mode enabled
[  124.915392][ T5682] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  124.922693][ T5682] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  125.960305][ T5682] EXT4-fs: error -4 creating inode table initialization thread
[  125.969863][ T5682] EXT4-fs (loop5): mount failed
[  127.676127][ T4296] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  127.808180][ T5713] binder_alloc: 5712: pid 5712 spamming oneway? 1 buffers allocated for a total size of 4096
[  127.905597][ T5720] loop5: detected capacity change from 0 to 512
[  128.096163][ T4296] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  128.104543][ T4296] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.116148][ T4296] usb 7-1: config 0 has no interface number 0
[  128.122275][ T4296] usb 7-1: config 0 interface 41 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  128.132900][ T4296] usb 7-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  128.147173][ T4296] usb 7-1: config 0 interface 41 has no altsetting 0
[  128.149260][ T5720] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #16: comm syz.5.434: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2052(4), depth 0(0)
[  128.280973][ T5720] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.434: couldn't read orphan inode 16 (err -117)
[  128.313744][ T5720] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  128.343546][ T4296] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  128.353640][ T5720] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.380956][ T4296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.416194][ T4296] usb 7-1: Product: syz
[  128.420418][ T4296] usb 7-1: Manufacturer: syz
[  128.425053][ T4296] usb 7-1: SerialNumber: syz
[  128.462265][ T4296] usb 7-1: config 0 descriptor??
[  128.522151][ T4296] CoreChips: probe of 7-1:0.41 failed with error -22
[  128.764040][   T13] usb 7-1: USB disconnect, device number 2
[  129.014485][ T5760] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  129.025289][ T5760] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  129.455086][ T5792] netlink: 'syz.4.454': attribute type 4 has an invalid length.
[  130.304301][ T5837] dlm: no local IP address has been set
[  130.310328][ T5837] dlm: cannot start dlm midcomms -107
[  131.339621][ T5865] process 'syz.4.473' launched './file0' with NULL argv: empty string added
[  131.544460][ T5872] loop6: detected capacity change from 0 to 512
[  131.709669][ T5872] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  131.793007][ T5872] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  131.894797][ T5879] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  131.921872][ T5894] loop3: detected capacity change from 0 to 2048
[  131.928634][ T5879] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  131.980895][ T5448]  loop3: p1 < > p4
[  132.008723][ T5448] loop3: p4 size 8388608 extends beyond EOD, truncated
[  132.091582][ T5894]  loop3: p1 < > p4
[  132.126584][ T5894] loop3: p4 size 8388608 extends beyond EOD, truncated
[  132.882459][ T5923] loop1: detected capacity change from 0 to 512
[  132.895158][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.917514][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.021523][ T5923] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  133.028883][ T5923] EXT4-fs (loop1): inline encryption not supported
[  133.036988][ T5923] EXT4-fs (loop1): Test dummy encryption mode enabled
[  133.043925][ T5923] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  133.051204][ T5923] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  133.226494][ T5923] EXT4-fs (loop1): 1 truncate cleaned up
[  133.232253][ T5923] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none.
[  133.863234][ T4624] udevd[4624]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  133.881281][ T5448] udevd[5448]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  134.068044][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  134.114660][ T5448] udevd[5448]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  134.567157][ T5939] loop3: detected capacity change from 0 to 1024
[  134.651867][ T5939] EXT4-fs (loop3): inline encryption not supported
[  134.726645][ T5939] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  134.796727][ T5939] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,norecovery,user_xattr,grpquota,discard,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback.
[  134.913221][ T5945] ODEBUG: Out of memory. ODEBUG disabled
[  135.220021][ T5945] syz.4.495 (5945): drop_caches: 2
[  135.831729][ T5957] loop5: detected capacity change from 0 to 512
[  136.025061][ T5957] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  136.066192][ T5957] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  138.371843][ T6001] loop6: detected capacity change from 0 to 128
[  138.386337][ T1110] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  138.426462][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.516'.
[  138.434340][ T6006] loop5: detected capacity change from 0 to 1024
[  138.588262][ T6006] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000003,abort,,errors=continue. Quota mode: none.
[  138.612796][ T6006] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.5.517: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  138.632261][ T1110] usb 4-1: Using ep0 maxpacket: 8
[  138.644345][ T6006] EXT4-fs error (device loop5) in ext4_delete_inline_entry:1790: Corrupt filesystem
[  138.756224][ T1110] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  138.788688][ T1110] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  138.822665][ T1110] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  138.851755][ T1110] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  138.917235][ T1110] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  138.964462][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.051912][ T6040] binder: 6039:6040 ioctl c0306201 0 returned -14
[  139.266150][ T1110] usb 4-1: GET_CAPABILITIES returned 0
[  139.271733][ T1110] usbtmc 4-1:16.0: can't read capabilities
[  139.319992][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.6.531'.
[  139.526287][ T1110] usb 4-1: USB disconnect, device number 5
[  139.778030][ T6077] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  139.812798][    C0] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  139.822606][ T6077] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  139.861254][    C0] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  141.115086][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.546'.
[  141.369823][ T6105] team0 (unregistering): Port device team_slave_0 removed
[  141.430920][ T6105] team0 (unregistering): Failed to send options change via netlink (err -105)
[  141.503997][ T6105] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  141.600960][ T6105] team0 (unregistering): Port device team_slave_1 removed
[  141.676346][ T4296] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  141.741457][ T6142] loop1: detected capacity change from 0 to 128
[  141.752105][ T6144] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  141.791950][ T6142] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  141.871867][ T6142] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  142.044712][  T144] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  142.055860][ T4296] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  142.088644][ T4296] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.988129][ T4296] usb 5-1: config 0 interface 0 has no altsetting 0
[  142.995839][ T4296] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  143.005741][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.029419][ T4296] usb 5-1: config 0 descriptor??
[  143.720164][ T4296] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0
[  144.656054][ T6189] syz.1.571 (6189): drop_caches: 2
[  144.984788][ T4296] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0
[  145.037954][ T4296] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0
[  145.078998][ T4296] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0
[  145.105823][ T4296] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0
[  145.111789][ T6199] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  145.162527][ T4296] hid-steam 0003:28DE:1102.0002: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0
[  145.239585][ T4296] usb 5-1: USB disconnect, device number 3
[  145.474038][ T6212] fido_id[6212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  145.492171][ T6217] capability: warning: `syz.6.580' uses deprecated v2 capabilities in a way that may be insecure
[  145.549566][ T6201] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  145.760901][ T6223] kvm: emulating exchange as write
[  146.026110][   T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  146.290666][ T6236] syz.5.585 (6236): drop_caches: 2
[  147.366112][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.395833][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.409808][   T13] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  147.419765][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.474441][   T13] usb 4-1: config 0 descriptor??
[  147.752501][ T6263] loop6: detected capacity change from 0 to 512
[  147.808926][ T6261] input: syz0 as /devices/virtual/input/input9
[  147.937441][ T6263] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,stripe=0x0000000000000002,i_version,,errors=continue. Quota mode: writeback.
[  147.956863][ T6263] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  147.973815][   T13] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  148.035683][   T13] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  148.124264][ T6263] xt_CT: You must specify a L4 protocol and not use inversions on it
[  148.133722][ T6268] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  148.152927][ T6268] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  148.216402][   T13] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE
[  148.334000][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'.
