last executing test programs:

9.538332982s ago: executing program 3 (id=367):
syz_open_dev$vim2m(0x0, 0x400000000000404, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e000"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

9.473278884s ago: executing program 3 (id=368):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_dev$sg(0x0, 0x0, 0x8002)
r2 = fcntl$dupfd(r1, 0x0, r1)
read$FUSE(r2, 0x0, 0x2000)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xe9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0xb, 0x0, 0x80, 0x0})

9.376858587s ago: executing program 3 (id=369):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000000000000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r5=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, 0x0, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x80000001, 0x2, 0x614, 0x1, 0xb5, 0x8, 0x4}, 0x9c)
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {0x8, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044801}, 0x20040000)

9.173917604s ago: executing program 1 (id=371):
r0 = socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x4, 0xfd, 0x2, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10)
ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001080)={0xc, {"a2e3ad21ed0d30f91b5d310987f70e06d038e7ff7fc6e5539b3263298b089b0708356e090890e0878f0e1ac6e7049b3350959bfc9b240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31300d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a204f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b54b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5e3728ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000004000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5182cff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec6800068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000681e6756", 0x1000}}, 0x1006)

8.082095998s ago: executing program 1 (id=372):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x1e4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x78, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_DESC={0x130, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ab1b75d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8df}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x802}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x343}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10}}, 0x20c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, 0x301}}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x884)

7.66794469s ago: executing program 1 (id=375):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
shutdown(0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = fsmount(0xffffffffffffffff, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x14, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x2f, 0x2})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5)
process_vm_readv(0x0, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/167, 0xa7}], 0x1, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe)
listen(r3, 0x0)
clock_gettime(0x3, &(0x7f0000000080))
accept4(r3, 0x0, 0x0, 0x80800)

7.445431747s ago: executing program 3 (id=378):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[], 0xff, 0x5eaf, &(0x7f000000bc00)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x300000, 0x0, 0x0, 0x0, &(0x7f00000000c0))
rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='./mnt\x00')

5.674166403s ago: executing program 3 (id=382):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x12)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1)

5.266162406s ago: executing program 1 (id=385):
syz_open_dev$sg(0x0, 0x0, 0x8002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x48000, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000340)={0x0, {0xffffffff, 0x8}})
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000180))
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x10, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}})
r3 = socket(0x10, 0x3, 0x0)
connect$bt_sco(r3, &(0x7f0000000000), 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
open_by_handle_at(r3, &(0x7f00000001c0)=@reiserfs_4={0x10, 0x4, {0x3, 0x1, 0xb9, 0x14}}, 0x1)
r4 = userfaultfd(0x80001)
ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f00000003c0)={r3, 0x0, 0x3bde, 0x6, 0x8000000000000000, 0xf})
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0)

5.077846321s ago: executing program 1 (id=386):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000000000000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r5=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, 0x0, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x80000001, 0x2, 0x614, 0x1, 0xb5, 0x8, 0x4}, 0x9c)
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {0x8, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044801}, 0x20040000)

4.948754855s ago: executing program 2 (id=387):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_dev$sg(0x0, 0x0, 0x8002)
r2 = fcntl$dupfd(r1, 0x0, r1)
read$FUSE(r2, 0x0, 0x2000)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xe9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0xb, 0x0, 0x80, 0x0})

4.82005602s ago: executing program 2 (id=388):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x30}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x44014)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)

4.78426677s ago: executing program 2 (id=389):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
epoll_create1(0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getpid()
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x3000000a})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x700, 0x0, 0x3, 0x5}})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0x24)
eventfd(0x6)
r6 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, 0x0, &(0x7f00000001c0))

3.738658963s ago: executing program 0 (id=390):
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000400)={0x10})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42402, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x40000107, 0x0, 0x3}]})
r5 = fsopen(&(0x7f0000000080)='nfs\x00', 0x1)
r6 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f00000002c0)={{0xffffffffffffffff, 0xfffffffe}, {0xfffffffffffffe29, 0x5}, 0xfffffe29, 0x6})
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x1000, &(0x7f000000f000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.694396904s ago: executing program 2 (id=391):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
pread64(0xffffffffffffffff, &(0x7f0000000680)=""/199, 0x11f, 0x8)
io_uring_setup(0x30aa, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b7050000000000a227c3c4ce86e6d6881bab007910a8000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

2.773728974s ago: executing program 2 (id=392):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000000000000, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r5=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, 0x0, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x80000001, 0x2, 0x614, 0x1, 0xb5, 0x8, 0x4}, 0x9c)
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {0x8, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044801}, 0x20040000)

2.773320854s ago: executing program 3 (id=393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x58}}, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40050)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x7}, 0x8084)
socket$inet(0x2, 0x4, 0x5c6d)
r3 = socket$inet6(0xa, 0x80000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000001840), 0x3b, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100))
setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0)

2.713597335s ago: executing program 1 (id=394):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2, 0x3, 0x6)
creat(0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
socket$nl_netfilter(0x10, 0x3, 0xc)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
pipe(&(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.350208757s ago: executing program 0 (id=395):
syz_open_dev$sg(0x0, 0x0, 0x8002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x48000, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000340)={0x0, {0xffffffff, 0x8}})
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000180))
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x10, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}})
r3 = socket(0x10, 0x3, 0x0)
connect$bt_sco(r3, &(0x7f0000000000), 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
open_by_handle_at(r3, &(0x7f00000001c0)=@reiserfs_4={0x10, 0x4, {0x3, 0x1, 0xb9, 0x14}}, 0x1)
r4 = userfaultfd(0x80001)
ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f00000003c0)={r3, 0x0, 0x3bde, 0x6, 0x8000000000000000, 0xf})
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0)

1.959196499s ago: executing program 0 (id=396):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x1e4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x78, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_DESC={0x130, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ab1b75d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8df}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x802}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x343}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10}}, 0x20c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, 0x301}}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x884)

1.276245211s ago: executing program 0 (id=397):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x30}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x44014)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

1.169311654s ago: executing program 2 (id=398):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x580, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

1.002231659s ago: executing program 0 (id=399):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
epoll_create1(0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getpid()
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x3000000a})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x700, 0x0, 0x3, 0x5}})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0x24)
eventfd(0x6)
r6 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, 0x0, &(0x7f00000001c0))

