last executing test programs:

2m48.68173149s ago: executing program 32 (id=14):
listen(0xffffffffffffffff, 0x5)
chdir(&(0x7f0000000080)='./cgroup\x00')
r0 = inotify_init1(0x80000)
inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x200)
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)

2m44.623596428s ago: executing program 2 (id=40):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x6e6bc0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000e200000000000000000000000000000000000000000000000000000000000a00"], 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

2m44.381617614s ago: executing program 2 (id=42):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x1003, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10)

2m44.172947379s ago: executing program 2 (id=44):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="41cd", 0x2}], 0x1}}], 0x1, 0x20008000)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
shutdown(r0, 0x1)
recvfrom(r0, &(0x7f0000001640)=""/249, 0xf9, 0x40000161, 0x0, 0x0)

2m43.938221954s ago: executing program 2 (id=46):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@stripe={'stripe', 0x3d, 0xa}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@errors_continue}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

2m43.595818423s ago: executing program 2 (id=48):
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

2m41.603542071s ago: executing program 2 (id=53):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
r0 = inotify_init1(0x800)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa2000b60)
rmdir(&(0x7f00000000c0)='./control\x00')

2m41.006403855s ago: executing program 33 (id=53):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
r0 = inotify_init1(0x800)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa2000b60)
rmdir(&(0x7f00000000c0)='./control\x00')

1m35.987136254s ago: executing program 5 (id=443):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {}, {@gid}, {@keep_last_dots}, {}, {@dmask={'dmask', 0x3d, 0x10000}}, {@keep_last_dots}, {@namecase}, {@discard}, {@utf8}, {@sys_tz}]}, 0x1, 0x1539, &(0x7f00000049c0)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)

1m35.543437515s ago: executing program 5 (id=446):
syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file7\x00', 0x10, &(0x7f00000002c0)=ANY=[], 0x13, 0x152d, &(0x7f0000004bc0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1, 0x0, 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, 0x0)

1m35.268229852s ago: executing program 5 (id=447):
mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb)

1m34.944828999s ago: executing program 5 (id=450):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80), 0xfe, 0x54d, &(0x7f0000000400)="$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")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000009c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea})

1m34.538562129s ago: executing program 5 (id=451):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = inotify_init1(0x80000)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20000000)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

1m33.063892745s ago: executing program 5 (id=452):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xfff)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])

1m32.244285644s ago: executing program 34 (id=452):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xfff)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])

1m24.462496902s ago: executing program 4 (id=480):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x2)
fchdir(r1)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m24.069189822s ago: executing program 4 (id=482):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$damon_target_ids(r1, &(0x7f0000000080), 0x8)
r2 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$damon_monitor_on(r2, &(0x7f0000000140), 0x3)

1m23.328974809s ago: executing program 4 (id=491):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002b2ff200fbdbdf25681e010008000300", @ANYRES32=r3, @ANYBLOB="2400c7"], 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x4800)

1m22.951775029s ago: executing program 4 (id=486):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000140)={[{@fat=@fmask={'fmask', 0x3d, 0x4}}, {@shortname_mixed}, {@fat=@showexec}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@shortname_mixed}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000300), 0x400, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

1m22.49318922s ago: executing program 4 (id=489):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x50, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8300, 0x2, 0x5, 0x0, {0x100, 0x6, 0x0, 0x7}, 0x6, 0x7, 0x26}}, @NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, {0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1m21.991523392s ago: executing program 4 (id=490):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x0, 0x9}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)

1m21.322139878s ago: executing program 35 (id=490):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x0, 0x9}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)

57.19942385s ago: executing program 7 (id=647):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}})

56.77181739s ago: executing program 7 (id=651):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="89825290e5e79781ad3b26577ebaf9cb386e2acf9ffcf65317f6b140c42c62a0065b6e0c82873bfb9fc1a79130c5c160114985bfdfd8ddb8f0260ca22800ae67e3da083fd510783cea68f4f42931cad1c07ce54421d81da9298df777f5f98133f81177691b3c8e76a2a095bbf0c4d5fe284137b98860eb9e80401c33bec91df20aa7f2f0889327d475bfc60a68e76dfe84b2ed1e2a61e89955b7a772bdebf812ad3cbcc24131a0330ac6e73850b89c6fec526301d4d0bbbe88351f7a6923512fb2bfd2c15655351eb61a0d660ba645f1c1ec461719965ff3f0ece0e16b5e"], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000a40)='./file2\x00', &(0x7f0000000240)='./bus\x00')

56.262392582s ago: executing program 7 (id=655):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0)
write(r0, &(0x7f00000003f0)='-', 0x1)

56.008843199s ago: executing program 7 (id=656):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000000280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
rmdir(&(0x7f00000001c0)='./file0\x00')

55.11525051s ago: executing program 7 (id=663):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10)
recvmmsg$unix(r1, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/64, 0x40}], 0x1}}], 0x1, 0x10000, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000000)

54.547483294s ago: executing program 7 (id=667):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f00000002c0), 0x0}, 0x20)

53.90268881s ago: executing program 36 (id=667):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f00000002c0), 0x0}, 0x20)

53.308029084s ago: executing program 0 (id=675):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
setresgid(0xee00, 0xee01, 0x0)
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)

52.947029813s ago: executing program 0 (id=676):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffff08000000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

52.65639508s ago: executing program 0 (id=677):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x20000010)
write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x3, 0x1, 0xdd, 0x38, 0x745, 0x10000b, 0x1, 0x20, 0x16, 0x5, 0x9}}, 0x138)
close(r0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

52.335234988s ago: executing program 0 (id=682):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)

52.095889693s ago: executing program 0 (id=685):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f0000000240)={0x29, 0x7, 0xffffffd2})
ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x1, 0x0, 0x1}, &(0x7f00000004c0)=[{}])

51.596366425s ago: executing program 0 (id=690):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='macvlan0\x00', 0x10)
r1 = socket$kcm(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10)

51.234901014s ago: executing program 37 (id=690):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='macvlan0\x00', 0x10)
r1 = socket$kcm(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10)

36.978455718s ago: executing program 6 (id=750):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x200000})

36.565236908s ago: executing program 6 (id=752):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x7}]}, &(0x7f0000000140)=0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0)
read(r1, &(0x7f0000000200), 0xa1)

35.489790414s ago: executing program 6 (id=754):
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3401)
r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x60000, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x5, 0x1}, 0x8, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0})

35.180229011s ago: executing program 6 (id=756):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000140)={[{@fat=@fmask={'fmask', 0x3d, 0x4}}, {@shortname_mixed}, {@fat=@showexec}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@shortname_mixed}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000300), 0x400, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

34.761888741s ago: executing program 6 (id=759):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1000802, &(0x7f000000bcc0)=ANY=[], 0x21, 0x31f, &(0x7f0000000880)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

34.203523375s ago: executing program 6 (id=761):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000012850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$tun(0xffffffffffffff9c, 0x0, 0x1822a0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b807200500000000", &(0x7f00000004c0)=""/18, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

33.518092151s ago: executing program 38 (id=761):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000012850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$tun(0xffffffffffffff9c, 0x0, 0x1822a0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b807200500000000", &(0x7f00000004c0)=""/18, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.899580542s ago: executing program 8 (id=937):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0xa6d63000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1)
syz_emit_ethernet(0xfab, &(0x7f0000003200)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xf9d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0xf89, 0x0, @opaque="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"}}}}}, 0x0)

4.695352417s ago: executing program 8 (id=939):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x33)

3.103237165s ago: executing program 1 (id=953):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000280)={0x40, 0x14, 0x3, "cc171d"}, 0x0, 0x0})

2.412435122s ago: executing program 1 (id=958):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x2, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge0\x00'}]}, 0x28}}, 0x0)

2.365529883s ago: executing program 8 (id=959):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff], [0xffffffff, 0xfffffffe, 0xffffffff, 0xa, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffc, 0xb0a0, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x9c, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x6, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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")
ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0)

