last executing test programs:

6m26.732885047s ago: executing program 1 (id=721):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780"], 0x58}}, 0x0)

6m25.677450887s ago: executing program 1 (id=726):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x4, &(0x7f0000000980)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x80007fb}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0x7, 0x0, &(0x7f00000000c0)="e0b9545dd30a37", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m23.478090415s ago: executing program 1 (id=730):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)

6m19.156626787s ago: executing program 1 (id=734):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"})
r1 = syz_open_pts(r0, 0x42)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, 0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
dup3(r1, r0, 0x0)

6m18.295114121s ago: executing program 1 (id=738):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r5, r0, &(0x7f0000000040)=0x64, 0x23b)

6m14.141407686s ago: executing program 1 (id=744):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)

5m57.993189816s ago: executing program 32 (id=744):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)

4m57.668307496s ago: executing program 5 (id=920):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0,.=/', 0x0)

4m57.028661147s ago: executing program 5 (id=921):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51)
sendto$inet(r0, &(0x7f0000000700)="1ede55", 0x3, 0x40011, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="b1b252c96abb52efe8fa10bfcf457670aaa11b0a65ef100d8e260d87b9eea54d6b3369e8779d6ca6a848c9940bac42672b698dd75a8f50159d65c1836716f16f127ac2f5198020740782cfdc73754e9c1275ffa196f82392", 0x58}, {&(0x7f0000000280)="5262e472b7839ed416", 0x9}], 0x2)

4m56.065836873s ago: executing program 5 (id=925):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffa", 0xda}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b", 0x79}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000000000000000000000000033", 0x58}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6fe", 0xa6}], 0x2}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

4m54.726461574s ago: executing program 5 (id=930):
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x15)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fff"], 0x14)

4m47.173401095s ago: executing program 5 (id=938):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r4, 0x11, 0x6}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050)

4m41.874035308s ago: executing program 5 (id=944):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000380))
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040), 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)

4m26.436872924s ago: executing program 33 (id=944):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000380))
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040), 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)

2m58.555795594s ago: executing program 6 (id=1252):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbc02, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000540)=<r4=>0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0x3, [0x6, 0x1]}, {0x80000000, 0x0, 0x3, [0xfffffff7, 0x9]}, 0x2, [0x5, 0x80000000]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0)

2m57.657628171s ago: executing program 6 (id=1256):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
close(0xffffffffffffffff)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

2m56.904673378s ago: executing program 6 (id=1259):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000200)=0xc5, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x1)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000000080504000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4040040)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000003c0))
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508dd", 0x5f, 0x1, 0x0, 0x0)

2m54.880185421s ago: executing program 6 (id=1269):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
close(0xffffffffffffffff)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

2m54.065798419s ago: executing program 6 (id=1272):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_matches\x00')
socket$kcm(0x10, 0x2, 0x0)
memfd_secret(0x0)
socket(0x10, 0x3, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x20)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]})

2m52.669369405s ago: executing program 6 (id=1278):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
set_mempolicy(0x0, &(0x7f0000000040)=0xfff, 0x8)
r2 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x1, 0x1d4})
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r3, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$nci(r3, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0xa, 0xff7, &(0x7f0000001e00)=""/4087, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)={0x18, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x11, 0x0, 0x0, @uid}]}, 0x18}], 0x1, 0x0, 0x0, 0x4}, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, <r9=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x8, 0x28d662, 0x1096e})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
close_range(r2, 0xffffffffffffffff, 0x0)

2m37.362462166s ago: executing program 34 (id=1278):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
set_mempolicy(0x0, &(0x7f0000000040)=0xfff, 0x8)
r2 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x1, 0x1d4})
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r3, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$nci(r3, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0xa, 0xff7, &(0x7f0000001e00)=""/4087, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)={0x18, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x11, 0x0, 0x0, @uid}]}, 0x18}], 0x1, 0x0, 0x0, 0x4}, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, <r9=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x8, 0x28d662, 0x1096e})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
close_range(r2, 0xffffffffffffffff, 0x0)

58.918714527s ago: executing program 2 (id=1537):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f00000008c0))

55.785569424s ago: executing program 2 (id=1547):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@newtaction={0x278, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x264, 0x1, [@m_bpf={0x98, 0x6, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x59, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a6660c265b59ed90ce6980eda6d48215f2ed37602646c6855209b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x14c, 0x1d, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa54, 0x1, 0x1, 0x0, 0x7ff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2a, 0xffffffffffffffff, 0x2, 0xf}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0x1, 0x1, 0x4, 0x9}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x600, 0x7, 0x2, 0x7, 0x7f}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x246f, 0x3, 0x2, 0xc}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x409, 0x7, 0x61, 0x7}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2d9, 0x8, 0x8, 0x5, 0x1}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe, 0x4, 0x1, 0x9cb0, 0x100}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2, 0xffffffffffffffff, 0x1, 0xe9}, 0x2}}]}, {0x1d, 0x6, "00fd996c0961009eaf47a57fbcdc83003bb1bb54b96dcc3537"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_connmark={0x34, 0x13, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x48, 0x1d, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x14, 0x2, 0x1, 0xe9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x2404c8d0}, 0x20040800)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

54.865560989s ago: executing program 2 (id=1549):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x82, &(0x7f00000000c0)=@sack_info={0x0, 0x0, 0x5}, &(0x7f0000000100)=0xc)

52.304655009s ago: executing program 2 (id=1552):
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRES16, @ANYBLOB="4b6c144af0e27890ae08d04f5b3b30594eb05c0dd83bf99352120d8aea0c5722efc14621b8f98a67779bf51e4a52891100f015f1d8a681ef1579cbbc1bb7e52621038304ed15749d7f12fd29888934c138ccc0a38c72094434b347bb0b04848e88d4602259648747aa2b8b9c3fc0", @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6ee, &(0x7f0000032440)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
write$cgroup_subtree(r0, 0x0, 0x32600)

50.143204065s ago: executing program 2 (id=1560):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)="68377862ebcae81666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249299dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd7", 0x93}, {0x0}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1491bce5d1e3e87a1995bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01d", 0x48}], 0x3}}], 0x1, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

47.744693196s ago: executing program 2 (id=1563):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/179, 0xb3)

45.073388771s ago: executing program 35 (id=1563):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/179, 0xb3)

14.400050392s ago: executing program 7 (id=1635):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c", 0x48}, {&(0x7f0000000340)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2", 0x4e}, {&(0x7f0000000a00)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)="68377862ebcae81666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249299dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec42234c4ff967a186f9696f4bb3226", 0xad}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1491bce5d1e3e87a1995bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4f9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a6462f37", 0x91}], 0x2}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

13.140959241s ago: executing program 7 (id=1640):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4048010}, 0x804)

12.383838815s ago: executing program 7 (id=1644):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0})

11.010105561s ago: executing program 3 (id=1646):
r0 = socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x9)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x2, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
socket(0x2, 0x2, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
geteuid()
socket$inet(0x2, 0x2, 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080))
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

9.363688993s ago: executing program 3 (id=1649):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c", 0x48}, {&(0x7f0000000340)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2", 0x4e}, {&(0x7f0000000a00)="5be3b011e12323e4ab88c9472f0700000000000000e71ba6", 0x18}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)="68377862ebcae81666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249299dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec42234c4ff967a186f9696f4bb3226", 0xad}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1491bce5d1e3e87a1995bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4f9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a6462f37", 0x91}], 0x2}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

7.857439173s ago: executing program 7 (id=1651):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000000000000000000000000033", 0x58}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e3", 0x62}], 0x2}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

7.402552941s ago: executing program 3 (id=1653):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4048010}, 0x804)

6.996064664s ago: executing program 0 (id=1654):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bind$vsock_stream(r1, &(0x7f0000000000)={0x10}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc0c4)

6.778229931s ago: executing program 4 (id=1655):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, <r1=>0x0}, 0x2058)
write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r2, {0x0, 0x0, 0x80003ff}}, 0x20)
syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000008c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008700)=ANY=[@ANYBLOB="3000000000000000000000000000000000000000643b1475000000000000000006"], 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f000000ce00)={0x2020, 0x0, <r3=>0x0}, 0x2020)
getdents64(0xffffffffffffffff, 0x0, 0x300)
getdents64(0xffffffffffffffff, 0x0, 0x56)
write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r3}, 0x10)
getdents64(0xffffffffffffffff, 0x0, 0x0)

6.757805989s ago: executing program 7 (id=1656):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8582, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
socket(0x25, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x80000008, 0xfb83, 0x3, 0x2, 0xb}]})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x7}]})

6.639100737s ago: executing program 3 (id=1657):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x2)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
syz_open_dev$sg(0x0, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="ad56b287db1e57f7b0a3db92ea364143eaba7ec841abb59b14a95608c8d4a138a13c033c2f1719b6a8f809786681fff5a7056d67175c055a0e530b86856891893ab2f7aab7d7604999dcecbbe37259d90a6e0b077196638ccd1b3eb39021d7d612191e74870cb7ae885248d8a4b4726b245676527a735feab1ddd2e7dd448ed30760fc64777bb7c1a160fa79dbfad6886a782759533d622832", 0x99)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x1000010, &(0x7f0000000700)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@appraise}, {@subj_role={'subj_role', 0x3d, '.%#'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, '[%/^^\\@[]-&^'}}]}})
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61)

4.871171551s ago: executing program 0 (id=1658):
r0 = socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x9)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x2, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
socket(0x2, 0x2, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
geteuid()
socket$inet(0x2, 0x2, 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.638131356s ago: executing program 4 (id=1659):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x40)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r1 = fcntl$dupfd(r0, 0x406, r0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x47ca}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x400}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3, 0x9}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x1)

3.703177411s ago: executing program 7 (id=1660):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x2, "3aec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001040)={0x40, 0x8, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.407785727s ago: executing program 3 (id=1661):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b80), 0xa2800, 0x0)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

2.848312002s ago: executing program 0 (id=1662):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x8d)
close(r0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x5)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}})

2.765700693s ago: executing program 4 (id=1663):
creat(&(0x7f0000000140)='./file0\x00', 0x8)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x803}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

1.981304164s ago: executing program 0 (id=1664):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000009c0)={0xffffffffffffff9b, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0xc, @string={0xc, 0x3, "00f5dd9b8af4f9e13b61"}}, 0x0, 0x0}, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)

1.945175392s ago: executing program 4 (id=1665):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000000000000000000000000033", 0x58}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e3", 0x62}], 0x2}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.705571673s ago: executing program 8 (id=1564):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d0001000000000904"], 0x0)

1.051211708s ago: executing program 4 (id=1666):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4048010}, 0x804)

740.314796ms ago: executing program 0 (id=1667):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8a"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)

247.887105ms ago: executing program 4 (id=1668):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c)

57.573229ms ago: executing program 0 (id=1669):
syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='sched_process_wait\x00', r2, 0x0, 0xfffffffffffffffb}, 0x76)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
ioperm(0xc, 0x1ff, 0x8)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000)
r3 = socket(0x21, 0x803, 0x9)
getsockopt$sock_buf(r3, 0x1, 0x2b, &(0x7f0000000000)=""/16, &(0x7f0000000040)=0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000680)={[{@nodioread_nolock}, {@debug}, {@nodelalloc}, {@errors_continue}, {@dioread_nolock}, {@journal_checksum}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x0, 0x5e0, &(0x7f00000011c0)="$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")
r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1, 0x33, 0x2)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=1670):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffa", 0xda}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a6590", 0x38}, {&(0x7f0000000740)}], 0x5}}], 0x1, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

kernel console output (not intermixed with test programs):