0s ago: executing program 0 (id=400):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}})
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x2, @vbi={0x7, 0x10000, 0x2, 0x36314d59, [0x9, 0x5], [0x5, 0x8]}})
r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10)
close(r3)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020}, 0x2020)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000b40)="79c8d2638dd1e65bafd97e2b95f16dc1ac562f3fef170d90d25b757ea3428ba9fabaaa0d03757cd8e2915635dd83259c5b4da6f5d739300ed97bea948accb0ebcc91feea4a7812d002f82988f44c23d422c83b0041d85acd2b92c0eb43f3717caf37119f3d28a4d24aa427e6345f947b2a8ea1a8894d8427ed3cc07c46ac67e5ca2d3406e40333bf0222a44f4a90a68348323b0a18a65f8e552235e601f1248c37b4d40af4c73cd04296c192de4945ac89a491f512ad510b2de6d142b06c44373e31e3a73c4e4fd700de060b89f179f40d4badeac070ca4789b3bcb7b7ad80a758f3436e8ac8ffbfdb93818e73aed20ccf94ea690e81", &(0x7f00000014c0)=@udp6, 0x2}, 0x20)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000001020500000000f0ff0000000a0000003c0001802c00018014000300ff0100000000"], 0x50}}, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0)
fanotify_init(0x4c299c9a5c176ac3, 0x2)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000f40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts.
syzkaller login: [   73.035551][ T5759] cgroup: Unknown subsys name 'net'
[   73.168785][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   74.497021][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   75.936584][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.941508][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.944638][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.959846][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.959923][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.975872][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.982527][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.983297][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.997132][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.997819][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.006107][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.020658][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.022933][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   76.028758][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.035272][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.043234][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.050074][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   76.057028][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.063324][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.070805][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   76.076582][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   76.084152][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.090971][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.138569][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.506347][ T5772] chnl_net:caif_netlink_parms(): no params data found
[   76.580319][ T5770] chnl_net:caif_netlink_parms(): no params data found
[   76.641396][ T5773] chnl_net:caif_netlink_parms(): no params data found
[   76.696866][ T5771] chnl_net:caif_netlink_parms(): no params data found
[   76.738346][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.746655][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.754458][ T5772] bridge_slave_0: entered allmulticast mode
[   76.761224][ T5772] bridge_slave_0: entered promiscuous mode
[   76.777094][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.784388][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.791624][ T5772] bridge_slave_1: entered allmulticast mode
[   76.798513][ T5772] bridge_slave_1: entered promiscuous mode
[   76.867093][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.886376][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.893723][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.900866][ T5773] bridge_slave_0: entered allmulticast mode
[   76.907875][ T5773] bridge_slave_0: entered promiscuous mode
[   76.915001][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.922076][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.930128][ T5770] bridge_slave_0: entered allmulticast mode
[   76.937040][ T5770] bridge_slave_0: entered promiscuous mode
[   76.945722][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.953048][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.960244][ T5770] bridge_slave_1: entered allmulticast mode
[   76.967238][ T5770] bridge_slave_1: entered promiscuous mode
[   76.979064][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.988849][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.996207][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.006517][ T5773] bridge_slave_1: entered allmulticast mode
[   77.013457][ T5773] bridge_slave_1: entered promiscuous mode
[   77.070127][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.108479][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.119690][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.139811][ T5772] team0: Port device team_slave_0 added
[   77.148069][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.155358][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.162771][ T5771] bridge_slave_0: entered allmulticast mode
[   77.170087][ T5771] bridge_slave_0: entered promiscuous mode
[   77.178783][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.199081][ T5772] team0: Port device team_slave_1 added
[   77.215418][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.222765][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.229891][ T5771] bridge_slave_1: entered allmulticast mode
[   77.237084][ T5771] bridge_slave_1: entered promiscuous mode
[   77.263531][ T5770] team0: Port device team_slave_0 added
[   77.270911][ T5770] team0: Port device team_slave_1 added
[   77.298737][ T5773] team0: Port device team_slave_0 added
[   77.323290][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.333648][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.340640][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.367163][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.380575][ T5773] team0: Port device team_slave_1 added
[   77.398296][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.408203][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.415432][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.441774][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.467391][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.474501][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.500565][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.512746][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.519710][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.546186][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.574168][ T5771] team0: Port device team_slave_0 added
[   77.605824][ T5771] team0: Port device team_slave_1 added
[   77.630917][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.638243][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.664681][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.681804][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.689206][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.715427][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.742839][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.749813][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.776056][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.792727][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.799710][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.826144][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.861455][ T5770] hsr_slave_0: entered promiscuous mode
[   77.867783][ T5770] hsr_slave_1: entered promiscuous mode
[   77.889120][ T5772] hsr_slave_0: entered promiscuous mode
[   77.896695][ T5772] hsr_slave_1: entered promiscuous mode
[   77.903230][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.911048][ T5772] Cannot create hsr debugfs directory
[   77.989592][ T5773] hsr_slave_0: entered promiscuous mode
[   77.995996][ T5773] hsr_slave_1: entered promiscuous mode
[   78.002150][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.010947][ T5773] Cannot create hsr debugfs directory
[   78.040393][ T5771] hsr_slave_0: entered promiscuous mode
[   78.046639][ T5771] hsr_slave_1: entered promiscuous mode
[   78.053407][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.061071][ T5771] Cannot create hsr debugfs directory
[   78.153261][ T5088] Bluetooth: hci3: command tx timeout
[   78.158897][ T5088] Bluetooth: hci1: command tx timeout
[   78.166560][ T5786] Bluetooth: hci2: command tx timeout
[   78.232567][ T5088] Bluetooth: hci0: command tx timeout
[   78.434216][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.447454][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.457238][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.477986][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.515154][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.530800][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.551832][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.562258][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.658382][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.670985][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.698678][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.707945][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.795515][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.814753][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.828271][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.840143][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.859774][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.941989][ T5770] 8021q: adding VLAN 0 to HW filter on device team0
[   78.969390][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.990974][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[   79.000530][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.007861][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.037311][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.044449][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.084657][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.091789][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.117595][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.124727][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.172212][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.191999][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.237158][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   79.264460][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.279122][ T2883] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.286396][ T2883] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.299884][ T5771] 8021q: adding VLAN 0 to HW filter on device team0
[   79.330931][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.338111][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.366979][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.374138][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.409865][ T2883] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.417080][ T2883] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.609198][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.706890][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.732179][ T5770] veth0_vlan: entered promiscuous mode
[   79.767457][ T5770] veth1_vlan: entered promiscuous mode
[   79.820087][ T5772] veth0_vlan: entered promiscuous mode
[   79.859870][ T5772] veth1_vlan: entered promiscuous mode
[   79.880256][ T5770] veth0_macvtap: entered promiscuous mode
[   79.905327][ T5770] veth1_macvtap: entered promiscuous mode
[   79.958797][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.981770][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.997831][ T5772] veth0_macvtap: entered promiscuous mode
[   80.015639][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.025726][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.036544][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.046092][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.077296][ T5772] veth1_macvtap: entered promiscuous mode
[   80.098436][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.130333][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.141984][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.157878][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.169104][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.195411][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.206840][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.218434][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.229385][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.238565][ T5088] Bluetooth: hci1: command tx timeout
[   80.238620][ T5786] Bluetooth: hci2: command tx timeout
[   80.244321][ T5780] Bluetooth: hci3: command tx timeout
[   80.252578][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.267663][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.276467][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.314694][ T5780] Bluetooth: hci0: command tx timeout
[   80.416866][ T2883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.421677][ T5773] veth0_vlan: entered promiscuous mode
[   80.432839][ T2883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.489734][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.505771][ T5773] veth1_vlan: entered promiscuous mode
[   80.520911][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.565801][ T5771] veth0_vlan: entered promiscuous mode
[   80.586120][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.598903][ T5773] veth0_macvtap: entered promiscuous mode
[   80.607424][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.617232][ T5771] veth1_vlan: entered promiscuous mode
[   80.633701][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.641556][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.651767][ T5773] veth1_macvtap: entered promiscuous mode
[   80.700033][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.710670][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.731519][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.743961][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.756008][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.777312][ T5771] veth0_macvtap: entered promiscuous mode
[   80.792087][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.843326][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.858075][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.861602][ T5839] netlink: 292 bytes leftover after parsing attributes in process `syz.3.4'.
[   80.869435][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.891067][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.906432][ T5771] veth1_macvtap: entered promiscuous mode