2.203632347s ago: executing program 1 (id=962):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x7, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10)

2.135478919s ago: executing program 3 (id=964):
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1ff, 0xfccc, 0x8, 0x1d, 0x402, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

2.015422231s ago: executing program 8 (id=965):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x102)

1.946497853s ago: executing program 1 (id=966):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

1.865249135s ago: executing program 3 (id=967):
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f", 0xe)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x80, 0x0, 0x0, 0x400, {[@window={0x3, 0x3, 0xd7}]}}}}}}}}, 0x0)

1.848990306s ago: executing program 9 (id=968):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x101000, 0x107)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x88c0, 0x85)

1.67559785s ago: executing program 3 (id=969):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000010000020900010073797a3100000000080002400000000254000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a310000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
r3 = dup2(r0, r2)
close_range(r3, 0xffffffffffffffff, 0x0)

1.675484639s ago: executing program 9 (id=970):
r0 = socket$inet6(0xa, 0x1, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0)
ftruncate(r2, 0x80079a0)
splice(r2, 0x0, r1, 0x0, 0x100002, 0x9)
close_range(r0, 0xffffffffffffffff, 0x0)

1.560897462s ago: executing program 1 (id=971):
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)

1.450637695s ago: executing program 3 (id=972):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0xc0002009})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x4)

1.376539257s ago: executing program 9 (id=973):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170479a60f60eb8dc258ded60aee45b04a15db386", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001}], 0x1, 0x0)
recvmmsg(r1, &(0x7f000000bf40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/138, 0x8a}], 0x1}, 0x9}], 0x1, 0x40000141, 0x0)

1.22783993s ago: executing program 1 (id=974):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1.207556701s ago: executing program 9 (id=975):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x7, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x2a)

1.075530114s ago: executing program 3 (id=976):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmctl$SHM_UNLOCK(0x0, 0xc)

1.075381764s ago: executing program 8 (id=977):
unshare(0x40200)
r0 = semget(0x3, 0x3, 0x3fc)
semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7fff])
unshare(0x40400)

984.535736ms ago: executing program 3 (id=978):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x6, 0xf11, &(0x7f0000001e80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x11c)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000540)={0x3, 0x1, 0x1, 0x6})

844.03133ms ago: executing program 9 (id=979):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x97}]}, 0x2c}}, 0x0)

647.566204ms ago: executing program 9 (id=980):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0)

605.843765ms ago: executing program 8 (id=981):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)={0x14, 0x33, 0x100, 0x70bd29, 0x25dfdbff, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x8c5a156a69b75bac}, 0x800)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r2, 0xffffffffffffffff, 0x0)

0s ago: executing program 39 (id=981):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)={0x14, 0x33, 0x100, 0x70bd29, 0x25dfdbff, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x8c5a156a69b75bac}, 0x800)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r2, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