612.730:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efd5498e929 code=0x7ffc0000
[  554.099406][   T30] audit: type=1326 audit(1750651612.730:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5498e929 code=0x7ffc0000
[  554.122980][   T30] audit: type=1326 audit(1750651612.730:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7efd5498e929 code=0x7ffc0000
[  554.145833][   T30] audit: type=1326 audit(1750651612.730:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5498e929 code=0x7ffc0000
[  554.168944][   T30] audit: type=1326 audit(1750651612.740:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd5498e929 code=0x7ffc0000
[  554.193925][   T30] audit: type=1326 audit(1750651612.740:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5498e929 code=0x7ffc0000
[  554.556639][ T3637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  554.647604][ T3637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  554.715429][ T3637] bond0 (unregistering): Released all slaves
[  555.266349][ T8445] loop3: detected capacity change from 0 to 512
[  555.761036][ T3637] hsr_slave_0: left promiscuous mode
[  555.792623][ T3637] hsr_slave_1: left promiscuous mode
[  555.801446][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  555.809458][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_1
[  555.901977][ T8438] Process accounting resumed
[  556.157053][ T3637] veth1_macvtap: left promiscuous mode
[  556.163467][ T3637] veth0_macvtap: left promiscuous mode
[  556.169657][ T3637] veth1_vlan: left promiscuous mode
[  556.175295][ T3637] veth0_vlan: left promiscuous mode
[  556.859616][ T8457] loop3: detected capacity change from 0 to 512
[  557.110730][ T8457] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  557.120915][ T8457] EXT4-fs (loop3): orphan cleanup on readonly fs
[  557.151477][ T8457] __quota_error: 125 callbacks suppressed
[  557.151581][ T8457] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  557.172328][ T8457] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  557.209121][ T8457] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  557.268791][ T8457] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.807: bg 0: block 40: padding at end of block bitmap is not set
[  557.297807][ T8457] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  557.318419][ T8457] EXT4-fs (loop3): 1 truncate cleaned up
[  557.327114][ T8457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  557.371483][ T8457] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.807: iget: bad i_size value: 360287970189639690
[  557.403281][ T8457] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.807: iget: bad i_size value: 360287970189639690
[  559.412498][ T8461] fuse: Bad value for 'fd'
[  559.708407][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  560.060565][   T42] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  560.312430][   T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  560.323333][   T42] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  560.335079][   T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.350513][ T3637] team0 (unregistering): Port device team_slave_1 removed
[  560.466671][   T42] usb 3-1: config 0 descriptor??
[  560.511804][ T3637] team0 (unregistering): Port device team_slave_0 removed
[  560.530577][   T42] pwc: Askey VC010 type 2 USB webcam detected.
[  560.999189][   T42] pwc: recv_control_msg error -32 req 02 val 2b00
[  561.031260][   T42] pwc: recv_control_msg error -32 req 02 val 2700
[  561.056268][   T42] pwc: recv_control_msg error -32 req 02 val 2c00
[  561.068826][ T8471] loop3: detected capacity change from 0 to 2048
[  561.148263][   T42] pwc: recv_control_msg error -32 req 04 val 1000
[  561.187580][   T42] pwc: recv_control_msg error -32 req 04 val 1300
[  561.217737][ T8471] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  561.256052][   T42] pwc: recv_control_msg error -32 req 04 val 1400
[  561.303066][   T42] pwc: recv_control_msg error -32 req 02 val 2000
[  561.326588][   T42] pwc: recv_control_msg error -32 req 02 val 2100
[  561.329422][ T8471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  561.378740][   T42] pwc: recv_control_msg error -32 req 04 val 1500
[  561.646456][   T42] pwc: recv_control_msg error -71 req 02 val 2400
[  561.656304][   T42] pwc: recv_control_msg error -71 req 02 val 2600
[  561.702396][   T42] pwc: recv_control_msg error -71 req 02 val 2900
[  561.732036][   T42] pwc: recv_control_msg error -71 req 02 val 2800
[  561.748306][   T42] pwc: recv_control_msg error -71 req 04 val 1100
[  561.817862][   T30] audit: type=1326 audit(1750651620.600:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  562.309097][   T42] pwc: recv_control_msg error -71 req 04 val 1200
[  563.281318][   T42] pwc: Registered as video103.
[  563.290407][   T42] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[  564.067397][   T30] audit: type=1326 audit(1750651621.060:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  564.094658][   T30] audit: type=1326 audit(1750651621.060:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  564.138067][   T30] audit: type=1326 audit(1750651621.060:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  564.161255][   T30] audit: type=1326 audit(1750651621.070:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  564.183952][   T30] audit: type=1326 audit(1750651621.070:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  564.206521][   T30] audit: type=1326 audit(1750651621.070:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  564.230755][   T30] audit: type=1326 audit(1750651621.070:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  564.253767][   T30] audit: type=1326 audit(1750651621.070:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  564.277520][   T30] audit: type=1326 audit(1750651621.070:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  564.300763][   T30] audit: type=1326 audit(1750651621.070:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  564.430148][   T42] usb 3-1: USB disconnect, device number 3
[  564.929292][ T8347] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  565.120500][ T8347] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  565.265631][ T8347] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  565.384385][ T8347] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  565.918192][ T8502] loop4: detected capacity change from 0 to 512
[  566.660521][ T8496] Process accounting resumed
[  569.324272][ T8513] netlink: 40 bytes leftover after parsing attributes in process `syz.4.825'.
[  569.562028][ T8347] 8021q: adding VLAN 0 to HW filter on device bond0
[  569.802040][ T8347] 8021q: adding VLAN 0 to HW filter on device team0
[  569.936249][ T2130] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.944010][ T2130] bridge0: port 1(bridge_slave_0) entered forwarding state
[  570.065336][ T2130] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.073081][ T2130] bridge0: port 2(bridge_slave_1) entered forwarding state
[  570.158279][ T8521] netlink: 'syz.2.827': attribute type 3 has an invalid length.
[  570.169037][ T8521] netlink: 'syz.2.827': attribute type 3 has an invalid length.
[  570.177260][ T8521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.827'.
[  570.359070][ T8523] loop4: detected capacity change from 0 to 16
[  570.450221][ T8523] erofs (device loop4): mounted with root inode @ nid 36.
[  570.655902][ T8347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  571.137954][ T8528] netlink: 'syz.0.830': attribute type 4 has an invalid length.
[  571.811268][ T8531] loop3: detected capacity change from 0 to 4096
[  573.077776][ T8347] 8021q: adding VLAN 0 to HW filter on device batadv0
[  573.893666][ T8550] Process accounting resumed
[  577.304947][ T8585] loop4: detected capacity change from 0 to 8
[  579.196202][ T8589] SQUASHFS error: Failed to read block 0x636: -5
[  579.204087][ T8589] SQUASHFS error: Unable to read metadata cache entry [634]
[  579.211949][ T8589] SQUASHFS error: Unable to read metadata cache entry [634]
[  579.219632][ T8589] SQUASHFS error: Unable to read directory block [629:0]
[  579.296779][ T8585] SQUASHFS error: Unable to read metadata cache entry [634]
[  579.305846][ T8585] SQUASHFS error: Unable to read metadata cache entry [634]
[  579.314300][ T8585] SQUASHFS error: Unable to read directory block [629:0]
[  579.603398][ T8585] SQUASHFS error: Unable to read metadata cache entry [634]
[  579.611734][ T8585] SQUASHFS error: Unable to read metadata cache entry [634]
[  579.621581][ T8585] SQUASHFS error: Unable to read directory block [629:0]
[  579.744870][ T8585] SQUASHFS error: Unable to read metadata cache entry [634]
[  579.752740][ T8585] SQUASHFS error: Unable to read metadata cache entry [634]
[  579.760685][ T8585] SQUASHFS error: Unable to read directory block [634:0]
[  580.611760][ T8602] input: syz0 as /devices/virtual/input/input9
[  580.975819][ T8347] veth0_vlan: entered promiscuous mode
[  581.183064][ T8347] veth1_vlan: entered promiscuous mode
[  581.579955][ T8347] veth0_macvtap: entered promiscuous mode
[  581.690109][ T8347] veth1_macvtap: entered promiscuous mode
[  581.902057][ T8347] batman_adv: batadv0: Interface activated: batadv_slave_0
[  582.053752][ T8347] batman_adv: batadv0: Interface activated: batadv_slave_1
[  582.151399][ T8347] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.160742][ T8347] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.170037][ T8347] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.180153][ T8347] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.407995][ T8613] Process accounting resumed
[  587.066529][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.865'.
[  589.095002][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  589.095085][   T30] audit: type=1326 audit(1750651647.880:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  589.339997][   T30] audit: type=1326 audit(1750651647.920:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  589.364095][   T30] audit: type=1326 audit(1750651647.930:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  589.387185][   T30] audit: type=1326 audit(1750651647.940:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  589.410158][   T30] audit: type=1326 audit(1750651647.940:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  589.435496][   T30] audit: type=1326 audit(1750651647.950:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  589.458849][ T5879] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  589.469510][   T30] audit: type=1326 audit(1750651647.950:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  589.492374][   T30] audit: type=1326 audit(1750651647.950:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  589.517328][   T30] audit: type=1326 audit(1750651647.950:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  589.541025][   T30] audit: type=1326 audit(1750651647.970:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  589.642382][ T5879] usb 4-1: Using ep0 maxpacket: 32
[  589.668666][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0
[  589.715406][ T5879] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  589.729294][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.737656][ T5879] usb 4-1: Product: syz
[  589.743100][ T5879] usb 4-1: Manufacturer: syz
[  589.748030][ T5879] usb 4-1: SerialNumber: syz
[  589.800195][ T5879] usb 4-1: config 0 descriptor??
[  590.283942][ T5879] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  590.517454][ T5879] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO)
[  590.528381][ T5879] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121
[  591.603663][ T8732] loop4: detected capacity change from 0 to 8
[  591.867428][ T8732] SQUASHFS error: Failed to read block 0x636: -5
[  591.878761][ T8732] SQUASHFS error: Unable to read metadata cache entry [634]
[  591.886369][ T8732] SQUASHFS error: Unable to read metadata cache entry [634]
[  591.894910][ T8732] SQUASHFS error: Unable to read directory block [629:0]
[  591.940658][ T8736] SQUASHFS error: Unable to read metadata cache entry [634]
[  591.948758][ T8736] SQUASHFS error: Unable to read metadata cache entry [634]
[  591.956418][ T8736] SQUASHFS error: Unable to read directory block [629:0]
[  592.100401][ T6458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  592.108716][ T6458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  592.226244][ T8732] SQUASHFS error: Unable to read metadata cache entry [634]
[  592.234221][ T8732] SQUASHFS error: Unable to read metadata cache entry [634]
[  592.242797][ T8732] SQUASHFS error: Unable to read directory block [629:0]
[  592.309815][ T5879] usb 4-1: USB disconnect, device number 4
[  592.320282][ T8736] SQUASHFS error: Unable to read metadata cache entry [634]
[  592.327982][ T8736] SQUASHFS error: Unable to read metadata cache entry [634]
[  592.339977][ T8736] SQUASHFS error: Unable to read directory block [634:0]
[  592.526639][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  592.534901][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  593.229099][ T5879] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  593.386375][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  593.386555][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  593.386762][ T5879] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  593.386929][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.400664][ T5879] usb 4-1: config 0 descriptor??
[  593.600992][ T8752] siw: device registration error -23
[  593.973593][ T8752] lo speed is unknown, defaulting to 1000
[  594.522871][ T5879] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #200: -71
[  594.537636][ T5879] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71
[  594.547540][ T5879] uclogic 0003:256C:006D.0014: failed probing pen v2 parameters: -71
[  594.557358][ T5879] uclogic 0003:256C:006D.0014: failed probing parameters: -71
[  594.565678][ T5879] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71
[  594.829554][ T5879] usb 4-1: USB disconnect, device number 5
[  594.904847][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'.
[  597.715729][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'.
[  598.211401][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  598.218194][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  598.802952][ T8801] loop4: detected capacity change from 0 to 32768
[  598.813017][ T8801] XFS: ikeep mount option is deprecated.
[  598.850013][ T5879] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  598.884449][ T8801] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  599.090227][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  599.102635][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  599.114297][ T5879] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  599.123758][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.174404][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.908'.
[  599.323203][ T5879] usb 6-1: config 0 descriptor??
[  599.808345][ T8801] XFS (loop4): Ending clean mount
[  599.845563][ T8801] XFS (loop4): Quotacheck needed: Please wait.
[  600.017569][ T8801] XFS (loop4): Quotacheck: Done.
[  600.034900][ T5879] usb 6-1: string descriptor 0 read error: -22
[  600.272163][ T5879] uclogic 0003:256C:006D.0015: interface is invalid, ignoring
[  600.753360][ T5879] usb 6-1: USB disconnect, device number 2
[  601.361321][ T5790] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  603.322421][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.917'.
[  603.402310][ T8863] netlink: 32 bytes leftover after parsing attributes in process `syz.2.918'.
[  604.368140][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'.
