last executing test programs:

8m50.045000207s ago: executing program 2 (id=3):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000240)={[{@datacow}, {@nodatasum}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1}}, {@ssd}, {}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) (fail_nth: 1)

8m48.775088288s ago: executing program 2 (id=26):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x51e, &(0x7f0000000700)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x40)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1)
write$binfmt_elf64(r0, 0x0, 0x40000)

8m47.106601874s ago: executing program 2 (id=32):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r0, 0x7fffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x10008000}, 0x1c)

8m46.178786119s ago: executing program 2 (id=46):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14)
recvmmsg(r3, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0)
renameat2(r4, &(0x7f0000000380)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x5)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0x6)

8m46.10110068s ago: executing program 32 (id=46):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14)
recvmmsg(r3, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0)
renameat2(r4, &(0x7f0000000380)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x5)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0x6)

4m39.197701561s ago: executing program 4 (id=1846):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = socket$kcm(0x11, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r1=>0x0})
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@xdp={0x2c, 0x0, r1, 0x6}, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)}], 0x1}, 0x20000000)
r2 = syz_open_dev$vim2m(0x0, 0x8, 0x2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x38, r5, 0x1, 0x3, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x5}, 0x8)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x140f, 0x8, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048001}, 0xc0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r10, 0xc2f, 0x0)
getdents64(r10, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r11=>0x0})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xa8, r8, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20008004}, 0x0)
sendfile(0xffffffffffffffff, r7, &(0x7f0000002080)=0x64, 0x23b)

4m38.966768385s ago: executing program 4 (id=1849):
sched_setscheduler(0x0, 0x2, 0x0)
unshare(0x26060400)
semop(0x0, &(0x7f0000000000)=[{0x3, 0x7, 0x1000}], 0x1)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2000490, 0x0)
unshare(0x20001800)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8050)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)

4m38.880841766s ago: executing program 4 (id=1853):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000000))

4m38.757002338s ago: executing program 4 (id=1857):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xe7, 0x4ad92b8dda129f42)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000100)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)={r1})

4m38.527378252s ago: executing program 4 (id=1861):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@default, @default, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})

4m37.294933222s ago: executing program 4 (id=1863):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})

4m21.327990788s ago: executing program 33 (id=1863):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})

1m22.317111719s ago: executing program 0 (id=2938):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81)
readv(r1, &(0x7f0000001480)=[{&(0x7f0000000000)=""/91, 0x5b}], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffd, 0x5, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x40, 0x5, 0x0, 0x0, 0x102, 'syz0\x00', 0x0})

1m22.133035122s ago: executing program 0 (id=2941):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)

1m21.984868495s ago: executing program 0 (id=2943):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x4})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)

1m21.786626548s ago: executing program 0 (id=2946):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f00000023c0)={0x2020}, 0x2020)

1m21.644639121s ago: executing program 0 (id=2948):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x60541, 0x0)
unshare(0x40400)
add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0xac40, 0x0)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x80000000020725)

1m21.216360287s ago: executing program 0 (id=2950):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4040, 0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5, 0x0, 0x7f})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000540))

1m21.103576009s ago: executing program 34 (id=2950):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4040, 0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5, 0x0, 0x7f})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000540))

10.893012575s ago: executing program 7 (id=3245):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$video4linux(&(0x7f00000005c0), 0x525, 0x2000)
read$FUSE(0xffffffffffffffff, &(0x7f0000002040)={0x2020}, 0x2060)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000040), 0x3a76125b5469132, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$alg(r3, &(0x7f0000000240)=""/4096, 0xfffffdef)

9.918498381s ago: executing program 7 (id=3251):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID, @IFA_LOCAL={0x28, 0x2, @empty}]}, 0x34}}, 0x0)

9.778951373s ago: executing program 7 (id=3254):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0xc, 0x47, 0xc1, 0x8, 0x54cf, 0xdbbc, 0xabd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x2, 0x5, 0x10, 0xce, [{{0x9, 0x4, 0xe0, 0x80, 0x2, 0x8, 0x3, 0x1, 0x4, [], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0x5, 0x10, 0x3}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x0, 0x9, 0xfa, [@generic={0x9, 0xb, "7e0f910a848cb1"}]}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004)

9.028531435s ago: executing program 7 (id=3258):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x2, 0xffffffff}]}, {0x0, [0x0]}}, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e2000008000400000600000800"], 0x30}}, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x6, 0x2, 0x5, 0x2, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0x1, 0x1, 0x7, 0x6, 0x200, 0x80, 0x7, 0x7, 0x7, 0x8, 0x2, 0x2, 0x7, 0xffffffffffffffff, 0x3, 0x900000001, 0x403, 0x1, 0x4, 0x101, 0x3, 0x5, 0x1, 0x0, 0x6, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x3ff, 0x9, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0x0, 0x9, 0x2, 0x3ff, 0x100000000000006, 0x2, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x7, 0x200, 0x8077d, 0xb3, 0x5, 0x539, 0x623b, 0x6, 0x0, 0x7, 0x4, 0x200, 0x7, 0x8, 0x0, 0x5, 0x93, 0x8, 0x401, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x7, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x8, 0x8, 0x1000, 0x0, 0x3, 0x8000000000007, 0xfffffffffffff000, 0x6, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x2, 0x8, 0x5, 0x9, 0x4, 0x0, 0x7f, 0xd1]})

6.23115594s ago: executing program 3 (id=3272):
syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x2, 0xffffffff}]}, {0x0, [0x0]}}, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e2000008000400000600000800"], 0x30}}, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc)

5.158123937s ago: executing program 3 (id=3275):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nouid32}]}, 0xfd, 0x269, &(0x7f0000000780)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
lgetxattr(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)=@random={'security.', ':(\x00'}, 0x0, 0x0)

5.116245767s ago: executing program 7 (id=3277):
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$802154_raw(0xffffffffffffffff, 0x0, 0x0)
getpid()
r0 = socket(0x3, 0x6, 0x7cc)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000240)=0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
socket$alg(0x26, 0x5, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty}}, 0x1, 0x0, 0x989, 0x0, 0x10, 0x2}, 0x9c)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0)

4.850629252s ago: executing program 3 (id=3278):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000400)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000440)="89a874825d37ebe927c69f16ea4e4dbfe9df64dfe00528e6bdd09d25145f32f197096e08c741ef2976af1f82848dbd46a0ebde75f51f825d7a1e5f12fa84b63419a59d53f9f3f1d5cb934804026bbb361aefb3f55c570a04a1e345470af41b491ab2e3682d9f87e927914e59abd8b981921a4590e5da0765511141ab55d4516ded262d5b116ff3cc0b73904ae2d46abe014e35459222ec233cd07a6e87d0161d0acd4fafe61e71f9c5937fa706108e0d435ca4edc821af577ce0c7f0af262fce6340a6", 0xc3}, {&(0x7f0000000540)="6a7693b5e8a5eb8392094b5f252940c57141ce3cd4541bf67ca357cbc78d3f41e3283a220f39029d434d1a143f0ad4b9aed55858c81d8a88c8daabad2aa2dd8215d036375bc103758c4c0a4df9ea329b1d139a6d58a771db3a9de186877846ebedb1c8ff68ec13a14284b803b7d7b5eaaf9fe3266e7b41e13aa82d444a9c972c6227e87d17c25f90b148dc7850b762362fd33213122343429e658d2b01087d2a9c99374bfcef91badecdefc21ba6dbf4684445e6c32fd5eefba8806fbcea80cb0a9e3e0924a6dae16dab293a4597465bee558f442b33", 0xd6}, {&(0x7f0000000640)="10fab79b64fc5ffbd21890e4904fa6ef883c3f69ad906a1522f0aee48d1a7916305f8a7844e2805831fc5e6f70d927c6a8b022432ff7cc791036772957e54288cbcc3fe97d38283ca82b5433115c0d00de73f7ee56c891dd92a28f516e18241d5dbc657ad157a0fee78c344ddc4e16e923d3712d9ff3cc3c71dd98d1bbe876434a530edd3feb472fceb8bb9497d7ed456c47a9ff4243a2a1b1c1ce1e48e8c741760d20535eac842f0a62512a953082cf4215d013530ad863523c224337f831533bf151faadef4e1f5699d129fd7190018745f10ae20da6115a69d47111", 0xdd}, {&(0x7f0000000340)="76d75ecbe3e8ca1edff3646948bd93359c935ee5b109032884bc9d1b1e2b90158750c78e3f8a3830bae9d8482d9e2be2f8ffaeacf7bb07649db65dd7ee846af0093a1fa7974d17533db33e079065d4fba94ba51b5d1fe9e5a9423e09c5452a94b3cfdd7d559eea988584c6c20b2c50018a1902857c9f254c7978a6c2bbe2722b0aabc2a7d4743a8ba3252237577ea63261b9605243f307f77ac75324fd027ee44d647a2bd6765d42d027c53e", 0xac}, {&(0x7f0000000980)="808faa79381e045c88fe0b8d10af8d53909c380e363f8326cadbd3d10821e52b155c8b4d2b28185a5987632a6fb41df85d7aef3f72f0d61fa89a8a98e346ac857d5d88ea3b2d480d61bac3f1799bd8ac2ee20ecd6a50cdfa57d959d2c085b3914864798e3580cd976a010561dfaa2af73b62e0defa7cdd6b2a1102", 0x7b}], 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1d37d42f50f578adbb21df5f8194228009efa032aeffe336fbd64e3e9e1fdb9589a966a80a055ce43e89e52897397ad2546b428cb7b5371091c8dad67b8399ded6e100000000cfaf9a6c978b1cafd5937d82e32a5a738ed22a424a692c", @ANYRES32, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x1c0}, 0x5)

4.679976475s ago: executing program 3 (id=3281):
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x2, 0x0, &(0x7f0000000280)=0x300)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000300)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'tunl0\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x8000, 0x700, 0x5, 0x98, {{0xf, 0x4, 0x3, 0x1, 0x3c, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x14, 0xd7, 0x1, 0x8, [{@empty, 0x100}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x9}]}, @rr={0x7, 0x7, 0x67, [@local]}, @timestamp_addr={0x44, 0xc, 0xab, 0x1, 0x6, [{@remote, 0x10001}]}]}}}}})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0x1}, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20)

3.75872761s ago: executing program 5 (id=3284):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xb4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x4d, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}}, 0x0)

2.971237562s ago: executing program 5 (id=3285):
syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x2, 0xffffffff}]}, {0x0, [0x0]}}, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e2000008000400000600000800"], 0x30}}, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc)

2.822476255s ago: executing program 1 (id=3287):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x2, 0xffffffff}]}, {0x0, [0x0]}}, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e2000008000400000600000800"], 0x30}}, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x6, 0x2, 0x5, 0x2, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0x1, 0x1, 0x7, 0x6, 0x200, 0x80, 0x7, 0x7, 0x7, 0x8, 0x2, 0x2, 0x7, 0xffffffffffffffff, 0x3, 0x900000001, 0x403, 0x1, 0x4, 0x101, 0x3, 0x5, 0x1, 0x0, 0x6, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x3ff, 0x9, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0x0, 0x9, 0x2, 0x3ff, 0x100000000000006, 0x2, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x7, 0x200, 0x8077d, 0xb3, 0x5, 0x539, 0x623b, 0x6, 0x0, 0x7, 0x4, 0x200, 0x7, 0x8, 0x0, 0x5, 0x93, 0x8, 0x401, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x7, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x8, 0x8, 0x1000, 0x0, 0x3, 0x8000000000007, 0xfffffffffffff000, 0x6, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x2, 0x8, 0x5, 0x9, 0x4, 0x0, 0x7f, 0xd1]})

2.5075164s ago: executing program 6 (id=3289):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nolazytime}, {@quota}, {@nodioread_nolock}]}, 0x10, 0x500, &(0x7f0000000c40)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

2.367277152s ago: executing program 5 (id=3290):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$video4linux(&(0x7f00000005c0), 0x525, 0x2000)
read$FUSE(0xffffffffffffffff, &(0x7f0000002040)={0x2020}, 0x2060)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000040), 0x3a76125b5469132, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$alg(r1, &(0x7f0000000240)=""/4096, 0xfffffdef)