dVendor=0926, idProduct=3333, bcdDevice= 0.40
[  109.564250][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.613538][ T5815] usb 5-1: config 0 descriptor??
[  109.914402][ T6335] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd30
[  109.926858][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.970660][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.025966][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.034786][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.156547][ T5815] usbhid 5-1:0.0: can't add hid device: -71
[  110.171512][ T5815] usbhid: probe of 5-1:0.0 failed with error -71
[  110.212828][ T5815] usb 5-1: USB disconnect, device number 3
[  110.785863][ T5815] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  111.024088][ T5815] usb 5-1: config 8 has an invalid interface number: 177 but max is 0
[  111.045912][ T5815] usb 5-1: config 8 has no interface number 0
[  111.075345][ T5815] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  111.122260][ T5815] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  111.153334][ T5815] usb 5-1: config 8 interface 177 has no altsetting 0
[  111.187245][ T5815] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  111.209023][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.229801][ T6370] syz_tun: entered allmulticast mode
[  111.271621][    C1] ir_toy 5-1:8.177: out urb status: -71
[  111.298128][ T6370] pim6reg: entered allmulticast mode
[  111.315409][ T6372] pim6reg: left allmulticast mode
[  111.320611][ T6372] syz_tun: left allmulticast mode
[  111.737926][ T6384] netlink: 'syz.0.133': attribute type 1 has an invalid length.
[  111.805404][ T5815] ir_toy 5-1:8.177: could not write reset command: -110
[  111.812687][ T5815] ir_toy: probe of 5-1:8.177 failed with error -110
[  111.831974][ T6384] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.855759][ T5815] usb 5-1: USB disconnect, device number 4
[  111.966231][ T6391] bond1: (slave geneve2): making interface the new active one
[  112.039893][ T6391] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  112.276510][ T6400] loop0: detected capacity change from 0 to 256
[  112.359665][ T6400] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  112.797987][ T6414] Invalid argument reading file caps for ./file0
[  113.521695][ T6446] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  114.527890][ T6473] loop0: detected capacity change from 0 to 256
[  117.565300][   T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  117.774524][   T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  117.797752][   T27] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  117.817156][   T27] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00
[  117.847794][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.717282][   T27] gud 5-1:1.0: Failed to get connectors (error=-5)
[  118.738614][   T27] gud: probe of 5-1:1.0 failed with error -5
[  118.981845][ T5156] usb 5-1: USB disconnect, device number 5
[  119.296243][ T6587] input: syz1 as /devices/virtual/input/input8
[  119.790801][ T6605] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ
[  119.940721][ T6614] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.955020][ T6614] batadv_slave_0: entered promiscuous mode
[  119.961111][ T6614] batadv_slave_0: entered allmulticast mode
[  120.411828][ T6631] loop0: detected capacity change from 0 to 2048
[  120.452007][ T6631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  120.574046][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  120.965317][ T6654] netlink: 'syz.5.205': attribute type 4 has an invalid length.
[  121.022745][ T6654] netlink: 'syz.5.205': attribute type 4 has an invalid length.
[  121.251326][ T6667] block nbd0: Unsupported socket: should be TCP or UNIX.
[  121.585446][ T5156] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  121.793509][ T5156] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11
[  121.818491][ T5156] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[  121.849603][ T5156] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  121.875393][ T5156] usb 6-1: config 0 interface 0 has no altsetting 0
[  121.882154][ T5156] usb 6-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00
[  121.905943][ T5156] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.927970][ T5156] usb 6-1: config 0 descriptor??
[  121.934209][ T6669] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  122.396679][ T5156] wacom 0003:056A:00CE.0001: unknown main item tag 0x2
[  122.403647][ T5156] wacom 0003:056A:00CE.0001: unknown main item tag 0x7
[  122.457704][ T5156] wacom 0003:056A:00CE.0001: hidraw0: USB HID v0.08 Device [HID 056a:00ce] on usb-dummy_hcd.5-1/input0
[  122.691956][    T9] usb 6-1: USB disconnect, device number 2
[  123.290253][ T6697] loop4: detected capacity change from 0 to 40427
[  123.321775][ T6697] F2FS-fs (loop4): invalid crc value
[  123.413198][ T6697] F2FS-fs (loop4): Found nat_bits in checkpoint
[  123.566357][ T6697] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  123.602305][ T6717] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  123.843161][ T5887] syz-executor: attempt to access beyond end of device
[  123.843161][ T5887] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  123.873431][ T5887] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  124.718578][ T6745] loop5: detected capacity change from 0 to 7
[  124.768220][ T6745]  loop5: [CUMANA/ADFS] p1 [ADFS] p1
[  124.773793][ T6745] loop5: partition table partially beyond EOD, truncated
[  124.801769][ T6745] loop5: p1 size 1042712361 extends beyond EOD, truncated
[  124.974364][ T5948] udevd[5948]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  125.050466][ T6756] Bluetooth: MGMT ver 1.22
[  125.770468][ T6781] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  126.775346][ T5815] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  126.812975][ T6803] loop5: detected capacity change from 0 to 40427
[  126.823558][ T6803] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0)
[  126.831489][ T6803] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  126.843823][ T6803] F2FS-fs (loop5): invalid crc value
[  126.852715][ T6803] F2FS-fs (loop5): Found nat_bits in checkpoint
[  126.919064][ T6803] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  126.926561][ T6803] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  126.965226][ T5815] usb 5-1: Using ep0 maxpacket: 16
[  126.972867][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.984759][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.994915][ T5815] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  127.010047][ T6803] F2FS-fs (loop5): Stopped filesystem due to reason: 0
[  127.017784][ T5815] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  127.032540][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.044248][ T5815] usb 5-1: config 0 descriptor??
[  127.507375][ T5815] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input12
[  127.596397][ T6817] overlayfs: failed to clone upperpath
[  127.670228][ T5815] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  127.721171][ T5815] usb 5-1: USB disconnect, device number 6
[  127.861509][ T6821] fido_id[6821]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  128.218810][ T6833] loop0: detected capacity change from 0 to 512
[  128.263677][ T6833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.623256][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.979439][ T6862] xt_hashlimit: size too large, truncated to 1048576
[  129.374393][ T6839] loop5: detected capacity change from 0 to 32768
[  129.488342][ T6839] JBD2: Ignoring recovery information on journal
[  129.638917][ T6839] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  130.086718][ T6886] Bluetooth: hci0: unsupported parameter 65535
[  130.101853][ T6886] Bluetooth: hci0: invalid len left 4, exp >= 200
[  130.180067][ T6032] ocfs2: Unmounting device (7,5) on (node local)
[  131.572143][ T6915] loop4: detected capacity change from 0 to 2048
[  131.614034][ T6915] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.860635][ T6950] netlink: 48 bytes leftover after parsing attributes in process `syz.0.281'.
[  132.880467][ T6950] netlink: 48 bytes leftover after parsing attributes in process `syz.0.281'.
[  132.985669][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  132.992416][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  133.845931][ T5816] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  133.998365][ T6986] overlayfs: metacopy with no lower data found - abort lookup (/file1)
[  134.031695][ T6990] nvmet: adding nsid 1 to subsystem testnqn
[  134.045432][ T5816] usb 5-1: Using ep0 maxpacket: 8
[  134.055285][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  134.055297][   T28] audit: type=1800 audit(1786312850.634:18): pid=6990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.291" name="buffered_io" dev="configfs" ino=11934 res=0 errno=0
[  134.090553][ T5816] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  134.101576][ T5816] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  134.111764][ T5816] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  134.126093][ T5816] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  134.140811][ T5816] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  134.160195][ T5816] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  134.172748][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.324291][   T28] audit: type=1326 audit(1786312850.904:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.5.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd719e0d9 code=0x7ffc0000
[  134.387508][   T28] audit: type=1326 audit(1786312850.904:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.5.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd719e0d9 code=0x7ffc0000
[  134.436577][ T5816] usb 5-1: usb_control_msg returned -32
[  134.456803][   T28] audit: type=1326 audit(1786312850.924:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.5.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdbd719e0d9 code=0x7ffc0000
[  134.459522][ T5816] usbtmc 5-1:16.0: can't read capabilities
[  134.547427][   T28] audit: type=1326 audit(1786312851.134:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.5.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd719e0d9 code=0x7ffc0000
[  134.590501][   T28] audit: type=1326 audit(1786312851.134:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.5.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd719e0d9 code=0x7ffc0000
[  134.933479][ T7009] loop5: detected capacity change from 0 to 2048
[  134.984247][ T7009] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.299808][ T7017] usbtmc 5-1:16.0: usb_control_msg returned -32
[  135.502388][ T5815] usb 5-1: USB disconnect, device number 7
[  135.723268][ T7044] loop0: detected capacity change from 0 to 256
[  136.051969][   T28] audit: type=1326 audit(1786312852.634:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7050 comm="syz.0.307" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f151979e0d9 code=0x0
[  136.573743][    C1] hrtimer: interrupt took 1190424 ns
[  136.586254][ T7073] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  136.649976][ T7071] loop5: detected capacity change from 0 to 1024
[  136.679755][ T7071] EXT4-fs: inline encryption not supported