[  148.527431][ T6282] team0 (unregistering): Port device team_slave_0 removed
[  148.614117][ T6282] team0 (unregistering): Port device team_slave_1 removed
[  149.208291][ T6222] cp2112 0003:10C4:EA90.0003: Error starting transaction: -38
[  149.332162][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'.
[  149.366038][   T13] usb 4-1: reset high-speed USB device number 6 using dummy_hcd
[  149.467455][ T6315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.536603][ T6315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.617068][ T6315] bond0 (unregistering): Released all slaves
[  149.652469][ T6326] binder: 6325:6326 ioctl c0306201 0 returned -14
[  150.002414][ T6333] overlayfs: failed to resolve './file0': -2
[  150.470429][ T6351] loop6: detected capacity change from 0 to 1024
[  150.585732][ T6351] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000003,abort,,errors=continue. Quota mode: none.
[  150.654312][ T2307] usb 4-1: USB disconnect, device number 6
[  150.689980][ T6351] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.6.620: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  150.712473][ T6351] EXT4-fs error (device loop6) in ext4_delete_inline_entry:1790: Corrupt filesystem
[  150.926065][ T6361] loop5: detected capacity change from 0 to 1024
[  151.045807][ T6361] EXT4-fs (loop5): inline encryption not supported
[  151.081984][ T6361] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  151.176097][ T6363] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  151.218334][ T6361] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,norecovery,user_xattr,grpquota,discard,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback.
[  151.246716][ T6363] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  151.878416][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  151.914226][ T6397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.852197][ T6427] loop3: detected capacity change from 0 to 1024
[  153.927914][ T4236] Bluetooth: hci3: command 0x1003 tx timeout
[  154.044855][  T146] Bluetooth: hci3: sending frame failed (-49)
[  155.128320][ T4967] hfsplus: b-tree write err: -5, ino 4
[  155.595668][   T26] audit: type=1326 audit(1763237889.630:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b59a46c9 code=0x7ffc0000
[  155.894944][   T26] audit: type=1326 audit(1763237889.630:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b59a46c9 code=0x7ffc0000
[  156.390184][ T4852] Bluetooth: hci3: command 0x1001 tx timeout
[  156.438296][  T146] Bluetooth: hci3: sending frame failed (-49)
[  156.496482][   T26] audit: type=1326 audit(1763237890.000:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc8b59a46c9 code=0x7ffc0000
[  156.555980][   T26] audit: type=1326 audit(1763237890.020:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b59a46c9 code=0x7ffc0000
[  156.578006][    C0] vkms_vblank_simulate: vblank timer overrun
[  156.661724][   T26] audit: type=1326 audit(1763237890.020:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b59a46c9 code=0x7ffc0000
[  156.741117][   T26] audit: type=1326 audit(1763237890.060:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc8b59a46c9 code=0x7ffc0000
[  156.763168][    C0] vkms_vblank_simulate: vblank timer overrun
[  156.774385][ T6476] loop6: detected capacity change from 0 to 64
[  156.793554][   T26] audit: type=1326 audit(1763237890.070:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b59a46c9 code=0x7ffc0000
[  156.826506][   T26] audit: type=1326 audit(1763237890.080:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b59a46c9 code=0x7ffc0000
[  156.933000][   T26] audit: type=1326 audit(1763237890.100:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc8b59a46c9 code=0x7ffc0000
[  157.033191][   T26] audit: type=1326 audit(1763237890.140:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b59a46c9 code=0x7ffc0000
[  157.059294][ T6482] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.068407][ T6482] team0: Port device bond0 added
[  157.939348][ T6531] binder: 6530:6531 ioctl 400c620e 0 returned -14
[  158.154208][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.678'.
[  158.189193][ T6542] device bridge_slave_1 left promiscuous mode
[  158.202888][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.214759][ T6542] device bridge_slave_0 left promiscuous mode
[  158.221485][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.483175][ T4264] Bluetooth: hci3: command 0x1009 tx timeout
[  158.537676][ T6558] device syzkaller0 entered promiscuous mode
[  159.343849][ T6603] sch_tbf: burst 257 is lower than device syzkaller0 mtu (1500) !
[  159.379628][ T6605] loop4: detected capacity change from 0 to 1024
[  159.466941][ T6605] EXT4-fs (loop4): inline encryption not supported
[  159.496508][ T6605] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  159.610053][ T6605] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,norecovery,user_xattr,grpquota,discard,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback.
[  160.225976][   T13] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  161.406259][   T13] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[  161.425556][   T13] usb 4-1: config 0 has no interface number 0
[  161.596308][   T13] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  161.605457][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.635674][   T13] usb 4-1: Product: syz
[  161.640337][   T13] usb 4-1: Manufacturer: syz
[  161.644967][   T13] usb 4-1: SerialNumber: syz
[  161.661790][ T6667] capability: warning: `syz.5.722' uses 32-bit capabilities (legacy support in use)
[  161.708800][   T13] usb 4-1: config 0 descriptor??
[  161.998201][   T13] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected
[  162.018192][   T13] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81
[  162.027922][   T13] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1
[  162.035741][   T13] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2
[  162.865032][   T13] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  162.914137][   T13] usb 4-1: USB disconnect, device number 7
[  162.963938][   T13] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  162.999808][   T13] keyspan 4-1:0.133: device disconnected
[  163.306000][ T2307] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  163.312848][ T6705] netlink: 'syz.4.728': attribute type 12 has an invalid length.
[  163.677809][ T2307] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.733550][ T2307] usb 6-1: config 0 has no interfaces?
[  163.966565][ T2307] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  164.009165][ T2307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.082727][ T2307] usb 6-1: Product: syz
[  164.132073][ T2307] usb 6-1: Manufacturer: syz
[  164.174779][ T2307] usb 6-1: SerialNumber: syz
[  164.279764][ T2307] usb 6-1: config 0 descriptor??
[  164.580094][ T2307] usb 6-1: USB disconnect, device number 4
[  164.641135][ T6702] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  165.224551][ T6746] binder_alloc: 6742: binder_alloc_buf, no vma
[  165.386479][ T6741] loop6: detected capacity change from 0 to 8192
[  165.415393][ T6753] netlink: 32 bytes leftover after parsing attributes in process `syz.1.752'.
[  166.348717][   T26] kauditd_printk_skb: 29 callbacks suppressed
[  166.348763][   T26] audit: type=1326 audit(1763237900.380:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a7b1d6c9 code=0x7ffc0000
[  166.550964][ T6776] loop1: detected capacity change from 0 to 128
[  166.756692][   T26] audit: type=1326 audit(1763237900.430:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc2a7b1d6c9 code=0x7ffc0000
[  166.941991][ T6776] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  167.056218][   T26] audit: type=1326 audit(1763237900.440:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc2a7b1d703 code=0x7ffc0000
[  167.075835][ T6776] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  167.088600][   T26] audit: type=1326 audit(1763237900.480:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc2a7b1c17f code=0x7ffc0000
[  167.088639][   T26] audit: type=1326 audit(1763237900.510:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc2a7b1d757 code=0x7ffc0000
[  167.088671][   T26] audit: type=1326 audit(1763237900.550:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2a7b1bf10 code=0x7ffc0000
[  167.088702][   T26] audit: type=1326 audit(1763237900.560:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc2a7b1d2cb code=0x7ffc0000
[  167.139572][ T6786] binder_alloc: 6785: binder_alloc_buf, no vma
[  167.358444][   T26] audit: type=1326 audit(1763237900.720:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc2a7b1c32a code=0x7ffc0000
[  167.478206][   T26] audit: type=1326 audit(1763237900.720:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc2a7b1c32a code=0x7ffc0000
[  167.598054][   T26] audit: type=1326 audit(1763237900.750:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc2a7b1be17 code=0x7ffc0000
[  167.685235][ T6807] device syzkaller0 entered promiscuous mode
[  167.935151][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'.