[  609.540687][ T8905] netlink: 'syz.5.930': attribute type 4 has an invalid length.
[  609.897509][ T8911] netlink: 'syz.5.930': attribute type 4 has an invalid length.
[  613.983766][ T8922] loop4: detected capacity change from 0 to 64
[  614.220061][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.938'.
[  614.231587][ T8924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  614.406046][ T8924] batman_adv: batadv0: Removing interface: batadv_slave_0
[  617.733857][ T8936] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  619.332918][ T8946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.943'.
[  619.791528][ T8951] netlink: 'syz.5.944': attribute type 3 has an invalid length.
[  619.799949][ T8951] netlink: 'syz.5.944': attribute type 3 has an invalid length.
[  619.809006][ T8951] netlink: 16 bytes leftover after parsing attributes in process `syz.5.944'.
[  620.111248][ T8954] input: syz0 as /devices/virtual/input/input10
[  620.580983][ T8961] input: syz0 as /devices/virtual/input/input11
[  621.359403][   T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  621.589453][   T24] usb 4-1: Using ep0 maxpacket: 32
[  621.616550][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  621.698244][   T24] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  621.708877][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.717228][   T24] usb 4-1: Product: syz
[  621.721990][   T24] usb 4-1: Manufacturer: syz
[  621.726856][   T24] usb 4-1: SerialNumber: syz
[  621.857892][   T24] usb 4-1: config 0 descriptor??
[  622.346853][   T24] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  622.635218][ T8979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.955'.
[  622.760979][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'.
[  622.771773][   T24] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EREMOTEIO)
[  622.783029][   T24] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121
[  622.997273][ T5879] usb 4-1: USB disconnect, device number 6
[  624.415164][ T8997] input: syz0 as /devices/virtual/input/input12
[  626.383530][ T9013] loop3: detected capacity change from 0 to 32768
[  626.395470][ T9013] XFS: ikeep mount option is deprecated.
[  626.561042][ T9013] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  626.752390][ T9030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.967'.
[  627.115673][ T9017] sctp: failed to load transform for md5: -2
[  627.443984][ T9013] XFS (loop3): Ending clean mount
[  627.475088][ T9013] XFS (loop3): Quotacheck needed: Please wait.
[  627.590724][ T9013] XFS (loop3): Quotacheck: Done.
[  627.945253][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'.
[  628.601130][ T9044] input: syz0 as /devices/virtual/input/input13
[  628.705403][ T5799] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  631.520717][ T9068] batman_adv: batadv0: Adding interface: dummy0
[  631.527162][ T9068] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  631.553083][ T9068] batman_adv: batadv0: Interface activated: dummy0
[  631.612828][ T9068] batadv0: mtu less than device minimum
[  631.620621][ T9068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  631.633097][ T9068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  631.645874][ T9068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  631.658088][ T9068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  631.670390][ T9068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  631.682778][ T9068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  631.695121][ T9068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  631.707566][ T9068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  632.623181][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'.
[  636.523584][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'.
[  636.986290][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  637.000328][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  637.033817][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  637.051108][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  637.078885][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  637.243889][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.996'.
[  637.383898][ T9118] lo speed is unknown, defaulting to 1000
[  639.029494][ T9118] chnl_net:caif_netlink_parms(): no params data found
[  639.186669][ T9137] warning: `syz.2.1000' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  639.303519][ T5793] Bluetooth: hci2: command tx timeout
[  641.261416][ T9118] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.269387][ T9118] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.277211][ T9118] bridge_slave_0: entered allmulticast mode
[  641.287553][ T9118] bridge_slave_0: entered promiscuous mode
[  641.389979][ T5793] Bluetooth: hci2: command tx timeout
[  641.453519][ T9118] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.461436][ T9118] bridge0: port 2(bridge_slave_1) entered disabled state
[  641.469633][ T9118] bridge_slave_1: entered allmulticast mode
[  641.479786][ T9118] bridge_slave_1: entered promiscuous mode
[  642.105775][ T9118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  642.185598][ T9177] netlink: 'syz.2.1009': attribute type 4 has an invalid length.
[  642.472007][ T9118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  643.215435][ T9118] team0: Port device team_slave_0 added
[  643.303117][ T9118] team0: Port device team_slave_1 added
[  643.460059][ T5793] Bluetooth: hci2: command tx timeout
[  643.776688][ T9118] batman_adv: batadv0: Adding interface: batadv_slave_0
[  643.784822][ T9118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  643.814175][ T9118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  644.000554][ T9118] batman_adv: batadv0: Adding interface: batadv_slave_1
[  644.007702][ T9118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  644.034524][ T9118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  644.886817][ T9118] hsr_slave_0: entered promiscuous mode
[  644.897456][ T9118] hsr_slave_1: entered promiscuous mode
[  645.095499][ T9118] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  645.103814][ T9118] Cannot create hsr debugfs directory
[  645.591389][ T5793] Bluetooth: hci2: command tx timeout
[  646.123957][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'.
[  646.434177][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  647.660977][ T9220] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  647.914781][ T9118] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  648.121381][ T9118] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  648.252975][ T9118] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  648.378793][ T9118] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  649.198169][ T9236] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  650.693330][ T9118] 8021q: adding VLAN 0 to HW filter on device bond0
[  651.445037][ T9118] 8021q: adding VLAN 0 to HW filter on device team0
[  651.812263][ T3637] bridge0: port 1(bridge_slave_0) entered blocking state
[  651.820103][ T3637] bridge0: port 1(bridge_slave_0) entered forwarding state
[  651.836841][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state
[  651.844575][ T3637] bridge0: port 2(bridge_slave_1) entered forwarding state
[  651.984270][ T9255] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  652.322557][ T9118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  652.333667][ T9118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  652.565977][ T9256] net_ratelimit: 11 callbacks suppressed
[  652.566061][ T9256] sctp: failed to load transform for md5: -2
[  653.818230][ T9272] syzkaller0: entered promiscuous mode
[  653.829006][ T9272] syzkaller0: entered allmulticast mode
[  654.750819][ T9284] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  655.841052][ T9118] 8021q: adding VLAN 0 to HW filter on device batadv0
[  656.550839][ T9303] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  656.954340][ T2130] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.247441][ T2130] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.495609][ T2130] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.732341][ T2130] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.487237][ T2130] bridge_slave_1: left allmulticast mode
[  658.493501][ T2130] bridge_slave_1: left promiscuous mode
[  658.502756][ T2130] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.653025][ T2130] bridge_slave_0: left allmulticast mode
[  658.659218][ T2130] bridge_slave_0: left promiscuous mode
[  658.666179][ T2130] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.032054][ T9327] loop3: detected capacity change from 0 to 8
[  659.330352][ T9327] SQUASHFS error: Failed to read block 0x636: -5
[  659.336978][ T9327] SQUASHFS error: Unable to read metadata cache entry [634]
[  659.344877][ T9327] SQUASHFS error: Unable to read metadata cache entry [634]
[  659.355725][ T9327] SQUASHFS error: Unable to read directory block [629:0]
[  659.417015][ T9330] netlink: 'syz.2.1060': attribute type 4 has an invalid length.
[  659.553688][ T9334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1060'.
[  659.567084][ T9334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1060'.
[  659.601579][ T9332] SQUASHFS error: Unable to read metadata cache entry [634]
[  659.609646][ T9332] SQUASHFS error: Unable to read metadata cache entry [634]
[  659.617237][ T9332] SQUASHFS error: Unable to read directory block [634:0]
[  659.713257][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  659.720618][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  659.926075][ T2130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  660.005120][ T2130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  660.044055][ T2130] bond0 (unregistering): Released all slaves
[  660.327749][ T9335] Process accounting resumed
[  660.975935][ T9118] veth0_vlan: entered promiscuous mode
[  660.996733][ T9343] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  661.201120][ T2130] hsr_slave_0: left promiscuous mode
[  661.259795][ T2130] hsr_slave_1: left promiscuous mode
[  661.268298][ T2130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  661.276264][ T2130] batman_adv: batadv0: Removing interface: batadv_slave_1
[  661.498021][ T2130] veth1_macvtap: left promiscuous mode
[  661.506927][ T2130] veth0_macvtap: left promiscuous mode
[  661.513690][ T2130] veth1_vlan: left promiscuous mode
[  661.519653][ T2130] veth0_vlan: left promiscuous mode
[  662.175449][ T9356] fuse: Bad value for 'fd'
[  662.250524][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1067'.
[  663.073934][ T2130] team0 (unregistering): Port device team_slave_1 removed
[  663.226094][ T2130] team0 (unregistering): Port device team_slave_0 removed
[  663.916390][ T9118] veth1_vlan: entered promiscuous mode
[  664.409479][ T9369] loop3: detected capacity change from 0 to 32768
[  664.419771][ T9369] XFS: ikeep mount option is deprecated.
[  664.597669][ T9369] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  664.658285][ T9118] veth0_macvtap: entered promiscuous mode
[  664.731936][ T9118] veth1_macvtap: entered promiscuous mode
[  664.956870][ T9118] batman_adv: batadv0: Interface activated: batadv_slave_0
[  665.103713][ T9118] batman_adv: batadv0: Interface activated: batadv_slave_1
[  665.236123][ T9118] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  665.246552][ T9118] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  665.255811][ T9118] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  665.264992][ T9118] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  665.332391][ T9388] loop4: detected capacity change from 0 to 64
[  665.813457][ T9369] XFS (loop3): Ending clean mount
[  665.826811][ T9369] XFS (loop3): Quotacheck needed: Please wait.
[  665.996417][ T9369] XFS (loop3): Quotacheck: Done.
[  667.469836][ T9392] Process accounting resumed
[  667.597091][ T5799] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  668.715484][ T9414] sctp: failed to load transform for md5: -2
[  670.954593][   T30] kauditd_printk_skb: 92 callbacks suppressed
[  670.954676][   T30] audit: type=1326 audit(1750651729.740:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9441 comm="syz.0.1088" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feca058e929 code=0x0
[  672.826505][ T9476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1093'.
[  673.462101][ T9482] 9pnet_fd: Insufficient options for proto=fd
[  674.353102][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'.
[  675.731089][ T4028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  675.741987][ T4028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  676.158374][ T4028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  676.166791][ T4028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  679.140944][ T5879] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  679.418866][ T5879] usb 5-1: Using ep0 maxpacket: 8
[  679.497402][ T5879] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  679.507965][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.312576][ T5879] usb 5-1: config 0 descriptor??
[  682.010325][ T9569] sctp: failed to load transform for md5: -2
[  682.039045][ T9552] sctp: failed to load transform for md5: -2
[  682.929350][ T5879] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  682.941088][ T5879] asix 5-1:0.0: probe with driver asix failed with error -71
[  683.100677][ T5879] usb 5-1: USB disconnect, device number 5
[  696.637070][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'.
[  696.849141][ T9751] loop6: detected capacity change from 0 to 512
[  698.020008][ T9762] loop6: detected capacity change from 0 to 512
[  698.106014][ T9762] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  698.115872][ T9762] EXT4-fs (loop6): orphan cleanup on readonly fs
[  698.127682][ T9762] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  698.140129][ T9762] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  698.195120][ T9762] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  698.214115][ T9762] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1175: bg 0: block 40: padding at end of block bitmap is not set
[  698.298259][ T9762] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  698.314666][ T9762] EXT4-fs (loop6): 1 truncate cleaned up
[  698.323052][ T9762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  698.377912][ T9762] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.1175: iget: bad i_size value: 360287970189639690
[  698.439941][ T9765] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.1175: iget: bad i_size value: 360287970189639690
[  699.353671][ T9769] input: syz0 as /devices/virtual/input/input14
[  700.441096][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'.
[  700.490768][ T9118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  700.855305][ T9781] xt_hashlimit: size too large, truncated to 1048576
[  701.149824][ T9786] 
: renamed from bridge_slave_0 (while UP)
[  702.740632][ T9800] fuse: Bad value for 'fd'
[  704.017995][ T9812] lo speed is unknown, defaulting to 1000
[  705.626171][ T9820] sctp: failed to load transform for md5: -2
[  709.962511][ T9875] loop4: detected capacity change from 0 to 512
[  710.970822][ T9879] loop4: detected capacity change from 0 to 512
[  711.018694][ T9879] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  711.027813][ T9879] EXT4-fs (loop4): orphan cleanup on readonly fs