[  136.713506][ T7071] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  136.737630][ T7071] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block
[  136.737630][ T7071] 
[  136.930341][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.5.312'.
[  137.713488][   T28] audit: type=1326 audit(1786312854.294:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.5.319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd719e0d9 code=0x7ffc0000
[  137.849696][   T28] audit: type=1326 audit(1786312854.334:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.5.319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd719e0d9 code=0x7ffc0000
[  137.965687][   T28] audit: type=1326 audit(1786312854.334:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.5.319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd719e0d9 code=0x7ffc0000
[  138.516202][ T7114] loop0: detected capacity change from 0 to 128
[  138.787297][ T7120] loop5: detected capacity change from 0 to 1024
[  138.792243][ T7116] loop4: detected capacity change from 0 to 4096
[  138.820459][ T7120] EXT4-fs: Ignoring removed orlov option
[  138.929673][ T7120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.941131][ T7116] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  139.360698][   T28] kauditd_printk_skb: 20 callbacks suppressed
[  139.360713][   T28] audit: type=1800 audit(1786312855.944:48): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.328" name="file1" dev="loop4" ino=30 res=0 errno=0
[  139.871997][   T28] audit: type=1326 audit(1786312856.454:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.0.333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f151979e0d9 code=0x0
[  139.920983][ T6032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.132038][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.334'.
[  140.676854][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  140.907283][    T9] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  140.947951][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.971847][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.006626][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  141.050557][    T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  141.088145][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.133919][    T9] usb 5-1: config 0 descriptor??
[  141.621809][    T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd
[  141.689102][    T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  141.775648][    T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  142.083622][   T27] usb 5-1: USB disconnect, device number 8
[  142.180816][   T28] audit: type=1326 audit(1786312858.764:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.5.345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbd719e0d9 code=0x0
[  142.235681][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'.
[  143.816063][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  145.855548][ T5816] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  146.078960][ T5816] usb 1-1: not running at top speed; connect to a high speed hub
[  146.102213][ T5816] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  146.150293][ T5816] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  146.188194][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.208413][ T5816] usb 1-1: Product: syz
[  146.212635][ T5816] usb 1-1: Manufacturer: syz
[  146.258330][ T5816] usb 1-1: SerialNumber: syz
[  146.327494][ T5816] oti6858 1-1:1.0: oti6858 converter detected
[  146.374447][ T5816] usb 1-1: oti6858 converter now attached to ttyUSB0
[  148.094099][ T7311] loop4: detected capacity change from 0 to 40427
[  148.134471][ T7311] F2FS-fs (loop4): invalid crc value
[  148.318092][ T7311] F2FS-fs (loop4): Found nat_bits in checkpoint
[  148.603980][ T5156] usb 1-1: USB disconnect, device number 5
[  148.726517][ T5156] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  148.757044][ T7311] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  148.814647][ T5156] oti6858 1-1:1.0: device disconnected
[  149.143523][ T7311] syz.4.381: attempt to access beyond end of device
[  149.143523][ T7311] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  149.255745][   T28] audit: type=1326 audit(1786312865.804:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.386" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f151979e0d9 code=0x0
[  149.542269][ T5887] syz-executor: attempt to access beyond end of device
[  149.542269][ T5887] loop4: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  149.618176][ T5887] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  149.647396][ T5887] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  151.967354][ T7380] Set syz1 is full, maxelem 14 reached
[  153.640016][   T28] audit: type=1326 audit(1786312870.214:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.4.407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c76f9e0d9 code=0x7fc00000
[  154.229999][   T28] audit: type=1326 audit(1786312870.804:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.4.407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c76f9e0d9 code=0x7fc00000
[  154.873221][ T7433] loop5: detected capacity change from 0 to 40427
[  154.892993][ T7433] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  154.925543][ T7433] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  154.955573][  T971] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  154.981625][ T7433] F2FS-fs (loop5): Found nat_bits in checkpoint
[  155.193545][  T971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.195791][ T7433] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  155.236507][  T971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  155.260720][ T7433] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  155.289335][  T971] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  155.310010][  T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  155.323575][  T971] usb 1-1: SerialNumber: syz
[  155.438747][ T6032] syz-executor: attempt to access beyond end of device
[  155.438747][ T6032] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  155.473908][ T6032] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  155.580777][  T971] usb 1-1: 0:2 : does not exist
[  155.587344][  T971] usb 1-1: unit 48 not found!
[  155.664533][  T971] usb 1-1: USB disconnect, device number 6
[  155.763590][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  155.846759][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880660ed400: rx timeout, send abort
[  155.859939][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880660ed400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  156.094275][ T7472] loop4: detected capacity change from 0 to 128
[  156.168879][ T7472] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  156.279449][ T7472] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  156.390697][ T7472] ext2 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.747266][ T5887] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  157.024028][ T7487] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  157.503530][ T7499] loop4: detected capacity change from 0 to 128
[  157.511604][ T7501] loop0: detected capacity change from 0 to 8
[  157.565403][ T7499] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  157.602229][ T7499] hpfs: filesystem error: improperly stopped
[  157.655475][ T7499] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  157.664618][ T7499] hpfs: You really don't want any checks? You are crazy...
[  157.697312][ T7501] SQUASHFS error: zlib decompression failed, data probably corrupt
[  157.725207][ T7499] hpfs: Code page index out of array
[  157.731441][ T7499] hpfs: code page support is disabled
[  157.758572][ T7501] SQUASHFS error: Failed to read block 0x13e: -5
[  157.784134][ T7499] hpfs: hpfs_map_4sectors(): unaligned read
[  157.805068][ T7501] SQUASHFS error: Unable to read metadata cache entry [13c]
[  157.817518][ T7499] hpfs: hpfs_map_4sectors(): unaligned read
[  157.824627][ T7499] hpfs: filesystem error: unable to find root dir
[  157.851566][ T7501] SQUASHFS error: Unable to read directory block [13c:26]
[  157.875729][ T7504] SQUASHFS error: Unable to read metadata cache entry [13c]
[  157.893843][ T7506] input: syz0 as /devices/virtual/input/input14
[  157.914957][ T7504] SQUASHFS error: Unable to read directory block [13c:26]
[  158.568302][ T5785] Bluetooth: hci3: ISO packet for unknown connection handle 0
[  158.850306][ T7531] loop5: detected capacity change from 0 to 164
[  158.918294][ T7531] isofs_fill_super: root inode is not a directory. Corrupted media?
[  159.382543][ T7544] loop5: detected capacity change from 0 to 256
[  159.402486][ T7544] exfat: Deprecated parameter 'namecase'
[  159.440183][ T7544] exfat: Deprecated parameter 'utf8'
[  159.489808][ T7544] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d)
[  159.754479][ T7547] loop5: detected capacity change from 0 to 256
[  159.789344][ T7547] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  160.492379][ T7559] loop5: detected capacity change from 0 to 1024
[  160.582464][ T7559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.706890][ T6032] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  160.719501][ T6032] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  160.732712][ T6032] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  160.768110][ T6032] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  160.813137][ T6032] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  160.867299][ T6032] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  160.903790][ T6032] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  160.959214][ T6032] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  161.010267][ T6032] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  161.068685][ T6032] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  161.443546][ T7558] loop4: detected capacity change from 0 to 32768
[  161.557349][ T7558] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  161.893848][ T7549] loop0: detected capacity change from 0 to 40427
[  161.966409][ T7549] F2FS-fs (loop0): invalid crc value
[  162.003956][ T6759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.025433][ T7549] F2FS-fs (loop0): Found nat_bits in checkpoint
[  162.300708][ T7549] F2FS-fs (loop0): Start checkpoint disabled!
[  162.382085][ T5887] ocfs2: Unmounting device (7,4) on (node local)
[  162.428430][ T7549] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  162.722315][ T7549] syz.0.445: attempt to access beyond end of device
[  162.722315][ T7549] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  163.036080][ T7571] veth1_to_bond: entered allmulticast mode
[  163.065050][ T7570] veth1_to_bond: left allmulticast mode
[  163.196047][   T59] kworker/u4:4: attempt to access beyond end of device
[  163.196047][   T59] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  163.247079][   T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  163.254071][   T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  163.695605][  T971] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  163.859042][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  163.870646][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  163.886374][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  163.906036][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  163.917634][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  163.926560][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  163.949480][  T971] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  163.978911][  T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.996373][  T971] usb 5-1: Product: syz