[  167.990979][ T6826] binder: 6825:6826 ioctl c0306201 0 returned -14
[  169.490521][ T6860] loop1: detected capacity change from 0 to 2048
[  169.547084][ T6860] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27485, location=27485
[  169.569625][ T6860] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.283190][ T6866] loop4: detected capacity change from 0 to 8192
[  170.395352][ T6866] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  170.695981][ T4852] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  171.066170][ T4852] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  171.080790][ T4852] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  171.246383][ T4852] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  171.265986][ T4852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.286813][ T4852] usb 6-1: Product: syz
[  171.291022][ T4852] usb 6-1: Manufacturer: syz
[  171.295816][ T4852] usb 6-1: SerialNumber: syz
[  171.313909][ T4852] usb 6-1: config 0 descriptor??
[  171.336492][ T6880] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  171.348929][ T6880] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  171.604835][ T6880] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  171.660450][ T6880] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  171.736231][ T4852] dm9601: probe of 6-1:0.0 failed with error -71
[  171.807242][ T4852] usb 6-1: USB disconnect, device number 5
[  171.981847][ T6938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.804'.
[  172.145875][ T6939] loop6: detected capacity change from 0 to 1024
[  172.168062][ T6939] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  172.175541][ T6939] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  172.237204][ T6939] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  172.245834][ T6939] System zones: 0-1, 3-36
[  172.288395][ T6939] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  172.956153][ T4852] Bluetooth: hci5: command 0x0405 tx timeout
[  172.968455][ T4852] Bluetooth: hci3: command 0x1003 tx timeout
[  172.974584][  T146] Bluetooth: hci3: sending frame failed (-49)
[  174.755653][ T4257] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  174.917031][ T6986] binder: 6985:6986 ioctl c0306201 2000000001c0 returned -14
[  174.990871][ T6994] block nbd3: NBD_DISCONNECT
[  175.036372][ T4853] Bluetooth: hci3: command 0x1001 tx timeout
[  175.042703][  T146] Bluetooth: hci3: sending frame failed (-49)
[  175.168108][ T7002] binder: Unknown parameter 'context'
[  175.231447][ T4257] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  175.254996][ T4257] usb 2-1: config 0 has no interface number 0
[  175.283715][ T4257] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.332830][ T4257] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.344084][ T4257] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  175.396453][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.438055][ T4257] usb 2-1: config 0 descriptor??
[  175.826017][ T4853] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  175.948600][ T4257] uclogic 0003:256C:006D.0004: unknown main item tag 0x0
[  175.997395][ T4257] uclogic 0003:256C:006D.0004: unknown main item tag 0x0
[  176.041075][ T4257] uclogic 0003:256C:006D.0004: unknown main item tag 0x0
[  176.091575][ T4257] uclogic 0003:256C:006D.0004: unknown main item tag 0x0
[  176.128958][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'.
[  176.161661][ T4257] uclogic 0003:256C:006D.0004: unknown main item tag 0x0
[  176.258158][ T4257] uclogic 0003:256C:006D.0004: No inputs registered, leaving
[  176.371230][ T4257] uclogic 0003:256C:006D.0004: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1
[  176.628254][ T4257] usb 2-1: USB disconnect, device number 9
[  177.025641][ T7046] netlink: 40 bytes leftover after parsing attributes in process `syz.3.832'.
[  177.093529][ T7049] fido_id[7049]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  177.118855][ T4236] Bluetooth: hci3: command 0x1009 tx timeout
[  177.176045][ T4853] usb 7-1: Using ep0 maxpacket: 8
[  177.305260][ T4853] usb 7-1: config 0 has an invalid interface number: 200 but max is 0
[  177.321280][ T4853] usb 7-1: config 0 has no interface number 0
[  177.341798][ T4853] usb 7-1: config 0 interface 200 altsetting 2 has an invalid endpoint with address 0xB5, skipping
[  177.366542][ T4853] usb 7-1: config 0 interface 200 has no altsetting 0
[  177.457316][ T7068] APIC base relocation is unsupported by KVM
[  177.526212][ T4853] usb 7-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  177.569943][ T4853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.616019][ T4853] usb 7-1: Product: syz
[  177.620409][ T4853] usb 7-1: Manufacturer: syz
[  177.625073][ T4853] usb 7-1: SerialNumber: syz
[  177.644537][ T4853] usb 7-1: config 0 descriptor??
[  177.968329][ T4853] usbhid 7-1:0.200: couldn't find an input interrupt endpoint
[  177.985226][ T4853] usb 7-1: USB disconnect, device number 3
[  178.094953][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.852'.
[  178.176039][ T4296] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  178.374780][ T7107] binder: 7106:7107 ioctl c0306201 0 returned -14
[  178.447360][ T4296] usb 6-1: Using ep0 maxpacket: 32
[  179.178908][ T7114] loop5: detected capacity change from 0 to 7
[  179.231682][ T5448] Dev loop5: unable to read RDB block 7
[  179.250145][ T5448]  loop5: unable to read partition table
[  179.288346][ T5448] loop5: partition table beyond EOD, truncated
[  179.589978][ T7114] Dev loop5: unable to read RDB block 7
[  179.601955][ T7114]  loop5: unable to read partition table
[  179.611410][ T7114] loop5: partition table beyond EOD, truncated
[  179.639753][ T7114] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5)
[  179.726137][ T4296] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.736393][ T4296] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  179.745459][ T4296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.760825][ T4296] usb 6-1: config 0 descriptor??