[   80.965494][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.002485][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.011237][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.021708][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.068682][ T5844] syz.1.2[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   81.191646][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.212693][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.223062][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.234507][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.244747][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.255582][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.267878][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.280028][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.291670][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.307001][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.318000][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.330036][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.340998][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.354793][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.390300][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.430870][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.452534][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.461279][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.466313][ T5846] loop3: detected capacity change from 0 to 1024
[   81.809638][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.829324][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.897357][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.926726][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.994217][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.012817][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.078674][ T5844] loop1: detected capacity change from 0 to 40427
[   82.110582][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.110661][ T5844] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   82.154024][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.178739][ T5844] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   82.228382][ T5844] F2FS-fs (loop1): invalid crc value
[   82.267406][ T5844] F2FS-fs (loop1): Found nat_bits in checkpoint
[   82.322496][ T5780] Bluetooth: hci2: command tx timeout
[   82.327933][ T5780] Bluetooth: hci3: command tx timeout
[   82.334293][ T5088] Bluetooth: hci1: command tx timeout
[   82.403153][ T5780] Bluetooth: hci0: command tx timeout
[   82.522311][ T5844] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   82.550555][ T5844] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   84.081224][   T27] audit: type=1800 audit(1781565648.248:2): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file1" dev="loop1" ino=10 res=0 errno=0
[   84.337506][ T5854] loop2: detected capacity change from 0 to 32768
[   84.368982][   T27] audit: type=1800 audit(1781565648.258:3): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file1" dev="loop1" ino=10 res=0 errno=0
[   84.468197][ T5854] =======================================================
[   84.468197][ T5854] WARNING: The mand mount option has been deprecated and
[   84.468197][ T5854]          and is ignored by this kernel. Remove the mand
[   84.468197][ T5854]          option from the mount to silence this warning.
[   84.468197][ T5854] =======================================================
[   84.521656][ T5780] Bluetooth: hci3: command tx timeout
[   84.521663][ T5088] Bluetooth: hci2: command tx timeout
[   84.521689][ T5780] Bluetooth: hci1: command tx timeout
[   84.527177][ T5088] Bluetooth: hci0: command tx timeout
[   84.761074][ T5854] JBD2: Ignoring recovery information on journal
[   85.015079][ T5854] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   85.256755][   T27] audit: type=1800 audit(1781565649.538:4): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="bus" dev="loop2" ino=17058 res=0 errno=0
[   85.302059][   T27] audit: type=1800 audit(1781565649.578:5): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="bus" dev="loop2" ino=17058 res=0 errno=0
[   85.583304][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.659641][ T5883] process 'syz.0.15' launched './file0' with NULL argv: empty string added
[   85.707585][ T5854] syz.2.3 (5854) used greatest stack depth: 19856 bytes left
[   85.807711][ T5773] ocfs2: Unmounting device (7,2) on (node local)
[   85.823111][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   85.838096][    T9] usb 4-1: config 0 has no interfaces?
[   85.845481][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   85.855222][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.889604][    T9] usb 4-1: config 0 descriptor??
[   86.111462][    T9] usb 4-1: USB disconnect, device number 2
[   86.876383][   T23] cfg80211: failed to load regulatory.db
[   87.286621][ T5892] loop1: detected capacity change from 0 to 32768
[   87.377638][ T5892] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[   87.409120][ T5892] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   87.707128][ T5892] XFS (loop1): Ending clean mount
[   87.867814][ T5892] XFS (loop1): Quotacheck needed: Please wait.
[   88.095768][ T5892] XFS (loop1): Quotacheck: Done.
[   88.367724][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   88.804112][ T5920] netlink: 'syz.0.24': attribute type 1 has an invalid length.
[   88.861419][ T5920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24'.
[   88.876231][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'.
[   89.010749][ T5928] netlink: 436 bytes leftover after parsing attributes in process `syz.2.26'.
[   89.021453][ T5928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.26'.
[   89.805534][ T5936] loop2: detected capacity change from 0 to 1024
[   89.982745][  T789] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   90.203078][  T789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.213482][  T789] usb 2-1: config 0 has no interfaces?
[   90.218998][  T789] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   90.228186][  T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.251644][  T789] usb 2-1: config 0 descriptor??
[   90.411272][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[   90.425484][ T5947] gtp0: entered allmulticast mode
[   91.143096][ T5848] usb 2-1: USB disconnect, device number 2
[   91.177318][ T5939] loop3: detected capacity change from 0 to 32768
[   91.202778][ T5939] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.31 (5939)
[   91.241140][ T5939] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   91.253839][ T5939] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   91.264347][ T5939] BTRFS info (device loop3): turning on sync discard
[   91.271369][ T5939] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   91.281619][ T5939] BTRFS info (device loop3): use zstd compression, level 3
[   91.301648][ T5939] BTRFS info (device loop3): turning on async discard
[   91.322065][ T5939] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   91.369748][ T5939] BTRFS info (device loop3): trying to use backup root at mount time
[   91.386940][ T5939] BTRFS info (device loop3): enabling auto defrag
[   91.401088][ T5939] BTRFS info (device loop3): using free space tree
[   91.506334][   T61] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   91.524865][ T5939] BTRFS error (device loop3): failed to load root extent
[   91.531997][ T5939] BTRFS warning (device loop3): try to load backup roots slot 1
[   91.544078][   T49] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   91.557540][ T5939] BTRFS warning (device loop3): couldn't read tree root
[   91.560947][ T5967] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[   91.564686][ T5939] BTRFS warning (device loop3): try to load backup roots slot 2
[   91.582336][   T41] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   91.597173][ T5939] BTRFS warning (device loop3): couldn't read tree root
[   91.608600][ T5939] BTRFS warning (device loop3): try to load backup roots slot 3
[   91.638262][ T5967] bond_slave_1: entered promiscuous mode
[   91.639742][ T5939] BTRFS info (device loop3): enabling ssd optimizations
[   91.652881][ T5967] bond_slave_1: entered allmulticast mode
[   91.659608][ T5939] BTRFS info (device loop3): rebuilding free space tree
[   91.696157][ T5970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36'.
[   91.718182][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'.
[   91.739646][ T5939] BTRFS info (device loop3): checking UUID tree
[   92.716672][ T5770] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   93.210480][ T5986] warning: `syz.1.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   93.406529][ T5988] loop2: detected capacity change from 0 to 1024
[   93.681080][ T5996] netlink: 'syz.2.45': attribute type 1 has an invalid length.
[   93.780348][ T5997] netlink: 44 bytes leftover after parsing attributes in process `syz.2.45'.
[   93.796630][ T5997] batadv_slave_1: entered promiscuous mode
[   93.804400][ T5997] batadv_slave_1: entered allmulticast mode
[   94.034935][ T5991] loop3: detected capacity change from 0 to 32768
[   94.159505][ T5848] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   94.181597][ T5991] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.40 (5991)
[   94.256243][ T5991] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   94.287955][ T5991] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   94.302710][ T5991] BTRFS info (device loop3): force clearing of disk cache
[   94.342507][ T5991] BTRFS info (device loop3): enabling auto defrag
[   94.361183][ T5991] BTRFS info (device loop3): max_inline at 0
[   94.381648][ T5991] BTRFS info (device loop3): enabling disk space caching
[   94.384620][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.409265][ T5848] usb 2-1: config 0 has no interfaces?
[   94.409380][ T5991] BTRFS info (device loop3): disk space caching is enabled
[   94.422627][ T5848] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   94.443531][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.539328][ T5848] usb 2-1: config 0 descriptor??
[   95.367517][ T5848] usb 2-1: USB disconnect, device number 3
[   95.451980][ T6030] Zero length message leads to an empty skb
[   95.453564][ T5991] BTRFS info (device loop3): enabling ssd optimizations
[   95.481350][ T5991] BTRFS info (device loop3): rebuilding free space tree
[   95.504069][ T5991] BTRFS info (device loop3): disabling free space tree
[   95.511313][ T5991] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   95.527870][ T5991] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   95.691352][  T151] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[   96.205548][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   96.808331][ T6049] netlink: 'syz.1.58': attribute type 1 has an invalid length.
[   97.258200][ T6050] netlink: 44 bytes leftover after parsing attributes in process `syz.1.58'.
[   97.406567][ T6056] netlink: 436 bytes leftover after parsing attributes in process `syz.2.59'.
[   97.415840][ T6056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.59'.
[   97.905505][ T5819] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   98.182591][ T5819] usb 2-1: Using ep0 maxpacket: 8
[   98.192160][ T5819] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[   98.210295][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[   98.219062][ T5819] usb 2-1: Product: syz
[   98.231747][ T5819] usb 2-1: Manufacturer: syz
[   98.239587][ T5819] usb 2-1: SerialNumber: syz
[   98.253042][ T6062] netlink: 'syz.2.62': attribute type 1 has an invalid length.
[   98.268373][ T5819] usb 2-1: config 0 descriptor??
[   98.278837][ T5819] gspca_main: sq905-2.14.0 probing 2770:9120
[   98.318177][ T6062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.62'.
[   99.040124][ T5819] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[   99.067499][ T5819] sq905: probe of 2-1:0.0 failed with error -71
[   99.086374][ T5819] usb 2-1: USB disconnect, device number 4
[   99.369787][ T6067] loop0: detected capacity change from 0 to 32768
[   99.400895][ T6067] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.64 (6067)
[   99.615148][ T6067] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   99.714823][ T6067] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   99.822168][ T6067] BTRFS info (device loop0): force clearing of disk cache
[   99.908808][ T6067] BTRFS info (device loop0): enabling auto defrag
[   99.915450][ T6067] BTRFS info (device loop0): max_inline at 0
[   99.921523][ T6067] BTRFS info (device loop0): enabling disk space caching
[   99.928753][ T6067] BTRFS info (device loop0): disk space caching is enabled
[  100.937851][ T6067] BTRFS info (device loop0): enabling ssd optimizations
[  100.948641][ T6067] BTRFS info (device loop0): rebuilding free space tree
[  100.981882][ T6067] BTRFS info (device loop0): disabling free space tree
[  100.989948][ T6067] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  101.000034][ T6067] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  101.126924][   T11] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  101.548256][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.572670][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  101.777183][    T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  101.809054][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.843644][    T9] usb 2-1: Product: syz
[  101.856015][    T9] usb 2-1: Manufacturer: syz
[  101.881000][    T9] usb 2-1: SerialNumber: syz
[  101.909164][    T9] usb 2-1: config 0 descriptor??
[  101.927791][    T9] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  102.176043][ T6126] netlink: 436 bytes leftover after parsing attributes in process `syz.0.71'.
[  102.185261][ T6126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'.
[  102.477511][    T9] gspca_sunplus: reg_r err -110
[  102.929613][    T9] usb 2-1: USB disconnect, device number 5
[  104.182059][ T6132] loop0: detected capacity change from 0 to 32768
[  104.255677][ T6132] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.75 (6132)
[  104.626947][ T6132] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  104.639102][ T6132] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  104.822518][ T6132] BTRFS info (device loop0): turning on sync discard
[  104.839753][ T6132] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  104.917611][ T6132] BTRFS info (device loop0): use zstd compression, level 3
[  104.963050][ T6132] BTRFS info (device loop0): turning on async discard
[  104.980885][ T6132] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  105.051674][ T6132] BTRFS info (device loop0): trying to use backup root at mount time
[  105.071695][ T6132] BTRFS info (device loop0): enabling auto defrag
[  105.099221][ T6132] BTRFS info (device loop0): using free space tree
[  105.137033][ T6160] netlink: 'syz.2.82': attribute type 1 has an invalid length.