[  164.001411][  T971] usb 5-1: Manufacturer: syz
[  164.007450][  T971] usb 5-1: SerialNumber: syz
[  164.283962][  T971] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  164.350310][  T971] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  164.653360][ T7575] chnl_net:caif_netlink_parms(): no params data found
[  164.987421][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.994766][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.006518][ T7575] bridge_slave_0: entered allmulticast mode
[  165.015993][ T7575] bridge_slave_0: entered promiscuous mode
[  165.025023][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.033618][  T971] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  165.055436][  T971] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  165.072021][  T971] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  165.086079][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.097868][  T971] lan78xx: probe of 5-1:1.0 failed with error -71
[  165.105875][ T7575] bridge_slave_1: entered allmulticast mode
[  165.116847][ T7575] bridge_slave_1: entered promiscuous mode
[  165.150373][  T971] usb 5-1: USB disconnect, device number 9
[  165.293512][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.367181][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.451379][ T7575] team0: Port device team_slave_0 added
[  165.471795][ T7575] team0: Port device team_slave_1 added
[  165.625529][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.652235][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.735322][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.779282][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.801863][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.909445][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.055470][ T5785] Bluetooth: hci1: command tx timeout
[  166.170114][ T7575] hsr_slave_0: entered promiscuous mode
[  166.204681][ T7575] hsr_slave_1: entered promiscuous mode
[  166.228109][ T7575] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.237741][ T7575] Cannot create hsr debugfs directory
[  166.258726][ T7603] ip6gre1: entered promiscuous mode
[  166.270426][ T7603] ip6gre1: entered allmulticast mode
[  166.987518][ T7575] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  167.031838][ T7575] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  167.074992][ T7575] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  167.107853][ T7575] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  167.400538][ T7575] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.499260][ T7575] 8021q: adding VLAN 0 to HW filter on device team0
[  167.561534][  T997] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.568779][  T997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.622351][ T7605] loop0: detected capacity change from 0 to 32768
[  167.676646][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.683859][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.723135][ T7605] 
[  167.723135][ T7605]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  167.723135][ T7605] 
[  167.844930][   T28] audit: type=1800 audit(1786312884.424:54): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.464" name="file1" dev="loop0" ino=4 res=0 errno=0
[  168.137490][ T5785] Bluetooth: hci1: command tx timeout
[  168.290588][ T7605] ERROR: (device loop0): xtSearch: stack overrun!
[  168.290588][ T7605] 
[  168.399681][ T7605] ERROR: (device loop0): xtSearch: stack overrun!
[  168.399681][ T7605] 
[  168.429798][ T7605] xtLookup: xtSearch returned -5
[  168.434838][ T7605] ERROR: (device loop0): xtTruncate: stack overrun!
[  168.434838][ T7605] 
[  168.640403][  T997] 
[  168.640403][  T997]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  168.640403][  T997] 
[  168.667537][  T997] 
[  168.667537][  T997]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  168.667537][  T997] 
[  168.706165][  T997] 
[  168.706165][  T997]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  168.706165][  T997] 
[  168.718771][  T997] 
[  168.718771][  T997]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  168.718771][  T997] 
[  168.743886][  T997] JFS: metapage_get_blocks failed
[  168.750657][  T997] 
[  168.750657][  T997]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  168.750657][  T997] 
[  168.764147][ T5778] 
[  168.764147][ T5778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  168.764147][ T5778] 
[  168.781829][ T7575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.837208][ T5778] 
[  168.837208][ T5778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  168.837208][ T5778] 
[  170.113861][ T7575] veth0_vlan: entered promiscuous mode
[  170.215905][ T5785] Bluetooth: hci1: command tx timeout
[  170.226682][ T7575] veth1_vlan: entered promiscuous mode
[  170.311554][ T7647] jffs2: notice: (7647) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  170.422497][ T7575] veth0_macvtap: entered promiscuous mode
[  170.476113][ T7575] veth1_macvtap: entered promiscuous mode
[  170.577996][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.626399][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.655345][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.680566][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.719297][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.748273][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.783969][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.830646][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.880854][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.921093][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.955475][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.975201][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.995232][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.015803][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.038707][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.060396][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.098928][ T7575] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.137903][ T7575] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.185487][ T7575] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.194263][ T7575] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.537843][ T7663] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[  171.579715][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.620737][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.761245][ T3427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.784221][ T7666] loop0: detected capacity change from 0 to 1024
[  171.791027][ T3427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.079342][ T7668] netlink: 56 bytes leftover after parsing attributes in process `syz.4.491'.
[  172.296584][ T5785] Bluetooth: hci1: command tx timeout
[  172.414711][ T7676] loop4: detected capacity change from 0 to 128
[  172.676008][ T5816] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  172.744239][ T5887] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  172.754571][ T5887] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  172.896030][ T5816] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.924950][ T5816] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  172.945598][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.973791][ T5816] usb 7-1: config 0 descriptor??
[  173.215597][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.231118][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.266058][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.306468][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.363187][ T7684] mmap: syz.1.499 (7684) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  173.383166][ T5816] usbhid 7-1:0.0: can't add hid device: -71
[  173.404989][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.417640][ T5816] usbhid: probe of 7-1:0.0 failed with error -71
[  173.437623][ T5816] usb 7-1: USB disconnect, device number 2
[  173.623549][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.773585][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.924592][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.035563][ T5816] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  174.246606][ T5816] usb 7-1: config 8 has an invalid interface number: 177 but max is 0
[  174.284248][ T5816] usb 7-1: config 8 has no interface number 0
[  174.326496][ T5816] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  174.373880][ T5816] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  174.410963][ T5816] usb 7-1: config 8 interface 177 has no altsetting 0
[  174.441291][ T5816] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  174.472702][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.531609][    C0] ir_toy 7-1:8.177: out urb status: -71
[  175.042180][ T5816] ir_toy 7-1:8.177: could not write reset command: -110
[  175.075449][ T5816] ir_toy: probe of 7-1:8.177 failed with error -110
[  175.135635][ T5816] usb 7-1: USB disconnect, device number 3
[  175.403258][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  175.428233][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  175.452968][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  175.475480][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  175.498656][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  175.508101][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  177.080817][ T7745] loop0: detected capacity change from 0 to 4096
[  177.287898][ T7745] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  177.575424][ T5785] Bluetooth: hci2: command tx timeout
[  177.628277][   T49] hsr_slave_0: left promiscuous mode
[  177.690245][   T49] hsr_slave_1: left promiscuous mode
[  177.701869][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.747858][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.796775][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.811271][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.839142][   T49] bridge_slave_1: left allmulticast mode
[  177.848156][   T49] bridge_slave_1: left promiscuous mode
[  177.855227][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.906710][   T49] bridge_slave_0: left allmulticast mode
[  177.913728][   T49] bridge_slave_0: left promiscuous mode
[  177.946269][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.052243][   T49] veth1_macvtap: left promiscuous mode
[  178.058436][   T49] veth0_macvtap: left promiscuous mode
[  178.064737][   T49] veth1_vlan: left promiscuous mode
[  178.070294][   T49] veth0_vlan: left promiscuous mode
[  178.559594][ T7755] loop6: detected capacity change from 0 to 40427
[  178.586374][ T7755] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  178.608291][ T7755] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  178.621006][ T7755] F2FS-fs (loop6): invalid crc_offset: 33558524
[  178.633496][ T7755] F2FS-fs (loop6): Found nat_bits in checkpoint
[  178.729933][ T7755] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  178.743859][ T7755] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  179.629105][   T49] team0 (unregistering): Port device team_slave_1 removed