[  179.807138][ T4296] hub 6-1:0.0: bad descriptor, ignoring hub
[  179.813146][ T4296] hub: probe of 6-1:0.0 failed with error -5
[  179.969380][ T7129] loop3: detected capacity change from 0 to 64
[  181.432663][  T150] block nbd3: Attempted send on invalid socket
[  181.439640][  T150] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  181.461102][ T7172] EXT4-fs (nbd3): unable to read superblock
[  181.598086][ T7179] device syzkaller0 entered promiscuous mode
[  181.733711][ T7182] syz.5.888 uses obsolete (PF_INET,SOCK_PACKET)
[  181.740403][ T4257] usb 6-1: USB disconnect, device number 6
[  181.813641][ T7189] device syzkaller0 entered promiscuous mode
[  183.524516][ T7217] loop3: detected capacity change from 0 to 1024
[  183.580884][ T7217] EXT4-fs (loop3): Ignoring removed oldalloc option
[  183.615391][ T7217] EXT4-fs (loop3): Ignoring removed bh option
[  183.622010][ T7217] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  183.684010][ T7217] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  183.834360][ T7231] device syzkaller0 entered promiscuous mode
[  184.090997][ T7243] loop4: detected capacity change from 0 to 512
[  184.261632][ T7243] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.909: inode has both inline data and extents flags
[  184.288900][ T7243] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.909: couldn't read orphan inode 15 (err -117)
[  184.301852][ T7243] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  184.309069][ T7251] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  184.349395][ T7251] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  185.086047][ T4236] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  185.336121][ T4236] usb 6-1: Using ep0 maxpacket: 16
[  185.526032][ T4236] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  185.580041][ T4236] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  186.487337][ T7287] binder: 7282:7287 ioctl 80089418 0 returned -22
[  186.856059][ T4236] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  186.865465][ T4236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.891643][ T4236] usb 6-1: Product: syz
[  186.895956][ T4236] usb 6-1: Manufacturer: syz
[  186.900736][ T4236] usb 6-1: SerialNumber: syz
[  187.328403][ T4236] usb 6-1: 0:2 : does not exist
[  187.769080][ T4236] usb 6-1: USB disconnect, device number 7
[  188.134934][ T7327] kvm: pic: non byte write
[  188.141003][ T5448] udevd[5448]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  188.162194][ T7327] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns
[  188.171243][ T4236] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  188.576207][ T4236] usb 2-1: unable to get BOS descriptor or descriptor too short
[  188.806025][ T4236] usb 2-1: not running at top speed; connect to a high speed hub
[  188.886732][ T4236] usb 2-1: config 0 has no interfaces?
[  189.051508][ T4236] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  189.131302][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.331248][ T4236] usb 2-1: Product: syz
[  189.670931][ T4236] usb 2-1: Manufacturer: syz
[  189.676295][ T4236] usb 2-1: SerialNumber: syz
[  189.688610][ T4236] usb 2-1: config 0 descriptor??
[  189.967709][ T4236] usb 2-1: USB disconnect, device number 10
[  191.126011][ T4852] Bluetooth: hci4: command 0x0406 tx timeout
[  191.134201][ T4852] Bluetooth: hci0: command 0x0406 tx timeout
[  191.144345][ T4852] Bluetooth: hci2: command 0x0406 tx timeout
[  191.480022][ T7394] ieee802154 phy0 wpan0: encryption failed: -22
[  191.550541][ T7393] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  191.661024][ T7393] kvm: pic: non byte read
[  191.702648][ T7393] kvm: pic: non byte read
[  191.738544][ T7393] kvm: pic: non byte read
[  191.763847][ T7393] kvm: pic: non byte read
[  191.796884][ T7393] kvm: pic: non byte read
[  191.808105][ T7393] kvm: pic: non byte read
[  191.812802][ T7393] kvm: pic: non byte read
[  191.819484][ T7393] kvm: pic: non byte read
[  191.824331][ T7393] kvm: pic: non byte read
[  191.831427][ T7393] kvm: pic: non byte read
[  191.840395][ T7393] kvm: pic: single mode not supported
[  191.841216][ T7393] kvm: pic: level sensitive irq not supported
[  191.865331][ T7393] kvm: pic: single mode not supported
[  194.176774][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.191219][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  195.060002][ T7456] loop5: detected capacity change from 0 to 7
[  195.101870][ T4917] Dev loop5: unable to read RDB block 7
[  195.130220][ T4917]  loop5: unable to read partition table
[  195.136258][ T4917] loop5: partition table beyond EOD, truncated
[  195.151412][ T7456] Dev loop5: unable to read RDB block 7
[  195.194615][ T7456]  loop5: unable to read partition table
[  195.238729][ T7456] loop5: partition table beyond EOD, truncated
[  195.245046][ T7456] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5)
[  195.275721][ T3562] Dev loop5: unable to read RDB block 7
[  195.281462][ T3562]  loop5: unable to read partition table
[  195.287376][ T3562] loop5: partition table beyond EOD, truncated
[  195.761189][ T7480] loop6: detected capacity change from 0 to 4096
[  195.834735][ T7480] EXT4-fs (loop6): Test dummy encryption mode enabled
[  195.868800][ T7480] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  195.888614][ T7480] System zones: 0-5
[  195.910989][ T7480] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,nodiscard,data_err=ignore,acl,barrier,,errors=continue. Quota mode: writeback.
[  198.361658][ T4852] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  198.492382][ T7519] device batadv_slave_1 entered promiscuous mode
[  198.505064][ T7518] device batadv_slave_1 left promiscuous mode
[  198.576538][ T7521] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.615078][ T7521] team0: Port device bond0 added
[  198.636192][ T4852] usb 6-1: Using ep0 maxpacket: 32
[  198.665916][ T7522] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.684691][ T7522] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.740286][ T7524] netlink: 'syz.6.1007': attribute type 10 has an invalid length.
[  198.771675][ T7524] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  198.803333][ T7525] netlink: 'syz.6.1007': attribute type 10 has an invalid length.
[  198.834806][ T4852] usb 6-1: unable to get BOS descriptor or descriptor too short
[  198.966327][ T4852] usb 6-1: config 9 has an invalid interface number: 254 but max is 0
[  198.988995][ T4852] usb 6-1: config 9 has no interface number 0
[  199.002181][ T4852] usb 6-1: config 9 interface 254 has no altsetting 0
[  199.232624][ T4852] usb 6-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c
[  199.248407][ T4852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.285907][ T4852] usb 6-1: Product: syz
[  199.293323][ T4852] usb 6-1: Manufacturer: syz
[  199.310194][ T4852] usb 6-1: SerialNumber: syz
[  199.688490][ T4852] hso 6-1:9.254: Not our interface
[  199.734944][ T4852] usb 6-1: USB disconnect, device number 8
[  199.970727][ T7563] loop1: detected capacity change from 0 to 128
[  200.126054][ T2307] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  200.406494][ T2307] usb 4-1: Using ep0 maxpacket: 16
[  200.529846][ T2307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.558823][ T2307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  200.693506][ T7577] loop6: detected capacity change from 0 to 256
[  200.737431][ T2307] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  200.763388][ T2307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.789536][ T2307] usb 4-1: Product: syz
[  200.793889][ T2307] usb 4-1: Manufacturer: syz
[  200.804445][ T2307] usb 4-1: SerialNumber: syz
[  201.083907][ T7586] loop1: detected capacity change from 0 to 128
[  201.165763][ T2307] usb 4-1: 0:2 : does not exist
[  201.632156][ T2307] usb 4-1: USB disconnect, device number 8
[  201.988874][ T7598] device syzkaller0 entered promiscuous mode
[  202.027813][ T4200] udevd[4200]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  202.140538][ T7601] loop6: detected capacity change from 0 to 4096
[  202.149879][ T7600] loop1: detected capacity change from 0 to 2048
[  202.257312][ T7600] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  202.320438][ T7600] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  202.341270][ T7601] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  202.373442][ T7600] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.287971][ T7600] UDF-fs: unknown compression code (65)
[  203.345444][ T7616] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  203.359825][ T7616] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  203.876085][ T4853] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  204.466228][ T4853] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  204.475346][ T4853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.512493][ T4853] usb 6-1: Product: syz
[  204.526518][ T4853] usb 6-1: Manufacturer: syz
[  204.531295][ T4853] usb 6-1: SerialNumber: syz
[  204.562889][ T4853] usb 6-1: config 0 descriptor??