1.88457647s ago: executing program 5 (id=3291):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000400)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000440)="89a874825d37ebe927c69f16ea4e4dbfe9df64dfe00528e6bdd09d25145f32f197096e08c741ef2976af1f82848dbd46a0ebde75f51f825d7a1e5f12fa84b63419a59d53f9f3f1d5cb934804026bbb361aefb3f55c570a04a1e345470af41b491ab2e3682d9f87e927914e59abd8b981921a4590e5da0765511141ab55d4516ded262d5b116ff3cc0b73904ae2d46abe014e35459222ec233cd07a6e87d0161d0acd4fafe61e71f9c5937fa706108e0d435ca4edc821af577ce0c7f0af262fce6340a6", 0xc3}, {&(0x7f0000000540)="6a7693b5e8a5eb8392094b5f252940c57141ce3cd4541bf67ca357cbc78d3f41e3283a220f39029d434d1a143f0ad4b9aed55858c81d8a88c8daabad2aa2dd8215d036375bc103758c4c0a4df9ea329b1d139a6d58a771db3a9de186877846ebedb1c8ff68ec13a14284b803b7d7b5eaaf9fe3266e7b41e13aa82d444a9c972c6227e87d17c25f90b148dc7850b762362fd33213122343429e658d2b01087d2a9c99374bfcef91badecdefc21ba6dbf4684445e6c32fd5eefba8806fbcea80cb0a9e3e0924a6dae16dab293a4597465bee558f442b33", 0xd6}, {&(0x7f0000000640)="10fab79b64fc5ffbd21890e4904fa6ef883c3f69ad906a1522f0aee48d1a7916305f8a7844e2805831fc5e6f70d927c6a8b022432ff7cc791036772957e54288cbcc3fe97d38283ca82b5433115c0d00de73f7ee56c891dd92a28f516e18241d5dbc657ad157a0fee78c344ddc4e16e923d3712d9ff3cc3c71dd98d1bbe876434a530edd3feb472fceb8bb9497d7ed456c47a9ff4243a2a1b1c1ce1e48e8c741760d20535eac842f0a62512a953082cf4215d013530ad863523c224337f831533bf151faadef4e1f5699d129fd7190018745f10ae20da6115a69d47111", 0xdd}, {&(0x7f0000000340)="76d75ecbe3e8ca1edff3646948bd93359c935ee5b109032884bc9d1b1e2b90158750c78e3f8a3830bae9d8482d9e2be2f8ffaeacf7bb07649db65dd7ee846af0093a1fa7974d17533db33e079065d4fba94ba51b5d1fe9e5a9423e09c5452a94b3cfdd7d559eea988584c6c20b2c50018a1902857c9f254c7978a6c2bbe2722b0aabc2a7d4743a8ba3252237577ea63261b9605243f307f77ac75324fd027ee44d647a2bd6765d42d027c53e", 0xac}, {&(0x7f0000000980)="808faa79381e045c88fe0b8d10af8d53909c380e363f8326cadbd3d10821e52b155c8b4d2b28185a5987632a6fb41df85d7aef3f72f0d61fa89a8a98e346ac857d5d88ea3b2d480d61bac3f1799bd8ac2ee20ecd6a50cdfa57d959d2c085b3914864798e3580cd976a010561dfaa2af73b62e0defa7cdd6b2a1102", 0x7b}], 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1d37d42f50f578adbb21df5f8194228009efa032aeffe336fbd64e3e9e1fdb9589a966a80a055ce43e89e52897397ad2546b428cb7b5371091c8dad67b8399ded6e100000000cfaf9a6c978b1cafd5937d82e32a5a738ed22a424a692c", @ANYRES32, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x1c0}, 0x5)

1.718580892s ago: executing program 6 (id=3292):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600a400014003", 0x39}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)

1.696185762s ago: executing program 5 (id=3293):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$P9_RATTACH(r0, &(0x7f0000000100)={0x14, 0x69, 0x1, {0x2, 0x1, 0x5}}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0xc07, 0x200400)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f00000000c0)=0xcab)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r3, &(0x7f0000002180)=""/4101, 0x1005, 0x1)

1.582269554s ago: executing program 5 (id=3294):
getpid()
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000003c0)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@grpid}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7d3, &(0x7f0000000c80)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
clock_gettime(0x0, &(0x7f0000000180))

807.129287ms ago: executing program 6 (id=3295):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r1, 0x1)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb000000c})

750.155068ms ago: executing program 1 (id=3296):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@data_err_ignore}]}, 0x3, 0x4c4, &(0x7f0000000780)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189)
truncate(&(0x7f00000001c0)='./file2\x00', 0xaeb3)
write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400)

686.639809ms ago: executing program 3 (id=3297):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@noblock_validity}, {@dioread_nolock}, {@sysvgroups}, {@norecovery}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@orlov}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
unshare(0x28020480)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)

636.98251ms ago: executing program 1 (id=3298):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x80}, 0x6e6bb6}, [@policy_type={0xa}]}, 0x5c}}, 0x0)

530.770321ms ago: executing program 6 (id=3299):
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

497.860852ms ago: executing program 7 (id=3300):
syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x2, 0xffffffff}]}, {0x0, [0x0]}}, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e2000008000400000600000800"], 0x30}}, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc)

430.587683ms ago: executing program 1 (id=3301):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$video4linux(&(0x7f00000005c0), 0x525, 0x2000)
read$FUSE(0xffffffffffffffff, &(0x7f0000002040)={0x2020}, 0x2060)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000040), 0x3a76125b5469132, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$alg(r1, &(0x7f0000000240)=""/4096, 0xfffffdef)

377.537123ms ago: executing program 6 (id=3302):
syz_mount_image$udf(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00b96fa236bfd596c74e808dd7b85a97c6ab3f6173849702311b635ac7a4e02bb352424c"], 0x1, 0x46f, &(0x7f00000009c0)="$eJzs299PW2Ucx/HPc2i7M0a0MIZuWUwTE0cwAgUZbKgJDjHGDeZY8cYsYVCwrlBCwcCyKLf7A3alN14sMV4si//DovEP0LhkXuj0xpvezSs153BOz2npBlra0u39SqCnp9+e85znx3m+T9MKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIb78z1p80jS4FAACop8npS/0DzP8AADxTLrP+BwAAeJYYWfpNRu/PFMwF9/k2+3xmeX0jNT5R+W2HjfvOFjfe+bOTA4OvD50eHvEfn/z+/XZcU9OXxxLncksrq+l8Pj2fSC1n5nLz6T0fodr3l+txKyCxdG19fmEhnxjoHSx5eSP+x6EjXfHR0zOppB+bGp+YmA7FRKL/++w7PC7Dj8nSmzLqs++YSUmWqq+LXfpOrR12L6LHvYjU+IR7IdnM7PKa86LxK8IqrZOYX0d1aIuqWJJTLhPbnzVbVJZekdEPnQUzJanFr4dX3Q+G91SeRog4S1dJ3WqCNjvADsnSFRnd64vrolevbvvHpBuNLhxqLiJLd2R06q2C+cC9Hzjjybltnp9JvLe8kAvFGuONqGafH+rpgN+bbFmadEd8wVxqdGFQd06ylJZRavRTN6+Qm5c+Pzp8oufDcIbxwi7HcWJ7vcG1lzk5GkodTINyCEi2sfRQRo9+tt3n3f4cIG3909iioR6Mpfsyyq0X3KVReF3aElrfFzX73F/b8h+2z+VWNlczix+vVXy91R67ml9bnZ2r/PL22rXkdrjbOrZKUWPpCxl99e7XxfN6a4BIeeztN4Ky2d75i8Vw+81z259n+HPI8YHO8HbFIv+H/Mj2zttS3SUjxHj3/4UrL3pr/1bt6INe3DEZfXTrpBdnxZwgv5PE3f/2Qiab7ndi/5ZRx/d+rPsxk3Nk19EgNunErsro5r3S2CNebGcQO+DE/iSjBz9Wjj0WxA46sRsyyj9I+LGtTuxLXmxXENs7l8vO16yCDzhn/H8no0/6EsZvy9LxH4y22zeC8b5VfqDHjPlqx388tG/L64e/e/01skt/vSmjzT9P+tfj9hX/ttLu/g/6a1ZG394qjfUXih1BbHLPFdsknPaPyKh96G6xbrw68J4GrRZu/xPlvaNG7d8e2hf3zhvbn0uHpPzm9Wuz2Wx6lQ022GCjuNHoOxPqwZn//5LRrz33i/mON/+3bT8L8r9HnwXz/9nyA9Vo/u8I7TvrZSPRiGSvLa1EuyQ7v3n9tczS7GJ6Mb08PDhyZmjwTHIkGvNzu2Cr6qp6KjntPyuj1NQ3xfVZaf5XOf9vLT9Qjdr/aGhfa0m+UvWlw2v/hIw2Ht4trqOflP/766zul7cfi+OzRu3fGdoX987btj+XDgAAAAAAAAAAAAAAAABNLWos/SKji1cjxv9t1F6+/7fjB1M1+v5XV2jffJ1+r1B1pQIAAAAAAAAAADSQJUtfyuiUCuZzZ0ebdCH8iKfavwEAAP//M8EfQQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
open_by_handle_at(r0, &(0x7f0000000780)=ANY=[@ANYBLOB='\f\x00'], 0x8000)

252.724746ms ago: executing program 3 (id=3303):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000400)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000440)="89a874825d37ebe927c69f16ea4e4dbfe9df64dfe00528e6bdd09d25145f32f197096e08c741ef2976af1f82848dbd46a0ebde75f51f825d7a1e5f12fa84b63419a59d53f9f3f1d5cb934804026bbb361aefb3f55c570a04a1e345470af41b491ab2e3682d9f87e927914e59abd8b981921a4590e5da0765511141ab55d4516ded262d5b116ff3cc0b73904ae2d46abe014e35459222ec233cd07a6e87d0161d0acd4fafe61e71f9c5937fa706108e0d435ca4edc821af577ce0c7f0af262fce6340a6", 0xc3}, {&(0x7f0000000540)="6a7693b5e8a5eb8392094b5f252940c57141ce3cd4541bf67ca357cbc78d3f41e3283a220f39029d434d1a143f0ad4b9aed55858c81d8a88c8daabad2aa2dd8215d036375bc103758c4c0a4df9ea329b1d139a6d58a771db3a9de186877846ebedb1c8ff68ec13a14284b803b7d7b5eaaf9fe3266e7b41e13aa82d444a9c972c6227e87d17c25f90b148dc7850b762362fd33213122343429e658d2b01087d2a9c99374bfcef91badecdefc21ba6dbf4684445e6c32fd5eefba8806fbcea80cb0a9e3e0924a6dae16dab293a4597465bee558f442b33", 0xd6}, {&(0x7f0000000640)="10fab79b64fc5ffbd21890e4904fa6ef883c3f69ad906a1522f0aee48d1a7916305f8a7844e2805831fc5e6f70d927c6a8b022432ff7cc791036772957e54288cbcc3fe97d38283ca82b5433115c0d00de73f7ee56c891dd92a28f516e18241d5dbc657ad157a0fee78c344ddc4e16e923d3712d9ff3cc3c71dd98d1bbe876434a530edd3feb472fceb8bb9497d7ed456c47a9ff4243a2a1b1c1ce1e48e8c741760d20535eac842f0a62512a953082cf4215d013530ad863523c224337f831533bf151faadef4e1f5699d129fd7190018745f10ae20da6115a69d47111", 0xdd}, {&(0x7f0000000340)="76d75ecbe3e8ca1edff3646948bd93359c935ee5b109032884bc9d1b1e2b90158750c78e3f8a3830bae9d8482d9e2be2f8ffaeacf7bb07649db65dd7ee846af0093a1fa7974d17533db33e079065d4fba94ba51b5d1fe9e5a9423e09c5452a94b3cfdd7d559eea988584c6c20b2c50018a1902857c9f254c7978a6c2bbe2722b0aabc2a7d4743a8ba3252237577ea63261b9605243f307f77ac75324fd027ee44d647a2bd6765d42d027c53e", 0xac}, {&(0x7f0000000980)="808faa79381e045c88fe0b8d10af8d53909c380e363f8326cadbd3d10821e52b155c8b4d2b28185a5987632a6fb41df85d7aef3f72f0d61fa89a8a98e346ac857d5d88ea3b2d480d61bac3f1799bd8ac2ee20ecd6a50cdfa57d959d2c085b3914864798e3580cd976a010561dfaa2af73b62e0defa7cdd6b2a1102", 0x7b}], 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1d37d42f50f578adbb21df5f8194228009efa032aeffe336fbd64e3e9e1fdb9589a966a80a055ce43e89e52897397ad2546b428cb7b5371091c8dad67b8399ded6e100000000cfaf9a6c978b1cafd5937d82e32a5a738ed22a424a692c", @ANYRES32, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x1c0}, 0x5)