[  179.662384][ T5785] Bluetooth: hci2: command tx timeout
[  179.739649][   T49] team0 (unregistering): Port device team_slave_0 removed
[  179.921191][ T7781] loop2: detected capacity change from 0 to 7
[  179.926183][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.941412][ T7781] Dev loop2: unable to read RDB block 7
[  179.948908][ T7781]  loop2: unable to read partition table
[  179.954900][ T7781] loop2: partition table beyond EOD, truncated
[  179.972865][ T7781] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  180.124733][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.367405][  T971] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  180.531642][   T49] bond0 (unregistering): Released all slaves
[  180.557470][  T971] usb 7-1: not running at top speed; connect to a high speed hub
[  180.580229][  T971] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.590602][  T971] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  180.605112][  T971] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  180.618390][  T971] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.639596][  T971] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  180.649781][  T971] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81
[  180.658957][  T971] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1
[  180.673698][  T971] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[  180.682099][  T971] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[  180.712082][  T971] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  180.729428][ T7706] chnl_net:caif_netlink_parms(): no params data found
[  180.738351][  T971] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[  180.750808][  T971] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  180.790882][  T971] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  181.172334][ T7706] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.199830][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.215299][ T7706] bridge_slave_0: entered allmulticast mode
[  181.230621][ T7706] bridge_slave_0: entered promiscuous mode
[  181.249509][ T7706] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.261737][ T7706] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.280089][ T7706] bridge_slave_1: entered allmulticast mode
[  181.291852][ T7706] bridge_slave_1: entered promiscuous mode
[  181.383510][ T7706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.409620][ T7706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.481470][ T7706] team0: Port device team_slave_0 added
[  181.518458][ T7706] team0: Port device team_slave_1 added
[  181.636881][ T7815] loop0: detected capacity change from 0 to 512
[  181.659290][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.673398][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.728496][ T7815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.741230][ T5785] Bluetooth: hci2: command tx timeout
[  181.746819][ T5815] usb 7-1: USB disconnect, device number 4
[  181.755747][ T5815] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  181.767697][ T7706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.779793][ T5815] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  181.805911][ T5815] keyspan 7-1:1.0: device disconnected
[  181.929619][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.957806][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.034179][ T7706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.186195][ T7829] fuse: Bad value for 'fd'
[  182.233989][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.256802][ T7706] hsr_slave_0: entered promiscuous mode
[  182.267535][ T7706] hsr_slave_1: entered promiscuous mode
[  182.811374][ T7706] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  182.823278][ T7706] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  182.845680][ T7706] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  182.864421][ T7706] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  182.977067][ T5817] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  182.984250][ T7706] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.010530][ T7706] 8021q: adding VLAN 0 to HW filter on device team0
[  183.034689][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.041930][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.074327][ T3427] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.081489][ T3427] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.191809][ T5817] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.220695][ T5817] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.242748][ T5817] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  183.262318][ T5817] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  183.279938][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.303680][ T5817] usb 7-1: config 0 descriptor??
[  183.644869][ T7706] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.711432][ T7866] gretap1: entered allmulticast mode
[  183.751135][ T5817] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd
[  183.777374][ T5817] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  183.813715][ T7866] team0: Port device gretap1 added
[  183.819180][ T5785] Bluetooth: hci2: command tx timeout
[  183.836601][ T5817] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  183.932046][ T7869] bridge0: port 3(team0) entered blocking state
[  183.981976][ T7869] bridge0: port 3(team0) entered disabled state
[  184.014196][ T7869] team0: entered allmulticast mode
[  184.028170][ T7869] team_slave_0: entered allmulticast mode
[  184.036737][ T7869] team_slave_1: entered allmulticast mode
[  184.052928][ T7869] team0: entered promiscuous mode
[  184.058743][ T7869] team_slave_0: entered promiscuous mode
[  184.064746][ T7869] team_slave_1: entered promiscuous mode
[  184.071794][ T7869] gretap1: entered promiscuous mode
[  184.088951][ T5815] usb 7-1: USB disconnect, device number 5
[  184.110898][ T7869] bridge0: port 3(team0) entered blocking state
[  184.111101][ T7871] fido_id[7871]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  184.117679][ T7869] bridge0: port 3(team0) entered forwarding state
[  184.372529][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'.
[  184.404426][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'.
[  184.426006][ T7879] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  184.435379][ T7879] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  184.444138][ T7879] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  184.452998][ T7879] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  184.483160][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'.
[  184.497807][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'.
[  184.881443][ T7706] veth0_vlan: entered promiscuous mode
[  184.934303][ T7706] veth1_vlan: entered promiscuous mode
[  185.061466][ T7706] veth0_macvtap: entered promiscuous mode
[  185.105565][ T7706] veth1_macvtap: entered promiscuous mode
[  185.182579][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.211321][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.251407][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.282946][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.298894][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.331531][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.380121][ T7706] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.446345][ T7905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.490758][ T7905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.517627][ T7905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.543468][ T7905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.563842][ T7905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.574689][ T7905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.585199][ T7905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.628970][ T7905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.662897][ T7905] ipvlan2: entered allmulticast mode
[  185.685289][ T7905] batadv_slave_1: entered allmulticast mode
[  185.810970][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.825071][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.837611][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.848917][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.859504][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.870305][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.881048][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.884724][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  185.891971][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.902048][ T5785] CPU: 0 PID: 5785 Comm: kworker/u5:4 Not tainted syzkaller #0
[  185.919123][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  185.929253][ T5785] Workqueue: hci0 hci_rx_work
[  185.933998][ T5785] Call Trace:
[  185.937324][ T5785]  <TASK>
[  185.940294][ T5785]  dump_stack_lvl+0x18c/0x250
[  185.945013][ T5785]  ? show_regs_print_info+0x20/0x20
[  185.950248][ T5785]  ? load_image+0x420/0x420
[  185.954823][ T5785]  sysfs_create_dir_ns+0x26e/0x2a0
[  185.959975][ T5785]  ? __lock_acquire+0x7d80/0x7d80
[  185.965051][ T5785]  ? sysfs_warn_dup+0xa0/0xa0
[  185.969797][ T5785]  ? do_raw_spin_unlock+0x121/0x230
[  185.975055][ T5785]  kobject_add_internal+0x617/0xc90
[  185.980406][ T5785]  kobject_add+0x164/0x240
[  185.984896][ T5785]  ? kobject_init+0x1d0/0x1d0
[  185.989641][ T5785]  ? get_device_parent+0x366/0x390
[  185.994860][ T5785]  device_add+0x3fa/0xc40
[  185.998558][ T7706] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.999242][ T5785]  hci_conn_add_sysfs+0xd5/0x1e0
[  186.011456][ T5785]  le_conn_complete_evt+0xe9f/0x1480
[  186.016820][ T5785]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  186.023128][ T5785]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  186.028826][ T5785]  ? mutex_unlock+0x10/0x10
[  186.033381][ T5785]  ? skb_pull_data+0xf0/0x1f0
[  186.038117][ T5785]  hci_le_conn_complete_evt+0x187/0x440
[  186.043720][ T5785]  ? hci_remote_host_features_evt+0x150/0x150
[  186.049835][ T5785]  hci_event_packet+0x7b4/0x1280
[  186.054835][ T5785]  ? __lock_acquire+0x7d80/0x7d80
[  186.059915][ T5785]  ? lock_chain_count+0x20/0x20
[  186.064823][ T5785]  ? bis_list+0x290/0x290
[  186.069218][ T5785]  ? lockdep_hardirqs_on+0x98/0x150
[  186.074498][ T5785]  ? hci_send_to_monitor+0xd7/0x4f0
[  186.079768][ T5785]  hci_rx_work+0x43a/0xd60
[  186.084253][ T5785]  ? process_scheduled_works+0x975/0x1600
[  186.090053][ T5785]  process_scheduled_works+0xa60/0x1600
[  186.095693][ T5785]  ? worker_attach_to_pool+0x370/0x370
[  186.101239][ T5785]  ? assign_work+0x3cc/0x5d0
[  186.105914][ T5785]  worker_thread+0xa5e/0xfe0
[  186.110587][ T5785]  kthread+0x2fa/0x390
[  186.114719][ T5785]  ? pr_cont_work+0x550/0x550
[  186.119456][ T5785]  ? kthread_blkcg+0xd0/0xd0
[  186.124133][ T5785]  ret_from_fork+0x48/0x80
[  186.128597][ T5785]  ? kthread_blkcg+0xd0/0xd0
[  186.133246][ T5785]  ret_from_fork_asm+0x11/0x20
[  186.138086][ T5785]  </TASK>
[  186.143807][ T5785] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  186.157963][ T5785] Bluetooth: hci0: failed to register connection device