[  204.628316][ T4853] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  204.825760][ T7685] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  206.738751][ T7726] device syzkaller0 entered promiscuous mode
[  206.751981][ T7732] loop3: detected capacity change from 0 to 2048
[  206.786124][ T4853] gspca_stk1135: reg_w 0x203 err -71
[  206.793311][ T4853] gspca_stk1135: serial bus timeout: status=0x00
[  206.819326][ T4853] gspca_stk1135: Sensor write failed
[  206.833080][ T4853] gspca_stk1135: serial bus timeout: status=0x00
[  206.849001][ T7732] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  206.853118][ T4853] gspca_stk1135: Sensor write failed
[  206.865099][ T4853] gspca_stk1135: serial bus timeout: status=0x00
[  206.885015][ T4853] gspca_stk1135: Sensor read failed
[  206.891692][ T4853] gspca_stk1135: serial bus timeout: status=0x00
[  206.898314][ T4853] gspca_stk1135: Sensor read failed
[  206.903627][ T4853] gspca_stk1135: Detected sensor type unknown (0x0)
[  206.910422][ T4853] gspca_stk1135: serial bus timeout: status=0x00
[  206.917160][ T4853] gspca_stk1135: Sensor read failed
[  206.922653][ T4853] gspca_stk1135: serial bus timeout: status=0x00
[  206.929159][ T4853] gspca_stk1135: Sensor read failed
[  206.934410][ T4853] gspca_stk1135: serial bus timeout: status=0x00
[  206.940889][ T4853] gspca_stk1135: Sensor write failed
[  206.946321][ T4853] gspca_stk1135: serial bus timeout: status=0x00
[  206.952808][ T4853] gspca_stk1135: Sensor write failed
[  206.958287][ T4853] stk1135: probe of 6-1:0.0 failed with error -71
[  206.970634][ T4853] usb 6-1: USB disconnect, device number 9
[  207.718022][ T7745] netlink: 'syz.6.1095': attribute type 1 has an invalid length.
[  207.770653][ T7745] 8021q: adding VLAN 0 to HW filter on device bond1
[  207.775743][ T4453] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  207.819652][ T7745] bond1: (slave dummy0): making interface the new active one
[  207.845424][ T7745] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  207.855000][ T4453] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1474 with error 28
[  207.869217][ T4453] EXT4-fs (loop3): This should not happen!! Data will be lost
[  207.869217][ T4453] 
[  207.879315][ T4453] EXT4-fs (loop3): Total free blocks count 0
[  207.885318][ T4453] EXT4-fs (loop3): Free/Dirty block details
[  207.894316][ T4453] EXT4-fs (loop3): free_blocks=2415919504
[  207.906208][ T4453] EXT4-fs (loop3): dirty_blocks=1488
[  207.911526][ T4453] EXT4-fs (loop3): Block reservation details
[  207.922874][ T4453] EXT4-fs (loop3): i_reserved_data_blocks=93
[  207.972176][ T7752] bond1 (unregistering): (slave dummy0): Releasing active interface
[  208.024199][ T7752] bond1 (unregistering): Released all slaves
[  208.070196][ T7749] loop5: detected capacity change from 0 to 32768
[  208.123731][ T7749] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1096 (7749)
[  208.145609][ T7743] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  208.145658][ T7749] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  208.162687][ T7749] BTRFS info (device loop5): allowing degraded mounts
[  208.169582][ T7749] BTRFS info (device loop5): setting nodatasum
[  208.175799][ T7749] BTRFS info (device loop5): disabling tree log
[  208.182171][ T7749] BTRFS info (device loop5): using free space tree
[  208.189473][ T7749] BTRFS info (device loop5): has skinny extents
[  208.195224][ T7743] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  208.400065][ T7775] loop3: detected capacity change from 0 to 128
[  208.453775][ T7783] binder: Bad value for 'max'
[  208.498170][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  208.498184][   T26] audit: type=1800 audit(1763237942.540:59): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1096" name="file1" dev="loop5" ino=260 res=0 errno=0
[  208.684115][   T26] audit: type=1800 audit(1763237942.650:60): pid=7787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1096" name="bus" dev="loop5" ino=263 res=0 errno=0
[  208.687135][ T7787] loop5: detected capacity change from 32768 to 0
[  208.795811][ T4453] loop: Write error at byte offset 9223372036860018683, length 4096.
[  208.808159][    C0] blk_update_request: I/O error, dev loop5, sector 10240 op 0x1:(WRITE) flags 0x1800 phys_seg 3 prio class 0
[  208.820587][    C0] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  208.831310][ T4453] loop: Write error at byte offset 9223372036860035067, length 4096.
[  208.840840][ T4453] loop: Write error at byte offset 9223372036860047355, length 4096.
[  208.862568][    C0] blk_update_request: I/O error, dev loop5, sector 10272 op 0x1:(WRITE) flags 0x1800 phys_seg 2 prio class 0
[  208.874641][    C0] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[  208.884715][    C0] blk_update_request: I/O error, dev loop5, sector 10296 op 0x1:(WRITE) flags 0x1800 phys_seg 3 prio class 0
[  208.896459][    C0] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0
[  208.906653][ T7749] BTRFS: error (device loop5) in btrfs_commit_transaction:2448: errno=-5 IO failure (Error while writing out transaction)
[  208.920310][ T7749] BTRFS info (device loop5): forced readonly
[  208.926742][ T7749] BTRFS warning (device loop5): Skipping commit of aborted transaction.
[  208.935832][ T7749] BTRFS: error (device loop5) in cleanup_transaction:2020: errno=-5 IO failure
[  209.797011][ T7822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1117'.
[  210.757799][ T7826] loop4: detected capacity change from 0 to 4096
[  210.850514][ T7828] loop1: detected capacity change from 0 to 4096
[  210.899311][ T7835] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  210.920785][ T7828] EXT4-fs (loop1): Test dummy encryption mode enabled
[  210.993604][ T7828] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  211.012529][ T7828] System zones: 0-5
[  211.044040][ T7828] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,nodiscard,data_err=ignore,acl,barrier,,errors=continue. Quota mode: writeback.
[  212.390148][ T7862] loop6: detected capacity change from 0 to 128
[  212.414155][ T7843] chnl_net:caif_netlink_parms(): no params data found
[  212.532867][ T7843] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.547651][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.561476][ T7843] device bridge_slave_0 entered promiscuous mode
[  212.572578][ T7843] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.597006][ T7843] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.610162][ T7862] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  212.613410][ T7843] device bridge_slave_1 entered promiscuous mode
[  212.623085][ T7862] hpfs: filesystem error: improperly stopped
[  212.635239][ T7862] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  212.643182][ T7862] hpfs: You really don't want any checks? You are crazy...
[  212.659859][ T7862] hpfs: hpfs_map_sector(): read error
[  212.667568][ T7862] hpfs: code page support is disabled
[  212.674404][ T7862] hpfs: hpfs_map_4sectors(): unaligned read
[  212.686465][ T7862] hpfs: hpfs_map_4sectors(): unaligned read
[  212.860942][ T7803] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[  212.919744][ T7862] hpfs: filesystem error: unable to find root dir
[  213.118054][ T4188] Bluetooth: hci1: command 0x0409 tx timeout
[  213.475992][ T4257] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  213.510262][ T7803] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  213.521190][ T7803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.540144][ T7803] usb 5-1: config 0 descriptor??