40.663829ms ago: executing program 6 (id=3304):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$P9_RATTACH(r0, &(0x7f0000000100)={0x14, 0x69, 0x1, {0x2, 0x1, 0x5}}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0xc07, 0x200400)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f00000000c0)=0xcab)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r3, &(0x7f0000002180)=""/4101, 0x1005, 0x1)

39.654539ms ago: executing program 1 (id=3305):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600a400014003", 0x39}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)

0s ago: executing program 1 (id=3306):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x2, 0xffffffff}]}, {0x0, [0x0]}}, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e2000008000400000600000800"], 0x30}}, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x6, 0x2, 0x5, 0x2, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0x1, 0x1, 0x7, 0x6, 0x200, 0x80, 0x7, 0x7, 0x7, 0x8, 0x2, 0x2, 0x7, 0xffffffffffffffff, 0x3, 0x900000001, 0x403, 0x1, 0x4, 0x101, 0x3, 0x5, 0x1, 0x0, 0x6, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x3ff, 0x9, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0x0, 0x9, 0x2, 0x3ff, 0x100000000000006, 0x2, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x7, 0x200, 0x8077d, 0xb3, 0x5, 0x539, 0x623b, 0x6, 0x0, 0x7, 0x4, 0x200, 0x7, 0x8, 0x0, 0x5, 0x93, 0x8, 0x401, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x7, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x8, 0x8, 0x1000, 0x0, 0x3, 0x8000000000007, 0xfffffffffffff000, 0x6, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x2, 0x8, 0x5, 0x9, 0x4, 0x0, 0x7f, 0xd1]})

kernel console output (not intermixed with test programs):