[  105.536699][   T61] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  105.710135][ T6132] BTRFS error (device loop0): failed to load root extent
[  105.770691][ T6132] BTRFS warning (device loop0): try to load backup roots slot 1
[  105.873116][  T151] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  105.886441][ T6132] BTRFS warning (device loop0): couldn't read tree root
[  105.894623][ T6132] BTRFS warning (device loop0): try to load backup roots slot 2
[  105.907631][  T151] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  105.918259][ T6132] BTRFS warning (device loop0): couldn't read tree root
[  105.927815][ T6132] BTRFS warning (device loop0): try to load backup roots slot 3
[  106.037166][ T6132] BTRFS info (device loop0): enabling ssd optimizations
[  106.074671][ T6172] bond1: (slave bridge1): making interface the new active one
[  106.075475][ T6132] BTRFS info (device loop0): rebuilding free space tree
[  106.124107][ T6172] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  106.142349][ T6132] BTRFS info (device loop0): checking UUID tree
[  106.148766][ T6132] BTRFS warning (device loop0): failed to start uuid_rescan task
[  106.172245][ T6173] netlink: 44 bytes leftover after parsing attributes in process `syz.2.82'.
[  106.193691][ T6173] bond1: entered promiscuous mode
[  106.198830][ T6173] bridge1: entered promiscuous mode
[  106.224699][ T6173] bond1: entered allmulticast mode
[  106.229877][ T6173] bridge1: entered allmulticast mode
[  106.242539][ T6132] BTRFS warning (device loop0): failed to check the UUID tree: -4
[  106.261027][ T6173] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.410139][ T6132] BTRFS error (device loop0): open_ctree failed: -4
[  106.507514][ T6150] loop3: detected capacity change from 0 to 32768
[  106.551054][ T6150] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.80 (6150)
[  106.605253][ T6183] netlink: 436 bytes leftover after parsing attributes in process `syz.2.84'.
[  106.614902][ T6183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.84'.
[  107.276863][ T6150] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  107.372586][ T6150] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  107.411941][ T6150] BTRFS info (device loop3): force clearing of disk cache
[  107.436797][ T6150] BTRFS info (device loop3): enabling auto defrag
[  107.499706][ T6150] BTRFS info (device loop3): max_inline at 0
[  107.530001][ T6150] BTRFS info (device loop3): enabling disk space caching
[  107.562536][ T6150] BTRFS info (device loop3): disk space caching is enabled
[  107.612828][ T6177] loop1: detected capacity change from 0 to 32768
[  107.669668][ T6177] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  107.726552][ T6150] BTRFS info (device loop3): enabling ssd optimizations
[  107.752784][ T5819] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  107.754067][ T6177] XFS (loop1): Ending clean mount
[  107.801199][   T27] audit: type=1800 audit(1781565672.078:6): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.83" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  107.832192][ T6150] BTRFS info (device loop3): rebuilding free space tree
[  107.856170][   T23] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 
[  107.891109][   T23] XFS (loop1): Unmount and run xfs_repair
[  107.898067][ T6150] BTRFS info (device loop3): disabling free space tree
[  107.907084][   T23] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  107.919839][ T6150] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  107.931228][   T23] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  107.944349][ T6150] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  107.956907][   T23] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  107.991399][   T23] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  108.003331][ T5819] usb 3-1: Using ep0 maxpacket: 8
[  108.011878][ T5819] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.045804][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0
[  108.055598][   T23] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  108.077371][ T5819] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00
[  108.089778][   T23] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  108.100556][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.112329][   T23] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.144135][ T5819] usb 3-1: config 0 descriptor??
[  108.149385][   T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.165647][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  108.168309][   T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.190920][ T6177] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74
[  108.241859][ T6177] XFS (loop1): page discard on page ffffea00016c8340, inode 0x1806, pos 134744064.
[  108.385752][ T5772] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  108.457789][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'.
[  108.581219][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.606119][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.644909][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.651944][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.678266][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.702510][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.709891][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.732678][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.739789][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.762642][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.771634][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.793121][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.800327][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.822212][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.840156][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.867471][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  108.888413][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  109.722754][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  109.730145][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  109.756134][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  109.777410][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  109.812674][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  109.820183][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  109.861238][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  109.878835][ T6229] netlink: 'syz.3.92': attribute type 1 has an invalid length.
[  109.882454][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  109.919099][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  109.955824][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  109.964575][ T6233] loop2: detected capacity change from 0 to 1024
[  109.971231][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  110.018793][ T6234] netlink: 44 bytes leftover after parsing attributes in process `syz.3.92'.
[  110.028040][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  110.039836][ T6234] vlan1: entered promiscuous mode
[  110.063852][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  110.068623][ T6234] vlan1: entered allmulticast mode
[  110.091254][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  110.099781][ T6234] veth0_vlan: entered allmulticast mode
[  110.107536][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  110.135374][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  110.159224][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  110.171756][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  110.197526][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  110.211273][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  110.219294][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  110.227570][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  110.235191][ T5819] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x0
[  110.306765][ T5819] saitek 0003:06A3:0CD0.0001: hidraw0: USB HID v0.04 Device [HID 06a3:0cd0] on usb-dummy_hcd.2-1/input0
[  110.384679][ T5819] usb 3-1: USB disconnect, device number 2
[  110.593165][ T6243] netlink: 436 bytes leftover after parsing attributes in process `syz.2.94'.
[  110.602349][ T6243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.94'.
[  111.396459][ T6236] fido_id[6236]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  112.210701][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'.
[  113.950781][ T6265] netlink: 36 bytes leftover after parsing attributes in process `syz.0.101'.
[  114.025374][ T6247] loop2: detected capacity change from 0 to 32768
[  114.147440][ T6247] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.97 (6247)
[  114.207233][ T6247] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.217735][ T6271] loop3: detected capacity change from 0 to 1024
[  114.272631][ T6247] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  114.332546][ T6247] BTRFS info (device loop2): force clearing of disk cache
[  114.349364][ T6247] BTRFS info (device loop2): enabling auto defrag
[  114.383095][ T6247] BTRFS info (device loop2): max_inline at 0
[  114.408481][ T6247] BTRFS info (device loop2): enabling disk space caching
[  114.437697][ T6247] BTRFS info (device loop2): disk space caching is enabled
[  114.522731][ T6278] netlink: 436 bytes leftover after parsing attributes in process `syz.1.105'.
[  114.531948][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.105'.
[  114.604344][ T6247] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  114.617481][ T6247] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  114.649026][ T6247] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  114.820326][ T6247] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  115.034455][ T6247] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  115.156166][ T6247] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  115.197096][ T6247] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  115.300858][ T6247] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  115.329795][ T6247] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  115.372083][ T6247] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  115.406141][ T6247] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  115.446499][ T6247] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  115.495092][ T6247] BTRFS error (device loop2): open_ctree failed: -12
[  116.764232][ T5761] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (5761)
[  116.909336][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'.
[  117.019423][ T6311] netlink: 36 bytes leftover after parsing attributes in process `syz.2.112'.
[  117.433538][ T6318] loop0: detected capacity change from 0 to 1024
[  117.819779][ T6324] netlink: 'syz.0.117': attribute type 1 has an invalid length.
[  117.831050][ T6324] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  117.840066][ T6324] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  117.847566][  T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  117.889175][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'.
[  118.073289][  T788] usb 3-1: Using ep0 maxpacket: 8
[  118.088131][  T788] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  118.099334][  T788] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.146347][  T788] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.176935][  T788] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  118.196284][  T788] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.211118][  T788] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  118.220307][  T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.558770][  T788] usb 3-1: usb_control_msg returned -32
[  118.569770][  T788] usbtmc 3-1:16.0: can't read capabilities
[  118.652203][ T6334] loop1: detected capacity change from 0 to 32768
[  118.670000][ T6334] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.680529][ T6334] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  118.698510][ T6334] BTRFS info (device loop1): force clearing of disk cache
[  118.708629][ T6334] BTRFS info (device loop1): enabling auto defrag
[  118.732324][ T6334] BTRFS info (device loop1): max_inline at 0
[  118.748905][ T6334] BTRFS info (device loop1): enabling disk space caching
[  118.762473][ T6334] BTRFS info (device loop1): disk space caching is enabled
[  118.821544][  T788] usb 3-1: USB disconnect, device number 3
[  118.828863][ T6334] BTRFS info (device loop1): enabling ssd optimizations
[  118.865414][ T6334] BTRFS info (device loop1): rebuilding free space tree
[  118.939688][ T6334] BTRFS info (device loop1): disabling free space tree
[  118.956600][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'.
[  118.962573][ T6334] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  118.979825][ T6334] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  119.103741][   T11] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  119.243133][ T6355] netlink: 36 bytes leftover after parsing attributes in process `syz.0.122'.
[  120.297898][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.742489][   T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  122.198753][   T23] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  122.591145][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.600085][   T23] usb 3-1: Product: syz
[  122.604753][   T23] usb 3-1: Manufacturer: syz
[  122.609457][   T23] usb 3-1: SerialNumber: syz
[  122.665921][   T23] usb 3-1: config 0 descriptor??
[  122.675746][   T23] ch341 3-1:0.0: ch341-uart converter detected
[  123.080801][   T23] usb 3-1: failed to receive control message: -121
[  123.100577][   T23] ch341-uart: probe of ttyUSB0 failed with error -121
[  123.283186][    T9] usb 3-1: USB disconnect, device number 4
[  123.290124][    T9] ch341 3-1:0.0: device disconnected
[  123.402119][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'.
[  123.988303][ T6388] netlink: 36 bytes leftover after parsing attributes in process `syz.2.133'.
[  125.037195][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'.
[  126.144427][ T6394] loop0: detected capacity change from 0 to 32768
[  126.168904][ T6394] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.134 (6394)
[  127.233009][ T6394] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  127.892580][ T6394] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  127.901558][ T6394] BTRFS info (device loop0): force clearing of disk cache
[  127.911042][ T6394] BTRFS info (device loop0): enabling auto defrag
[  127.918286][ T6394] BTRFS info (device loop0): max_inline at 0
[  127.924485][ T6394] BTRFS info (device loop0): enabling disk space caching
[  127.931661][ T6394] BTRFS info (device loop0): disk space caching is enabled