[  186.248976][ T7706] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.293234][ T7706] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.302195][ T7706] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.311166][ T7706] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.513811][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.553075][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.620343][ T7926] loop6: detected capacity change from 0 to 2048
[  186.643284][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.684214][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.730966][ T7926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.471707][ T7954] loop0: detected capacity change from 0 to 128
[  187.500382][ T7954] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  187.549956][ T7954] hpfs: filesystem error: improperly stopped
[  187.569134][ T7954] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  187.615242][ T7954] hpfs: You really don't want any checks? You are crazy...
[  187.665199][ T7954] hpfs: Code page index out of array
[  187.693661][ T7954] hpfs: code page support is disabled
[  187.716831][ T7954] hpfs: hpfs_map_4sectors(): unaligned read
[  187.732161][ T7954] hpfs: hpfs_map_4sectors(): unaligned read
[  187.767571][ T7954] hpfs: filesystem error: unable to find root dir
[  188.403377][ T7981] 9pnet: p9_errstr2errno: server reported unknown error Dfß ¥®r
[  188.403377][ T7981] °NPROXY
[  188.955916][ T8000] input: syz0 as /devices/virtual/input/input17
[  188.973174][ T7997] loop0: detected capacity change from 0 to 1024
[  189.396129][ T3475] hfsplus: b-tree write err: -5, ino 3
[  189.447074][ T5778] hfsplus: node 4:3 still has 1 user(s)!
[  189.570599][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.589555][ T5788] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  189.599577][ T5788] Bluetooth: hci3: Injecting HCI hardware error event
[  189.612306][ T5788] Bluetooth: hci3: hardware error 0x00
[  189.725588][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.578'.
[  189.734445][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.6.578'.
[  189.753684][ T8016] loop0: detected capacity change from 0 to 256
[  189.767241][ T8016] exfat: Deprecated parameter 'namecase'
[  189.773154][ T8016] exfat: Deprecated parameter 'namecase'
[  189.795617][ T8016] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  189.852704][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.578'.
[  189.894636][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.6.578'.
[  190.342094][ T8032] netlink: 'syz.1.583': attribute type 11 has an invalid length.
[  191.670708][ T8081] loop0: detected capacity change from 0 to 256
[  191.736371][ T5788] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  192.212167][ T8101] netlink: 'syz.0.603': attribute type 1 has an invalid length.
[  192.360718][ T8072] loop6: detected capacity change from 0 to 32768
[  192.368795][ T8101] 8021q: adding VLAN 0 to HW filter on device bond2
[  192.497453][   T28] audit: type=1800 audit(1786312909.074:55): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.593" name="file1" dev="loop6" ino=7 res=0 errno=0
[  192.684570][ T8118] loop7: detected capacity change from 0 to 512
[  192.748661][ T8118] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  192.815374][ T8118] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  192.904045][ T8118] EXT4-fs error (device loop7): ext4_orphan_get:1430: comm syz.7.606: bad orphan inode 131083
[  192.964011][ T8118] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.271980][ T7706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.379640][   T28] audit: type=1800 audit(1786312909.964:56): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.609" name="is_nonrot" dev="configfs" ino=16296 res=0 errno=0
[  193.399943][    C1] vkms_vblank_simulate: vblank timer overrun
[  193.782545][ T8143] input: syz1 as /devices/virtual/input/input18
[  193.988961][ T8150] fuse: Bad value for 'fd'
[  194.417943][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.424333][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  194.829117][ T8138] loop7: detected capacity change from 0 to 131072
[  194.852041][ T8138] F2FS-fs (loop7): invalid crc value
[  194.907844][ T8138] F2FS-fs (loop7): Found nat_bits in checkpoint
[  194.967693][ T8138] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  194.995755][ T8170] warning: `syz.0.620' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  195.867665][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'.
[  195.915336][ T8192] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  195.951401][ T8192] gretap0: entered promiscuous mode
[  195.972571][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'.
[  196.677107][ T8209] input: syz0 as /devices/virtual/input/input19
[  198.291929][ T8258] 8021q: adding VLAN 0 to HW filter on device bond1
[  198.308961][ T8258] bridge0: port 3(bond1) entered blocking state
[  198.315515][ T8258] bridge0: port 3(bond1) entered disabled state
[  198.322081][ T8258] bond1: entered allmulticast mode
[  198.333927][ T8258] bond1: entered promiscuous mode
[  198.344542][ T8258] bridge0: port 3(bond1) entered blocking state
[  198.351021][ T8258] bridge0: port 3(bond1) entered forwarding state
[  198.488708][ T3418] bridge0: port 3(bond1) entered disabled state
[  198.568793][ T8271] loop7: detected capacity change from 0 to 16
[  198.634909][ T8271] erofs: (device loop7): mounted with root inode @ nid 36.
[  199.362808][ T8291] loop7: detected capacity change from 0 to 2048
[  199.445345][ T8291] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  199.643281][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'.
[  199.879065][ T8304] loop6: detected capacity change from 0 to 128
[  199.925254][ T8304] EXT4-fs (loop6): Test dummy encryption mode enabled
[  199.995705][ T8304] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  200.119832][ T8304] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  200.134897][ T7706] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh
[  200.177598][ T7706] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh
[  200.505826][ T8304] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  200.653251][ T7575] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  200.890278][ T3427] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.010531][ T8328] loop6: detected capacity change from 0 to 512
[  201.019946][ T3427] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.065247][ T8328] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  201.108254][ T8328] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  201.143065][ T8328] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  201.154590][ T3427] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.181571][ T8328] System zones: 1-12
[  201.186235][ T8328] EXT4-fs (loop6): orphan cleanup on readonly fs
[  201.212193][ T8328] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:512: comm syz.6.666: Block bitmap for bg 0 marked uninitialized
[  201.285655][ T8328] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:512: comm syz.6.666: Block bitmap for bg 0 marked uninitialized
[  201.317926][ T3427] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.371828][ T8328] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:512: comm syz.6.666: Block bitmap for bg 0 marked uninitialized
[  201.446131][ T8328] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:512: comm syz.6.666: Block bitmap for bg 0 marked uninitialized
[  201.488384][ T8328] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:512: comm syz.6.666: Block bitmap for bg 0 marked uninitialized
[  201.543326][ T8328] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:512: comm syz.6.666: Block bitmap for bg 0 marked uninitialized
[  201.614891][ T8328] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  201.662860][ T8328] EXT4-fs (loop6): 1 truncate cleaned up
[  201.691950][ T8328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  201.910204][ T7575] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.260208][ T8364] loop6: detected capacity change from 0 to 1024
[  202.341725][ T8364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.442663][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  202.453403][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  202.490532][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  202.505525][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  202.509830][   T28] audit: type=1800 audit(1786312919.094:57): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.674" name="file1" dev="loop6" ino=15 res=0 errno=0
[  202.535323][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  202.543336][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  202.560332][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  202.607717][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  202.623709][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  202.642000][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  202.651128][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  202.665696][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  202.814665][ T7575] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.969298][ T5816] IPVS: starting estimator thread 0...
[  202.988760][ T8385] device-mapper: ioctl: Invalid ioctl structure: uuid @, name , dev 100040f00
[  203.085449][ T8386] IPVS: using max 18 ests per chain, 43200 per kthread
[  203.684679][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.688'.
[  203.714271][ T8404] ip6tnl1: entered promiscuous mode
[  204.262659][ T8369] chnl_net:caif_netlink_parms(): no params data found
[  204.328198][ T3427] hsr_slave_0: left promiscuous mode
[  204.379243][ T3427] hsr_slave_1: left promiscuous mode
[  204.411899][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.430272][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.453975][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.469437][ T8428] loop8: detected capacity change from 0 to 8
[  204.475731][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.490553][ T3427] bond1: left allmulticast mode
[  204.504728][ T8428] Dev loop8: unable to read RDB block 8
[  204.521086][ T3427] bond1: left promiscuous mode
[  204.529602][ T8428]  loop8: unable to read partition table
[  204.536032][ T3427] bridge0: port 3(bond1) entered disabled state
[  204.549665][ T8428] loop8: partition table beyond EOD, truncated
[  204.558551][ T3427] bridge_slave_1: left allmulticast mode
[  204.564651][ T3427] bridge_slave_1: left promiscuous mode
[  204.575832][ T8428] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  204.591953][ T3427] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.603086][ T3427] bridge_slave_0: left allmulticast mode
[  204.610218][ T3427] bridge_slave_0: left promiscuous mode
[  204.631660][ T3427] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.733255][ T3427] veth1_macvtap: left promiscuous mode
[  204.738931][ T3427] veth0_macvtap: left promiscuous mode
[  204.744709][ T3427] veth1_vlan: left promiscuous mode
[  204.755286][ T3427] veth0_vlan: left promiscuous mode
[  204.775257][ T5788] Bluetooth: hci2: command tx timeout
[  204.977727][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  205.004558][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  205.014200][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  205.032323][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  205.040690][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  205.055426][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  205.362568][ T3427] bond1 (unregistering): Released all slaves