[  213.549938][ T7843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.629595][ T7873] hpfs: hpfs_map_4sectors(): unaligned read
[  214.096138][ T4257] usb 4-1: Using ep0 maxpacket: 32
[  214.187575][ T7843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.206076][ T7803] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  214.256888][ T4257] usb 4-1: unable to get BOS descriptor or descriptor too short
[  214.356443][ T4257] usb 4-1: config 9 has an invalid interface number: 254 but max is 0
[  214.379107][ T4257] usb 4-1: config 9 has no interface number 0
[  214.385487][ T4257] usb 4-1: config 9 interface 254 has no altsetting 0
[  214.546188][ T7803] asix: probe of 5-1:0.0 failed with error -71
[  214.556440][ T7803] usb 5-1: USB disconnect, device number 4
[  214.566076][ T4257] usb 4-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c
[  214.586382][ T4257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.635714][ T4257] usb 4-1: Product: syz
[  214.645255][ T4257] usb 4-1: Manufacturer: syz
[  214.650251][ T4257] usb 4-1: SerialNumber: syz
[  214.834076][ T7843] team0: Port device team_slave_0 added
[  214.842906][ T7843] team0: Port device team_slave_1 added
[  214.903218][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.106713][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.206097][ T7803] Bluetooth: hci1: command 0x041b tx timeout
[  215.541797][ T7843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.558112][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.565150][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.602559][ T7843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.697145][ T4257] hso 4-1:9.254: Not our interface
[  215.723813][ T4257] usb 4-1: USB disconnect, device number 9
[  215.778231][ T7843] device hsr_slave_0 entered promiscuous mode
[  215.799239][ T7843] device hsr_slave_1 entered promiscuous mode
[  215.822414][ T7843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.868022][ T7843] Cannot create hsr debugfs directory
[  216.363310][ T7843] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  216.410702][ T7843] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  216.438464][ T7843] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  216.458655][ T7843] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  216.669951][ T7843] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.717992][ T7843] 8021q: adding VLAN 0 to HW filter on device team0
[  216.732085][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  216.748789][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  216.783832][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  216.802033][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  216.833182][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.840346][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.851186][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  216.861765][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  216.871420][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.878550][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.889377][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  216.920649][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  216.941580][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  216.960887][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  216.974066][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  217.021319][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  217.044358][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  217.053753][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  217.062785][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  217.088602][ T7843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  217.125420][ T7960] usb usb7: usbfs: process 7960 (syz.3.1161) did not claim interface 0 before use
[  217.146955][ T7843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  217.156915][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  217.165640][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  217.174905][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  217.286194][ T4236] Bluetooth: hci1: command 0x040f tx timeout
[  218.257703][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  218.278177][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  218.340578][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1169'.
[  218.549693][ T7984] team0: Port device bond0 removed
[  218.572732][ T7984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  218.606481][ T7984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.642471][ T7984] bond0 (unregistering): Released all slaves
[  218.695147][ T7843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.702628][ T7995] input: syz0 as /devices/virtual/input/input10
[  218.981246][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'.
[  218.998736][ T8007] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.013428][ T8007] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.053993][ T8007] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.065174][ T8007] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.123338][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  219.137296][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  219.191835][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  219.206483][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  219.224154][ T7843] device veth0_vlan entered promiscuous mode
[  219.245237][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  219.268036][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  219.304715][ T7843] device veth1_vlan entered promiscuous mode
[  219.327455][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  219.341014][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  219.366134][ T4188] Bluetooth: hci1: command 0x0419 tx timeout
[  219.560442][ T8017] loop4: detected capacity change from 0 to 32768
[  219.582107][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  219.605509][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  219.649587][ T8017] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1181 (8017)
[  220.236516][ T8024] loop6: detected capacity change from 0 to 2048
[  220.573665][ T7843] device veth0_macvtap entered promiscuous mode
[  220.616202][ T8017] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  220.624962][ T8017] BTRFS info (device loop4): allowing degraded mounts
[  220.632152][ T8017] BTRFS info (device loop4): setting nodatasum
[  220.638571][ T8017] BTRFS info (device loop4): disabling tree log
[  220.644889][ T8017] BTRFS info (device loop4): using free space tree
[  220.651459][ T8017] BTRFS info (device loop4): has skinny extents
[  220.678958][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  220.767462][ T7843] device veth1_macvtap entered promiscuous mode
[  220.787728][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.806028][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.817049][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.837061][ T8024] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  220.852815][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.890780][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.910186][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.921347][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.932101][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.943988][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  221.144649][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  221.208765][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  221.323297][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.438448][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.510742][   T26] audit: type=1800 audit(1763237955.550:61): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1181" name="file1" dev="loop4" ino=260 res=0 errno=0
[  221.716119][   T26] audit: type=1800 audit(1763237955.720:62): pid=8064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1181" name="bus" dev="loop4" ino=263 res=0 errno=0
[  221.720553][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.801711][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.813131][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.828615][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.839110][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.851522][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.864132][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  221.864144][    T9] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  221.879656][ T7843] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.935925][ T7843] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.953897][ T7843] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.963760][ T7843] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.974778][    T9] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 358 with error 28
[  221.991327][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  222.007535][    T9] EXT4-fs (loop6): This should not happen!! Data will be lost
[  222.007535][    T9] 
[  222.010115][ T8064] loop_set_status: loop4 () has still dirty pages (nrpages=3)
[  222.031624][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  222.104123][    T9] EXT4-fs (loop6): Total free blocks count 0
[  222.168990][    T9] EXT4-fs (loop6): Free/Dirty block details
[  222.175111][    T9] EXT4-fs (loop6): free_blocks=2415919504
[  222.206019][    T9] EXT4-fs (loop6): dirty_blocks=368
[  222.211277][    T9] EXT4-fs (loop6): Block reservation details
[  222.218086][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.257622][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.265703][    T9] EXT4-fs (loop6): i_reserved_data_blocks=23
[  222.304944][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  222.341250][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.376415][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.446358][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  222.537621][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1191'.