[  127.967347][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  127.970705][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  127.982720][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  127.995019][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  128.007719][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  128.022671][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  128.039668][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  128.040064][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  128.114040][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  128.223979][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  128.253149][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  128.335502][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  128.411185][ T6394] BTRFS error (device loop0): open_ctree failed: -12
[  128.431461][    T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  128.441878][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.453560][    T9] usb 2-1: Product: syz
[  128.458008][    T9] usb 2-1: Manufacturer: syz
[  128.491135][    T9] usb 2-1: SerialNumber: syz
[  128.535835][    T9] usb 2-1: config 0 descriptor??
[  128.585823][    T9] ch341 2-1:0.0: ch341-uart converter detected
[  128.790789][ T6426] loop2: detected capacity change from 0 to 4096
[  128.804685][    T9] usb 2-1: failed to receive control message: -121
[  128.842318][ T6426] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  128.854273][    T9] ch341-uart: probe of ttyUSB0 failed with error -121
[  129.045483][    T9] usb 2-1: USB disconnect, device number 6
[  129.123089][    T9] ch341 2-1:0.0: device disconnected
[  129.246743][ T6426] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  129.378105][ T6426] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  129.768414][ T6438] netlink: 36 bytes leftover after parsing attributes in process `syz.0.145'.
[  130.850302][ T6440] syzkaller0: entered promiscuous mode
[  130.874148][ T6440] syzkaller0: entered allmulticast mode
[  130.939490][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'.
[  131.182270][ T6437] loop2: detected capacity change from 0 to 32768
[  131.219196][ T6437] (syz.2.146,6437,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  131.245441][ T6437] (syz.2.146,6437,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  131.315484][ T6437] (syz.2.146,6437,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  131.351711][ T6437] JBD2: Ignoring recovery information on journal
[  131.398395][ T6437] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  131.530081][ T6437] (syz.2.146,6437,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  131.674820][ T6437] (syz.2.146,6437,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb68296ec, computed 0xec517776. Applying ECC.
[  131.706873][ T6437] (syz.2.146,6437,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xb68296ec, computed 0xccb4c126
[  131.721364][ T6437] (syz.2.146,6437,0):ocfs2_search_chain:1761 ERROR: status = -5
[  131.729756][ T6437] (syz.2.146,6437,0):ocfs2_search_chain:1871 ERROR: status = -5
[  131.737732][ T6437] (syz.2.146,6437,0):ocfs2_claim_suballoc_bits:1975 ERROR: status = -5
[  131.748627][ T6437] (syz.2.146,6437,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -5
[  131.757814][ T6437] (syz.2.146,6437,0):__ocfs2_claim_clusters:2365 ERROR: status = -5
[  131.767152][ T6437] (syz.2.146,6437,0):__ocfs2_claim_clusters:2373 ERROR: status = -5
[  131.776544][ T6437] (syz.2.146,6437,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -5
[  131.786241][ T6437] (syz.2.146,6437,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -5
[  131.804252][ T6437] (syz.2.146,6437,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -5
[  131.895682][ T6437] (syz.2.146,6437,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5
[  131.981805][ T6437] (syz.2.146,6437,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5
[  131.991408][ T6437] (syz.2.146,6437,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5
[  132.001081][ T6437] (syz.2.146,6437,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5
[  132.001244][ T6437] (syz.2.146,6437,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5
[  132.019596][ T6437] (syz.2.146,6437,1):ocfs2_expand_inline_dir:2858 ERROR: status = -5
[  132.029781][ T6437] (syz.2.146,6437,1):ocfs2_extend_dir:3205 ERROR: status = -5
[  132.037630][ T6437] (syz.2.146,6437,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -5
[  132.046305][ T6437] (syz.2.146,6437,1):ocfs2_symlink:1867 ERROR: status = -5
[  132.053690][ T6437] (syz.2.146,6437,1):ocfs2_symlink:2068 ERROR: status = -5
[  132.126914][ T6437] syz.2.146 (6437) used greatest stack depth: 19024 bytes left
[  132.229252][ T6448] loop1: detected capacity change from 0 to 32768
[  132.242146][ T6448] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.151 (6448)
[  132.307376][ T5773] ocfs2: Unmounting device (7,2) on (node local)
[  132.378182][ T6448] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.423154][ T6448] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  132.714743][ T6448] BTRFS info (device loop1): force clearing of disk cache
[  132.958445][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  132.975601][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  133.016667][ T6448] BTRFS info (device loop1): enabling auto defrag
[  133.025073][ T6448] BTRFS info (device loop1): max_inline at 0
[  133.062545][ T6448] BTRFS info (device loop1): enabling disk space caching
[  133.082483][ T6448] BTRFS info (device loop1): disk space caching is enabled
[  133.363675][ T6448] BTRFS info (device loop1): enabling ssd optimizations
[  133.406805][ T6448] BTRFS info (device loop1): rebuilding free space tree
[  133.474959][ T6448] BTRFS info (device loop1): disabling free space tree
[  133.582679][ T6448] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  133.617145][ T6448] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  133.665966][ T5776] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  133.810550][ T2907] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  133.867827][ T5776] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  133.881769][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.891599][ T5776] usb 1-1: Product: syz
[  133.897945][ T5776] usb 1-1: Manufacturer: syz
[  133.904182][ T5776] usb 1-1: SerialNumber: syz
[  133.980563][ T5776] usb 1-1: config 0 descriptor??
[  134.040595][ T5776] ch341 1-1:0.0: ch341-uart converter detected
[  134.185337][ T6486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.157'.
[  134.533216][ T5776] usb 1-1: failed to receive control message: -121
[  134.973325][ T5776] ch341-uart: probe of ttyUSB0 failed with error -121
[  134.992754][ T5776] usb 1-1: USB disconnect, device number 2
[  134.999779][ T5776] ch341 1-1:0.0: device disconnected
[  135.074528][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  135.103306][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'.
[  135.392786][ T6503] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  135.432134][ T6502] syzkaller0: entered promiscuous mode
[  135.446596][ T6502] syzkaller0: entered allmulticast mode
[  137.837235][ T6524] netlink: 436 bytes leftover after parsing attributes in process `syz.2.167'.
[  137.846428][ T6524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.167'.
[  138.152233][ T6528] netlink: 36 bytes leftover after parsing attributes in process `syz.0.168'.
[  139.267056][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'.
[  139.392465][ T5848] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  139.576268][ T5848] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  139.599497][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.618865][ T5848] usb 2-1: Product: syz
[  139.623426][ T5848] usb 2-1: Manufacturer: syz
[  139.628127][ T5848] usb 2-1: SerialNumber: syz
[  139.651136][ T5848] usb 2-1: config 0 descriptor??
[  139.682156][ T5848] ch341 2-1:0.0: ch341-uart converter detected
[  139.883057][ T5848] usb 2-1: failed to receive control message: -121
[  139.892700][ T5848] ch341-uart: probe of ttyUSB0 failed with error -121
[  139.901042][ T6537] syzkaller0: entered promiscuous mode
[  139.914517][ T6537] syzkaller0: entered allmulticast mode
[  140.018531][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.173'.
[  140.027617][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.173'.
[  140.036831][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.173'.
[  140.231931][    T9] usb 2-1: USB disconnect, device number 7
[  140.245931][    T9] ch341 2-1:0.0: device disconnected
[  140.262903][ T6548] netlink: 'syz.0.176': attribute type 1 has an invalid length.
[  140.870681][ T6548] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.905986][ T6551] bond1: (slave veth0_to_bond): making interface the new active one
[  140.918352][ T6551] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  141.000305][ T6552] bond1: entered promiscuous mode
[  141.056153][ T6552] veth0_to_bond: entered promiscuous mode
[  141.066018][ T6556] netlink: 36 bytes leftover after parsing attributes in process `syz.2.178'.
[  141.855166][ T6552] bond1: entered allmulticast mode
[  141.861212][ T6552] veth0_to_bond: entered allmulticast mode
[  141.878484][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.176'.
[  141.978479][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'.
[  142.089755][ T6564] netlink: 'syz.0.182': attribute type 1 has an invalid length.
[  142.248536][ T6566] bond2: (slave bridge1): making interface the new active one
[  142.267398][ T6566] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  142.280343][ T6564] netlink: 44 bytes leftover after parsing attributes in process `syz.0.182'.
[  142.296196][ T6564] bond2: entered promiscuous mode
[  142.301520][ T6564] bridge1: entered promiscuous mode
[  142.307983][ T6564] bond2: entered allmulticast mode
[  142.313400][ T6564] bridge1: entered allmulticast mode
[  142.351124][ T6564] 8021q: adding VLAN 0 to HW filter on device bond2
[  143.946882][ T6578] syzkaller0: entered promiscuous mode
[  143.962542][ T6578] syzkaller0: entered allmulticast mode
[  144.852576][ T5776] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  145.095526][ T5776] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.115260][ T5776] usb 3-1: config 0 has no interfaces?
[  145.120905][ T5776] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  145.136903][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.164266][ T5776] usb 3-1: config 0 descriptor??
[  145.419383][ T5819] usb 3-1: USB disconnect, device number 5
[  145.642575][   T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  145.855405][   T23] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  145.873826][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.881986][   T23] usb 2-1: Product: syz
[  145.886625][   T23] usb 2-1: Manufacturer: syz
[  145.891315][   T23] usb 2-1: SerialNumber: syz
[  145.906417][   T23] usb 2-1: config 0 descriptor??
[  145.924531][   T23] ch341 2-1:0.0: ch341-uart converter detected
[  146.133118][   T23] usb 2-1: failed to receive control message: -121
[  146.142019][   T23] ch341-uart: probe of ttyUSB0 failed with error -121
[  146.359649][   T23] usb 2-1: USB disconnect, device number 8
[  146.374238][   T23] ch341 2-1:0.0: device disconnected
[  146.738530][ T6593] netlink: 'syz.3.188': attribute type 1 has an invalid length.
[  146.746721][ T6593] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  146.757637][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'.
[  146.775463][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'.
[  146.967180][ T6608] netlink: 'syz.3.193': attribute type 1 has an invalid length.
[  147.276106][ T6608] bond1: (slave bridge1): making interface the new active one
[  147.314079][ T6608] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  147.421419][ T6617] netlink: 44 bytes leftover after parsing attributes in process `syz.3.193'.
[  147.577400][ T6617] bond1: entered promiscuous mode
[  147.590466][ T6617] bridge1: entered promiscuous mode
[  147.611646][ T6617] bond1: entered allmulticast mode
[  147.728728][ T6617] bridge1: entered allmulticast mode
[  147.735956][ T6617] 8021q: adding VLAN 0 to HW filter on device bond1
[  148.486490][ T6628] loop1: detected capacity change from 0 to 4096
[  148.510491][ T6628] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  148.624101][ T6628] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  148.771490][ T6638] netlink: 'syz.3.201': attribute type 1 has an invalid length.
[  148.937416][ T6638] 8021q: adding VLAN 0 to HW filter on device bond2
[  149.423041][ T6640] bond2: (slave veth0_to_bond): making interface the new active one
[  149.439262][ T6640] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  149.482793][ T6641] bond2: entered promiscuous mode
[  149.510473][ T6641] veth0_to_bond: entered promiscuous mode
[  149.536469][ T6641] bond2: entered allmulticast mode
[  149.636311][ T6641] veth0_to_bond: entered allmulticast mode
[  149.667887][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'.
[  149.826997][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'.
[  149.982572][ T5776] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  150.181863][ T5776] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  150.202567][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.210725][ T5776] usb 3-1: Product: syz
[  150.222862][ T5776] usb 3-1: Manufacturer: syz
[  150.227597][ T5776] usb 3-1: SerialNumber: syz
[  150.249325][ T5776] usb 3-1: config 0 descriptor??
[  150.372654][ T5836] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  150.428049][ T5776] ch341 3-1:0.0: ch341-uart converter detected
[  150.572562][ T5836] usb 2-1: Using ep0 maxpacket: 8
[  150.588039][ T6661] loop3: detected capacity change from 0 to 32768
[  150.592336][ T5836] usb 2-1: unable to get BOS descriptor or descriptor too short
[  150.604592][ T5836] usb 2-1: config 1 has an invalid interface number: 54 but max is 1
[  150.605982][ T6661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.209 (6661)
[  150.613170][ T5836] usb 2-1: config 1 has an invalid interface number: 54 but max is 1
[  150.633894][ T5836] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  150.643132][ T5836] usb 2-1: config 1 has no interface number 0
[  150.649416][ T5836] usb 2-1: config 1 interface 54 has no altsetting 0
[  150.661893][ T5836] usb 2-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=e5.25
[  150.671585][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.680184][ T5776] usb 3-1: failed to receive control message: -121
[  150.686876][ T5776] ch341-uart: probe of ttyUSB0 failed with error -121
[  150.700659][ T5836] usb 2-1: Product: syz
[  150.706674][ T5836] usb 2-1: Manufacturer: syz
[  150.712320][ T5836] usb 2-1: SerialNumber: syz
[  150.755568][ T6661] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.768751][ T6661] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  150.793442][ T6661] BTRFS info (device loop3): force clearing of disk cache
[  150.800635][ T6661] BTRFS info (device loop3): enabling auto defrag
[  150.825519][ T6661] BTRFS info (device loop3): max_inline at 0
[  150.831580][ T6661] BTRFS info (device loop3): enabling disk space caching