[  711.037802][ T9879] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  711.048828][ T9879] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  711.076249][ T9879] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  711.121118][ T9879] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1211: bg 0: block 40: padding at end of block bitmap is not set
[  711.153776][ T9879] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  711.197818][ T9879] EXT4-fs (loop4): 1 truncate cleaned up
[  711.208908][ T9879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  711.274508][ T9879] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.1211: iget: bad i_size value: 360287970189639690
[  711.356026][ T9885] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.1211: iget: bad i_size value: 360287970189639690
[  711.940905][ T5790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  712.139732][   T30] audit: type=1326 audit(1750651770.910:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.6.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aaf58e929 code=0x7ffc0000
[  712.283513][   T30] audit: type=1326 audit(1750651770.970:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.6.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aaf58e929 code=0x7ffc0000
[  712.309303][   T30] audit: type=1326 audit(1750651770.970:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.6.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aaf58e929 code=0x7ffc0000
[  712.333305][   T30] audit: type=1326 audit(1750651770.970:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.6.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aaf58e929 code=0x7ffc0000
[  712.356336][   T30] audit: type=1326 audit(1750651770.990:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.6.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5aaf58e929 code=0x7ffc0000
[  712.379280][   T30] audit: type=1326 audit(1750651770.990:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.6.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aaf58e929 code=0x7ffc0000
[  712.404449][   T30] audit: type=1326 audit(1750651770.990:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.6.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aaf58e929 code=0x7ffc0000
[  712.428173][   T30] audit: type=1326 audit(1750651770.990:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.6.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f5aaf58e929 code=0x7ffc0000
[  712.451132][   T30] audit: type=1326 audit(1750651770.990:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.6.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aaf58e929 code=0x7ffc0000
[  714.427033][ T9909] fuse: Bad value for 'group_id'
[  714.432582][ T9909] fuse: Bad value for 'group_id'
[  715.577163][ T9920] loop2: detected capacity change from 0 to 512
[  717.348669][   T30] kauditd_printk_skb: 45 callbacks suppressed
[  717.348943][   T30] audit: type=1326 audit(1750651776.130:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  717.581343][   T30] audit: type=1326 audit(1750651776.180:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  717.604880][   T30] audit: type=1326 audit(1750651776.180:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  717.630963][   T30] audit: type=1326 audit(1750651776.180:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  717.654421][   T30] audit: type=1326 audit(1750651776.180:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  717.677564][   T30] audit: type=1326 audit(1750651776.180:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  717.701210][   T30] audit: type=1326 audit(1750651776.180:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  717.726920][   T30] audit: type=1326 audit(1750651776.180:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  717.750655][   T30] audit: type=1326 audit(1750651776.180:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  717.773698][   T30] audit: type=1326 audit(1750651776.180:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  718.701861][ T9950] fuse: Bad value for 'group_id'
[  718.707404][ T9950] fuse: Bad value for 'group_id'
[  721.112548][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  721.120272][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  721.424772][ T9979] sctp: failed to load transform for md5: -2
[  722.647048][ T9997] fuse: Bad value for 'group_id'
[  722.652703][ T9997] fuse: Bad value for 'group_id'
[  724.493566][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1259'.
[  726.226851][T10047] lo speed is unknown, defaulting to 1000
[  727.051969][ T5873] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  727.270123][ T5873] usb 3-1: Using ep0 maxpacket: 32
[  727.349549][ T5873] usb 3-1: config 0 has an invalid interface number: 136 but max is 0
[  727.358098][ T5873] usb 3-1: config 0 has no interface number 0
[  727.364900][ T5873] usb 3-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D
[  727.378152][ T5873] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  727.389378][ T5873] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  727.404342][ T5873] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  727.415990][ T5873] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  727.427089][ T5873] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0
[  727.436891][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.486404][ T5873] usb 3-1: config 0 descriptor??
[  727.524789][ T5873] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  727.911648][ T6742] udevd[6742]: setting mode of /dev/dmmidi3 to 020660 failed: No such file or directory
[  728.010685][ T6742] udevd[6742]: setting owner of /dev/dmmidi3 to uid=0, gid=29 failed: No such file or directory
[  728.171470][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  728.297399][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'.
[  729.414464][   T30] kauditd_printk_skb: 64 callbacks suppressed
[  729.414548][   T30] audit: type=1326 audit(1750651788.200:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  729.510898][ T5873] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  729.603058][ T5873] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  729.659545][T10095] loop4: detected capacity change from 0 to 1024
[  729.676859][ T5879] usb 3-1: USB disconnect, device number 4
[  729.726162][T10095] EXT4-fs: Ignoring removed nomblk_io_submit option
[  729.733340][T10095] EXT4-fs: Ignoring removed nomblk_io_submit option
[  729.790253][   T30] audit: type=1326 audit(1750651788.240:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  729.815120][   T30] audit: type=1326 audit(1750651788.240:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  729.838749][   T30] audit: type=1326 audit(1750651788.240:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  729.861872][   T30] audit: type=1326 audit(1750651788.250:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  729.885339][   T30] audit: type=1326 audit(1750651788.250:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f204f78d290 code=0x7ffc0000
[  729.911202][   T30] audit: type=1326 audit(1750651788.250:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  729.935027][   T30] audit: type=1326 audit(1750651788.250:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  729.958632][   T30] audit: type=1326 audit(1750651788.250:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  729.982316][   T30] audit: type=1326 audit(1750651788.260:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  730.049721][T10095] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal
[  731.105422][T10097] fido_id[10097]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  731.556103][    C1] hrtimer: interrupt took 309965 ns
[  731.847386][T10109] lo speed is unknown, defaulting to 1000
[  735.044233][ T5873] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  735.382794][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  735.393634][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  735.405895][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  735.417287][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  735.427537][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  735.867772][ T5873] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  735.878303][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  735.893329][ T5873] usb 3-1: Product: syz
[  735.897932][ T5873] usb 3-1: Manufacturer: syz
[  735.903030][ T5873] usb 3-1: SerialNumber: syz
[  736.180386][ T5873] usb 3-1: config 0 descriptor??
[  736.537716][ T5873] radio-si470x 3-1:0.0: DeviceID=0x6465 ChipID=0x7669
[  736.823425][ T5873] radio-si470x 3-1:0.0: software version 100, hardware version 101
[  737.079647][ T5873] radio-si470x 3-1:0.0: submitting int urb failed (-90)
[  738.095073][ T5873] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71
[  738.172484][ T5873] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71
[  738.278328][ T5873] usb 3-1: USB disconnect, device number 5
[  741.018569][ T5879] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  741.083420][ T5879] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  741.292973][T10180] loop4: detected capacity change from 0 to 1024
[  741.352311][T10180] EXT4-fs: Ignoring removed nomblk_io_submit option
[  741.359941][T10180] EXT4-fs: Ignoring removed nomblk_io_submit option
[  741.434350][T10180] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal
[  742.379474][T10188] fido_id[10188]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  743.381769][ T5879] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  743.499437][   T42] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  743.631749][ T5879] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  743.640597][ T5879] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  743.650129][ T5879] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  743.660818][ T5879] usb 3-1: config 220 has no interface number 2
[  743.667390][ T5879] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  743.681151][ T5879] usb 3-1: config 220 interface 0 has no altsetting 0
[  743.688583][ T5879] usb 3-1: config 220 interface 76 has no altsetting 0
[  743.695766][ T5879] usb 3-1: config 220 interface 1 has no altsetting 0
[  743.738906][   T42] usb 5-1: Using ep0 maxpacket: 32
[  743.822531][   T42] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  743.832870][   T42] usb 5-1: config 0 has no interface number 0
[  743.839537][   T42] usb 5-1: config 0 interface 12 has no altsetting 0
[  743.917776][   T42] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  743.927880][   T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.937211][   T42] usb 5-1: Product: syz
[  743.941811][   T42] usb 5-1: Manufacturer: syz
[  743.946705][   T42] usb 5-1: SerialNumber: syz
[  744.017816][ T5879] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  744.029939][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.042101][ T5879] usb 3-1: Product: syz
[  744.046538][ T5879] usb 3-1: Manufacturer: syz
[  744.052365][ T5879] usb 3-1: SerialNumber: syz
[  744.102064][   T42] usb 5-1: config 0 descriptor??
[  744.484809][ T5879] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  744.492073][ T5879] usb 3-1: No valid video chain found.
[  744.498088][ T5879] usb 3-1: selecting invalid altsetting 0
[  744.661059][ T5879] usb 3-1: selecting invalid altsetting 0
[  744.667106][ T5879] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  744.800803][ T5879] usb 3-1: USB disconnect, device number 6
[  745.513692][ T5879] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  745.617960][T10213] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  745.639724][T10213] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  745.649984][T10213] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  745.677734][T10213] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  745.692767][T10213] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  745.708977][ T5879] usb 4-1: Using ep0 maxpacket: 32
[  745.730087][ T5879] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  745.738647][ T5879] usb 4-1: config 0 has no interface number 0
[  745.745048][ T5879] usb 4-1: config 0 interface 12 has no altsetting 0
[  745.858876][ T5879] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  745.868314][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.876876][ T5879] usb 4-1: Product: syz
[  745.884243][ T5879] usb 4-1: Manufacturer: syz
[  745.890069][ T5879] usb 4-1: SerialNumber: syz
[  746.078063][T10212] lo speed is unknown, defaulting to 1000
[  746.142149][ T5879] usb 4-1: config 0 descriptor??
[  746.556022][   T42] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  746.564565][   T42] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  746.573629][   T42] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  746.583504][   T42] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  746.865543][   T42] usb 5-1: USB disconnect, device number 6
[  747.779404][T10213] Bluetooth: hci5: command tx timeout
[  748.357685][ T8705] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  748.406222][T10212] chnl_net:caif_netlink_parms(): no params data found
[  748.613702][T10234] ptrace attach of "./syz-executor exec"[5797] was attempted by "./syz-executor exec"[10234]
[  748.679069][ T8705] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  748.687906][ T8705] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  748.698891][ T8705] usb 5-1: config 220 has no interface number 2
[  748.705471][ T8705] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  748.720175][ T8705] usb 5-1: config 220 interface 0 has no altsetting 0
[  748.727271][ T8705] usb 5-1: config 220 interface 76 has no altsetting 0
[  748.734543][ T8705] usb 5-1: config 220 interface 1 has no altsetting 0
[  748.821855][ T5879] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  748.830157][ T5879] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  748.837932][ T5879] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  748.847883][ T5879] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  749.151051][ T5879] usb 4-1: USB disconnect, device number 7
[  749.268311][ T8705] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  749.278337][ T8705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.286808][ T8705] usb 5-1: Product: syz
[  749.291308][ T8705] usb 5-1: Manufacturer: syz
[  749.296187][ T8705] usb 5-1: SerialNumber: syz
[  749.848527][ T8705] usb 5-1: selecting invalid altsetting 0
[  749.855251][ T8705] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  749.862491][ T8705] usb 5-1: No valid video chain found.
[  749.883449][T10213] Bluetooth: hci5: command tx timeout
[  749.960792][ T8705] usb 5-1: selecting invalid altsetting 0
[  749.966794][ T8705] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  750.123357][ T8705] usb 5-1: USB disconnect, device number 7
[  750.295307][ T6127] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.620083][ T6127] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.914507][ T6127] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  751.176212][ T6127] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  751.635170][T10212] bridge0: port 1(bridge_slave_0) entered blocking state
[  751.645207][T10212] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.653068][T10212] bridge_slave_0: entered allmulticast mode
[  751.661786][T10212] bridge_slave_0: entered promiscuous mode
[  751.850015][T10212] bridge0: port 2(bridge_slave_1) entered blocking state
[  751.857448][T10212] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.865521][T10212] bridge_slave_1: entered allmulticast mode
[  751.874475][T10212] bridge_slave_1: entered promiscuous mode
[  751.968832][T10213] Bluetooth: hci5: command tx timeout
[  752.736414][ T6127] bridge_slave_1: left allmulticast mode