[  222.803670][   T26] audit: type=1326 audit(1763237956.790:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02109a96c9 code=0x7ffc0000
[  222.957357][   T26] audit: type=1326 audit(1763237956.790:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02109a96c9 code=0x7ffc0000
[  223.166015][   T26] audit: type=1326 audit(1763237957.060:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02109a96c9 code=0x7ffc0000
[  223.273072][   T26] audit: type=1326 audit(1763237957.060:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02109a96c9 code=0x7ffc0000
[  223.292626][ T8106] device syzkaller0 entered promiscuous mode
[  223.391836][   T26] audit: type=1326 audit(1763237957.060:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02109a96c9 code=0x7ffc0000
[  223.464079][   T26] audit: type=1326 audit(1763237957.060:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02109a96c9 code=0x7ffc0000
[  223.480552][ T8100] loop7: detected capacity change from 0 to 8192
[  223.489591][   T26] audit: type=1326 audit(1763237957.060:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02109a96c9 code=0x7ffc0000
[  223.585959][ T8094] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  223.661132][   T26] audit: type=1326 audit(1763237957.060:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02109a96c9 code=0x7ffc0000
[  223.822339][ T8125] binder: 8124:8125 ioctl c0306201 0 returned -14
[  223.846644][ T8094] usb 5-1: Using ep0 maxpacket: 32
[  224.006952][ T8094] usb 5-1: unable to get BOS descriptor or descriptor too short
[  224.096232][ T8094] usb 5-1: config 9 has an invalid interface number: 254 but max is 0
[  224.123743][ T8094] usb 5-1: config 9 has no interface number 0
[  224.140275][ T8094] usb 5-1: config 9 interface 254 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16
[  224.184930][ T8094] usb 5-1: config 9 interface 254 has no altsetting 0
[  224.356199][ T8094] usb 5-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c
[  224.369181][ T8094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.402786][ T8094] usb 5-1: Product: syz
[  224.410627][ T8094] usb 5-1: Manufacturer: syz
[  224.415375][ T8094] usb 5-1: SerialNumber: syz
[  224.497299][ T8108] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  224.860119][ T8094] hso 5-1:9.254: Not our interface
[  224.941505][ T8094] usb 5-1: USB disconnect, device number 5
[  225.066310][ T4188] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  225.456310][ T8163] ------------[ cut here ]------------
[  225.462559][ T8163] wlan1: Failed check-sdata-in-driver check, flags: 0x4
[  225.474168][ T8163] WARNING: CPU: 1 PID: 8163 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550
[  225.486215][ T8163] Modules linked in:
[  225.499809][ T8163] CPU: 0 PID: 8163 Comm: syz.1.1223 Not tainted syzkaller #0
[  225.535065][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  225.545341][ T8163] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550
[  225.552452][ T8163] Code: 7d 8d f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 40 14 19 8b 4c 89 e6 89 ea e8 95 f1 6f 00 <0f> 0b e9 07 fd ff ff e8 a9 15 49 f8 0f 0b e9 b1 fe ff ff e8 9d 15
[  225.572405][ T8163] RSP: 0018:ffffc9000351f248 EFLAGS: 00010246
[  225.580968][ T8163] RAX: 4c16600e2e631b00 RBX: 0000000000400000 RCX: 0000000000080000
[  225.590706][ T8163] RDX: ffffc90003882000 RSI: 0000000000005661 RDI: 0000000000005662
[  225.598823][ T8163] RBP: 0000000000000004 R08: dffffc0000000000 R09: ffffed10172267b0
[  225.608770][ T8163] R10: ffffed10172267b0 R11: 1ffff110172267af R12: ffff88805f9f8000
[  225.616979][ T8163] R13: ffff88805f9f9290 R14: ffff888027c90da0 R15: ffff88805f9fa298
[  225.624989][ T8163] FS:  00007fc2a5d846c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  225.635405][ T8163] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  225.642294][ T8163] CR2: 00007fc2a5d40fb8 CR3: 000000002a883000 CR4: 00000000003506e0
[  225.650463][ T8163] Call Trace:
[  225.653764][ T8163]  <TASK>
[  225.657481][ T8163]  ? netif_carrier_off+0x1/0xc0
[  225.662454][ T8163]  ieee80211_ocb_leave+0x26f/0x320
[  225.667959][ T8163]  __cfg80211_leave_ocb+0x219/0x3f0
[  225.673197][ T8163]  cfg80211_leave_ocb+0x53/0x70
[  225.678593][ T8163]  cfg80211_change_iface+0x4f1/0xeb0
[  225.683919][ T8163]  nl80211_set_interface+0x598/0x7d0
[  225.691124][ T8163]  ? nl80211_dump_interface+0x5c0/0x5c0
[  225.697071][ T8163]  ? mutex_lock_nested+0x17/0x20
[  225.702181][ T8163]  genl_rcv_msg+0xbc6/0xf40
[  225.706796][ T8163]  ? genl_bind+0x370/0x370
[  225.711349][ T8163]  ? verify_lock_unused+0x140/0x140
[  225.717060][ T8163]  ? __dev_queue_xmit+0x1bc5/0x2ed0
[  225.722305][ T8163]  ? dev_queue_xmit+0x20/0x20
[  225.727076][ T8163]  ? nl80211_dump_interface+0x5c0/0x5c0
[  225.733482][ T8163]  netlink_rcv_skb+0x1e0/0x430
[  225.738568][ T4188] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  225.746868][ T8163]  ? genl_bind+0x370/0x370
[  225.751350][ T8163]  ? netlink_ack+0xb60/0xb60
[  225.756248][ T4188] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  225.766044][ T8163]  ? __lock_acquire+0x7c60/0x7c60
[  225.766150][ T8163]  ? preempt_count_add+0x8d/0x190
[  225.771367][ T4188] usb 4-1: config 0 interface 0 has no altsetting 0
[  225.777694][ T8163]  ? down_read+0x1aa/0x2e0
[  225.787871][ T8163]  genl_rcv+0x24/0x40
[  225.791890][ T8163]  netlink_unicast+0x774/0x920
[  225.796775][ T8163]  netlink_sendmsg+0x8ab/0xbc0
[  225.801676][ T8163]  ? netlink_getsockopt+0x560/0x560
[  225.807152][ T8163]  ? aa_sock_msg_perm+0x94/0x150
[  225.812229][ T8163]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  225.817632][ T8163]  ? security_socket_sendmsg+0x7c/0xa0
[  225.823153][ T8163]  ? netlink_getsockopt+0x560/0x560
[  225.828448][ T8163]  ____sys_sendmsg+0x5a2/0x8c0
[  225.833496][ T8163]  ? memset+0x1e/0x40
[  225.839534][ T8163]  ? __sys_sendmsg_sock+0x30/0x30
[  225.844607][ T8163]  ? import_iovec+0x6f/0xa0
[  225.851137][ T8163]  ___sys_sendmsg+0x1f0/0x260
[  225.856020][ T8163]  ? __sys_sendmsg+0x250/0x250
[  225.860819][ T8163]  ? sock_do_ioctl+0x27c/0x2f0
[  225.865622][ T8163]  ? __fdget+0x18b/0x210
[  225.870012][ T8163]  __se_sys_sendmsg+0x190/0x250
[  225.874910][ T8163]  ? __x64_sys_sendmsg+0x80/0x80
[  225.879929][ T8163]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  225.886027][ T8163]  ? lockdep_hardirqs_on+0x94/0x140