c00000b7 syscall=197 compat=0 ip=0xffff9c15ad28 code=0x7ffc0000
[  284.738169][   T27] audit: type=1326 audit(284.580:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c15ad28 code=0x7ffc0000
[  284.849377][   T27] audit: type=1326 audit(284.580:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9c15ad28 code=0x7ffc0000
[  284.961476][   T27] audit: type=1326 audit(284.580:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c15ad28 code=0x7ffc0000
[  285.109832][   T27] audit: type=1326 audit(284.580:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9c159254 code=0x7ffc0000
[  285.219451][   T27] audit: type=1326 audit(284.580:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c15ad28 code=0x7ffc0000
[  285.224756][   T27] audit: type=1326 audit(284.590:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9c159254 code=0x7ffc0000
[  285.230084][   T27] audit: type=1326 audit(284.590:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c15ad28 code=0x7ffc0000
[  285.235262][   T27] audit: type=1326 audit(284.590:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9c15ad28 code=0x7ffc0000
[  285.822702][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'.
[  286.052528][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1768'.
[  286.504685][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.515923][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.145624][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1778'.
[  287.432227][ T9495] netlink: 'syz.0.1784': attribute type 1 has an invalid length.
[  287.574174][ T9500] loop4: detected capacity change from 0 to 256
[  287.796059][ T9500] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  289.764758][ T9522] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1793'.
[  289.842890][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1792'.
[  289.956884][   T27] kauditd_printk_skb: 2 callbacks suppressed
[  289.956955][   T27] audit: type=1326 audit(289.900:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  289.997610][   T27] audit: type=1326 audit(289.900:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=197 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  290.296491][   T27] audit: type=1326 audit(289.900:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  290.488937][   T27] audit: type=1326 audit(289.900:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  290.581768][   T27] audit: type=1326 audit(289.900:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  290.592590][   T27] audit: type=1326 audit(289.910:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  290.729610][ T9548] netlink: set zone limit has 4 unknown bytes
[  291.042351][ T9561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.044766][ T9561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.381614][ T9579] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1813'.
[  291.404061][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1810'.
[  291.785909][ T9596] Bluetooth: MGMT ver 1.22
[  291.936904][  T112] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  292.116830][  T112] usb 1-1: Using ep0 maxpacket: 32
[  292.119991][  T112] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  292.122465][  T112] usb 1-1: config 0 has no interface number 0
[  292.124170][  T112] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  292.130015][  T112] usb 1-1: config 0 interface 85 has no altsetting 0
[  292.135997][  T112] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  292.140729][  T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.145135][  T112] usb 1-1: Product: syz
[  292.148587][  T112] usb 1-1: Manufacturer: syz
[  292.151074][  T112] usb 1-1: SerialNumber: syz
[  292.164112][  T112] usb 1-1: config 0 descriptor??
[  292.222315][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1826'.
[  292.557340][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1832'.
[  292.560944][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1832'.
[  292.581575][  T112] appletouch 1-1:0.85: Geyser mode initialized.
[  292.590754][  T112] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input5
[  292.801415][   T22] usb 1-1: USB disconnect, device number 20
[  292.877574][   T22] appletouch 1-1:0.85: input: appletouch disconnected
[  294.030167][ T9684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1858'.
[  294.916774][ T4309] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  294.919440][ T4309] Bluetooth: hci4: Injecting HCI hardware error event
[  294.935316][ T4309] Bluetooth: hci4: hardware error 0x00
[  295.456742][ T4298] Bluetooth: hci2: command 0x2016 tx timeout
[  295.464927][ T9698] xt_hashlimit: size too large, truncated to 1048576
[  295.499932][   T27] audit: type=1326 audit(295.480:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  295.516829][   T27] audit: type=1326 audit(295.490:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  295.544829][   T27] audit: type=1326 audit(295.500:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  295.550937][   T27] audit: type=1326 audit(295.500:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  295.556594][   T27] audit: type=1326 audit(295.500:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  295.562457][   T27] audit: type=1326 audit(295.500:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  295.568063][   T27] audit: type=1326 audit(295.500:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  295.573500][   T27] audit: type=1326 audit(295.500:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  295.707837][   T27] audit: type=1326 audit(295.690:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  295.713530][   T27] audit: type=1326 audit(295.690:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d5ad28 code=0x7ffc0000
[  295.860137][ T4346] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  296.036821][ T4346] usb 1-1: Using ep0 maxpacket: 16
[  296.039690][ T4346] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.042399][ T4346] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  296.049126][ T4346] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  296.058116][ T4346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.078489][ T4346] usb 1-1: config 0 descriptor??
[  296.095291][ T4346] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  297.696824][ T4309] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  298.584185][  T112] usb 1-1: USB disconnect, device number 21
[  300.333679][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'.
[  306.253869][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'.
[  306.557626][  T112] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  306.770451][  T112] usb 1-1: Using ep0 maxpacket: 8
[  306.858247][  T112] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  306.929424][  T112] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  307.023203][  T112] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  307.106306][  T112] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  307.266693][  T112] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  307.268933][  T112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.478770][  T112] usb 1-1: GET_CAPABILITIES returned 0
[  307.480144][  T112] usbtmc 1-1:16.0: can't read capabilities
[  307.610872][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'.
[  307.695816][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.706950][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.709247][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.711425][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.713656][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.715922][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.719741][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.722060][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.724241][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.726493][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.728742][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.731035][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.746941][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.749318][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.751575][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.753922][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  307.767715][  T112] usb 1-1: USB disconnect, device number 22
[  309.944748][ T9888] device veth0_vlan left promiscuous mode
[  309.947208][ T9888] device veth0_vlan entered promiscuous mode
[  309.970093][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  309.973855][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  309.980455][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  310.270555][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  310.272036][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  311.804934][ T4298] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  311.808534][ T4298] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  311.811188][ T4298] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  311.814014][ T4298] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  311.816506][ T4298] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  311.820369][ T4298] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  311.964642][   T14] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  312.157096][   T14] usb 1-1: Using ep0 maxpacket: 8
[  312.171595][   T14] usb 1-1: config 0 has an invalid interface number: 172 but max is 2
[  312.176114][   T14] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  312.206477][   T14] usb 1-1: config 0 has no interface number 1
[  312.299573][   T14] usb 1-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83
[  312.408067][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=22
[  312.487655][   T14] usb 1-1: Product: syz
[  312.535593][   T14] usb 1-1: Manufacturer: syz
[  312.538500][   T14] usb 1-1: SerialNumber: syz
[  312.577263][   T14] usb 1-1: config 0 descriptor??
[  312.591011][   T14] usb 1-1: unknown number of interfaces: 2
[  313.508564][ T4437] usb 1-1: USB disconnect, device number 23
[  313.669932][ T9930] device veth0_vlan left promiscuous mode
[  313.671791][ T9930] device veth0_vlan entered promiscuous mode
[  313.784557][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  313.787962][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  313.790661][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  313.856782][ T4298] Bluetooth: hci5: command 0x0409 tx timeout
[  314.905129][ T9913] chnl_net:caif_netlink_parms(): no params data found
[  315.936803][ T4298] Bluetooth: hci5: command 0x041b tx timeout
[  316.459099][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.460714][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.463131][ T9913] device bridge_slave_0 entered promiscuous mode
[  316.466371][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.477018][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.479556][ T9913] device bridge_slave_1 entered promiscuous mode
[  316.584082][ T9913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  316.608429][ T9913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.402258][ T9913] team0: Port device team_slave_0 added
[  317.405293][ T9913] team0: Port device team_slave_1 added
[  317.416741][   T14] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  317.510614][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.516652][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.536933][ T9913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.553506][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.555163][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.720408][ T9913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.774366][   T14] usb 1-1: Using ep0 maxpacket: 16
[  318.016831][ T4309] Bluetooth: hci5: command 0x040f tx timeout
[  318.331539][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.334081][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.336363][   T14] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  318.349111][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.362475][   T14] usb 1-1: config 0 descriptor??
[  318.534169][ T9993] device veth0_vlan left promiscuous mode
[  318.538176][ T9993] device veth0_vlan entered promiscuous mode
[  319.290426][ T9913] device hsr_slave_0 entered promiscuous mode
[  319.327069][ T9913] device hsr_slave_1 entered promiscuous mode
[  319.336222][   T14] sony 0003:054C:05C4.0004: hidraw0: USB HID v80.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0
[  319.339298][   T14] sony 0003:054C:05C4.0004: failed to claim input
[  319.356818][ T9913] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  319.358856][ T9913] Cannot create hsr debugfs directory
[  319.670953][ T9913] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  319.725323][ T9913] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  319.762945][ T9913] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  319.802336][ T9913] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  320.001223][ T9913] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.016310][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  320.020076][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  320.038908][ T9913] 8021q: adding VLAN 0 to HW filter on device team0
[  320.063115][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  320.065670][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  320.068191][  T131] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.070011][  T131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.076344][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  320.092196][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  320.096803][ T4298] Bluetooth: hci5: command 0x0419 tx timeout
[  320.098660][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  320.108963][  T131] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.110775][  T131] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.183177][ T9913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  320.185664][ T9913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  320.213289][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  320.216016][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  320.219198][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  320.235858][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  320.243823][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  320.267031][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  320.276897][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  320.287481][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  320.290272][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  320.295918][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  320.307198][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  320.316059][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  321.294380][ T4286] usb 1-1: USB disconnect, device number 24
[  322.335252][ T9913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.361839][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  322.364708][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  323.304265][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'.
[  323.960652][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1984'.
[  323.972940][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  323.975684][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  323.998686][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  324.001246][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  324.004073][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  324.041919][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  324.048816][ T9913] device veth0_vlan entered promiscuous mode
[  324.085944][ T9913] device veth1_vlan entered promiscuous mode
[  324.149098][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  324.151500][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  324.153936][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  324.164218][  T131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  324.171561][ T9913] device veth0_macvtap entered promiscuous mode
[  324.254394][ T9913] device veth1_macvtap entered promiscuous mode
[  325.184895][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.191003][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.196373][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.230152][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.247563][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.256935][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.259561][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.273857][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.276384][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.283218][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.295146][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.305279][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.315418][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.340854][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.394052][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  325.397283][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  325.400524][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  325.406986][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  325.409627][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  325.412247][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  325.419183][T10082] bond0: option resend_igmp: invalid value (7540)
[  325.420803][T10082] bond0: option resend_igmp: allowed values 0 - 255
[  325.424459][ T9913] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.432768][ T9913] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.546604][ T9913] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.580532][ T9913] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.448132][ T1637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.450642][ T1637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.224014][   T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.226200][   T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.236585][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  327.265088][   T90] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  327.464760][T10114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.473756][T10114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.486893][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1995'.
[  328.026740][   T22] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  328.264271][   T22] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  328.280091][   T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  328.285810][   T22] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  328.330072][   T22] usb 1-1: config 0 interface 0 has no altsetting 0
[  328.393275][   T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  328.450177][   T22] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  328.522854][   T22] usb 1-1: config 0 interface 0 has no altsetting 0
[  328.584716][   T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  328.641215][   T22] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  328.760623][   T22] usb 1-1: config 0 interface 0 has no altsetting 0
[  328.771685][   T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  328.773935][   T22] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  328.776694][   T22] usb 1-1: config 0 interface 0 has no altsetting 0
[  328.784430][   T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  328.794185][   T22] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  328.802855][   T22] usb 1-1: config 0 interface 0 has no altsetting 0
[  328.810706][   T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  328.815049][   T22] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  328.825492][   T22] usb 1-1: config 0 interface 0 has no altsetting 0
[  328.967852][   T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  328.970055][   T22] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  328.972586][   T22] usb 1-1: config 0 interface 0 has no altsetting 0
[  328.987099][   T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  328.989372][   T22] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  328.992081][   T22] usb 1-1: config 0 interface 0 has no altsetting 0
[  328.998032][   T22] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  329.000303][   T22] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  329.002424][   T22] usb 1-1: Product: syz
[  329.003425][   T22] usb 1-1: Manufacturer: syz
[  329.004482][   T22] usb 1-1: SerialNumber: syz
[  329.020798][   T22] usb 1-1: config 0 descriptor??
[  329.431548][   T22] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  329.656982][   T22] usb 1-1: USB disconnect, device number 25
[  329.724319][   T22] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  329.860353][ T4686] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.969365][ T4686] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.007046][T10164] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2011'.