[  752.743707][ T6127] bridge_slave_1: left promiscuous mode
[  752.750959][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state
[  752.882919][ T6127] bridge_slave_0: left allmulticast mode
[  752.889034][ T6127] bridge_slave_0: left promiscuous mode
[  752.895805][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state
[  753.772650][ T6127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  753.885274][ T6127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  753.915045][ T6127] bond0 (unregistering): Released all slaves
[  754.017522][T10212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  754.048659][T10213] Bluetooth: hci5: command tx timeout
[  754.100341][ T5873] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  754.192328][T10212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  754.340865][ T5873] usb 4-1: Using ep0 maxpacket: 32
[  754.382084][ T5873] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  754.390887][ T5873] usb 4-1: config 0 has no interface number 0
[  754.397405][ T5873] usb 4-1: config 0 interface 12 has no altsetting 0
[  754.466331][ T5873] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  754.476512][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.485307][ T5873] usb 4-1: Product: syz
[  754.489733][ T5873] usb 4-1: Manufacturer: syz
[  754.494493][ T5873] usb 4-1: SerialNumber: syz
[  754.588646][T10212] team0: Port device team_slave_0 added
[  754.610831][T10212] team0: Port device team_slave_1 added
[  754.710286][ T5873] usb 4-1: config 0 descriptor??
[  755.633477][T10212] batman_adv: batadv0: Adding interface: batadv_slave_0
[  755.641329][T10212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  755.668208][T10212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  755.971028][ T6127] hsr_slave_0: left promiscuous mode
[  756.026106][ T6127] hsr_slave_1: left promiscuous mode
[  756.035792][ T6127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  756.043743][ T6127] batman_adv: batadv0: Removing interface: batadv_slave_0
[  756.118363][ T6127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  756.127614][ T6127] batman_adv: batadv0: Removing interface: batadv_slave_1
[  756.257452][ T6127] veth1_macvtap: left promiscuous mode
[  756.263802][ T6127] veth0_macvtap: left promiscuous mode
[  756.269950][ T6127] veth1_vlan: left promiscuous mode
[  756.275570][ T6127] veth0_vlan: left promiscuous mode
[  756.307492][ T8705] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  756.869038][ T8705] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  756.880575][ T8705] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  756.893908][ T8705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  756.907705][ T8705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  756.919727][ T8705] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  757.308315][ T8705] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  757.318089][ T8705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  757.326995][ T8705] usb 5-1: Product: syz
[  757.331558][ T8705] usb 5-1: Manufacturer: syz
[  757.336451][ T8705] usb 5-1: SerialNumber: syz
[  757.417999][ T8705] usb 5-1: config 0 descriptor??
[  757.507227][ T5873] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  757.515605][ T5873] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  757.524088][ T5873] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  757.532328][ T5873] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  757.563930][ T6127] team0 (unregistering): Port device team_slave_1 removed
[  757.643083][ T8705] radio-si470x 5-1:0.0: DeviceID=0x6465 ChipID=0x7669
[  757.701245][ T5873] usb 4-1: USB disconnect, device number 8
[  757.762813][ T6127] team0 (unregistering): Port device team_slave_0 removed
[  758.017574][ T8705] radio-si470x 5-1:0.0: software version 100, hardware version 101
[  758.162819][ T8705] radio-si470x 5-1:0.0: submitting int urb failed (-90)
[  758.622376][T10212] batman_adv: batadv0: Adding interface: batadv_slave_1
[  758.629963][T10212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  758.656597][T10212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  758.843257][ T8705] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71
[  758.853391][ T8705] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22
[  758.941060][ T8705] usb 5-1: USB disconnect, device number 8
[  759.461980][T10212] hsr_slave_0: entered promiscuous mode
[  759.474641][T10212] hsr_slave_1: entered promiscuous mode
[  759.482613][T10212] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  759.490771][T10212] Cannot create hsr debugfs directory
[  760.838958][ T9276] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  761.044736][ T9276] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  761.055478][ T9276] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  761.269547][ T9276] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  761.279314][ T9276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  761.287623][ T9276] usb 4-1: SerialNumber: syz
[  761.344128][T10212] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  761.559179][T10212] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  761.671599][ T9276] usb 4-1: 0:2 : does not exist
[  761.677366][ T9276] usb 4-1: unit 255 not found!
[  761.792416][T10212] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  761.909378][T10212] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  761.975833][ T9276] usb 4-1: USB disconnect, device number 9
[  762.416935][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  763.417161][T10320] ptrace attach of "./syz-executor exec"[5797] was attempted by "./syz-executor exec"[10320]
[  763.451145][ T9276] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  763.693948][T10212] 8021q: adding VLAN 0 to HW filter on device bond0
[  763.719083][ T9276] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  763.729965][ T9276] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  763.742497][ T9276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  763.754080][ T9276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  763.764265][ T9276] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  763.964714][T10212] 8021q: adding VLAN 0 to HW filter on device team0
[  764.032286][ T9276] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  764.042525][ T9276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  764.052167][ T9276] usb 5-1: Product: syz
[  764.056604][ T9276] usb 5-1: Manufacturer: syz
[  764.061459][ T9276] usb 5-1: SerialNumber: syz
[  764.162943][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.170686][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  764.272043][ T9276] usb 5-1: config 0 descriptor??
[  764.273714][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.284644][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  764.592634][ T9276] radio-si470x 5-1:0.0: DeviceID=0x6465 ChipID=0x7669
[  764.780739][ T9276] radio-si470x 5-1:0.0: software version 100, hardware version 101
[  765.002375][ T9276] radio-si470x 5-1:0.0: submitting int urb failed (-90)
[  765.628220][ T9276] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71
[  765.639715][ T9276] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22
[  765.749208][ T9276] usb 5-1: USB disconnect, device number 9
[  767.258309][T10212] 8021q: adding VLAN 0 to HW filter on device batadv0
[  767.998791][ T5879] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  768.208782][ T5879] usb 5-1: Using ep0 maxpacket: 16
[  768.247601][ T5879] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  768.256789][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  768.267484][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  768.426957][ T5879] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  768.437236][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.445868][ T5879] usb 5-1: Product: syz
[  768.450527][ T5879] usb 5-1: Manufacturer: syz
[  768.455412][ T5879] usb 5-1: SerialNumber: syz
[  769.130742][ T5879] usb 5-1: 0:2 : does not exist
[  769.225949][ T5879] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1)
[  769.443068][ T5879] usb 5-1: USB disconnect, device number 10
[  769.624958][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  770.955116][T10212] veth0_vlan: entered promiscuous mode
[  771.105112][T10212] veth1_vlan: entered promiscuous mode
[  771.680403][T10212] veth0_macvtap: entered promiscuous mode
[  771.756705][T10212] veth1_macvtap: entered promiscuous mode
[  772.050746][T10212] batman_adv: batadv0: Interface activated: batadv_slave_0
[  772.215610][T10212] batman_adv: batadv0: Interface activated: batadv_slave_1
[  772.381265][T10212] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  772.390421][T10212] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  772.399494][T10212] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  772.409629][T10212] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  772.521500][ T8705] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  772.709815][ T8705] usb 5-1: Using ep0 maxpacket: 16
[  772.732108][ T8705] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  772.741482][ T8705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  772.752131][ T8705] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  772.995503][ T8705] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  773.005126][ T8705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.013662][ T8705] usb 5-1: Product: syz
[  773.019192][ T8705] usb 5-1: Manufacturer: syz
[  773.024080][ T8705] usb 5-1: SerialNumber: syz
[  773.784659][ T8705] usb 5-1: 0:2 : does not exist
[  774.223308][ T5853] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  774.481955][ T5853] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  774.493782][ T5853] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  774.505195][ T5853] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  774.514851][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.770725][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'.
[  774.955383][ T8705] usb 5-1: 1:0: failed to get current value for ch 0 (-22)
[  775.109377][ T5853] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  775.118100][ T5853] usb 4-1: invalid MIDI out EP 0
[  775.162897][ T8705] usb 5-1: USB disconnect, device number 11
[  775.656041][ T6189] udevd[6189]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  775.861846][ T5853] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  775.976398][ T5853] usb 4-1: USB disconnect, device number 10
[  777.965499][T10460] ptrace attach of "./syz-executor exec"[5791] was attempted by "./syz-executor exec"[10460]
[  778.330799][T10213] Bluetooth: Frame is too long (len 118, expected len 4)
[  778.507738][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'.
[  780.073433][ T5853] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  780.333335][ T5853] usb 4-1: Using ep0 maxpacket: 16
[  780.410071][ T5853] usb 4-1: config 73 has an invalid interface number: 77 but max is 0
[  780.418760][ T5853] usb 4-1: config 73 has no interface number 0
[  780.425238][ T5853] usb 4-1: config 73 interface 77 has no altsetting 0
[  780.504370][ T5853] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=8e.f7
[  780.514323][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  780.522798][ T5853] usb 4-1: Product: syz
[  780.527241][ T5853] usb 4-1: Manufacturer: syz
[  780.532345][ T5853] usb 4-1: SerialNumber: syz
[  780.943871][ T5853] gspca_main: pac7311-2.14.0 probing 093a:2601
[  781.023639][ T5853] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71
[  781.032225][ T5853] pac7311 4-1:73.77: probe with driver pac7311 failed with error -71
[  781.136077][ T5853] usb 4-1: USB disconnect, device number 11
[  781.824678][ T6127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  781.833002][ T6127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  782.148262][ T3692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  782.156659][ T3692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  782.536630][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  782.544522][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  784.167044][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'.
[  785.124988][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1401'.
[  786.076865][T10545] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1405'.
[  788.105510][ T5853] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  788.496773][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  788.509562][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  788.521744][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  788.533170][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  788.543384][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  788.724368][ T5853] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  788.733886][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  788.742376][ T5853] usb 5-1: Product: syz
[  788.746730][ T5853] usb 5-1: Manufacturer: syz
[  788.751814][ T5853] usb 5-1: SerialNumber: syz
[  788.852606][ T5853] usb 5-1: config 0 descriptor??
[  789.139406][ T5853] radio-si470x 5-1:0.0: DeviceID=0x6465 ChipID=0x7669
[  789.369055][ T5853] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32
[  789.377873][ T5853] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -32
[  789.388940][ T5853] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5
[  789.624083][T10577] loop3: detected capacity change from 0 to 512
[  789.637998][ T5853] usb 5-1: USB disconnect, device number 12
[  789.710818][T10577] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  789.798615][T10577] EXT4-fs (loop3): 1 truncate cleaned up
[  789.807372][T10577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  790.173907][T10577] syz.3.1415 (pid 10577) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  790.339530][T10213] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  790.348289][T10213] Bluetooth: hci5: Injecting HCI hardware error event
[  790.357717][T10213] Bluetooth: hci5: hardware error 0x00
[  790.680755][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'.
[  790.703702][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  792.419358][T10213] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  792.549042][ T9276] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  792.799061][ T9276] usb 3-1: Using ep0 maxpacket: 16
[  792.869188][ T9276] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  792.877918][ T9276] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  792.889744][ T9276] usb 3-1: config 0 has no interface number 0
[  792.896148][ T9276] usb 3-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  792.907899][ T9276] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  792.921447][ T9276] usb 3-1: config 0 interface 41 has no altsetting 0
[  792.981220][T10621] ptrace attach of "./syz-executor exec"[5799] was attempted by "./syz-executor exec"[10621]
[  793.648743][ T9276] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  793.658285][ T9276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.666818][ T9276] usb 3-1: Product: syz
[  793.671383][ T9276] usb 3-1: Manufacturer: syz
[  793.676229][ T9276] usb 3-1: SerialNumber: syz
[  793.840479][ T9276] usb 3-1: config 0 descriptor??
[  793.889569][ T9276] dm9601 3-1:0.41: probe with driver dm9601 failed with error -22
[  793.899431][ T9276] sr9700 3-1:0.41: probe with driver sr9700 failed with error -22
[  795.211730][   T30] kauditd_printk_skb: 37 callbacks suppressed