[  225.891283][ T8163]  do_syscall_64+0x4c/0xa0
[  225.895725][ T8163]  ? clear_bhb_loop+0x30/0x80
[  225.900467][ T8163]  ? clear_bhb_loop+0x30/0x80
[  225.905279][ T8163]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  225.911253][ T8163] RIP: 0033:0x7fc2a7b1d6c9
[  225.915689][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.935440][ T8163] RSP: 002b:00007fc2a5d84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.944934][ T8163] RAX: ffffffffffffffda RBX: 00007fc2a7d73fa0 RCX: 00007fc2a7b1d6c9
[  225.953031][ T8163] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  225.956093][ T4188] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  225.963819][ T8163] RBP: 00007fc2a7b9ff91 R08: 0000000000000000 R09: 0000000000000000
[  225.978284][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.978473][ T4188] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  225.986364][ T8163] R13: 00007fc2a7d74038 R14: 00007fc2a7d73fa0 R15: 00007fff6c62fbf8
[  225.986402][ T8163]  </TASK>
[  225.986437][ T8163] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  225.986448][ T8163] CPU: 0 PID: 8163 Comm: syz.1.1223 Not tainted syzkaller #0
[  225.986466][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  226.000948][ T4188] usb 4-1: Product: syz
[  226.002591][ T8163] Call Trace:
[  226.002601][ T8163]  <TASK>
[  226.002610][ T8163]  dump_stack_lvl+0x168/0x230
[  226.006332][ T4188] usb 4-1: Manufacturer: syz
[  226.012943][ T8163]  ? show_regs_print_info+0x20/0x20
[  226.012976][ T8163]  ? load_image+0x3b0/0x3b0
[  226.013012][ T8163]  panic+0x2c9/0x7f0
[  226.021070][ T4188] usb 4-1: SerialNumber: syz
[  226.030430][ T8163]  ? bpf_jit_dump+0xd0/0xd0
[  226.030474][ T8163]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  226.030503][ T8163]  __warn+0x248/0x2b0
[  226.083158][ T8163]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  226.089599][ T8163]  report_bug+0x1b7/0x2e0
[  226.093958][ T8163]  handle_bug+0x3a/0x70
[  226.098121][ T8163]  exc_invalid_op+0x16/0x40
[  226.102642][ T8163]  asm_exc_invalid_op+0x16/0x20
[  226.107492][ T8163] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550
[  226.114522][ T8163] Code: 7d 8d f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 40 14 19 8b 4c 89 e6 89 ea e8 95 f1 6f 00 <0f> 0b e9 07 fd ff ff e8 a9 15 49 f8 0f 0b e9 b1 fe ff ff e8 9d 15
[  226.134135][ T8163] RSP: 0018:ffffc9000351f248 EFLAGS: 00010246
[  226.140225][ T8163] RAX: 4c16600e2e631b00 RBX: 0000000000400000 RCX: 0000000000080000
[  226.148223][ T8163] RDX: ffffc90003882000 RSI: 0000000000005661 RDI: 0000000000005662
[  226.156221][ T8163] RBP: 0000000000000004 R08: dffffc0000000000 R09: ffffed10172267b0
[  226.164200][ T8163] R10: ffffed10172267b0 R11: 1ffff110172267af R12: ffff88805f9f8000
[  226.172180][ T8163] R13: ffff88805f9f9290 R14: ffff888027c90da0 R15: ffff88805f9fa298
[  226.180176][ T8163]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  226.186609][ T8163]  ? netif_carrier_off+0x1/0xc0
[  226.191595][ T8163]  ieee80211_ocb_leave+0x26f/0x320
[  226.196777][ T8163]  __cfg80211_leave_ocb+0x219/0x3f0
[  226.202015][ T8163]  cfg80211_leave_ocb+0x53/0x70
[  226.206903][ T8163]  cfg80211_change_iface+0x4f1/0xeb0
[  226.212205][ T8163]  nl80211_set_interface+0x598/0x7d0
[  226.217504][ T8163]  ? nl80211_dump_interface+0x5c0/0x5c0
[  226.223057][ T8163]  ? mutex_lock_nested+0x17/0x20
[  226.228009][ T8163]  genl_rcv_msg+0xbc6/0xf40
[  226.232542][ T8163]  ? genl_bind+0x370/0x370
[  226.236983][ T8163]  ? verify_lock_unused+0x140/0x140
[  226.242210][ T8163]  ? __dev_queue_xmit+0x1bc5/0x2ed0
[  226.247437][ T8163]  ? dev_queue_xmit+0x20/0x20
[  226.252118][ T8163]  ? nl80211_dump_interface+0x5c0/0x5c0
[  226.257682][ T8163]  netlink_rcv_skb+0x1e0/0x430
[  226.262446][ T8163]  ? genl_bind+0x370/0x370
[  226.266882][ T8163]  ? netlink_ack+0xb60/0xb60
[  226.271476][ T8163]  ? __lock_acquire+0x7c60/0x7c60
[  226.276524][ T8163]  ? preempt_count_add+0x8d/0x190
[  226.281563][ T8163]  ? down_read+0x1aa/0x2e0
[  226.285997][ T8163]  genl_rcv+0x24/0x40
[  226.290006][ T8163]  netlink_unicast+0x774/0x920
[  226.294809][ T8163]  netlink_sendmsg+0x8ab/0xbc0
[  226.299596][ T8163]  ? netlink_getsockopt+0x560/0x560
[  226.304797][ T8163]  ? aa_sock_msg_perm+0x94/0x150
[  226.307252][ T4188] usb 4-1: config 0 descriptor??
[  226.309744][ T8163]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  226.319974][ T8163]  ? security_socket_sendmsg+0x7c/0xa0
[  226.325438][ T8163]  ? netlink_getsockopt+0x560/0x560
[  226.330648][ T8163]  ____sys_sendmsg+0x5a2/0x8c0
[  226.335428][ T8163]  ? memset+0x1e/0x40
[  226.339423][ T8163]  ? __sys_sendmsg_sock+0x30/0x30
[  226.344488][ T8163]  ? import_iovec+0x6f/0xa0
[  226.349020][ T8163]  ___sys_sendmsg+0x1f0/0x260
[  226.353728][ T8163]  ? __sys_sendmsg+0x250/0x250
[  226.358507][ T8163]  ? sock_do_ioctl+0x27c/0x2f0
[  226.363294][ T8163]  ? __fdget+0x18b/0x210
[  226.367548][ T8163]  __se_sys_sendmsg+0x190/0x250
[  226.372409][ T8163]  ? __x64_sys_sendmsg+0x80/0x80
[  226.377347][ T8163]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  226.383343][ T8163]  ? lockdep_hardirqs_on+0x94/0x140
[  226.387117][ T4188] hub 4-1:0.0: bad descriptor, ignoring hub
[  226.388550][ T8163]  do_syscall_64+0x4c/0xa0
[  226.388574][ T8163]  ? clear_bhb_loop+0x30/0x80
[  226.388596][ T8163]  ? clear_bhb_loop+0x30/0x80
[  226.396859][ T4188] hub: probe of 4-1:0.0 failed with error -5
[  226.398923][ T8163]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  226.398953][ T8163] RIP: 0033:0x7fc2a7b1d6c9
[  226.413551][ T4188] usb 4-1: selecting invalid altsetting 0
[  226.414265][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.414286][ T8163] RSP: 002b:00007fc2a5d84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  226.458380][ T8163] RAX: ffffffffffffffda RBX: 00007fc2a7d73fa0 RCX: 00007fc2a7b1d6c9
[  226.466378][ T8163] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  226.474374][ T8163] RBP: 00007fc2a7b9ff91 R08: 0000000000000000 R09: 0000000000000000
[  226.482349][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.490322][ T8163] R13: 00007fc2a7d74038 R14: 00007fc2a7d73fa0 R15: 00007fff6c62fbf8
[  226.498340][ T8163]  </TASK>
[  226.501790][ T8163] Kernel Offset: disabled
[  226.506425][ T8163] Rebooting in 86400 seconds..