[  330.009375][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'.
[  330.036418][T10169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.047353][T10169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.118563][ T4686] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.228633][ T4686] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.375062][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2020'.
[  331.849943][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2026'.
[  334.423994][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2041'.
[  336.107341][ T4686] device hsr_slave_0 left promiscuous mode
[  336.159994][ T4686] device hsr_slave_1 left promiscuous mode
[  336.366817][ T4686] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.369506][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.371685][ T4686] batman_adv: batadv0: Removing interface: batadv_slave_1
[  337.077911][ T4686] device bridge_slave_1 left promiscuous mode
[  337.079604][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.181899][ T4686] device bridge_slave_0 left promiscuous mode
[  337.183635][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.212050][T10357] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2055'.
[  337.436901][ T4686] device veth1_macvtap left promiscuous mode
[  337.438460][ T4686] device veth0_macvtap left promiscuous mode
[  337.439934][ T4686] device veth1_vlan left promiscuous mode
[  337.441421][ T4686] device veth0_vlan left promiscuous mode
[  341.071575][ T4686] team0 (unregistering): Port device team_slave_1 removed
[  341.269132][ T4686] team0 (unregistering): Port device team_slave_0 removed
[  341.458524][ T4686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  341.657716][ T4686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  343.188877][ T4686] bond0 (unregistering): (slave team0): Releasing backup interface
[  343.922117][ T4686] bond0 (unregistering): Released all slaves
[  344.176781][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2057'.
[  344.450301][T10411] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  344.546677][ T4347] usb 1-1: new low-speed USB device number 26 using dummy_hcd
[  344.926674][ T4347] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  344.929181][ T4347] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  344.931534][ T4347] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  344.974282][ T4347] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  345.392135][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  345.531048][ T4347] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  345.539273][ T4347] usb 1-1: string descriptor 0 read error: -22
[  345.547280][ T4347] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  345.549860][ T4347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.558840][ T4347] usb 1-1: config 0 descriptor??
[  345.592222][ T4347] hub 1-1:0.0: bad descriptor, ignoring hub
[  345.593770][ T4347] hub: probe of 1-1:0.0 failed with error -5
[  347.727280][ T4346] usb 1-1: USB disconnect, device number 26
[  349.763977][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2097'.
[  349.900818][   T90] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.907204][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2101'.
[  350.039612][T10515] device syzkaller0 entered promiscuous mode
[  351.241009][T10514] device syzkaller0 left promiscuous mode
[  352.630275][T10559] sch_tbf: burst 7710 is lower than device lo mtu (65550) !
[  354.262547][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2114'.
[  356.548408][T10599] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  356.826944][T10608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  361.606339][ T4346] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  362.398219][ T4346] usb 1-1: config 150 has an invalid interface number: 204 but max is 1
[  362.400309][ T4346] usb 1-1: config 150 has no interface number 0
[  362.401834][ T4346] usb 1-1: config 150 interface 204 has no altsetting 0
[  362.403608][ T4346] usb 1-1: config 150 interface 1 has no altsetting 0
[  362.427088][ T4346] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  362.429536][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.431681][ T4346] usb 1-1: Product: syz
[  362.432771][ T4346] usb 1-1: Manufacturer: syz
[  362.434018][ T4346] usb 1-1: SerialNumber: syz
[  362.808151][ T4346] xr_serial 1-1:150.204: xr_serial converter detected
[  363.455445][ T4346] xr_serial ttyUSB0: Failed to set reg 0x0d: -71
[  363.457641][ T4346] xr_serial: probe of ttyUSB0 failed with error -71
[  363.605285][ T4346] usb 1-1: USB disconnect, device number 27
[  363.921693][ T4346] xr_serial 1-1:150.204: device disconnected
[  369.327130][T10841] dccp_close: ABORT with 32 bytes unread
[  371.652196][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.654861][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.702037][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  371.703780][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  373.185907][T10932] loop6: detected capacity change from 0 to 256
[  373.311731][T10932] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  375.543383][T11017] loop6: detected capacity change from 0 to 256
[  375.551044][T11017] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  376.178129][T11046] Malformed UNC in devname
[  376.178129][T11046] 
[  376.180281][T11046] CIFS: VFS: Malformed UNC in devname
[  378.189765][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2265'.
[  380.256173][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2280'.
[  381.745806][T11170] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  381.874574][T11181] 9pnet_fd: Insufficient options for proto=fd
[  382.033962][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2298'.
[  384.013899][T11257] sch_tbf: burst 7710 is lower than device lo mtu (65550) !
[  388.107703][T11315] sch_tbf: burst 7710 is lower than device lo mtu (65550) !
[  388.123579][  T112] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  388.927009][  T112] usb 1-1: Using ep0 maxpacket: 8
[  389.529872][  T112] usb 1-1: unable to get BOS descriptor or descriptor too short
[  389.543737][  T112] usb 1-1: config 1 interface 1 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[  389.548013][  T112] usb 1-1: config 1 interface 1 has no altsetting 0
[  389.556217][  T112] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  389.570146][  T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.575592][  T112] usb 1-1: Product: syz
[  389.580335][  T112] usb 1-1: Manufacturer: syz
[  389.581663][  T112] usb 1-1: SerialNumber: syz
[  389.942132][  T112] usb 1-1: found format II with max.bitrate = 8, frame size=1
[  389.944122][  T112] usb 1-1: found format II with max.bitrate = 8, frame size=1
[  389.971934][  T112] usb 1-1: failed to enable PITCH for EP 0x82
[  390.727772][  T112] usb 1-1: USB disconnect, device number 28
[  392.095186][T11378] sch_tbf: burst 7710 is lower than device lo mtu (65550) !
[  392.157548][T11370] udevd[11370]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  393.791988][T11431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2361'.
[  393.808209][T11431] device bond1 entered promiscuous mode
[  393.809857][T11431] 8021q: adding VLAN 0 to HW filter on device bond1
[  393.827808][T11429] loop6: detected capacity change from 0 to 256
[  393.844503][T11429] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  393.845480][T11431] 8021q: adding VLAN 0 to HW filter on device bond1
[  393.883063][T11431] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[  393.901264][T11431] bond1: (slave vxcan1): Error -95 calling set_mac_address
[  393.954495][T11434] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2362'.
[  394.291093][T11443] sch_tbf: burst 7710 is lower than device lo mtu (11337746) !
[  395.164862][T11474] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2375'.
[  396.401712][T11488] sch_tbf: burst 7710 is lower than device lo mtu (65550) !
[  398.130922][T11550] sch_tbf: burst 7710 is lower than device lo mtu (65550) !
[  401.166810][   T22] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  401.848686][   T22] usb 1-1: unable to get BOS descriptor or descriptor too short
[  401.851099][   T22] usb 1-1: not running at top speed; connect to a high speed hub
[  401.853993][   T22] usb 1-1: config 2 has an invalid interface number: 121 but max is 0
[  401.870535][   T22] usb 1-1: config 2 has no interface number 0
[  401.872867][   T22] usb 1-1: config 2 interface 121 altsetting 2 endpoint 0xB has invalid maxpacket 1007, setting to 64
[  401.875815][   T22] usb 1-1: config 2 interface 121 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64
[  401.900900][   T22] usb 1-1: config 2 interface 121 altsetting 2 endpoint 0xC has invalid maxpacket 512, setting to 64
[  401.939154][   T22] usb 1-1: config 2 interface 121 has no altsetting 0
[  401.982930][   T22] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=7c.93
[  402.009018][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.033035][   T22] usb 1-1: Product: syz
[  402.047331][   T22] usb 1-1: Manufacturer: syz
[  402.061891][   T22] usb 1-1: SerialNumber: syz
[  402.427254][   T22] cdc_acm 1-1:2.121: invalid descriptor buffer length
[  402.469830][   T22] usb 1-1: USB disconnect, device number 29
[  403.505624][T11732] device veth0_macvtap left promiscuous mode
[  403.546818][T11732] device macvtap0 entered promiscuous mode
[  403.564221][T11732] device veth0_macvtap entered promiscuous mode
[  403.608732][T11732] team0: Device macvtap0 failed to register rx_handler
[  403.636611][T11732] device veth0_macvtap left promiscuous mode
[  404.135583][T11763] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2450'.
[  404.146754][T11763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2450'.
[  404.149040][T11763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2450'.
[  406.008117][T11832] loop6: detected capacity change from 0 to 256
[  406.058734][T11832] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  411.665976][T11914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2499'.
[  411.679154][T11915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.689348][T11915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  412.456850][ T4441] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  412.638143][ T4441] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  412.640364][ T4441] usb 1-1: config 0 has no interface number 0
[  412.642512][ T4441] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  412.645029][ T4441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.653219][ T4441] usb 1-1: config 0 descriptor??
[  412.660522][ T4441] usb 1-1: selecting invalid altsetting 1
[  412.662701][ T4441] dvb_ttusb_budget: ttusb_init_controller: error
[  412.675889][ T4441] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  412.785462][ T4441] DVB: Unable to find symbol cx22700_attach()
[  412.856709][ T4441] DVB: Unable to find symbol tda10046_attach()
[  412.858425][ T4441] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  414.523355][T11955] loop6: detected capacity change from 0 to 256
[  414.595287][T11955] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  415.575970][T10739] usb 1-1: USB disconnect, device number 30
[  416.270260][T11972] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2522'.
[  417.687425][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2527'.
[  417.690166][T11998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.701929][T11998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  418.645470][T12009] mmap: syz.1.2532 (12009) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  419.067889][T12022] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2539'.
[  420.881296][T12046] xt_ecn: cannot match TCP bits for non-tcp packets
[  421.142338][T12061] could not allocate digest TFM handle sha224-ssse3
[  421.224040][T12066] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  421.950380][T12072] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2560'.
[  422.105494][T12086] netlink: 'syz.3.2565': attribute type 1 has an invalid length.
[  422.107779][T12086] netlink: 'syz.3.2565': attribute type 4 has an invalid length.
[  422.109706][T12086] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2565'.
[  423.804374][T12109] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  424.792654][T12125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2571'.
[  425.885146][T12142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  425.906533][T12143] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2585'.
[  426.749790][T12178] netlink: set zone limit has 4 unknown bytes
[  427.335573][T12204] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2608'.
[  427.984110][T12224] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2621'.
[  428.030330][T12227] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2623'.
[  428.091525][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2626'.
[  429.036472][T12247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  429.057638][T12247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.214038][T12262] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2638'.
[  429.326915][T12264] infiniband syz!: set active
[  429.328497][T12264] infiniband syz!: added team_slave_0
[  429.393765][T12264] RDS/IB: syz!: added
[  429.406013][T12264] smc: adding ib device syz! with port count 1
[  429.420729][T12264] smc:    ib device syz! port 1 has pnetid 
[  429.606431][T12277] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2634'.
[  431.012144][T12300] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2652'.
[  431.175888][T12311] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  431.177946][T12311] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  431.814588][T12350] xt_hashlimit: max too large, truncated to 1048576
[  433.139600][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  433.142901][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  437.483354][T12425] could not allocate digest TFM handle sha224-ssse3
[  437.518307][T12434] netlink: 'syz.3.2708': attribute type 1 has an invalid length.
[  437.520333][T12434] netlink: 'syz.3.2708': attribute type 4 has an invalid length.
[  437.522280][T12434] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2708'.
[  437.573387][T12438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2710'.
[  438.113145][T12463] netlink: 'syz.3.2721': attribute type 1 has an invalid length.
[  438.115262][T12463] netlink: 'syz.3.2721': attribute type 4 has an invalid length.
[  438.122902][T12463] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2721'.
[  439.332733][T12488] netlink: 'syz.5.2732': attribute type 58 has an invalid length.
[  439.336095][T12488] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2732'.
[  439.458220][T12496] netlink: 'syz.3.2735': attribute type 1 has an invalid length.
[  439.460262][T12496] netlink: 'syz.3.2735': attribute type 4 has an invalid length.
[  439.462103][T12496] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2735'.
[  442.164170][T12533] netlink: 'syz.6.2748': attribute type 1 has an invalid length.
[  442.166104][T12533] netlink: 'syz.6.2748': attribute type 4 has an invalid length.
[  442.176090][T12533] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2748'.
[  442.329675][ T4286] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  442.336377][ T4298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  442.340262][ T4298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  442.343080][ T4298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  442.347348][ T4298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  442.350264][ T4306] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  442.352304][ T4306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  442.375512][ T4309] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  442.400658][ T4309] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  442.406568][ T4309] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  442.416791][ T4309] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  442.424899][ T4309] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  443.018630][ T4309] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  443.067767][ T4286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.070579][ T4286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.073150][ T4286] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  443.076508][ T4286] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  443.079109][ T4286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.082800][ T4286] usb 1-1: config 0 descriptor??
[  443.500533][ T4286] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  443.559783][ T4286] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  443.773983][ T4770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.929465][   T14] usb 1-1: USB disconnect, device number 31
[  443.933075][T12551] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -19
[  444.107698][ T4770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.693686][T12560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.696192][T12560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.908470][ T4770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.930074][T12569] netlink: 'syz.1.2759': attribute type 1 has an invalid length.
[  444.932905][T12569] netlink: 'syz.1.2759': attribute type 4 has an invalid length.
[  444.935364][T12569] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2759'.
[  445.193314][ T4309] Bluetooth: hci0: command 0x0409 tx timeout
[  445.229012][ T4770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.070262][T12581] rdma_rxe: rxe_register_device failed with error -23
[  446.072548][T12581] rdma_rxe: failed to add team_slave_0
[  446.112794][T12534] chnl_net:caif_netlink_parms(): no params data found
[  446.264932][T12534] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.271376][T12534] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.273992][T12534] device bridge_slave_0 entered promiscuous mode
[  446.279758][T12534] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.281881][T12534] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.284445][T12534] device bridge_slave_1 entered promiscuous mode
[  446.313443][T12534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.320512][T12534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.364548][T12534] team0: Port device team_slave_0 added
[  446.371777][T12534] team0: Port device team_slave_1 added
[  446.391520][T12534] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.393372][T12534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.403808][T12534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  446.411583][T12534] batman_adv: batadv0: Adding interface: batadv_slave_1
[  446.413439][T12534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.423668][T12534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.601173][T12534] device hsr_slave_0 entered promiscuous mode
[  446.627062][T12534] device hsr_slave_1 entered promiscuous mode
[  446.656707][T12534] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  446.659871][T12534] Cannot create hsr debugfs directory
[  447.236848][ T4309] Bluetooth: hci0: command 0x041b tx timeout
[  447.808769][T12614] netlink: 'syz.6.2771': attribute type 1 has an invalid length.
[  447.810781][T12614] netlink: 'syz.6.2771': attribute type 4 has an invalid length.
[  447.812613][T12614] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2771'.
[  449.306898][ T4298] Bluetooth: hci0: command 0x040f tx timeout
[  450.320613][T12667] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2784'.
[  451.218314][T12702] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2794'.
[  451.247017][T12534] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  451.406865][ T4298] Bluetooth: hci0: command 0x0419 tx timeout
[  451.714788][T12534] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  452.018535][T12534] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  452.422119][T12534] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  452.668202][T12534] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.694720][T12534] 8021q: adding VLAN 0 to HW filter on device team0
[  452.702288][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  452.704850][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  452.707467][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  452.711069][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  452.714015][ T4657] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.715941][ T4657] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.731185][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  452.752647][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  452.763034][ T4657] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.764924][ T4657] bridge0: port 2(bridge_slave_1) entered forwarding state
[  452.929257][ T4770] device hsr_slave_0 left promiscuous mode