[  795.211810][   T30] audit: type=1326 audit(1750651854.000:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10636 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  795.510685][   T30] audit: type=1326 audit(1750651854.050:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10636 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  795.533912][   T30] audit: type=1326 audit(1750651854.060:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10636 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  795.558059][   T30] audit: type=1326 audit(1750651854.060:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10636 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  795.581112][   T30] audit: type=1326 audit(1750651854.080:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10636 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  795.603863][   T30] audit: type=1326 audit(1750651854.080:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10636 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  795.627241][   T30] audit: type=1326 audit(1750651854.090:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10636 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  795.650974][   T30] audit: type=1326 audit(1750651854.090:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10636 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  795.674284][   T30] audit: type=1326 audit(1750651854.110:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10636 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  795.697331][   T30] audit: type=1326 audit(1750651854.110:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10636 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  795.971758][ T9276] usb 3-1: USB disconnect, device number 7
[  796.691296][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'.
[  797.853841][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'.
[  801.528965][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  801.529025][   T30] audit: type=1326 audit(1750651860.290:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  801.558626][   T30] audit: type=1326 audit(1750651860.290:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  802.007713][   T30] audit: type=1326 audit(1750651860.390:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  802.031014][   T30] audit: type=1326 audit(1750651860.390:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  802.053998][   T30] audit: type=1326 audit(1750651860.400:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  802.077576][   T30] audit: type=1326 audit(1750651860.410:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  802.101502][   T30] audit: type=1326 audit(1750651860.420:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  802.124581][   T30] audit: type=1326 audit(1750651860.420:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  802.147721][   T30] audit: type=1326 audit(1750651860.450:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  802.175870][   T30] audit: type=1326 audit(1750651860.450:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204f78e929 code=0x7ffc0000
[  802.515648][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'.
[  804.817065][ T5853] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  804.907178][ T5853] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  805.035057][T10721] loop4: detected capacity change from 0 to 1024
[  805.151021][T10721] EXT4-fs: Ignoring removed nomblk_io_submit option
[  805.158015][T10721] EXT4-fs: Ignoring removed nomblk_io_submit option
[  805.289281][T10721] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal
[  805.897096][T10724] fido_id[10724]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  808.080352][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'.
[  809.484855][T10767] ptrace attach of "./syz-executor exec"[5791] was attempted by "./syz-executor exec"[10767]
[  809.689760][ T9276] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  809.898738][ T9276] usb 5-1: Using ep0 maxpacket: 8
[  809.927575][ T9276] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13
[  810.015729][ T9276] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  810.025618][ T9276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.034168][ T9276] usb 5-1: Product: syz
[  810.038804][ T9276] usb 5-1: Manufacturer: syz
[  810.043585][ T9276] usb 5-1: SerialNumber: syz
[  810.109056][ T5853] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  810.131592][ T9276] usb 5-1: config 0 descriptor??
[  810.185411][ T9276] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  810.304175][ T5853] usb 4-1: Using ep0 maxpacket: 32
[  810.390144][ T5853] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  810.404950][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  810.417471][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  810.429366][ T5853] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  810.438901][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.645219][ T5853] usb 4-1: config 0 descriptor??
[  810.654191][T10771] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  810.741877][ T5853] hub 4-1:0.0: USB hub found
[  811.073580][ T5853] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  811.238040][ T5853] usbhid 4-1:0.0: can't add hid device: -71
[  811.245329][ T5853] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  811.523911][ T5853] usb 4-1: USB disconnect, device number 12
[  812.281839][ T9276] gspca_zc3xx: reg_r err -32
[  812.879363][ T9276] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  812.886147][ T9276] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -32
[  812.975589][ T9276] usb 5-1: USB disconnect, device number 13
[  813.812124][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'.
[  814.012885][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1473'.
[  815.782108][T10213] Bluetooth: hci3: unexpected event for opcode 0x0419
[  816.362833][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1476'.
[  816.372774][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  816.526383][T10810] batman_adv: batadv0: Removing interface: batadv_slave_0
[  816.998725][ T5853] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  817.228070][ T5853] usb 3-1: Using ep0 maxpacket: 8
[  817.268324][ T5853] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  817.278915][ T5853] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  817.289387][ T5853] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  817.300122][ T5853] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  817.310522][ T5853] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  817.323998][ T5853] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  817.333616][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  818.539576][T10833] usbtmc 3-1:16.0: usb_control_msg returned -32
[  818.587162][ T5853] usb 3-1: USB disconnect, device number 8
[  818.638686][ T9276] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  818.889559][ T9276] usb 4-1: Using ep0 maxpacket: 8
[  818.947793][ T9276] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  819.043371][ T9276] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  819.053167][ T9276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.063072][ T9276] usb 4-1: Product: syz
[  819.067512][ T9276] usb 4-1: Manufacturer: syz
[  819.072722][ T9276] usb 4-1: SerialNumber: syz
[  819.302982][ T9276] usb 4-1: config 0 descriptor??
[  819.385222][ T9276] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  819.860072][T10213] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  819.869548][T10213] Bluetooth: hci3: Injecting HCI hardware error event
[  819.877220][ T5793] Bluetooth: hci3: hardware error 0x00
[  820.636441][   T42] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  820.879337][   T42] usb 3-1: Using ep0 maxpacket: 32
[  820.984695][   T42] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  820.997774][   T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  821.009765][   T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  821.021702][   T42] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  821.031597][   T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.363517][   T42] usb 3-1: config 0 descriptor??
[  821.375581][T10844] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  821.486889][   T42] hub 3-1:0.0: USB hub found
[  821.493700][ T9276] gspca_zc3xx: reg_r err -71
[  821.717230][   T42] hub 3-1:0.0: 2 ports detected
[  821.940049][ T5793] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  822.098871][ T9276] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  822.106104][ T9276] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  822.212171][ T9276] usb 4-1: USB disconnect, device number 13
[  823.003735][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'.
[  823.978865][ T5853] usb 3-1: USB disconnect, device number 9
[  826.428932][ T5853] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  826.763050][ T5853] usb 3-1: Using ep0 maxpacket: 16
[  826.909875][ T5853] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  826.919371][ T5853] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  826.929997][ T5853] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  827.221181][ T5853] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  827.230839][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.239484][ T5853] usb 3-1: Product: syz
[  827.243916][ T5853] usb 3-1: Manufacturer: syz
[  827.248929][ T5853] usb 3-1: SerialNumber: syz
[  828.098720][ T5853] usb 3-1: 0:2 : does not exist
[  828.343335][T10895] 9pnet_fd: Insufficient options for proto=fd
[  828.968026][ T5853] usb 3-1: USB disconnect, device number 10
[  829.113802][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  829.188862][T10901] lo speed is unknown, defaulting to 1000
[  831.568917][ T5853] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  831.811625][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  831.823226][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  831.833769][ T5853] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00
[  831.843363][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.001476][ T5853] usb 4-1: config 0 descriptor??
[  832.508230][ T5853] stadia 0003:18D1:9400.0019: item fetching failed at offset 1/5
[  832.557602][ T5853] stadia 0003:18D1:9400.0019: parse failed
[  832.564230][ T5853] stadia 0003:18D1:9400.0019: probe with driver stadia failed with error -22
[  832.760363][ T5853] usb 4-1: USB disconnect, device number 14
[  832.856022][T10926] loop7: detected capacity change from 0 to 1024
[  833.972977][T10935] lo speed is unknown, defaulting to 1000
[  834.461173][ T5853] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  834.674436][ T5853] usb 3-1: Using ep0 maxpacket: 32
[  834.733535][ T5853] usb 3-1: config 0 has an invalid interface number: 136 but max is 0
[  834.738143][ T4028] hfsplus: b-tree write err: -5, ino 4
[  834.743234][ T5853] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  834.758866][ T5853] usb 3-1: config 0 has no interface number 0
[  834.768027][ T5853] usb 3-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D
[  834.780832][ T5853] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  834.791319][ T5853] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  834.801742][ T5853] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  834.813200][ T5853] usb 3-1: config 0 interface 136 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  834.826867][ T5853] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0
[  834.836452][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  835.242906][ T5853] usb 3-1: config 0 descriptor??
[  835.332369][ T5853] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  835.901714][ T5853] snd-usb-audio 3-1:0.136: probe with driver snd-usb-audio failed with error -2
[  836.091338][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  836.829036][ T9276] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  836.857625][ T5853] usb 3-1: USB disconnect, device number 11
[  837.058969][ T9276] usb 4-1: Using ep0 maxpacket: 32
[  837.092905][ T9276] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  837.102045][ T9276] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  837.111129][ T9276] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  837.121556][ T9276] usb 4-1: config 1 has no interface number 0
[  837.127971][ T9276] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  837.145374][ T9276] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  837.158920][ T9276] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  837.168322][ T9276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.418896][ T9276] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  837.781718][ T9276] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  838.397694][ T8705] usb 4-1: USB disconnect, device number 15
[  838.406065][ T8705] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  839.202816][T10976] loop4: detected capacity change from 0 to 32768
[  839.335111][T10976] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  839.920888][T10976] XFS (loop4): Ending clean mount
[  839.973506][T10976] XFS (loop4): Quotacheck needed: Please wait.
[  840.137983][T10976] XFS (loop4): Quotacheck: Done.
[  840.444502][   T30] kauditd_printk_skb: 47 callbacks suppressed
[  840.444589][   T30] audit: type=1326 audit(1750651899.210:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.3.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ccd8e929 code=0x7ffc0000
[  840.740875][   T30] audit: type=1326 audit(1750651899.260:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.3.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f15ccd8e929 code=0x7ffc0000
[  840.764575][   T30] audit: type=1326 audit(1750651899.280:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.3.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ccd8e929 code=0x7ffc0000
[  840.787807][   T30] audit: type=1326 audit(1750651899.280:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.3.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f15ccd8e929 code=0x7ffc0000
[  840.812298][   T30] audit: type=1326 audit(1750651899.280:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.3.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ccd8e929 code=0x7ffc0000
[  840.835625][   T30] audit: type=1326 audit(1750651899.310:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.3.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f15ccd8e929 code=0x7ffc0000
[  840.858644][   T30] audit: type=1326 audit(1750651899.310:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.3.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ccd8e929 code=0x7ffc0000
[  840.881677][   T30] audit: type=1326 audit(1750651899.330:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.3.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f15ccd8e929 code=0x7ffc0000
[  840.904632][   T30] audit: type=1326 audit(1750651899.330:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.3.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ccd8e929 code=0x7ffc0000
[  841.506698][ T5790] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  842.594586][ T5853] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  842.817840][ T5853] usb 3-1: Using ep0 maxpacket: 32
[  842.881809][ T5853] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  842.891255][ T5853] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  842.900473][ T5853] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  842.909968][ T5853] usb 3-1: config 1 has no interface number 0