[  150.842287][ T6661] BTRFS info (device loop3): disk space caching is enabled
[  150.876981][ T6661] BTRFS info (device loop3): enabling ssd optimizations
[  150.890826][ T6661] BTRFS info (device loop3): rebuilding free space tree
[  150.915860][   T23] usb 3-1: USB disconnect, device number 6
[  150.948991][ T6661] BTRFS info (device loop3): disabling free space tree
[  150.960017][   T23] ch341 3-1:0.0: device disconnected
[  150.962871][ T6661] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  151.008170][ T6661] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  151.046517][ T5836] sierra 2-1:1.54: Sierra USB modem converter detected
[  151.058059][ T5836] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[  151.069809][ T5836] usb 2-1: USB disconnect, device number 9
[  151.087329][ T5836] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  151.096617][ T5836] sierra 2-1:1.54: device disconnected
[  151.234402][ T2907] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  151.401349][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  151.544235][ T6685] loop0: detected capacity change from 0 to 40427
[  151.571687][ T6685] F2FS-fs (loop0): LFS is not compatible with checkpoint=disable
[  151.714106][ T6689] netlink: 'syz.1.214': attribute type 1 has an invalid length.
[  151.831552][ T6689] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.939095][ T6689] bond1: (slave veth0_to_bond): making interface the new active one
[  151.970184][ T6689] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  151.998230][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'.
[  152.029940][ T6697] bond1: entered promiscuous mode
[  152.035325][ T6697] veth0_to_bond: entered promiscuous mode
[  152.043933][ T6697] bond1: entered allmulticast mode
[  152.049194][ T6697] veth0_to_bond: entered allmulticast mode
[  154.583768][ T6708] fuse: Bad value for 'fd'
[  155.458795][ T6720] loop2: detected capacity change from 0 to 32768
[  155.473780][ T6720] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.221 (6720)
[  155.546467][ T6720] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.578892][ T6720] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  155.606510][ T6720] BTRFS info (device loop2): force clearing of disk cache
[  155.614817][  T788] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  155.622761][   T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  155.653440][ T6720] BTRFS info (device loop2): enabling auto defrag
[  155.667926][ T6720] BTRFS info (device loop2): max_inline at 0
[  155.700388][ T6720] BTRFS info (device loop2): enabling disk space caching
[  155.713660][ T6720] BTRFS info (device loop2): disk space caching is enabled
[  155.755728][ T6720] BTRFS info (device loop2): enabling ssd optimizations
[  155.804395][ T6720] BTRFS info (device loop2): rebuilding free space tree
[  155.836905][   T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.861216][   T23] usb 4-1: config 0 has no interfaces?
[  155.879735][  T788] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  155.893162][   T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  155.893369][ T6720] BTRFS info (device loop2): disabling free space tree
[  155.902645][  T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.917856][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.921670][ T6720] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  155.927118][  T788] usb 2-1: Product: syz
[  155.948675][  T788] usb 2-1: Manufacturer: syz
[  155.968857][   T23] usb 4-1: config 0 descriptor??
[  155.982853][  T788] usb 2-1: SerialNumber: syz
[  155.999362][ T6720] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  156.063977][  T788] usb 2-1: config 0 descriptor??
[  156.178834][  T788] ch341 2-1:0.0: ch341-uart converter detected
[  156.452354][ T5776] usb 4-1: USB disconnect, device number 3
[  156.576077][  T788] usb 2-1: failed to receive control message: -121
[  156.577013][ T2907] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  156.606146][  T788] ch341-uart: probe of ttyUSB0 failed with error -121
[  156.644048][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'.
[  156.778346][ T5773] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  156.801298][ T5818] usb 2-1: USB disconnect, device number 10
[  156.815540][ T5818] ch341 2-1:0.0: device disconnected
[  157.058533][ T6754] syzkaller0: entered promiscuous mode
[  157.067027][ T6754] syzkaller0: entered allmulticast mode
[  157.130568][ T6758] loop0: detected capacity change from 0 to 2048
[  157.211648][ T6758] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.810266][   T27] audit: type=1800 audit(1781565722.028:7): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.230" name="file1" dev="loop0" ino=1367 res=0 errno=0
[  158.134250][ T6761] fuse: Bad value for 'fd'
[  160.021945][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'.
[  160.588954][ T6777] loop0: detected capacity change from 0 to 32768
[  160.609746][ T6777] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.236 (6777)
[  160.701027][ T6777] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  160.767969][ T6777] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  160.793404][ T6787] syzkaller0: entered promiscuous mode
[  160.823201][ T6777] BTRFS info (device loop0): force clearing of disk cache
[  160.830385][ T6777] BTRFS info (device loop0): enabling auto defrag
[  160.841889][ T6787] syzkaller0: entered allmulticast mode
[  160.910612][ T6777] BTRFS info (device loop0): max_inline at 0
[  160.932476][ T5836] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  160.940202][ T6777] BTRFS info (device loop0): enabling disk space caching
[  160.972130][ T6777] BTRFS info (device loop0): disk space caching is enabled
[  161.067149][ T6777] BTRFS info (device loop0): enabling ssd optimizations
[  161.107268][ T6777] BTRFS info (device loop0): rebuilding free space tree
[  161.136562][ T6777] BTRFS info (device loop0): disabling free space tree
[  161.165805][ T6777] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  161.168002][ T5836] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  161.184861][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.193015][ T5836] usb 3-1: Product: syz
[  161.197199][ T5836] usb 3-1: Manufacturer: syz
[  161.202144][ T5836] usb 3-1: SerialNumber: syz
[  161.212895][ T6777] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  161.224319][ T5836] usb 3-1: config 0 descriptor??
[  161.232265][ T5836] ch341 3-1:0.0: ch341-uart converter detected
[  161.407553][ T2907] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  161.437352][ T5836] usb 3-1: failed to receive control message: -121
[  161.455802][ T5836] ch341-uart: probe of ttyUSB0 failed with error -121
[  161.641289][ T5836] usb 3-1: USB disconnect, device number 7
[  161.648648][ T5836] ch341 3-1:0.0: device disconnected
[  161.742004][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  164.804313][ T6831] syzkaller0: entered promiscuous mode
[  164.809816][ T6831] syzkaller0: entered allmulticast mode
[  165.791114][ T6839] netlink: 36 bytes leftover after parsing attributes in process `syz.0.251'.
[  166.067041][  T788] IPVS: starting estimator thread 0...
[  166.992727][ T6845] IPVS: using max 36 ests per chain, 86400 per kthread
[  167.734634][ T5776] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  167.906115][ T6856] netlink: 436 bytes leftover after parsing attributes in process `syz.1.257'.
[  167.915218][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.257'.
[  168.674806][ T5776] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  168.712504][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.735636][ T5776] usb 1-1: Product: syz
[  168.739961][ T5776] usb 1-1: Manufacturer: syz
[  168.742711][ T6859] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[  168.749035][ T5776] usb 1-1: SerialNumber: syz
[  168.766974][ T5776] usb 1-1: config 0 descriptor??
[  168.812860][ T6859] 8021q: adding VLAN 0 to HW filter on device bond2
[  169.717811][ T6859] bond2: (slave veth0_to_bond): making interface the new active one
[  169.733680][ T6859] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  169.749788][ T6868] syzkaller0: entered promiscuous mode
[  169.762579][ T6868] syzkaller0: entered allmulticast mode
[  169.783406][ T6859] bond2: entered promiscuous mode
[  169.788655][ T6859] veth0_to_bond: entered promiscuous mode
[  169.797451][ T6859] bond2: entered allmulticast mode
[  169.810444][ T6859] veth0_to_bond: entered allmulticast mode
[  170.121639][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'.
[  170.158273][ T6872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.261'.
[  170.363692][ T5776] usb 1-1: non-Atmel transceiver xxxx0014
[  170.529147][  T788] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  170.619389][ T5776] usb 1-1: Firmware version (0.0) predates our first public release.
[  170.790771][ T5776] usb 1-1: Please update to version 0.2 or newer
[  170.837250][ T5776] usb 1-1: atusb_probe: initialization failed, error = -19
[  171.025073][ T5776] usb 1-1: USB disconnect, device number 3
[  171.589288][  T788] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  171.604705][  T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.614483][  T788] usb 4-1: Product: syz
[  171.630580][  T788] usb 4-1: Manufacturer: syz
[  171.638210][  T788] usb 4-1: SerialNumber: syz
[  171.663784][  T788] usb 4-1: config 0 descriptor??
[  171.680454][  T788] ch341 4-1:0.0: ch341-uart converter detected
[  171.881046][  T788] usb 4-1: failed to receive control message: -71
[  171.899762][  T788] ch341-uart: probe of ttyUSB0 failed with error -71
[  171.933040][  T788] usb 4-1: USB disconnect, device number 4
[  171.953533][  T788] ch341 4-1:0.0: device disconnected
[  173.066262][ T6895] netlink: 436 bytes leftover after parsing attributes in process `syz.0.268'.
[  173.075508][ T6895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'.
[  173.903715][ T6887] loop2: detected capacity change from 0 to 32768
[  173.940457][ T6887] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.266 (6887)
[  173.977520][ T6900] syzkaller0: entered promiscuous mode
[  173.997600][ T6887] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  174.009088][ T6900] syzkaller0: entered allmulticast mode
[  174.026710][ T6887] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  174.055975][ T6887] BTRFS info (device loop2): force clearing of disk cache
[  174.072318][ T6887] BTRFS info (device loop2): enabling auto defrag
[  174.085821][ T6887] BTRFS info (device loop2): max_inline at 0
[  174.104570][ T6887] BTRFS info (device loop2): enabling disk space caching
[  174.111656][ T6887] BTRFS info (device loop2): disk space caching is enabled
[  174.636232][ T6887] BTRFS info (device loop2): enabling ssd optimizations
[  174.667659][ T6887] BTRFS info (device loop2): rebuilding free space tree
[  174.763541][ T6887] BTRFS info (device loop2): disabling free space tree
[  174.770517][ T6887] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  174.792810][ T6887] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  174.923284][ T5773] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.394299][ T6939] loop1: detected capacity change from 0 to 2048
[  175.397911][ T6926] loop3: detected capacity change from 0 to 32768
[  175.411438][ T6939] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  175.438663][ T6939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.377897][ T6926] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  176.897633][ T6926] XFS (loop3): Ending clean mount
[  176.918333][ T6926] XFS (loop3): Quotacheck needed: Please wait.
[  177.125410][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'.
[  177.149249][ T6955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.278'.
[  177.176458][ T6961] syzkaller0: entered promiscuous mode
[  177.182512][ T6961] syzkaller0: entered allmulticast mode
[  177.212963][ T6926] XFS (loop3): Quotacheck: Done.
[  177.462570][ T5776] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  177.672948][ T5776] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  177.690363][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.701704][ T5776] usb 2-1: Product: syz
[  177.708873][ T5776] usb 2-1: Manufacturer: syz
[  177.715458][ T5776] usb 2-1: SerialNumber: syz
[  177.729166][ T5776] usb 2-1: config 0 descriptor??
[  177.737372][ T5776] ch341 2-1:0.0: ch341-uart converter detected
[  177.765861][ T6969] netlink: 'syz.2.283': attribute type 1 has an invalid length.
[  177.825230][ T5770] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.908514][ T6969] bond3: (slave bridge2): making interface the new active one
[  177.944113][ T5776] usb 2-1: failed to receive control message: -71
[  177.976406][ T6969] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  178.012198][ T6971] netlink: 44 bytes leftover after parsing attributes in process `syz.2.283'.
[  178.021249][ T5776] ch341-uart: probe of ttyUSB0 failed with error -71
[  178.024826][ T5776] usb 2-1: USB disconnect, device number 11
[  178.085784][ T6971] bond3: entered promiscuous mode
[  178.109525][ T5776] ch341 2-1:0.0: device disconnected
[  178.132777][ T6971] bridge2: entered promiscuous mode
[  178.139680][ T6971] bond3: entered allmulticast mode
[  178.145508][ T6971] bridge2: entered allmulticast mode
[  178.157926][ T6971] 8021q: adding VLAN 0 to HW filter on device bond3
[  178.761630][ T6977] loop2: detected capacity change from 0 to 40427
[  178.773481][ T6977] F2FS-fs (loop2): LFS is not compatible with checkpoint=disable
[  179.064703][ T6980] syzkaller0: entered promiscuous mode
[  179.066431][ T6981] loop2: detected capacity change from 0 to 2048
[  179.072440][ T6980] syzkaller0: entered allmulticast mode
[  179.096408][ T6981] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  179.109728][ T6981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.105319][ T6975] loop3: detected capacity change from 0 to 32768
[  180.116759][ T6975] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.284 (6975)
[  180.260695][ T6975] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.302674][ T6975] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  180.321984][ T6975] BTRFS info (device loop3): force clearing of disk cache
[  180.332580][ T6975] BTRFS info (device loop3): enabling auto defrag
[  180.339126][ T6975] BTRFS info (device loop3): max_inline at 0
[  180.391300][ T6975] BTRFS info (device loop3): enabling disk space caching
[  180.440725][ T6975] BTRFS info (device loop3): disk space caching is enabled
[  180.619998][ T6975] BTRFS info (device loop3): enabling ssd optimizations
[  180.650708][ T6975] BTRFS info (device loop3): rebuilding free space tree
[  180.658044][ T5819] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  180.686501][ T6975] BTRFS info (device loop3): disabling free space tree