[  454.043312][ T4770] device hsr_slave_1 left promiscuous mode
[  454.267003][ T4770] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  454.269243][ T4770] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.282449][ T4770] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  454.284523][ T4770] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.305176][ T4770] device bridge_slave_1 left promiscuous mode
[  454.312634][ T4770] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.402004][ T4770] device bridge_slave_0 left promiscuous mode
[  454.403793][ T4770] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.603491][T12779] Bluetooth: MGMT ver 1.22
[  454.606223][T12779] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  454.827003][ T4770] device veth1_macvtap left promiscuous mode
[  454.828653][ T4770] device veth0_macvtap left promiscuous mode
[  454.830209][ T4770] device veth1_vlan left promiscuous mode
[  457.908606][ T4770] bond1 (unregistering): Released all slaves
[  458.341495][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2826'.
[  458.344844][T12827] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  459.891191][ T4770] team0 (unregistering): Port device team_slave_1 removed
[  460.078775][ T4770] team0 (unregistering): Port device team_slave_0 removed
[  460.273183][ T4770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.527577][ T4770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  462.854546][ T4770] bond0 (unregistering): Released all slaves
[  463.123623][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  463.126075][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  463.129719][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  463.134815][T12785] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2818'.
[  463.138273][T12804] device macsec0 entered promiscuous mode
[  463.307374][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  463.310310][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  463.337208][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  463.348883][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  463.355832][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  463.378015][T12534] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  463.380750][T12534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  463.386549][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  463.396217][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  463.400383][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  463.403205][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  463.405877][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  463.633512][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  463.635356][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  464.938280][T12534] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.983320][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  464.985879][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  465.016128][T12534] device veth0_vlan entered promiscuous mode
[  465.023202][T12534] device veth1_vlan entered promiscuous mode
[  465.045426][T12534] device veth0_macvtap entered promiscuous mode
[  465.065493][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  465.074204][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  465.078036][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  465.094532][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  465.097566][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  465.100278][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  465.103215][T12867] netlink: 'syz.0.2837': attribute type 1 has an invalid length.
[  465.105267][T12867] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2837'.
[  465.130299][T12534] device veth1_macvtap entered promiscuous mode
[  465.132848][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  465.135205][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  465.154120][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  465.157885][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  465.174323][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.177114][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.195591][T12534] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.197628][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  465.200273][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  465.206390][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.234015][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.236522][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.242073][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.244926][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.251907][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.254990][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.259964][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.263547][T12534] batman_adv: batadv0: Interface activated: batadv_slave_1
[  465.272448][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  465.275195][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  465.295724][T12534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.299147][T12534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.301465][T12534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.303688][T12534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.485696][ T4657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.510421][ T4657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.516071][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  465.573374][ T4657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.576328][ T4657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.593831][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  465.695079][T12888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2843'.
[  466.585157][T12894] input: syz0 as /devices/virtual/input/input6
[  466.664203][ T4298] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  466.688619][ T4298] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  466.692731][ T4298] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  466.695922][ T4298] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  466.714535][ T4298] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  466.721523][ T4298] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  468.007914][T12919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  468.010251][T12919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.783720][ T4298] Bluetooth: hci3: command 0x0409 tx timeout
[  469.207240][ T1637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.020826][ T1637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.060409][T12898] chnl_net:caif_netlink_parms(): no params data found
[  470.162891][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2874'.
[  470.191099][ T1637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.268662][T12898] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.273819][T12898] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.276229][T12898] device bridge_slave_0 entered promiscuous mode
[  470.379871][T12976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.383548][T12976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.427684][ T1637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.662132][T12898] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.664739][T12898] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.856858][ T4298] Bluetooth: hci3: command 0x041b tx timeout
[  471.122621][T12898] device bridge_slave_1 entered promiscuous mode
[  471.288905][T12898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.298639][T12898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  471.316483][T12898] team0: Port device team_slave_0 added
[  471.319928][T12898] team0: Port device team_slave_1 added
[  471.334786][T12898] batman_adv: batadv0: Adding interface: batadv_slave_0
[  471.336904][T12898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.136963][T12898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  472.225411][T12988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.237183][T12988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.301742][T12898] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.303650][T12898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.316008][T12898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.478112][T12898] device hsr_slave_0 entered promiscuous mode
[  472.497452][T12898] device hsr_slave_1 entered promiscuous mode
[  472.546887][T12898] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  472.548842][T12898] Cannot create hsr debugfs directory
[  472.897022][ T4309] Bluetooth: hci3: command 0x040f tx timeout
[  475.567198][ T4309] Bluetooth: hci3: command 0x0419 tx timeout
[  476.363949][T13081] netlink: 'syz.6.2906': attribute type 4 has an invalid length.
[  476.366185][T13081] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2906'.
[  476.478134][T12898] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  476.519221][T12898] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  476.656828][T12898] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  476.688539][T12898] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  477.183336][T12898] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.429089][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  477.431813][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  477.436081][T12898] 8021q: adding VLAN 0 to HW filter on device team0
[  477.448956][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  477.455598][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  477.473115][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.474988][ T5486] bridge0: port 1(bridge_slave_0) entered forwarding state
[  477.478745][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  477.578673][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  477.581362][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  477.583783][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.585608][ T5486] bridge0: port 2(bridge_slave_1) entered forwarding state
[  477.632130][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  477.635023][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  477.648154][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  477.651145][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  477.654763][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  477.700190][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  477.703300][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  477.705976][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  477.708928][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  477.727323][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  477.729942][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  477.738163][T12898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  477.777326][ T1637] device hsr_slave_0 left promiscuous mode
[  477.796828][ T4438] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  477.799597][ T1637] device hsr_slave_1 left promiscuous mode
[  477.819940][T13110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.822291][T13110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.866981][ T1637] batman_adv: batadv0: Removing interface: batadv_slave_0
[  477.871380][ T1637] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  477.873307][ T1637] batman_adv: batadv0: Removing interface: batadv_slave_1
[  477.877869][ T1637] device bridge_slave_1 left promiscuous mode
[  477.879621][ T1637] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.944249][ T1637] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.976903][ T4438] usb 1-1: Using ep0 maxpacket: 16
[  478.002511][ T4438] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 193, changing to 11
[  478.005528][ T4438] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1281, setting to 1024
[  478.012248][ T4438] usb 1-1: config 0 interface 0 has no altsetting 0
[  478.013940][ T4438] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  478.016254][ T4438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.046775][ T4438] usb 1-1: config 0 descriptor??
[  478.067386][T13105] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  478.186945][ T1637] device veth1_macvtap left promiscuous mode
[  478.188714][ T1637] device veth1_vlan left promiscuous mode
[  478.436289][T13058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  478.497582][ T4438] hid (null): unknown global tag 0xc
[  478.720642][ T4438] usb 1-1: USB disconnect, device number 32
[  479.567658][T13138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.570137][T13138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.167665][ T1637] bond1 (unregistering): Released all slaves
[  483.194223][T13173] loop3: detected capacity change from 0 to 1024
[  483.288862][T13173] hfsplus: failed to load root directory
[  483.846596][T13175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.849044][T13175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.861533][T13175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.863794][T13175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.870076][T13175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.872473][T13175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.878080][T13175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.880358][T13175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.287525][T13175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.289747][T13175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.580816][ T1637] team0 (unregistering): Port device team_slave_1 removed
[  484.769183][ T1637] team0 (unregistering): Port device team_slave_0 removed
[  484.998601][ T1637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  485.208578][ T1637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  487.724062][ T1637] bond0 (unregistering): Released all slaves
[  488.026769][T13140] netlink: 'syz.5.2917': attribute type 4 has an invalid length.
[  488.028802][T13140] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2917'.
[  488.435590][T12898] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.440274][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  490.442388][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  490.466602][T12898] device veth0_vlan entered promiscuous mode
[  490.480377][   T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  490.483042][   T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  490.485641][   T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  490.510839][   T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  490.519009][T13211] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.556023][T13211] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  490.576499][T12898] device veth1_vlan entered promiscuous mode
[  490.584808][   T90] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  490.588345][   T90] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  490.590718][   T90] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  490.655364][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  490.659551][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  490.672774][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  490.684529][T13225] netlink: 'syz.0.2941': attribute type 4 has an invalid length.
[  490.686434][T13225] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2941'.
[  490.695692][T12898] device veth0_macvtap entered promiscuous mode
[  490.703717][T12898] device veth1_macvtap entered promiscuous mode
[  490.733952][T13211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2936'.
[  490.766437][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.769642][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.782396][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.785066][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.798047][T12898] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.811390][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  490.814050][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  490.817240][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  490.821273][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  490.834624][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  490.837343][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.839701][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  490.842196][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.872427][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  490.875059][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.888188][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  490.905308][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.945850][T12898] batman_adv: batadv0: Interface activated: batadv_slave_1
[  490.956257][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  490.959295][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  490.964931][T12898] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.974325][T12898] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.985675][T12898] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.995866][T12898] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.096523][   T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.103245][   T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.140208][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  491.183806][ T4660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.193445][ T4660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.255827][ T4783] bridge0: port 3(syz_tun) entered disabled state
[  491.318799][ T4783] device syz_tun left promiscuous mode
[  491.320270][ T4783] bridge0: port 3(syz_tun) entered disabled state
[  491.363323][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  491.809958][ T4309] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  491.814562][ T4309] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  491.818004][ T4309] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  491.833602][ T4309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  491.837179][ T4309] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  491.839270][ T4309] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  491.921582][ T5486] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.931958][T13254] netlink: 'syz.1.2952': attribute type 4 has an invalid length.
[  491.933951][T13254] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2952'.
[  492.079669][ T5486] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.228597][ T5486] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.360097][ T5486] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.544231][T13256] chnl_net:caif_netlink_parms(): no params data found
[  493.954251][T13329] loop1: detected capacity change from 0 to 1024
[  494.062972][ T4298] Bluetooth: hci1: command 0x0409 tx timeout
[  495.506117][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  495.512496][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  495.719423][T13329] hfsplus: failed to load root directory
[  495.995509][T13256] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.005571][T13256] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.018987][T13256] device bridge_slave_0 entered promiscuous mode
[  496.035709][T13256] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.039341][T13256] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.041822][T13256] device bridge_slave_1 entered promiscuous mode
[  496.096920][ T4298] Bluetooth: hci1: command 0x041b tx timeout
[  496.960790][T13256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  497.013891][T13256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  497.119720][T13256] team0: Port device team_slave_0 added
[  497.139904][T13256] team0: Port device team_slave_1 added
[  497.167600][T13392] loop3: detected capacity change from 0 to 164
[  497.187140][T13256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.188870][T13256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.198662][T13392] Unable to read rock-ridge attributes
[  497.202543][T13256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.210874][T13256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.215102][T13256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.229096][T13256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.300900][T13392] Unable to read rock-ridge attributes
[  497.328876][T13256] device hsr_slave_0 entered promiscuous mode
[  497.368259][T13256] device hsr_slave_1 entered promiscuous mode
[  498.186944][ T4309] Bluetooth: hci1: command 0x040f tx timeout
[  500.281875][ T4298] Bluetooth: hci1: command 0x0419 tx timeout
[  501.238149][T13256] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  502.034451][T13256] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  502.412030][T13256] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  503.710961][T13256] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  503.969230][T13475] loop6: detected capacity change from 0 to 512