[  842.916367][ T5853] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  842.927778][ T5853] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  842.941248][ T5853] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  842.950742][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.392710][ T5853] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  843.674395][ T5853] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  843.988197][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  843.995181][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  844.135850][ T9276] usb 3-1: USB disconnect, device number 12
[  844.144300][ T9276] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  844.862666][T11033] loop4: detected capacity change from 0 to 256
[  844.913025][T11033] exfat: Deprecated parameter 'namecase'
[  844.982127][T11036] lo speed is unknown, defaulting to 1000
[  845.411518][T11033] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  848.972572][T11061] loop3: detected capacity change from 0 to 512
[  849.064965][T11061] EXT4-fs: Ignoring removed mblk_io_submit option
[  849.130538][T11061] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  849.278893][T11061] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  849.303849][T11061] EXT4-fs (loop3): orphan cleanup on readonly fs
[  849.418128][T11061] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1551: Invalid block bitmap block 0 in block_group 0
[  849.514376][T11064] loop2: detected capacity change from 0 to 1024
[  849.527369][T11061] EXT4-fs (loop3): Remounting filesystem read-only
[  849.567592][T11061] Quota error (device loop3): write_blk: dquota write failed
[  849.622752][T11061] Quota error (device loop3): write_blk: dquota write failed
[  849.631174][T11061] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  849.641925][T11061] EXT4-fs (loop3): 1 orphan inode deleted
[  849.722208][T11061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  850.435983][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  850.695157][ T5797] hfsplus: bad catalog entry type
[  850.849365][ T5853] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  851.065902][ T5853] usb 5-1: Using ep0 maxpacket: 32
[  851.109904][ T5853] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  851.118936][ T5853] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  851.127828][ T5853] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  851.137440][ T5853] usb 5-1: config 1 has no interface number 0
[  851.143879][ T5853] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  851.156149][ T5853] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  851.169787][ T5853] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  851.179174][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.842355][ T5853] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  852.251798][ T5853] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  852.422228][ T3692] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.664970][ T6125] hfsplus: b-tree write err: -5, ino 4
[  852.710106][ T3692] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.839293][ T9276] usb 5-1: USB disconnect, device number 14
[  852.848257][ T9276] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  853.001436][ T3692] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.205354][ T3692] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.869177][ T3692] bridge_slave_1: left allmulticast mode
[  853.875158][ T3692] bridge_slave_1: left promiscuous mode
[  853.882224][ T3692] bridge0: port 2(bridge_slave_1) entered disabled state
[  853.981086][ T3692] bridge_slave_0: left allmulticast mode
[  853.987162][ T3692] bridge_slave_0: left promiscuous mode
[  853.994813][ T3692] bridge0: port 1(bridge_slave_0) entered disabled state
[  854.657241][ T3692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  854.685771][ T3692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  854.714337][ T3692] bond0 (unregistering): Released all slaves
[  855.317359][ T3692] hsr_slave_0: left promiscuous mode
[  855.326270][ T3692] hsr_slave_1: left promiscuous mode
[  855.334608][ T3692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  855.342377][ T3692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  855.400595][ T3692] veth1_macvtap: left promiscuous mode
[  855.406515][ T3692] veth0_macvtap: left promiscuous mode
[  855.412703][ T3692] veth1_vlan: left promiscuous mode
[  855.418461][ T3692] veth0_vlan: left promiscuous mode
[  856.327177][ T3692] team0 (unregistering): Port device team_slave_1 removed
[  856.359211][ T3692] team0 (unregistering): Port device team_slave_0 removed
[  856.737484][ T5853] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  856.976715][T10213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  856.987681][T10213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  857.002314][T10213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  857.048770][ T5853] usb 5-1: Using ep0 maxpacket: 32
[  857.068770][ T5853] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  857.077458][ T5853] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  857.087457][ T5853] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  857.096809][ T5853] usb 5-1: config 1 has no interface number 0
[  857.103425][ T5853] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  857.114956][ T5853] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  857.128861][ T5853] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  857.138197][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.156386][T10213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  857.173079][T10213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  857.487324][T11114] lo speed is unknown, defaulting to 1000
[  857.695540][ T5853] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  857.931299][ T5853] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  858.375871][ T5873] usb 5-1: USB disconnect, device number 15
[  858.412421][ T5873] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  858.517019][T11130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1572'.
[  859.329798][T10213] Bluetooth: hci2: command tx timeout
[  859.404165][T11114] chnl_net:caif_netlink_parms(): no params data found
[  859.939058][T11141] 9pnet: Could not find request transport: fd0x0000000000000004
[  861.408949][T10213] Bluetooth: hci2: command tx timeout
[  861.577610][T11160] loop7: detected capacity change from 0 to 32768
[  861.765459][T11160] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  861.765624][T11160]   allowing incompatible features above 0.0: (unknown version)
[  861.765718][T11160]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  861.812450][T11160] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  861.821304][T11160] bcachefs (loop7): initializing new filesystem
[  861.843695][T11160] bcachefs (loop7): going read-write
[  862.241813][T11160] bcachefs (loop7): marking superblocks
[  862.272983][ T5873] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  862.307337][T11160] bcachefs (loop7): initializing freespace
[  862.317931][T11114] bridge0: port 1(bridge_slave_0) entered blocking state
[  862.326093][T11114] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.333985][T11114] bridge_slave_0: entered allmulticast mode
[  862.341833][T11160] bcachefs (loop7): done initializing freespace
[  862.343996][T11114] bridge_slave_0: entered promiscuous mode
[  862.364432][T11160] bcachefs (loop7): reading snapshots table
[  862.370997][T11160] bcachefs (loop7): reading snapshots done
[  862.520657][T11114] bridge0: port 2(bridge_slave_1) entered blocking state
[  862.528903][T11114] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.536717][T11114] bridge_slave_1: entered allmulticast mode
[  862.546432][T11114] bridge_slave_1: entered promiscuous mode
[  862.591934][T11160] bcachefs (loop7): done starting filesystem
[  862.677855][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  862.689593][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  862.700193][ T5873] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  862.709897][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.823501][ T5873] usb 5-1: config 0 descriptor??
[  863.352111][T11114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  863.538213][ T5793] Bluetooth: hci2: command tx timeout
[  863.645407][T11114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  863.917976][T11160] syz.7.1580 (11160) used greatest stack depth: 1280 bytes left
[  864.704676][ T5873] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.001A/input/input15
[  865.182324][ T5873] uclogic 0003:256C:006D.001A: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0
[  865.449071][ T5873] usb 5-1: USB disconnect, device number 16
[  865.596213][T11114] team0: Port device team_slave_0 added
[  865.627460][T10213] Bluetooth: hci2: command tx timeout
[  865.793786][T11114] team0: Port device team_slave_1 added
[  866.107103][T10212] bcachefs (loop7): shutting down
[  866.112825][T10212] bcachefs (loop7): going read-only
[  866.118628][T10212] bcachefs (loop7): finished waiting for writes to stop
[  866.240421][T10212] bcachefs (loop7): flushing journal and stopping allocators, journal seq 6
[  866.393735][T11114] batman_adv: batadv0: Adding interface: batadv_slave_0
[  866.402463][T11114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  866.430921][T11114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  866.471439][T10212] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 7
[  866.491232][T11197] fido_id[11197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  866.578249][T11114] batman_adv: batadv0: Adding interface: batadv_slave_1
[  866.585840][T11114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  866.613887][T11114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  866.749139][T10212] bcachefs (loop7): clean shutdown complete, journal seq 8
[  866.806646][T10212] bcachefs (loop7): marking filesystem clean
[  868.080067][T11202] 9pnet: Could not find request transport: fd0x0000000000000004
[  868.218217][T10212] bcachefs (loop7): shutdown complete
[  868.640288][T11114] hsr_slave_0: entered promiscuous mode
[  868.651008][T11114] hsr_slave_1: entered promiscuous mode
[  868.661499][T11114] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  868.669482][T11114] Cannot create hsr debugfs directory
[  870.093480][T11220] loop3: detected capacity change from 0 to 512
[  870.175630][T11220] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  870.443610][T11114] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  870.461574][T11220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  870.474887][T11220] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  870.632458][T11114] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  870.792602][T11114] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  871.000074][T11114] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  871.316959][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  871.424167][T11227] loop4: detected capacity change from 0 to 40427
[  871.531600][T11227] F2FS-fs (loop4): invalid crc value
[  871.855827][T11227] F2FS-fs (loop4): Start checkpoint disabled!
[  871.892810][T11227] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  872.456641][T11237] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  873.556322][   T85] kworker/u8:5: attempt to access beyond end of device
[  873.556322][   T85] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  873.570965][   T85] CPU: 0 UID: 0 PID: 85 Comm: kworker/u8:5 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(undef) 
[  873.571126][   T85] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  873.571262][   T85] Workqueue: writeback wb_workfn (flush-7:4)
[  873.571511][   T85] Call Trace:
[  873.571571][   T85]  <TASK>
[  873.571633][   T85]  __dump_stack+0x26/0x30
[  873.571821][   T85]  dump_stack_lvl+0x1df/0x270
[  873.572024][   T85]  dump_stack+0x1e/0x25
[  873.572206][   T85]  f2fs_handle_critical_error+0xa6f/0xc20
[  873.572481][   T85]  f2fs_stop_checkpoint+0x65/0x80
[  873.572723][   T85]  f2fs_write_end_io+0xb4b/0x1920
[  873.572894][   T85]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  873.573134][   T85]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  873.573288][   T85]  bio_endio+0xe24/0xf80
[  873.573500][   T85]  submit_bio_noacct+0x214/0x2710
[  873.573752][   T85]  submit_bio+0x5a9/0x5d0
[  873.573954][   T85]  f2fs_submit_write_bio+0x92/0x250
[  873.574163][   T85]  __submit_merged_bio+0x16f/0x6a0
[  873.574370][   T85]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  873.574606][   T85]  __submit_merged_write_cond+0x458/0x9a0
[  873.574843][   T85]  f2fs_write_data_pages+0x4bb2/0x5480
[  873.575208][   T85]  ? blk_trace_ioctl+0xa0/0x910
[  873.575371][   T85]  ? kmsan_get_metadata+0xfb/0x160
[  873.575588][   T85]  ? kmsan_get_metadata+0xfb/0x160
[  873.575797][   T85]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  873.576017][   T85]  ? kmsan_get_metadata+0xfb/0x160
[  873.576228][   T85]  ? kmsan_get_metadata+0xfb/0x160
[  873.576439][   T85]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  873.576657][   T85]  ? kmsan_get_metadata+0xfb/0x160
[  873.576868][   T85]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  873.577089][   T85]  ? kmsan_get_metadata+0xfb/0x160
[  873.577300][   T85]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  873.577537][   T85]  ? kmsan_get_metadata+0xfb/0x160
[  873.577749][   T85]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  873.577966][   T85]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  873.578187][   T85]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  873.578406][   T85]  do_writepages+0x3f2/0x860
[  873.578606][   T85]  ? stack_depot_save_flags+0x35/0x7b0
[  873.578786][   T85]  ? kmsan_get_metadata+0xfb/0x160
[  873.578982][   T85]  ? kmsan_get_metadata+0xfb/0x160
[  873.579206][   T85]  __writeback_single_inode+0x101/0x1190
[  873.579429][   T85]  ? kmsan_get_metadata+0xfb/0x160
[  873.579671][   T85]  writeback_sb_inodes+0xaa9/0x1c90
[  873.580024][   T85]  wb_writeback+0x4ce/0xc00
[  873.580230][   T85]  ? queue_io+0x411/0x790
[  873.580423][   T85]  wb_workfn+0x397/0x1910
[  873.580607][   T85]  ? kmsan_get_metadata+0xfb/0x160
[  873.580838][   T85]  ? __pfx_wb_workfn+0x10/0x10
[  873.580993][   T85]  process_scheduled_works+0xb91/0x1d80
[  873.581279][   T85]  worker_thread+0xedf/0x1590
[  873.581540][   T85]  kthread+0xd5c/0xf00
[  873.581692][   T85]  ? __pfx_worker_thread+0x10/0x10
[  873.581925][   T85]  ? __pfx_kthread+0x10/0x10
[  873.582087][   T85]  ret_from_fork+0x1e3/0x310
[  873.582242][   T85]  ? __pfx_kthread+0x10/0x10
[  873.582402][   T85]  ret_from_fork_asm+0x1a/0x30
[  873.582647][   T85]  </TASK>
[  873.889050][   T85] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  874.146617][T11244] loop3: detected capacity change from 0 to 256
[  874.213420][T11114] 8021q: adding VLAN 0 to HW filter on device bond0
[  874.715405][T11114] 8021q: adding VLAN 0 to HW filter on device team0
[  874.858098][T11244] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[  874.872296][T11244] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  875.016385][   T85] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.024318][   T85] bridge0: port 1(bridge_slave_0) entered forwarding state
[  875.283085][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.290982][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  876.654059][T11248] 9pnet: Could not find request transport: fd0x0000000000000004
[  877.960651][T11258] Process accounting resumed
[  879.137695][T11114] 8021q: adding VLAN 0 to HW filter on device batadv0