[  180.694501][ T6975] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  180.704847][ T6975] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  180.813267][ T2929] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  180.875751][ T5819] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.892544][ T5819] usb 1-1: config 0 has no interfaces?
[  180.902664][ T5819] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  180.922166][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.956512][ T5819] usb 1-1: config 0 descriptor??
[  181.082762][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  181.168067][  T788] usb 1-1: USB disconnect, device number 4
[  181.512063][ T7021] netlink: 'syz.3.294': attribute type 1 has an invalid length.
[  181.572085][ T7014] loop2: detected capacity change from 0 to 32768
[  181.650472][ T7021] bond3: (slave bridge2): making interface the new active one
[  181.700252][ T7021] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  181.741225][ T7014] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  181.754654][ T7024] netlink: 44 bytes leftover after parsing attributes in process `syz.3.294'.
[  181.784680][ T7024] bond3: entered promiscuous mode
[  181.788528][ T7014] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  181.789749][ T7024] bridge2: entered promiscuous mode
[  181.806074][ T7024] bond3: entered allmulticast mode
[  181.811399][ T7024] bridge2: entered allmulticast mode
[  181.819004][ T7024] 8021q: adding VLAN 0 to HW filter on device bond3
[  181.885886][ T7026] capability: warning: `syz.1.296' uses deprecated v2 capabilities in a way that may be insecure
[  182.316381][ T7014] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 4ms
[  182.482986][ T5779] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  182.490105][ T5779] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  183.571392][ T5779] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1081ms
[  183.620695][ T5779] gfs2: fsid=syz:syz.0: jid=0: Done
[  183.625087][ T7034] syzkaller0: entered promiscuous mode
[  183.636706][ T7034] syzkaller0: entered allmulticast mode
[  183.639067][ T7014] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  183.667613][ T7014] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  183.996170][ T7042] fuse: Bad value for 'fd'
[  185.547209][ T7051] netlink: 36 bytes leftover after parsing attributes in process `syz.2.304'.
[  186.342681][ T7044] loop1: detected capacity change from 0 to 32768
[  186.381642][ T7044] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.303 (7044)
[  186.473663][ T7044] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.490426][ T7044] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  186.508488][ T7044] BTRFS info (device loop1): force clearing of disk cache
[  186.521631][ T7044] BTRFS info (device loop1): enabling auto defrag
[  186.541296][ T7044] BTRFS info (device loop1): max_inline at 0
[  186.565016][ T7044] BTRFS info (device loop1): enabling disk space caching
[  186.573319][ T7044] BTRFS info (device loop1): disk space caching is enabled
[  186.692625][ T7044] BTRFS info (device loop1): enabling ssd optimizations
[  186.734401][ T7044] BTRFS info (device loop1): rebuilding free space tree
[  186.784766][ T7044] BTRFS info (device loop1): disabling free space tree
[  186.792997][ T5779] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  186.815622][ T7044] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  186.836342][ T7044] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  187.002155][ T5779] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.014451][ T2883] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  187.015907][ T5779] usb 3-1: config 0 has no interfaces?
[  187.031236][ T5779] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  187.050087][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.098713][ T5779] usb 3-1: config 0 descriptor??
[  187.339817][ T5779] usb 3-1: USB disconnect, device number 8
[  189.008731][ T7073] netlink: 'syz.0.307': attribute type 1 has an invalid length.
[  189.017691][ T7073] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  189.435957][ T7077] netlink: 44 bytes leftover after parsing attributes in process `syz.0.307'.
[  190.008266][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  190.024323][ T7091] fuse: Bad value for 'fd'
[  191.923777][ T7111] syzkaller0: entered promiscuous mode
[  191.929301][ T7111] syzkaller0: entered allmulticast mode
[  191.966809][ T7113] netlink: 'syz.1.319': attribute type 1 has an invalid length.
[  192.024729][ T7109] loop2: detected capacity change from 0 to 32768
[  192.086041][ T7109] JBD2: Ignoring recovery information on journal
[  192.176163][ T7109] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  192.264177][ T7092] loop3: detected capacity change from 0 to 131072
[  192.284240][ T7092] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 150994945)
[  192.305331][ T7092] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  192.327615][ T7092] F2FS-fs (loop3): invalid crc value
[  192.388482][ T7092] F2FS-fs (loop3): Found nat_bits in checkpoint
[  192.549767][ T7092] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  192.551032][ T5773] ocfs2: Unmounting device (7,2) on (node local)
[  192.565819][ T7092] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  192.616779][   T27] audit: type=1800 audit(1781565756.898:8): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.310" name="file1" dev="loop3" ino=7 res=0 errno=0
[  192.668909][ T7092] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[  194.037933][ T7135] loop3: detected capacity change from 0 to 32768
[  194.051436][ T7135] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.321 (7135)
[  194.098586][ T7135] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  194.111029][ T7135] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  194.121943][ T7135] BTRFS info (device loop3): force clearing of disk cache
[  194.130516][ T7135] BTRFS info (device loop3): enabling auto defrag
[  194.139731][ T7135] BTRFS info (device loop3): max_inline at 0
[  194.146550][ T7135] BTRFS info (device loop3): enabling disk space caching
[  194.155126][ T7135] BTRFS info (device loop3): disk space caching is enabled
[  194.241998][ T7135] BTRFS info (device loop3): enabling ssd optimizations
[  194.271732][ T7135] BTRFS info (device loop3): rebuilding free space tree
[  194.322205][ T7135] BTRFS info (device loop3): disabling free space tree
[  194.335850][ T7135] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  194.352609][ T7135] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  194.412013][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  194.419400][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  194.560559][   T41] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  195.049309][ T7116] bond2: (slave bridge1): making interface the new active one
[  195.057675][ T7116] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  195.066704][ T7113] netlink: 44 bytes leftover after parsing attributes in process `syz.1.319'.
[  195.077997][ T7113] bond2: entered promiscuous mode
[  195.083571][ T7113] bridge1: entered promiscuous mode
[  195.088956][ T7113] bond2: entered allmulticast mode
[  195.094410][ T7113] bridge1: entered allmulticast mode
[  195.100099][ T7113] 8021q: adding VLAN 0 to HW filter on device bond2
[  195.240062][ T7160] fuse: Bad value for 'fd'
[  195.363710][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  196.802541][ T5819] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  197.012541][ T5819] usb 2-1: Using ep0 maxpacket: 32
[  197.033679][ T5819] usb 2-1: unable to get BOS descriptor or descriptor too short
[  197.056431][ T5819] usb 2-1: config 8 has an invalid interface number: 94 but max is 0
[  197.081005][ T7181] syzkaller0: entered promiscuous mode
[  197.085092][ T5819] usb 2-1: config 8 has no interface number 0
[  197.110546][ T7181] syzkaller0: entered allmulticast mode
[  197.113060][ T5819] usb 2-1: config 8 interface 94 has no altsetting 0
[  197.149949][ T5819] usb 2-1: string descriptor 0 read error: -22
[  197.161448][ T5819] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62
[  197.170970][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.222249][ T5819] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  197.452902][ T5819] gspca_sn9c2028: read1 error -71
[  197.458968][ T5819] gspca_sn9c2028: read1 error -71
[  197.474447][ T5819] gspca_sn9c2028: read1 error -71
[  197.488646][ T5819] sn9c2028: probe of 2-1:8.94 failed with error -71
[  197.516514][ T5819] usb 2-1: USB disconnect, device number 12
[  198.043111][ T7191] syz.0.333 uses obsolete (PF_INET,SOCK_PACKET)
[  198.325945][ T5776] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  198.536151][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.553537][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.575769][ T5776] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  198.585029][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.619143][ T5776] usb 1-1: config 0 descriptor??
[  199.083485][ T5776] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  199.306252][ T7184] netlink: 'syz.2.331': attribute type 1 has an invalid length.
[  199.314783][ T7184] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  199.377277][ T7186] netlink: 44 bytes leftover after parsing attributes in process `syz.2.331'.
[  199.828729][ T7197] loop3: detected capacity change from 0 to 32768
[  199.839328][ T7197] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.335 (7197)
[  199.868053][ T7197] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  199.878388][ T7197] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  199.887615][ T7197] BTRFS info (device loop3): force clearing of disk cache
[  199.897265][ T7197] BTRFS info (device loop3): enabling auto defrag
[  199.906259][ T7197] BTRFS info (device loop3): max_inline at 0
[  199.912299][ T7197] BTRFS info (device loop3): enabling disk space caching
[  199.921898][ T7197] BTRFS info (device loop3): disk space caching is enabled
[  199.965633][ T7197] BTRFS info (device loop3): enabling ssd optimizations
[  199.978808][ T7197] BTRFS info (device loop3): rebuilding free space tree
[  200.007018][ T7197] BTRFS info (device loop3): disabling free space tree
[  200.022486][ T7197] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  200.032190][ T7197] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  200.062882][ T5819] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  200.171633][ T2951] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  200.282533][ T5819] usb 3-1: Using ep0 maxpacket: 32
[  200.296679][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  200.315974][ T5819] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.330242][ T5819] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.343321][ T5819] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  200.344995][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.359754][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0
[  200.374066][ T5819] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  200.383634][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.401939][ T5819] usb 3-1: config 0 descriptor??
[  200.834189][ T5819] hid (null): report_id 885070154 is invalid
[  200.850765][ T5819] corsair-cpro 0003:1B1C:0C10.0003: report_id 885070154 is invalid
[  200.858884][ T5819] corsair-cpro 0003:1B1C:0C10.0003: item 0 4 1 8 parsing failed
[  200.868700][ T5819] corsair-cpro: probe of 0003:1B1C:0C10.0003 failed with error -22
[  200.907893][ T5779] usb 1-1: USB disconnect, device number 5
[  201.118571][  T788] usb 3-1: USB disconnect, device number 9
[  201.548995][ T7237] syzkaller0: entered promiscuous mode
[  201.570025][ T7237] syzkaller0: entered allmulticast mode
[  201.599849][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  201.605912][ T5777] Bluetooth: hci0: command 0x0406 tx timeout
[  201.605950][ T5783] Bluetooth: hci1: command 0x0406 tx timeout
[  201.611915][ T5777] Bluetooth: hci3: command 0x0406 tx timeout
[  204.192842][ T7240] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[  204.200850][ T7240] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  204.290666][ T7242] netlink: 44 bytes leftover after parsing attributes in process `syz.2.344'.
[  204.307137][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'.
[  204.494856][ T7257] netlink: 'syz.0.349': attribute type 1 has an invalid length.
[  204.547784][ T7257] 8021q: adding VLAN 0 to HW filter on device bond3
[  204.727768][ T7263] bond1: (slave veth0_to_bond): Releasing active interface
[  204.755789][ T7263] veth0_to_bond: left promiscuous mode
[  204.774293][ T7263] veth0_to_bond: left allmulticast mode
[  204.850654][ T7263] bond3: (slave veth0_to_bond): making interface the new active one
[  204.888152][ T7263] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  205.069955][ T7257] bond3: entered promiscuous mode
[  205.092462][ T7257] veth0_to_bond: entered promiscuous mode
[  205.102638][ T7257] bond3: entered allmulticast mode
[  205.118283][ T7257] veth0_to_bond: entered allmulticast mode
[  205.175624][ T7265] netlink: 44 bytes leftover after parsing attributes in process `syz.0.349'.
[  205.915623][ T7253] loop1: detected capacity change from 0 to 32768
[  206.033907][ T7253] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  206.223315][ T7253] XFS (loop1): Ending clean mount
[  206.272806][ T7253] XFS (loop1): Quotacheck needed: Please wait.
[  206.315139][ T7283] syzkaller0: entered promiscuous mode
[  206.320667][ T7283] syzkaller0: entered allmulticast mode
[  206.390944][ T7253] XFS (loop1): Quotacheck: Done.
[  206.667977][ T7273] loop0: detected capacity change from 0 to 32768
[  206.713091][ T7273] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  206.722891][ T7273] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  206.800146][ T7273] XFS (loop0): Ending clean mount
[  206.830416][ T7273] XFS (loop0): Quotacheck needed: Please wait.
[  206.906403][ T7273] XFS (loop0): Quotacheck: Done.
[  207.064150][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  207.317409][ T5772] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  209.604670][ T7304] netlink: 'syz.0.359': attribute type 1 has an invalid length.
[  209.626639][ T7304] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  209.778049][ T7308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.359'.
[  209.800588][ T7315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.361'.
[  210.174020][ T7319] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[  210.345135][ T7319] 8021q: adding VLAN 0 to HW filter on device bond3
[  210.378484][ T7322] bond1: (slave veth0_to_bond): Releasing active interface
[  210.391388][ T7322] veth0_to_bond: left promiscuous mode
[  210.401831][ T7322] veth0_to_bond: left allmulticast mode
[  210.607306][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  210.684782][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'.
[  210.735848][ T7322] bond3: (slave veth0_to_bond): making interface the new active one