[  503.978275][T13475] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  503.999696][T13475] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.2999: casefold flag without casefold feature
[  504.004247][T13475] EXT4-fs (loop6): Remounting filesystem read-only
[  504.006001][T13475] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2999: couldn't read orphan inode 15 (err -117)
[  504.020525][T13475] EXT4-fs (loop6): Remounting filesystem read-only
[  504.022237][T13475] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  504.733985][T13475] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #2: comm syz.6.2999: invalid size
[  504.765603][T13475] EXT4-fs (loop6): Remounting filesystem read-only
[  504.971086][ T9913] EXT4-fs (loop6): unmounting filesystem.
[  505.850850][T13500] loop1: detected capacity change from 0 to 1024
[  505.854513][T13500] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  505.881319][T13500] EXT4-fs error (device loop1): ext4_get_journal_inode:5723: inode #32: comm syz.1.3004: iget: special inode unallocated
[  505.894997][T13500] EXT4-fs (loop1): no journal found
[  505.896379][T13500] EXT4-fs (loop1): can't get journal size
[  505.913149][T13500] EXT4-fs error (device loop1): __ext4_fill_super:5390: inode #2: comm syz.1.3004: iget: special inode unallocated
[  505.920036][T13500] EXT4-fs (loop1): get root inode failed
[  505.959090][T13500] EXT4-fs (loop1): mount failed
[  506.131392][T13509] binder: 13508:13509 tried to acquire reference to desc 0, got 1 instead
[  506.159462][T13509] binder: 13508:13509 got transaction with invalid parent offset or type
[  506.161683][T13509] binder: 13509:13508 failed to fixup parent
[  506.163282][T13509] binder: 13508:13509 transaction call to 13508:0 failed 12/29201/-22, size 96-24 line 3549
[  506.184229][T13500] loop1: detected capacity change from 0 to 512
[  506.194041][T13500] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  506.198153][ T4438] binder: undelivered TRANSACTION_ERROR: 29201
[  506.204623][T13500] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  506.207105][T13500] System zones: 1-12
[  506.208664][T13500] EXT4-fs (loop1): orphan cleanup on readonly fs
[  506.211324][T13500] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3004: invalid indirect mapped block 12 (level 1)
[  506.263510][T13500] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3004: invalid indirect mapped block 2 (level 2)
[  506.345092][T13500] EXT4-fs (loop1): 1 truncate cleaned up
[  506.356730][T13500] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  506.497711][T12898] EXT4-fs (loop1): unmounting filesystem.
[  506.546918][T13256] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.554192][T13523] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3011'.
[  506.591762][T13256] 8021q: adding VLAN 0 to HW filter on device team0
[  506.605669][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  506.627271][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  506.846195][T13531] loop3: detected capacity change from 0 to 1024
[  506.884625][T13531] EXT4-fs: Ignoring removed nobh option
[  506.931347][T13531] EXT4-fs: Ignoring removed bh option
[  506.954882][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  506.960867][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  506.965572][ T4657] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.967491][ T4657] bridge0: port 1(bridge_slave_0) entered forwarding state
[  506.990912][T13531] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  507.172119][T13531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  507.255861][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  507.268266][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  507.274089][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  507.278794][T13339] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.280753][T13339] bridge0: port 2(bridge_slave_1) entered forwarding state
[  507.292674][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  507.340840][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  507.343647][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  507.378763][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  507.387704][ T5486] device hsr_slave_0 left promiscuous mode
[  507.401324][T12534] EXT4-fs (loop3): unmounting filesystem.
[  507.427272][ T5486] device hsr_slave_1 left promiscuous mode
[  507.507102][ T5486] batman_adv: batadv0: Removing interface: batadv_slave_0
[  507.510312][ T5486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  507.512268][ T5486] batman_adv: batadv0: Removing interface: batadv_slave_1
[  507.517488][ T5486] device bridge_slave_1 left promiscuous mode
[  507.519185][ T5486] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.545837][   T27] audit: type=1326 audit(507.520:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13549 comm="syz.3.3016" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215ad28 code=0x0
[  507.566704][ T5486] device bridge_slave_0 left promiscuous mode
[  507.568276][ T5486] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.747623][ T5486] device veth1_macvtap left promiscuous mode
[  507.749246][ T5486] device veth0_macvtap left promiscuous mode
[  507.750936][ T5486] device veth1_vlan left promiscuous mode
[  507.976286][ T5486] infiniband syz!: set down
[  508.095048][ T5486] bond2 (unregistering): Released all slaves
[  509.075155][T13580] loop6: detected capacity change from 0 to 1024
[  509.090531][T13580] EXT4-fs: Ignoring removed orlov option
[  509.094417][T13580] EXT4-fs: Ignoring removed nomblk_io_submit option
[  509.121716][T13580] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  509.142002][T13580] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  509.924101][ T9913] EXT4-fs (loop6): unmounting filesystem.
[  510.517484][ T5486] bond1 (unregistering): Released all slaves
[  512.272614][ T5486] team0 (unregistering): Port device team_slave_1 removed
[  512.480139][ T5486] team0 (unregistering): Port device team_slave_0 removed
[  512.491686][ T4661] smc: removing ib device syz!
[  512.657570][ T5486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  512.859507][ T5486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  515.242745][ T5486] bond0 (unregistering): Released all slaves
[  515.543420][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  515.546208][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  515.549301][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  515.551837][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  515.554832][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  515.557712][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  515.560234][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  515.630484][T13598] tun0: tun_chr_ioctl cmd 35111
[  515.852619][T13256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  515.891950][T13620] netlink: 'syz.1.3034': attribute type 4 has an invalid length.
[  515.894091][T13620] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3034'.
[  515.963635][T13624] 9pnet_fd: Insufficient options for proto=fd
[  517.462543][T13569] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  517.493648][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  517.495729][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  517.498222][T13635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  517.500573][T13635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  517.508585][T13569] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  517.524448][T13256] 8021q: adding VLAN 0 to HW filter on device batadv0
[  517.722813][T13649] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3041'.
[  519.347941][   T27] audit: type=1326 audit(519.320:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215ad28 code=0x7ffc0000
[  519.353670][   T27] audit: type=1326 audit(519.320:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215ad28 code=0x7ffc0000
[  519.359970][   T27] audit: type=1326 audit(519.320:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8215ad28 code=0x7ffc0000
[  519.365306][   T27] audit: type=1326 audit(519.320:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215ad28 code=0x7ffc0000
[  519.371187][   T27] audit: type=1326 audit(519.320:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215ad28 code=0x7ffc0000
[  519.387949][   T27] audit: type=1326 audit(519.320:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8215ad28 code=0x7ffc0000
[  519.393571][   T27] audit: type=1326 audit(519.360:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215ad28 code=0x7ffc0000
[  519.426700][   T27] audit: type=1326 audit(519.360:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215ad28 code=0x7ffc0000
[  519.432154][   T27] audit: type=1326 audit(519.360:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8215ad28 code=0x7ffc0000
[  519.467111][   T27] audit: type=1326 audit(519.360:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8215ad28 code=0x7ffc0000
[  519.467632][   T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  519.512757][   T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  519.553105][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  519.555743][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  519.577275][T13256] device veth0_vlan entered promiscuous mode
[  519.579807][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  519.592475][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  519.607752][T13256] device veth1_vlan entered promiscuous mode
[  519.681391][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  519.683830][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  519.686225][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  519.702229][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  519.718968][T13256] device veth0_macvtap entered promiscuous mode
[  519.731042][T13256] device veth1_macvtap entered promiscuous mode
[  519.790213][T13697] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3053'.
[  519.882285][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.884808][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.916723][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.282098][T13704] loop3: detected capacity change from 0 to 8192
[  521.398029][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.401835][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.442955][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.447081][T13256] batman_adv: batadv0: Interface activated: batadv_slave_0
[  521.449673][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  521.452271][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  521.454831][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  521.464848][ T4346] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  521.481689][T13709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  521.484663][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  521.491774][ T4346] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  521.492143][T13709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  521.528820][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.531861][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.534414][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.566697][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.569287][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.571779][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.574083][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.593677][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.611768][T13256] batman_adv: batadv0: Interface activated: batadv_slave_1
[  521.617314][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  521.619780][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  521.667588][T13256] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  521.669681][T13256] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  521.671650][T13256] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  521.698836][T13256] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  522.624935][   T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.635754][T13728] loop1: detected capacity change from 0 to 128
[  522.645629][   T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.691350][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  522.712258][   T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.714514][   T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.732813][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  523.278778][T13751] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3066'.
[  523.295862][T13749] loop7: detected capacity change from 0 to 2048
[  523.331593][ T4298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  523.338477][ T4298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  523.341328][ T4298] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  523.350088][ T4298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  523.353515][ T4298] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  523.355530][ T4298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  523.454545][T13749] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  523.617704][T13256] EXT4-fs (loop7): unmounting filesystem.
[  524.146432][T13775] loop7: detected capacity change from 0 to 128
[  524.439836][T13775] EXT4-fs (loop7): Test dummy encryption mode enabled
[  524.465271][T13775] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  524.535980][T13775] EXT4-fs error (device loop7): ext4_validate_block_bitmap:420: comm syz.7.3068: bg 0: bad block bitmap checksum
[  524.652609][T13256] EXT4-fs (loop7): unmounting filesystem.
[  524.686726][ T5486] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.842133][ T5486] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.998497][ T5486] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.128421][ T5486] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.134348][T13753] chnl_net:caif_netlink_parms(): no params data found
[  525.296070][T13753] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.320293][T13753] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.329754][T13753] device bridge_slave_0 entered promiscuous mode
[  525.344533][T13753] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.346238][T13753] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.349687][T13753] device bridge_slave_1 entered promiscuous mode
[  525.377585][T13753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  525.382000][T13753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  525.453301][T13753] team0: Port device team_slave_0 added
[  525.456929][ T4309] Bluetooth: hci2: command 0x0409 tx timeout
[  525.467304][T13753] team0: Port device team_slave_1 added
[  525.526304][T13753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  525.528247][T13753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.534788][T13753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  525.580660][T13753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  525.582355][T13753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.620206][T13753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  525.711638][ T5486] tipc: Disabling bearer <udp:s>
[  525.713331][ T5486] tipc: Left network mode
[  525.717478][T13819] loop6: detected capacity change from 0 to 1024
[  525.770633][T13753] device hsr_slave_0 entered promiscuous mode
[  525.827073][T13753] device hsr_slave_1 entered promiscuous mode
[  525.864916][T13753] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  525.867269][T13753] Cannot create hsr debugfs directory
[  525.877263][T13821] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3077'.
[  527.536811][ T4309] Bluetooth: hci2: command 0x041b tx timeout
[  528.542941][T13866] binder: 13866:13862 cannot find target node
[  528.544444][T13866] binder: 13862:13866 transaction call to 0:0 failed 13/29189/-22, size 0-0 line 3054
[  528.550103][T13877] loop6: detected capacity change from 0 to 256
[  528.594463][T13877] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  528.743054][T13879] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3090'.
[  528.831443][ T4494] binder: undelivered TRANSACTION_ERROR: 29189
[  529.401908][ T5486] device hsr_slave_0 left promiscuous mode
[  529.448413][ T5486] device hsr_slave_1 left promiscuous mode
[  529.527365][ T5486] batman_adv: batadv0: Removing interface: batadv_slave_0
[  529.536573][ T5486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  529.540108][ T5486] batman_adv: batadv0: Removing interface: batadv_slave_1
[  529.616765][ T4309] Bluetooth: hci2: command 0x040f tx timeout
[  529.687601][ T5486] device veth1_macvtap left promiscuous mode
[  529.689948][ T5486] device veth0_macvtap left promiscuous mode
[  529.691591][ T5486] device veth1_vlan left promiscuous mode
[  529.820907][T13897] loop3: detected capacity change from 0 to 4096
[  529.903603][T13897] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  530.116492][T12534] EXT4-fs (loop3): unmounting filesystem.
[  530.288498][ T5486] bond2 (unregistering): Released all slaves
[  530.326346][ T5486] bond1 (unregistering): Released all slaves
[  530.758919][T13910] loop3: detected capacity change from 0 to 2048
[  530.812683][T13910] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  530.838878][T13910] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  530.869632][T13910] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  530.884668][T13910] EXT4-fs (loop3): This should not happen!! Data will be lost
[  530.884668][T13910] 
[  530.904269][T13910] EXT4-fs (loop3): Total free blocks count 0
[  530.905976][T13910] EXT4-fs (loop3): Free/Dirty block details
[  530.925412][T13910] EXT4-fs (loop3): free_blocks=2415919104
[  530.928666][T13910] EXT4-fs (loop3): dirty_blocks=64
[  530.930090][T13910] EXT4-fs (loop3): Block reservation details
[  530.931900][T13910] EXT4-fs (loop3): i_reserved_data_blocks=4
[  530.974632][ T4686] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  531.707231][ T4298] Bluetooth: hci2: command 0x0419 tx timeout
[  533.732206][ T5486] team0 (unregistering): Port device team_slave_1 removed
[  533.776708][ T4309] Bluetooth: hci2: command 0x0405 tx timeout
[  533.919183][ T5486] team0 (unregistering): Port device team_slave_0 removed
[  534.097961][ T5486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  534.136935][ T5486] device bond_slave_1 left promiscuous mode
[  534.317559][ T5486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  534.357379][ T5486] device bond_slave_0 left promiscuous mode
[  536.653498][ T5486] bond0 (unregistering): Released all slaves
[  536.712110][T13753] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  536.763901][T13753] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  536.895913][T13937] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3107'.
[  537.009959][T13753] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  537.042222][T13953] loop3: detected capacity change from 0 to 128
[  537.058971][T13753] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  537.125290][T13956] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3112'.
[  537.158155][T13953] EXT4-fs (loop3): Test dummy encryption mode enabled
[  537.281193][T13953] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  538.178211][T13967] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce"
[  538.676597][T12534] EXT4-fs (loop3): unmounting filesystem.
[  538.695357][T13969] loop7: detected capacity change from 0 to 512
[  538.794032][T13969] EXT4-fs (loop7): 1 orphan inode deleted
[  538.795664][T13969] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  538.807063][ T4685] __quota_error: 4 callbacks suppressed
[  538.807077][ T4685] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  538.811186][ T4685] EXT4-fs error (device loop7): ext4_release_dquot:6818: comm kworker/u4:13: Failed to release dquot type 1
[  538.879308][T13969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.881710][T13969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  539.034494][T13753] 8021q: adding VLAN 0 to HW filter on device bond0
[  539.065379][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  539.074032][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  539.101059][T13753] 8021q: adding VLAN 0 to HW filter on device team0
[  539.124276][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  539.139672][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  539.160250][ T4685] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.162385][ T4685] bridge0: port 1(bridge_slave_0) entered forwarding state
[  539.190868][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  539.199460][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  539.203258][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  539.209072][ T4685] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.210965][ T4685] bridge0: port 2(bridge_slave_1) entered forwarding state