[  879.210537][T11279] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  879.331278][   T30] audit: type=1326 audit(1750651938.100:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.0.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  879.479981][   T30] audit: type=1326 audit(1750651938.140:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.0.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  879.504123][   T30] audit: type=1326 audit(1750651938.150:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.0.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  879.528079][   T30] audit: type=1326 audit(1750651938.160:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.0.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  879.551205][   T30] audit: type=1326 audit(1750651938.160:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.0.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  879.574501][   T30] audit: type=1326 audit(1750651938.180:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.0.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  879.599118][   T30] audit: type=1326 audit(1750651938.180:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.0.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  879.624791][   T30] audit: type=1326 audit(1750651938.180:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.0.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  879.649494][   T30] audit: type=1326 audit(1750651938.180:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.0.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  879.673377][   T30] audit: type=1326 audit(1750651938.190:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.0.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  880.391579][T11293] 9pnet_fd: Insufficient options for proto=fd
[  881.870398][T11306] Process accounting resumed
[  883.494991][T11114] veth0_vlan: entered promiscuous mode
[  883.549874][T11326] Bluetooth: MGMT ver 1.23
[  883.762350][T11114] veth1_vlan: entered promiscuous mode
[  884.153143][T11114] veth0_macvtap: entered promiscuous mode
[  884.165388][T11333] 9pnet_fd: Insufficient options for proto=fd
[  884.226793][T11114] veth1_macvtap: entered promiscuous mode
[  884.490020][T11114] batman_adv: batadv0: Interface activated: batadv_slave_0
[  884.609733][T11114] batman_adv: batadv0: Interface activated: batadv_slave_1
[  884.723678][T11114] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  884.732933][T11114] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  884.743301][T11114] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  884.752466][T11114] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  885.620621][ T5793] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  885.620837][T10213] Bluetooth: hci0: command 0x0406 tx timeout
[  886.628684][T11358] Process accounting resumed
[  887.571375][T11378] 9pnet_fd: Insufficient options for proto=fd
[  892.339386][T11412] loop4: detected capacity change from 0 to 32768
[  892.397955][T11412] (syz.4.1647,11412,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len is too small for name_len - offset=132, inode=71, rec_len=16, name_len=13
[  892.417784][T11412] (syz.4.1647,11412,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  892.427631][T11412] (syz.4.1647,11412,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 4, possibly corrupt fs?
[  892.427756][T11412] (syz.4.1647,11412,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  892.450169][T11412] (syz.4.1647,11412,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  892.459626][T11412] (syz.4.1647,11412,1):ocfs2_fill_super:1177 ERROR: status = -22
[  893.396636][T11431] 9pnet_fd: Insufficient options for proto=fd
[  895.747738][T11452] loop3: detected capacity change from 0 to 40427
[  895.826297][T11452] F2FS-fs (loop3): invalid crc value
[  896.331895][T11452] F2FS-fs (loop3): Start checkpoint disabled!
[  896.376507][T11452] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  897.436305][ T6125] kworker/u8:26: attempt to access beyond end of device
[  897.436305][ T6125] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  897.451070][ T6125] CPU: 0 UID: 0 PID: 6125 Comm: kworker/u8:26 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(undef) 
[  897.451220][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  897.451351][ T6125] Workqueue: writeback wb_workfn (flush-7:3)
[  897.451533][ T6125] Call Trace:
[  897.451579][ T6125]  <TASK>
[  897.451630][ T6125]  __dump_stack+0x26/0x30
[  897.451793][ T6125]  dump_stack_lvl+0x1df/0x270
[  897.451961][ T6125]  dump_stack+0x1e/0x25
[  897.452104][ T6125]  f2fs_handle_critical_error+0xa6f/0xc20
[  897.452331][ T6125]  f2fs_stop_checkpoint+0x65/0x80
[  897.452558][ T6125]  f2fs_write_end_io+0xb4b/0x1920
[  897.452716][ T6125]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  897.452942][ T6125]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  897.453084][ T6125]  bio_endio+0xe24/0xf80
[  897.453271][ T6125]  submit_bio_noacct+0x214/0x2710
[  897.453508][ T6125]  submit_bio+0x5a9/0x5d0
[  897.453696][ T6125]  f2fs_submit_write_bio+0x92/0x250
[  897.453917][ T6125]  __submit_merged_bio+0x16f/0x6a0
[  897.454111][ T6125]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  897.454338][ T6125]  __submit_merged_write_cond+0x458/0x9a0
[  897.454576][ T6125]  f2fs_write_data_pages+0x4bb2/0x5480
[  897.454939][ T6125]  ? blk_trace_ioctl+0xa0/0x910
[  897.455099][ T6125]  ? kmsan_get_metadata+0xfb/0x160
[  897.455291][ T6125]  ? kmsan_get_metadata+0xfb/0x160
[  897.455497][ T6125]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  897.455684][ T6125]  ? kmsan_get_metadata+0xfb/0x160
[  897.455867][ T6125]  ? kmsan_get_metadata+0xfb/0x160
[  897.456052][ T6125]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  897.456242][ T6125]  ? kmsan_get_metadata+0xfb/0x160
[  897.456427][ T6125]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  897.456622][ T6125]  ? kmsan_get_metadata+0xfb/0x160
[  897.456805][ T6125]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  897.456999][ T6125]  ? kmsan_get_metadata+0xfb/0x160
[  897.457185][ T6125]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  897.457377][ T6125]  ? kmsan_get_metadata+0xfb/0x160
[  897.457564][ T6125]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  897.457756][ T6125]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  897.457955][ T6125]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  897.458152][ T6125]  do_writepages+0x3f2/0x860
[  897.458320][ T6125]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  897.458550][ T6125]  ? queue_io+0x711/0x790
[  897.458708][ T6125]  ? kmsan_get_metadata+0xfb/0x160
[  897.458924][ T6125]  __writeback_single_inode+0x101/0x1190
[  897.459114][ T6125]  ? kmsan_get_metadata+0xfb/0x160
[  897.459340][ T6125]  writeback_sb_inodes+0xaa9/0x1c90
[  897.459627][ T6125]  ? kmsan_get_metadata+0xfb/0x160
[  897.459878][ T6125]  wb_writeback+0x4ce/0xc00
[  897.460072][ T6125]  ? queue_io+0x411/0x790
[  897.460258][ T6125]  wb_workfn+0x397/0x1910
[  897.460411][ T6125]  ? kmsan_get_metadata+0xfb/0x160
[  897.460667][ T6125]  ? __pfx_wb_workfn+0x10/0x10
[  897.460825][ T6125]  process_scheduled_works+0xb91/0x1d80
[  897.461093][ T6125]  worker_thread+0xedf/0x1590
[  897.461331][ T6125]  kthread+0xd5c/0xf00
[  897.461479][ T6125]  ? __pfx_worker_thread+0x10/0x10
[  897.461702][ T6125]  ? __pfx_kthread+0x10/0x10
[  897.461849][ T6125]  ret_from_fork+0x1e3/0x310
[  897.462004][ T6125]  ? __pfx_kthread+0x10/0x10
[  897.462160][ T6125]  ret_from_fork_asm+0x1a/0x30
[  897.462386][ T6125]  </TASK>
[  897.785158][ T6125] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  898.073767][ T6127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  898.090378][ T6127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  898.113412][ T6127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  898.121722][ T6127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  898.229564][T11468] 9pnet_fd: Insufficient options for proto=fd
[  898.531052][T11471] 9pnet_fd: Insufficient options for proto=fd
[  900.100488][ T5853] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  900.330993][ T5853] usb 9-1: Using ep0 maxpacket: 8
[  900.385056][ T5853] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  900.395963][ T5853] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  900.409160][ T5853] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  900.481889][ T5853] usb 9-1: config 0 descriptor??
[  900.710291][ T5853] usb 9-1: USB disconnect, device number 2
[  901.329735][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  901.329823][   T30] audit: type=1326 audit(1750651960.090:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  901.360919][   T30] audit: type=1326 audit(1750651960.090:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  901.383906][   T30] audit: type=1326 audit(1750651960.100:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  901.407271][   T30] audit: type=1326 audit(1750651960.180:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  901.431572][   T30] audit: type=1326 audit(1750651960.180:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca058e929 code=0x7ffc0000
[  901.438813][T11491] =====================================================
[  901.462085][T11491] BUG: KMSAN: uninit-value in sctp_assoc_bh_rcv+0x34e/0xbc0
[  901.469797][T11491]  sctp_assoc_bh_rcv+0x34e/0xbc0
[  901.475008][T11491]  sctp_inq_push+0x2a6/0x350
[  901.480125][T11491]  sctp_backlog_rcv+0x3c7/0xda0
[  901.485244][T11491]  sk_backlog_rcv+0x142/0x420
[  901.490484][T11491]  __release_sock+0x1d3/0x330
[  901.495408][T11491]  release_sock+0x6b/0x270
[  901.500364][T11491]  sctp_sendmsg+0x3a2b/0x49f0
[  901.505296][T11491]  inet_sendmsg+0x269/0x2a0
[  901.510247][T11491]  __sock_sendmsg+0x278/0x3d0
[  901.515219][T11491]  __sys_sendto+0x593/0x720
[  901.520241][T11491]  __x64_sys_sendto+0x130/0x200
[  901.525333][T11491]  x64_sys_call+0x3c0b/0x3db0
[  901.533693][T11491]  do_syscall_64+0xd9/0x210
[  901.540306][T11491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  901.546553][T11491] 
[  901.549300][T11491] Uninit was created at:
[  901.553862][T11491]  __kmalloc_node_track_caller_noprof+0x96d/0x12f0
[  901.560784][T11491]  kmalloc_reserve+0x22f/0x4b0
[  901.565835][T11491]  __alloc_skb+0x347/0x7d0
[  901.570683][T11491]  sctp_packet_transmit+0x18a1/0x46d0
[  901.576353][T11491]  sctp_outq_flush+0x1c7d/0x67c0
[  901.581838][T11491]  sctp_outq_uncork+0x9e/0xc0
[  901.586737][T11491]  sctp_do_sm+0x8c8e/0x9720
[  901.591632][T11491]  sctp_assoc_bh_rcv+0x88b/0xbc0
[  901.596809][T11491]  sctp_inq_push+0x2a6/0x350
[  901.601783][T11491]  sctp_backlog_rcv+0x3c7/0xda0
[  901.606883][T11491]  sk_backlog_rcv+0x142/0x420
[  901.611985][T11491]  __release_sock+0x1d3/0x330
[  901.616900][T11491]  release_sock+0x6b/0x270
[  901.621811][T11491]  sctp_sendmsg+0x3a2b/0x49f0
[  901.626722][T11491]  inet_sendmsg+0x269/0x2a0
[  901.634796][T11491]  __sock_sendmsg+0x278/0x3d0
[  901.640799][T11491]  __sys_sendto+0x593/0x720
[  901.645516][T11491]  __x64_sys_sendto+0x130/0x200
[  901.650816][T11491]  x64_sys_call+0x3c0b/0x3db0
[  901.655761][T11491]  do_syscall_64+0xd9/0x210
[  901.660749][T11491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  901.666881][T11491] 
[  901.669561][T11491] CPU: 0 UID: 0 PID: 11491 Comm: syz.4.1668 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(undef) 
[  901.682133][T11491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  901.692641][T11491] =====================================================
[  901.700619][T11491] Disabling lock debugging due to kernel taint
[  901.706943][T11491] Kernel panic - not syncing: kmsan.panic set ...
[  901.713538][T11491] CPU: 0 UID: 0 PID: 11491 Comm: syz.4.1668 Tainted: G    B               6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(undef) 
[  901.727534][T11491] Tainted: [B]=BAD_PAGE
[  901.731836][T11491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  901.742080][T11491] Call Trace:
[  901.745513][T11491]  <TASK>
[  901.748605][T11491]  __dump_stack+0x26/0x30
[  901.753221][T11491]  dump_stack_lvl+0x53/0x270
[  901.758101][T11491]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  901.764250][T11491]  dump_stack+0x1e/0x25
[  901.768670][T11491]  panic+0x4bd/0xd50
[  901.772910][T11491]  kmsan_report+0x31c/0x320
[  901.777699][T11491]  ? __msan_warning+0x1b/0x30
[  901.782634][T11491]  ? sctp_assoc_bh_rcv+0x34e/0xbc0
[  901.788007][T11491]  ? sctp_inq_push+0x2a6/0x350
[  901.793032][T11491]  ? sctp_backlog_rcv+0x3c7/0xda0
[  901.798320][T11491]  ? sk_backlog_rcv+0x142/0x420
[  901.803447][T11491]  ? __release_sock+0x1d3/0x330
[  901.808522][T11491]  ? release_sock+0x6b/0x270
[  901.813377][T11491]  ? sctp_sendmsg+0x3a2b/0x49f0
[  901.818476][T11491]  ? inet_sendmsg+0x269/0x2a0
[  901.823376][T11491]  ? __sock_sendmsg+0x278/0x3d0
[  901.828513][T11491]  ? __sys_sendto+0x593/0x720
[  901.833391][T11491]  ? __x64_sys_sendto+0x130/0x200
[  901.838632][T11491]  ? x64_sys_call+0x3c0b/0x3db0
[  901.843756][T11491]  ? do_syscall_64+0xd9/0x210
[  901.848657][T11491]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  901.854976][T11491]  ? kmsan_get_metadata+0xfb/0x160
[  901.860362][T11491]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  901.866502][T11491]  ? kmsan_get_metadata+0xfb/0x160
[  901.871907][T11491]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  901.878033][T11491]  ? kmsan_get_metadata+0xfb/0x160
[  901.883423][T11491]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  901.889519][T11491]  ? sctp_inq_pop+0x13d8/0x19e0
[  901.894643][T11491]  ? kmsan_get_metadata+0xfb/0x160
[  901.900079][T11491]  __msan_warning+0x1b/0x30
[  901.904845][T11491]  sctp_assoc_bh_rcv+0x34e/0xbc0
[  901.910081][T11491]  ? __pfx_sctp_assoc_bh_rcv+0x10/0x10
[  901.915817][T11491]  sctp_inq_push+0x2a6/0x350
[  901.920675][T11491]  sctp_backlog_rcv+0x3c7/0xda0
[  901.925777][T11491]  ? kmsan_get_metadata+0xfb/0x160
[  901.931162][T11491]  ? __pfx_sctp_backlog_rcv+0x10/0x10
[  901.936800][T11491]  sk_backlog_rcv+0x142/0x420
[  901.941765][T11491]  __release_sock+0x1d3/0x330
[  901.946721][T11491]  release_sock+0x6b/0x270
[  901.951438][T11491]  sctp_sendmsg+0x3a2b/0x49f0
[  901.956386][T11491]  ? __pfx_kmsan_internal_set_shadow_origin+0x10/0x10
[  901.963527][T11491]  ? __pfx_sctp_sendmsg+0x10/0x10
[  901.968819][T11491]  inet_sendmsg+0x269/0x2a0
[  901.973574][T11491]  __sock_sendmsg+0x278/0x3d0
[  901.978528][T11491]  __sys_sendto+0x593/0x720
[  901.983279][T11491]  ? do_futex+0x3a1/0x480
[  901.987883][T11491]  ? kmsan_get_metadata+0xfb/0x160
[  901.993302][T11491]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  901.999473][T11491]  __x64_sys_sendto+0x130/0x200
[  902.004589][T11491]  x64_sys_call+0x3c0b/0x3db0
[  902.009565][T11491]  do_syscall_64+0xd9/0x210
[  902.014322][T11491]  ? irqentry_exit+0x16/0x60
[  902.019141][T11491]  ? clear_bhb_loop+0x40/0x90
[  902.024127][T11491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.030280][T11491] RIP: 0033:0x7f204f78e929
[  902.034893][T11491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  902.054740][T11491] RSP: 002b:00007f20505b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  902.063353][T11491] RAX: ffffffffffffffda RBX: 00007f204f9b5fa0 RCX: 00007f204f78e929
[  902.071499][T11491] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  902.079645][T11491] RBP: 00007f204f810b39 R08: 000020000005ffe4 R09: 000000000000001c
[  902.087798][T11491] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000000
[  902.096128][T11491] R13: 0000000000000000 R14: 00007f204f9b5fa0 R15: 00007ffdd421b208
[  902.104308][T11491]  </TASK>
[  902.107928][T11491] Kernel Offset: disabled
[  902.112372][T11491] Rebooting in 86400 seconds..