[  210.794388][ T7322] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  210.814136][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.848991][    T9] usb 3-1: config 0 has no interfaces?
[  210.859123][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  210.859151][ T7324] bond3: entered promiscuous mode
[  210.881588][ T7324] veth0_to_bond: entered promiscuous mode
[  210.888298][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.893192][ T7324] bond3: entered allmulticast mode
[  210.901724][ T7324] veth0_to_bond: entered allmulticast mode
[  210.912137][    T9] usb 3-1: config 0 descriptor??
[  210.932873][ T7328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.362'.
[  211.372497][    T9] usb 3-1: USB disconnect, device number 10
[  211.464880][ T7348] pimreg: entered allmulticast mode
[  212.127489][ T7350] netlink: 'syz.1.372': attribute type 1 has an invalid length.
[  212.316006][ T7350] bond4: (slave bridge2): making interface the new active one
[  212.324945][ T7350] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  212.343699][ T7356] netlink: 44 bytes leftover after parsing attributes in process `syz.1.372'.
[  212.387282][ T7356] bond4: entered promiscuous mode
[  212.404096][ T7356] bridge2: entered promiscuous mode
[  212.413153][ T7356] bond4: entered allmulticast mode
[  212.418389][ T7356] bridge2: entered allmulticast mode
[  212.424568][ T7356] 8021q: adding VLAN 0 to HW filter on device bond4
[  213.160885][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.184151][ T7370] batadv_slave_1: entered promiscuous mode
[  213.601873][ T7366] loop3: detected capacity change from 0 to 32768
[  213.862664][ T5779] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  214.622901][ T5779] usb 1-1: Using ep0 maxpacket: 8
[  214.635341][ T5779] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  214.644182][ T5779] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  214.674392][ T5779] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  214.688117][ T5779] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  214.699574][ T5779] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  214.719803][ T5779] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  214.729480][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.935216][ T7381] netlink: 'syz.2.384': attribute type 1 has an invalid length.
[  214.988459][ T5779] usb 1-1: GET_CAPABILITIES returned 0
[  214.994184][ T5779] usbtmc 1-1:16.0: can't read capabilities
[  215.003205][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  215.142254][ T7381] bond4: (slave bridge3): making interface the new active one
[  215.151890][ T7381] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  215.171067][ T7385] netlink: 44 bytes leftover after parsing attributes in process `syz.2.384'.
[  215.188426][ T7385] bond4: entered promiscuous mode
[  215.196048][ T7385] bridge3: entered promiscuous mode
[  215.201705][ T7385] bond4: entered allmulticast mode
[  215.206955][ T7385] bridge3: entered allmulticast mode
[  215.216595][ T7385] 8021q: adding VLAN 0 to HW filter on device bond4
[  215.264978][    T9] usb 4-1: Using ep0 maxpacket: 32
[  215.268388][ T7372] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_IN returned 0
[  215.282314][    T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  215.312515][    T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  215.321557][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  215.341124][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  215.371750][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  215.396461][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  215.420204][    T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  215.442411][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.461687][    T9] usb 4-1: config 0 descriptor??
[  215.490304][ T5779] usb 1-1: USB disconnect, device number 6
[  215.821869][    T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  216.432655][    T9] usb 4-1: USB disconnect, device number 5
[  216.588118][    T9] usblp0: removed
[  218.348114][ T7428] netlink: 'syz.0.396': attribute type 1 has an invalid length.
[  218.597130][ T7428] bond4: (slave bridge2): making interface the new active one
[  218.652158][ T7428] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  218.725199][ T7431] netlink: 44 bytes leftover after parsing attributes in process `syz.0.396'.
[  218.765419][ T7431] bond4: entered promiscuous mode
[  218.770500][ T7431] bridge2: entered promiscuous mode
[  218.785574][ T7431] bond4: entered allmulticast mode
[  218.807766][ T7431] bridge2: entered allmulticast mode
[  218.827002][ T7431] 8021q: adding VLAN 0 to HW filter on device bond4
[  219.147711][ T7437] loop2: detected capacity change from 0 to 512
[  219.183386][ T7437] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  219.190823][ T7437] UDF-fs: Scanning with blocksize 512 failed
[  219.247131][ T7437] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  219.264873][ T7437] UDF-fs: Scanning with blocksize 1024 failed
[  219.313024][ T7437] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  219.385193][ T7437] UDF-fs: Scanning with blocksize 2048 failed
[  219.481667][ T7437] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  219.735419][ T7437] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  220.144041][   T27] audit: type=1800 audit(1781565784.428:9): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.398" name="file1" dev="loop2" ino=26 res=0 errno=0
[  220.202788][ T7437] ------------[ cut here ]------------
[  220.208751][ T7437] WARNING: CPU: 1 PID: 7437 at fs/udf/truncate.c:224 udf_truncate_extents+0xd87/0xef0
[  220.218468][ T7437] Modules linked in:
[  220.223122][ T7437] CPU: 1 PID: 7437 Comm: syz.2.398 Not tainted syzkaller #0
[  220.230435][ T7437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  220.240885][ T7437] RIP: 0010:udf_truncate_extents+0xd87/0xef0
[  220.246980][ T7437] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 73 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a9 f4 88 fe <0f> 0b e9 6a ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e8 f3 ff ff 4c
[  220.266759][ T7437] RSP: 0018:ffffc9000bc672e0 EFLAGS: 00010283
[  220.272952][ T7437] RAX: ffffffff82fe36e7 RBX: 1ffff1100b0801a2 RCX: 0000000000080000
[  220.280955][ T7437] RDX: ffffc9000da3d000 RSI: 0000000000016e89 RDI: 0000000000016e8a
[  220.289171][ T7437] RBP: ffffc9000bc674c0 R08: ffff888022c93c00 R09: 0000000000000002
[  220.297236][ T7437] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000
[  220.305298][ T7437] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a
[  220.313359][ T7437] FS:  00007fdbb9fd26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  220.322321][ T7437] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  220.329019][ T7437] CR2: 00007f3ecd473000 CR3: 000000002fbfe000 CR4: 00000000003506e0
[  220.337088][ T7437] Call Trace:
[  220.340404][ T7437]  <TASK>
[  220.343442][ T7437]  ? udf_discard_prealloc+0x5c0/0x5c0
[  220.348862][ T7437]  ? udf_write_failed+0x178/0x1b0
[  220.353993][ T7437]  ? __lock_acquire+0x7d40/0x7d40
[  220.359053][ T7437]  ? __rwlock_init+0xe0/0x150
[  220.363829][ T7437]  ? down_write+0x16e/0x200
[  220.368391][ T7437]  ? do_raw_spin_unlock+0x121/0x230
[  220.373685][ T7437]  udf_write_failed+0x180/0x1b0
[  220.378574][ T7437]  udf_write_begin+0x21f/0x420
[  220.383533][ T7437]  generic_perform_write+0x2fe/0x5c0
[  220.389049][ T7437]  ? generic_file_direct_write+0x3e0/0x3e0
[  220.394961][ T7437]  ? rcu_is_watching+0x15/0xb0
[  220.399762][ T7437]  ? generic_file_direct_write+0x174/0x3e0
[  220.405665][ T7437]  __generic_file_write_iter+0x1ac/0x230
[  220.411358][ T7437]  udf_file_write_iter+0x2b5/0x610
[  220.416650][ T7437]  do_iter_write+0x738/0xc30
[  220.421304][ T7437]  ? vfs_iter_write+0xa0/0xa0
[  220.426092][ T7437]  ? __asan_memset+0x22/0x40
[  220.430727][ T7437]  ? iov_iter_bvec+0xd4/0x1b0
[  220.435506][ T7437]  ? vfs_iter_write+0x6e/0xa0
[  220.440232][ T7437]  iter_file_splice_write+0x6a3/0xcb0
[  220.445768][ T7437]  ? splice_from_pipe+0x180/0x180
[  220.450854][ T7437]  ? splice_shrink_spd+0xc0/0xc0
[  220.455902][ T7437]  ? common_file_perm+0x198/0x1f0
[  220.460971][ T7437]  ? splice_from_pipe+0x180/0x180
[  220.466093][ T7437]  direct_splice_actor+0xe8/0x130
[  220.471163][ T7437]  splice_direct_to_actor+0x304/0x8c0
[  220.476781][ T7437]  ? direct_file_splice_eof+0xb0/0xb0
[  220.482204][ T7437]  ? warn_unsupported+0xc0/0xc0
[  220.487152][ T7437]  ? fsnotify_perm+0x5d/0x5e0
[  220.492028][ T7437]  ? security_file_permission+0x79/0xa0
[  220.497696][ T7437]  do_splice_direct+0x1d5/0x2f0
[  220.502643][ T7437]  ? splice_direct_to_actor+0x8c0/0x8c0
[  220.508220][ T7437]  ? rcu_read_lock_any_held+0xb4/0x140
[  220.513771][ T7437]  ? do_splice_direct+0x2f0/0x2f0
[  220.518866][ T7437]  do_sendfile+0x5f2/0xef0
[  220.523391][ T7437]  ? do_pwritev+0x3a0/0x3a0
[  220.527952][ T7437]  __se_sys_sendfile64+0x145/0x1a0
[  220.533190][ T7437]  ? lock_chain_count+0x20/0x20
[  220.538077][ T7437]  ? __x64_sys_sendfile64+0xb0/0xb0
[  220.543401][ T7437]  ? lockdep_hardirqs_on+0x98/0x150
[  220.548647][ T7437]  do_syscall_64+0x55/0xb0
[  220.553150][ T7437]  ? clear_bhb_loop+0x40/0x90
[  220.557868][ T7437]  ? clear_bhb_loop+0x40/0x90
[  220.562634][ T7437]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  220.568568][ T7437] RIP: 0033:0x7fdbb919ce59
[  220.573092][ T7437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.592970][ T7437] RSP: 002b:00007fdbb9fd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  220.601424][ T7437] RAX: ffffffffffffffda RBX: 00007fdbb9415fa0 RCX: 00007fdbb919ce59
[  220.609501][ T7437] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[  220.617533][ T7437] RBP: 00007fdbb9232d6f R08: 0000000000000000 R09: 0000000000000000
[  220.625610][ T7437] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000
[  220.633882][ T7437] R13: 00007fdbb9416038 R14: 00007fdbb9415fa0 R15: 00007ffe7cdf1648
[  220.641907][ T7437]  </TASK>
[  220.645031][ T7437] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  220.652338][ T7437] CPU: 1 PID: 7437 Comm: syz.2.398 Not tainted syzkaller #0
[  220.659733][ T7437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  220.669786][ T7437] Call Trace:
[  220.673065][ T7437]  <TASK>
[  220.675994][ T7437]  dump_stack_lvl+0x18c/0x250
[  220.680674][ T7437]  ? show_regs_print_info+0x20/0x20
[  220.685869][ T7437]  ? load_image+0x420/0x420
[  220.690374][ T7437]  panic+0x2dc/0x730
[  220.694275][ T7437]  ? bpf_jit_dump+0xd0/0xd0
[  220.698791][ T7437]  __warn+0x2e0/0x470
[  220.702781][ T7437]  ? udf_truncate_extents+0xd87/0xef0
[  220.708171][ T7437]  ? udf_truncate_extents+0xd87/0xef0
[  220.713540][ T7437]  report_bug+0x2be/0x4f0
[  220.717866][ T7437]  ? udf_truncate_extents+0xd87/0xef0
[  220.723235][ T7437]  ? udf_truncate_extents+0xd87/0xef0
[  220.728599][ T7437]  ? udf_truncate_extents+0xd89/0xef0
[  220.733964][ T7437]  handle_bug+0xcf/0x120
[  220.738207][ T7437]  exc_invalid_op+0x1a/0x50
[  220.742706][ T7437]  asm_exc_invalid_op+0x1a/0x20
[  220.747555][ T7437] RIP: 0010:udf_truncate_extents+0xd87/0xef0
[  220.753536][ T7437] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 73 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a9 f4 88 fe <0f> 0b e9 6a ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e8 f3 ff ff 4c
[  220.773136][ T7437] RSP: 0018:ffffc9000bc672e0 EFLAGS: 00010283
[  220.779200][ T7437] RAX: ffffffff82fe36e7 RBX: 1ffff1100b0801a2 RCX: 0000000000080000
[  220.787167][ T7437] RDX: ffffc9000da3d000 RSI: 0000000000016e89 RDI: 0000000000016e8a
[  220.795135][ T7437] RBP: ffffc9000bc674c0 R08: ffff888022c93c00 R09: 0000000000000002
[  220.803107][ T7437] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000
[  220.811075][ T7437] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a
[  220.819049][ T7437]  ? udf_truncate_extents+0xd87/0xef0
[  220.824440][ T7437]  ? udf_discard_prealloc+0x5c0/0x5c0
[  220.829815][ T7437]  ? udf_write_failed+0x178/0x1b0
[  220.834834][ T7437]  ? __lock_acquire+0x7d40/0x7d40
[  220.839859][ T7437]  ? __rwlock_init+0xe0/0x150
[  220.844531][ T7437]  ? down_write+0x16e/0x200
[  220.849034][ T7437]  ? do_raw_spin_unlock+0x121/0x230
[  220.854234][ T7437]  udf_write_failed+0x180/0x1b0
[  220.859089][ T7437]  udf_write_begin+0x21f/0x420
[  220.863850][ T7437]  generic_perform_write+0x2fe/0x5c0
[  220.869169][ T7437]  ? generic_file_direct_write+0x3e0/0x3e0
[  220.874984][ T7437]  ? rcu_is_watching+0x15/0xb0
[  220.879760][ T7437]  ? generic_file_direct_write+0x174/0x3e0
[  220.885580][ T7437]  __generic_file_write_iter+0x1ac/0x230
[  220.891219][ T7437]  udf_file_write_iter+0x2b5/0x610
[  220.896351][ T7437]  do_iter_write+0x738/0xc30
[  220.900955][ T7437]  ? vfs_iter_write+0xa0/0xa0
[  220.905643][ T7437]  ? __asan_memset+0x22/0x40
[  220.910231][ T7437]  ? iov_iter_bvec+0xd4/0x1b0
[  220.914900][ T7437]  ? vfs_iter_write+0x6e/0xa0
[  220.919576][ T7437]  iter_file_splice_write+0x6a3/0xcb0
[  220.924965][ T7437]  ? splice_from_pipe+0x180/0x180
[  220.929993][ T7437]  ? splice_shrink_spd+0xc0/0xc0
[  220.934932][ T7437]  ? common_file_perm+0x198/0x1f0
[  220.939967][ T7437]  ? splice_from_pipe+0x180/0x180
[  220.944989][ T7437]  direct_splice_actor+0xe8/0x130
[  220.950018][ T7437]  splice_direct_to_actor+0x304/0x8c0
[  220.955400][ T7437]  ? direct_file_splice_eof+0xb0/0xb0
[  220.960774][ T7437]  ? warn_unsupported+0xc0/0xc0
[  220.965633][ T7437]  ? fsnotify_perm+0x5d/0x5e0
[  220.970302][ T7437]  ? security_file_permission+0x79/0xa0
[  220.975877][ T7437]  do_splice_direct+0x1d5/0x2f0
[  220.980744][ T7437]  ? splice_direct_to_actor+0x8c0/0x8c0
[  220.986292][ T7437]  ? rcu_read_lock_any_held+0xb4/0x140
[  220.991748][ T7437]  ? do_splice_direct+0x2f0/0x2f0
[  220.996785][ T7437]  do_sendfile+0x5f2/0xef0
[  221.001216][ T7437]  ? do_pwritev+0x3a0/0x3a0
[  221.005730][ T7437]  __se_sys_sendfile64+0x145/0x1a0
[  221.010842][ T7437]  ? lock_chain_count+0x20/0x20
[  221.015691][ T7437]  ? __x64_sys_sendfile64+0xb0/0xb0
[  221.020894][ T7437]  ? lockdep_hardirqs_on+0x98/0x150
[  221.026097][ T7437]  do_syscall_64+0x55/0xb0
[  221.030508][ T7437]  ? clear_bhb_loop+0x40/0x90
[  221.035177][ T7437]  ? clear_bhb_loop+0x40/0x90
[  221.039847][ T7437]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  221.045737][ T7437] RIP: 0033:0x7fdbb919ce59
[  221.050147][ T7437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.069765][ T7437] RSP: 002b:00007fdbb9fd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  221.078192][ T7437] RAX: ffffffffffffffda RBX: 00007fdbb9415fa0 RCX: 00007fdbb919ce59
[  221.086165][ T7437] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[  221.094135][ T7437] RBP: 00007fdbb9232d6f R08: 0000000000000000 R09: 0000000000000000
[  221.102099][ T7437] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000
[  221.110073][ T7437] R13: 00007fdbb9416038 R14: 00007fdbb9415fa0 R15: 00007ffe7cdf1648
[  221.118058][ T7437]  </TASK>
[  221.121317][ T7437] Kernel Offset: disabled
[  221.125693][ T7437] Rebooting in 86400 seconds..