[  539.214169][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  539.220038][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  539.234011][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  539.243900][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  539.249831][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  539.256349][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  539.269506][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  539.275301][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  539.295182][T13753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  539.302035][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  539.314784][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  539.534522][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  539.664484][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  539.988291][T13256] EXT4-fs (loop7): unmounting filesystem.
[  540.002286][T13996] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3121'.
[  540.123998][T14002] loop6: detected capacity change from 0 to 512
[  540.170298][T14002] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  540.304759][T14002] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  540.307632][T14002] EXT4-fs (loop6): orphan cleanup on readonly fs
[  540.310244][T14002] EXT4-fs warning (device loop6): ext4_enable_quotas:7030: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  540.318086][T14002] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  540.322193][T14002] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #13: comm syz.6.3123: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  540.349343][T14002] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.3123: couldn't read orphan inode 13 (err -117)
[  540.355632][T14002] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  541.044260][T14002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.046542][T14002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.174658][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  541.181699][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  541.195203][T13753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  542.178770][ T9913] EXT4-fs (loop6): unmounting filesystem.
[  542.228084][T14046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.230236][T14046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.265571][T14048] loop3: detected capacity change from 0 to 512
[  542.268832][T14048] EXT4-fs: Ignoring removed nobh option
[  542.296858][T14048] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  542.316568][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  542.319450][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  542.334721][T14048] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3131: invalid indirect mapped block 256 (level 2)
[  542.358882][T14048] EXT4-fs (loop3): 2 truncates cleaned up
[  542.360813][T14048] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  542.364684][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  542.371503][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  542.385228][T13753] device veth0_vlan entered promiscuous mode
[  542.392299][T13753] device veth1_vlan entered promiscuous mode
[  542.395797][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  542.407596][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  542.412180][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  542.540709][T13341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  542.543308][T13341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  542.551923][T13341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  542.556923][T13753] device veth0_macvtap entered promiscuous mode
[  542.560920][T13753] device veth1_macvtap entered promiscuous mode
[  542.569803][T13753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  542.572424][T13753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.574901][T13753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  542.578485][T13753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.737207][T13753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  542.742267][T13753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.745234][T13753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  542.831643][T13753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.927583][T14054] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  543.107505][T13753] batman_adv: batadv0: Interface activated: batadv_slave_0
[  543.133491][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  543.136152][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  543.139207][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  543.152563][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  543.164383][T13753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.179980][T13753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.198492][T13753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.201107][T13753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.228850][T13753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.231389][T13753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.233777][T13753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.236171][T13753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.239745][T13753] batman_adv: batadv0: Interface activated: batadv_slave_1
[  543.244865][T13753] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  543.247130][T13753] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  543.256845][T13753] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  543.259087][T13753] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  543.265805][T12534] EXT4-fs (loop3): unmounting filesystem.
[  543.284597][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  543.287494][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  543.485246][T14065] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3135'.
[  543.544192][ T5486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.546491][ T5486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.554686][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  543.562595][ T4770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.564835][ T4770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.570322][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  543.852104][T14095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.854533][T14095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.185615][T14111] loop7: detected capacity change from 0 to 512
[  544.200559][T14111] EXT4-fs: Ignoring removed oldalloc option
[  544.212003][T14111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  544.234134][T14111] EXT4-fs (loop7): orphan cleanup on readonly fs
[  544.246561][T14111] Quota error (device loop7): do_check_range: Getting block 196613 out of range 1-5
[  544.266789][T14111] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  544.269387][T14111] EXT4-fs error (device loop7): ext4_acquire_dquot:6795: comm syz.7.3143: Failed to acquire dquot type 1
[  544.312310][T14111] EXT4-fs (loop7): 1 truncate cleaned up
[  544.324099][T14111] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  544.460091][T13256] EXT4-fs (loop7): unmounting filesystem.
[  544.788266][T14143] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3149'.
[  544.978773][T14150] loop3: detected capacity change from 0 to 256
[  546.449216][T14167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  546.451474][T14167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  546.530743][T14174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  546.533013][T14174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  546.635832][T14180] loop5: detected capacity change from 0 to 512
[  546.638980][T14180] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  546.642256][T14180] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  546.644998][T14180] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  546.654029][T14178] loop3: detected capacity change from 0 to 2048
[  546.657825][T14180] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  546.659771][T14180] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8040e11c, mo2=0000]
[  546.662343][T14180] EXT4-fs (loop5): orphan cleanup on readonly fs
[  546.668416][T14180] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3162: bg 0: block 34: padding at end of block bitmap is not set
[  546.677029][T14180] Quota error (device loop5): write_blk: dquota write failed
[  546.679265][T14180] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  546.681888][T14180] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.3162: Failed to acquire dquot type 1
[  546.686294][T14180] EXT4-fs (loop5): 1 truncate cleaned up
[  546.703298][T14180] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  546.749864][T13753] EXT4-fs (loop5): unmounting filesystem.
[  548.685515][T14194] loop1: detected capacity change from 0 to 1024
[  548.733843][T14203] loop6: detected capacity change from 0 to 8
[  548.825760][T14203] SQUASHFS error: lzo decompression failed, data probably corrupt
[  548.834900][T14203] SQUASHFS error: Failed to read block 0x4ef: -5
[  548.857899][T14203] SQUASHFS error: Unable to read metadata cache entry [4ed]
[  548.859765][T14203] SQUASHFS error: Unable to read inode 0x50087
[  549.373994][T14194] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  549.608494][T12898] EXT4-fs (loop1): unmounting filesystem.
[  549.791815][T14233] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.793649][T14233] bridge0: port 1(bridge_slave_0) entered forwarding state
[  550.939144][T14253] loop6: detected capacity change from 0 to 1024
[  550.963400][T14253] EXT4-fs: Ignoring removed orlov option
[  550.967888][T14253] ext4: Unknown parameter 'subj_type'
[  550.998144][T14253] loop6: detected capacity change from 0 to 512
[  551.000319][T14253] EXT4-fs: Ignoring removed i_version option
[  551.047997][T14253] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  551.064234][T14253] usb usb1: usbfs: process 14253 (syz.6.3182) did not claim interface 0 before use
[  552.427588][ T9913] EXT4-fs (loop6): unmounting filesystem.
[  552.706529][T14286] loop5: detected capacity change from 0 to 16
[  552.774752][T14288] fuse: Unknown parameter '0xffffffffffffffff'
[  552.797204][T14286] erofs: (device loop5): mounted with root inode @ nid 36.
[  552.864319][T14290] loop1: detected capacity change from 0 to 4096
[  552.911320][T14290] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  553.027822][T12898] EXT4-fs (loop1): unmounting filesystem.
[  553.973292][T14311] loop1: detected capacity change from 0 to 512
[  553.995594][T14316] loop6: detected capacity change from 0 to 512
[  554.008513][T14316] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  554.256415][T14316] EXT4-fs (loop6): 1 truncate cleaned up
[  554.258256][T14316] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  554.262491][T14311] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  554.430486][ T9913] EXT4-fs (loop6): unmounting filesystem.
[  554.476026][T12898] EXT4-fs (loop1): unmounting filesystem.
[  554.619351][T14334] loop7: detected capacity change from 0 to 1024
[  554.623576][T14334] EXT4-fs: Ignoring removed bh option
[  554.725252][T14334] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  554.762851][T14334] EXT4-fs (loop7): shut down requested (1)
[  554.963318][T13256] EXT4-fs (loop7): unmounting filesystem.
[  555.756166][T14374] loop6: detected capacity change from 0 to 256
[  555.776205][T14374] exfat: Deprecated parameter 'namecase'
[  555.835923][T14374] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  556.020616][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  556.022291][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  559.628804][T14410] input: syz0 as /devices/virtual/input/input7
[  560.200856][T14434] loop5: detected capacity change from 0 to 512
[  560.305395][T14434] EXT4-fs: Ignoring removed nobh option
[  560.312676][T14434] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  560.371377][T14434] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3229: invalid indirect mapped block 256 (level 2)
[  560.375277][T14434] EXT4-fs (loop5): 2 truncates cleaned up
[  560.378124][T14434] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  560.551944][T14448] netlink: 'syz.6.3233': attribute type 1 has an invalid length.
[  560.553963][T14448] netlink: 'syz.6.3233': attribute type 4 has an invalid length.
[  560.556483][T14448] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3233'.
[  561.318495][T13753] EXT4-fs (loop5): unmounting filesystem.
[  561.459791][T14467] binder: BINDER_SET_CONTEXT_MGR already set
[  561.461761][T14467] binder: 14464:14467 ioctl 4018620d 20000040 returned -16
[  561.496548][T14467] binder: tried to use weak ref as strong ref
[  561.498496][T14467] binder: 14464:14467 Acquire 1 refcount change on invalid ref 0 ret -22
[  561.510465][T14467] binder: 14464:14467 got transaction to invalid handle, 1
[  561.512274][T14467] binder: 14467:14464 cannot find target node
[  561.513879][T14467] binder: 14464:14467 transaction async to 0:0 failed 16/29201/-22, size 0-0 line 3054
[  561.564769][T13569] binder: undelivered TRANSACTION_ERROR: 29201
[  561.847711][T14477] netlink: 'syz.5.3244': attribute type 1 has an invalid length.
[  561.849709][T14477] netlink: 'syz.5.3244': attribute type 4 has an invalid length.
[  561.870977][T14477] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3244'.
[  562.847984][T14499] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3251'.
[  563.037992][T14507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.052366][T14507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.425772][T14513] netlink: 'syz.5.3256': attribute type 1 has an invalid length.
[  563.432259][T14513] netlink: 'syz.5.3256': attribute type 4 has an invalid length.
[  563.436481][T14513] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3256'.
[  563.915225][T14520] loop5: detected capacity change from 0 to 512
[  563.950303][T14520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  564.011329][T14520] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  564.164200][T13753] EXT4-fs (loop5): unmounting filesystem.
[  564.605114][T14533] loop3: detected capacity change from 0 to 1024
[  564.691477][T14533] EXT4-fs (loop3): Test dummy encryption mode enabled
[  564.910727][T14533] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  565.054589][T12534] EXT4-fs (loop3): unmounting filesystem.
[  565.391473][T14543] loop3: detected capacity change from 0 to 256
[  565.439820][T14543] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  565.440658][T14547] netlink: 'syz.1.3267': attribute type 1 has an invalid length.
[  565.445049][T14547] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3267'.
[  567.651374][T14576] loop3: detected capacity change from 0 to 128
[  567.699051][T14576] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  567.702933][T14575] loop6: detected capacity change from 0 to 1024
[  567.835042][T12534] EXT4-fs (loop3): unmounting filesystem.
[  568.018470][T14586] netlink: 'syz.6.3279': attribute type 1 has an invalid length.
[  568.020351][T14586] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.3279'.
[  568.496769][ T4309] Bluetooth: hci0: command 0x0406 tx timeout
[  569.015634][T14602] netlink: 'syz.5.3284': attribute type 3 has an invalid length.
[  569.026214][T14602] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3284'.
[  569.043779][T14602] netlink: 'syz.5.3284': attribute type 3 has an invalid length.
[  570.251660][T14614] loop6: detected capacity change from 0 to 512
[  570.405911][T14614] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  570.408828][T14614] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  570.411260][T14614] EXT4-fs error (device loop6): ext4_acquire_dquot:6795: comm syz.6.3289: Failed to acquire dquot type 0
[  570.414432][T14614] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  570.417544][T14614] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  570.420055][T14614] EXT4-fs error (device loop6): ext4_acquire_dquot:6795: comm syz.6.3289: Failed to acquire dquot type 0
[  570.425454][T14614] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  570.435057][T14614] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  570.442275][T14614] EXT4-fs error (device loop6): ext4_acquire_dquot:6795: comm syz.6.3289: Failed to acquire dquot type 0
[  570.453843][T14614] EXT4-fs (loop6): 1 orphan inode deleted
[  570.455312][T14614] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  570.523166][T14614] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  570.821115][T14614] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  570.837954][T14614] EXT4-fs error (device loop6): ext4_acquire_dquot:6795: comm syz.6.3289: Failed to acquire dquot type 0
[  570.957275][ T9913] EXT4-fs (loop6): unmounting filesystem.
[  571.513829][T14628] loop5: detected capacity change from 0 to 2048
[  571.660229][T14628] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  571.821444][T14634] netlink: 'syz.6.3292': attribute type 1 has an invalid length.
[  571.838817][T14634] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.3292'.
[  571.993898][T14637] loop1: detected capacity change from 0 to 512
[  572.038385][T14637] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3296: invalid indirect mapped block 256 (level 2)
[  572.046474][T14637] EXT4-fs (loop1): Remounting filesystem read-only
[  572.048501][T14637] EXT4-fs (loop1): 2 truncates cleaned up
[  572.049941][T14637] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  572.153613][T12898] EXT4-fs (loop1): unmounting filesystem.
[  572.165735][T14641] loop3: detected capacity change from 0 to 1024
[  572.227180][T14641] EXT4-fs: Ignoring removed orlov option
[  572.228794][T14641] EXT4-fs: Ignoring removed nomblk_io_submit option
[  572.230807][T14641] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  572.293953][T14641] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  572.457993][T14654] loop6: detected capacity change from 0 to 128
[  572.481716][T12534] EXT4-fs (loop3): unmounting filesystem.
[  572.500364][T14654] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  572.513832][T14654] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  572.626205][T14629] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm vhost-14628: bg 0: block 234: padding at end of block bitmap is not set
[  572.699198][T14657] netlink: 'syz.1.3305': attribute type 1 has an invalid length.
[  572.701306][T14657] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3305'.
[  572.790694][ T4770] ------------[ cut here ]------------
[  572.792088][ T4770] kernel BUG at fs/ext4/inode.c:2759!
[  572.793763][ T4770] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
[  572.795945][ T4770] Modules linked in:
[  572.796975][ T4770] CPU: 0 PID: 4770 Comm: kworker/u4:15 Not tainted 6.1.132-syzkaller #0
[  572.799081][ T4770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  572.801682][ T4770] Workqueue: writeback wb_workfn (flush-7:5)
[  572.803227][ T4770] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  572.805223][ T4770] pc : ext4_writepages+0x32b0/0x32b4
[  572.806631][ T4770] lr : ext4_writepages+0x32b0/0x32b4
[  572.808004][ T4770] sp : ffff800021836d60
[  572.809090][ T4770] x29: ffff800021837120 x28: ffff800008e601a4 x27: dfff800000000000
[  572.811182][ T4770] x26: ffff0000e02be700 x25: ffff800021837590 x24: ffff800021837020
[  572.813280][ T4770] x23: ffff0000ec964000 x22: ffff800021836f40 x21: ffff0000e02be928
[  572.815355][ T4770] x20: 0000008410000000 x19: 0000000000000001 x18: ffff800021837a94
[  572.817371][ T4770] x17: ffff800015afd000 x16: ffff800008300d88 x15: 0000000000000000
[  572.819365][ T4770] x14: 1ffff00002b600b2 x13: dfff800000000000 x12: 00000000687012eb
[  572.821363][ T4770] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800008e63454
[  572.823473][ T4770] x8 : ffff0000ed999bc0 x7 : ffff800008e60330 x6 : 0000000000000000
[  572.825572][ T4770] x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000001
[  572.827545][ T4770] x2 : 0000000000000000 x1 : 0000008000000000 x0 : 0000000000000000
[  572.829641][ T4770] Call trace:
[  572.830507][ T4770]  ext4_writepages+0x32b0/0x32b4
[  572.831822][ T4770]  do_writepages+0x2e8/0x56c
[  572.832993][ T4770]  __writeback_single_inode+0x16c/0x1770
[  572.834460][ T4770]  writeback_sb_inodes+0x978/0x1718
[  572.835785][ T4770]  wb_writeback+0x414/0x1130
[  572.836980][ T4770]  wb_workfn+0x3a8/0x1034
[  572.838015][ T4770]  process_one_work+0x804/0x1484
[  572.839245][ T4770]  worker_thread+0x8e4/0xfec
[  572.840467][ T4770]  kthread+0x250/0x2d8
[  572.841540][ T4770]  ret_from_fork+0x10/0x20
[  572.842672][ T4770] Code: d4210000 97da4226 d4210000 97da4224 (d4210000) 
[  572.844370][ T4770] ---[ end trace 0000000000000000 ]---
[  572.970638][ T4770] Kernel panic - not syncing: Oops - BUG: Fatal exception
[  572.972611][ T4770] SMP: stopping secondary CPUs
[  572.973856][ T4770] Kernel Offset: disabled
[  572.975070][ T4770] CPU features: 0x080000,02070084,26017203
[  572.976460][ T4770] Memory Limit: none
[  573.092887][ T4770] Rebooting in 86400 seconds..