[  205.981824][ T3427] team0 (unregistering): Port device team_slave_1 removed
[  206.058627][ T3427] team0 (unregistering): Port device team_slave_0 removed
[  206.109304][ T3427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.160423][ T3427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.528837][ T3427] bond0 (unregistering): Released all slaves
[  206.855454][ T5785] Bluetooth: hci2: command tx timeout
[  206.983431][ T8369] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.991110][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.998688][ T8369] bridge_slave_0: entered allmulticast mode
[  207.006255][ T8369] bridge_slave_0: entered promiscuous mode
[  207.042884][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.055733][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.079448][ T8369] bridge_slave_1: entered allmulticast mode
[  207.100536][ T5785] Bluetooth: hci0: command tx timeout
[  207.111987][ T8369] bridge_slave_1: entered promiscuous mode
[  207.250932][ T8369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.287113][ T8369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.430200][ T8369] team0: Port device team_slave_0 added
[  207.440380][ T8369] team0: Port device team_slave_1 added
[  207.512550][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.519755][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.546331][ T8369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.566121][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.573187][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.635188][ T8369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.712890][ T8439] chnl_net:caif_netlink_parms(): no params data found
[  207.858296][ T3450] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.895433][ T3450] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.977167][ T8479] bridge0: port 3(erspan0) entered blocking state
[  207.987535][ T8479] bridge0: port 3(erspan0) entered disabled state
[  208.009209][ T8479] erspan0: entered allmulticast mode
[  208.034353][ T8479] erspan0: entered promiscuous mode
[  208.053981][ T8479] bridge0: port 3(erspan0) entered blocking state
[  208.060605][ T8479] bridge0: port 3(erspan0) entered forwarding state
[  208.081637][ T8480] erspan0: left allmulticast mode
[  208.092766][ T8480] erspan0: left promiscuous mode
[  208.098459][ T8480] bridge0: port 3(erspan0) entered disabled state
[  208.117991][ T8369] hsr_slave_0: entered promiscuous mode
[  208.137005][ T8369] hsr_slave_1: entered promiscuous mode
[  208.219288][ T3450] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.238280][ T3450] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.436923][ T3450] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.460042][ T3450] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.510852][ T8483] tipc: Started in network mode
[  208.517552][ T8483] tipc: Node identity 7f000001, cluster identity 4711
[  208.543066][ T8483] tipc: Enabled bearer <udp:syz2>, priority 10
[  208.609716][ T8439] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.628168][ T8439] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.663347][ T8439] bridge_slave_0: entered allmulticast mode
[  208.674995][ T8439] bridge_slave_0: entered promiscuous mode
[  208.690689][ T8439] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.722023][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.739727][ T8439] bridge_slave_1: entered allmulticast mode
[  208.766037][ T8439] bridge_slave_1: entered promiscuous mode
[  208.861121][ T3450] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  208.877529][ T3450] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.893510][ T3450] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.935785][ T5785] Bluetooth: hci2: command tx timeout
[  209.092632][ T8439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.141575][ T8439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.185938][ T5785] Bluetooth: hci0: command tx timeout
[  209.409479][ T8439] team0: Port device team_slave_0 added
[  209.441940][ T8439] team0: Port device team_slave_1 added
[  209.663898][ T8439] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.689580][ T8439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.750063][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  209.785708][ T8439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.826122][ T8439] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.833126][ T8439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.924701][ T8439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.951585][ T8527] fuse: Bad value for 'fd'
[  209.973460][ T5834] tipc: Node number set to 2130706433
[  210.011349][ T8527] overlayfs: failed to clone lowerpath
[  210.986499][ T8439] hsr_slave_0: entered promiscuous mode
[  211.007524][ T8439] hsr_slave_1: entered promiscuous mode
[  211.028046][ T5785] Bluetooth: hci2: command tx timeout
[  211.035433][ T8439] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.043018][ T8439] Cannot create hsr debugfs directory
[  211.167089][ T8369] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  211.265120][ T5785] Bluetooth: hci0: command tx timeout
[  211.298145][ T8369] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  211.435342][ T8369] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  211.452764][ T8369] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  211.477104][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.730'.
[  211.749848][ T3450] gretap0 (unregistering): left promiscuous mode
[  211.804081][ T3450] gretap1 (unregistering): left promiscuous mode
[  211.828547][ T3450] team0: Port device gretap1 removed
[  212.083846][ T8369] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.141542][ T8369] 8021q: adding VLAN 0 to HW filter on device team0
[  212.292758][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.300013][ T3418] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.319171][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.326407][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.344859][ T8439] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  212.363508][ T8439] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  212.391241][ T8439] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  212.425967][ T8439] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  212.537004][ T5782] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  212.580687][ T8439] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.631725][ T8439] 8021q: adding VLAN 0 to HW filter on device team0
[  212.657338][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.664582][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.702661][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.709924][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.745259][ T5782] usb 7-1: Using ep0 maxpacket: 16
[  212.755370][ T5782] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  212.777588][ T5782] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  212.805270][ T5782] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  212.814427][ T5782] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.827354][ T5782] usb 7-1: Product: syz
[  212.831591][ T5782] usb 7-1: Manufacturer: syz
[  212.845504][ T5782] usb 7-1: SerialNumber: syz
[  212.981360][ T8369] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.115383][ T5782] usb 7-1: 0:2 : does not exist
[  213.148876][ T5782] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  213.235580][ T5782] usb 7-1: USB disconnect, device number 6
[  213.335910][ T5785] Bluetooth: hci0: command tx timeout
[  213.350630][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  213.637532][ T8439] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.087758][ T3450] hsr_slave_0: left promiscuous mode
[  214.107274][ T8615] overlayfs: failed to clone upperpath
[  214.113186][ T3450] hsr_slave_1: left promiscuous mode
[  214.126592][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.162259][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.197440][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.215902][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.236165][ T3450] team0: left allmulticast mode
[  214.242865][ T3450] team_slave_0: left allmulticast mode
[  214.275591][ T3450] team_slave_1: left allmulticast mode
[  214.281223][ T3450] team0: left promiscuous mode
[  214.322428][ T3450] team_slave_0: left promiscuous mode
[  214.344442][ T3450] team_slave_1: left promiscuous mode
[  214.359357][ T3450] bridge0: port 3(team0) entered disabled state
[  214.396338][ T3450] bridge_slave_1: left allmulticast mode
[  214.402124][ T3450] bridge_slave_1: left promiscuous mode
[  214.435554][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.510373][ T3450] bridge_slave_0: left allmulticast mode
[  214.517142][ T3450] bridge_slave_0: left promiscuous mode
[  214.522993][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.657818][ T3450] veth1_macvtap: left promiscuous mode
[  214.663453][ T3450] veth0_macvtap: left promiscuous mode
[  214.685383][ T3450] veth1_vlan: left promiscuous mode
[  214.692469][ T3450] veth0_vlan: left promiscuous mode
[  215.130191][ T3450] bond2 (unregistering): Released all slaves
[  215.168536][ T3450] bond1 (unregistering): (slave geneve2): Releasing active interface
[  215.321042][ T3450] bond1 (unregistering): Released all slaves
[  215.874738][ T3450] team0 (unregistering): Port device team_slave_1 removed
[  215.935185][ T3450] team0 (unregistering): Port device team_slave_0 removed
[  215.984409][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.034823][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.409215][ T3450] bond0 (unregistering): Released all slaves
[  216.839514][ T8439] veth0_vlan: entered promiscuous mode
[  216.862589][ T8439] veth1_vlan: entered promiscuous mode
[  216.981188][ T8369] veth0_vlan: entered promiscuous mode
[  217.068497][ T8369] veth1_vlan: entered promiscuous mode
[  217.119048][ T8664] binder: 8663:8664 ioctl c0306201 0 returned -14
[  217.141003][ T8439] veth0_macvtap: entered promiscuous mode
[  217.189395][ T8439] veth1_macvtap: entered promiscuous mode
[  217.209019][ T8662] syz.1.747 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
[  217.229318][ T8662] CPU: 1 PID: 8662 Comm: syz.1.747 Not tainted syzkaller #0
[  217.236672][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  217.246763][ T8662] Call Trace:
[  217.250087][ T8662]  <TASK>
[  217.253059][ T8662]  dump_stack_lvl+0x18c/0x250
[  217.257788][ T8662]  ? show_regs_print_info+0x20/0x20
[  217.263037][ T8662]  ? load_image+0x420/0x420
[  217.267603][ T8662]  ? ___ratelimit+0x478/0x610
[  217.272336][ T8662]  ? radix_tree_cpu_dead+0x160/0x160
[  217.277675][ T8662]  dump_header+0xd8/0x820
[  217.282049][ T8662]  oom_kill_process+0x390/0x580
[  217.286953][ T8662]  out_of_memory+0xe0e/0x1200
[  217.291704][ T8662]  ? mem_cgroup_out_of_memory+0xc1/0x390
[  217.297395][ T8662]  ? mutex_lock_nested+0x20/0x20
[  217.302386][ T8662]  ? unregister_oom_notifier+0x20/0x20
[  217.307969][ T8662]  mem_cgroup_out_of_memory+0x2c2/0x390
[  217.313576][ T8662]  ? try_charge_memcg+0xc91/0x17c0
[  217.318740][ T8662]  ? drain_local_stock+0x630/0x630
[  217.323917][ T8662]  ? do_raw_spin_unlock+0x121/0x230
[  217.329185][ T8662]  try_charge_memcg+0xca1/0x17c0
[  217.334188][ T8662]  ? __lock_acquire+0x7d80/0x7d80
[  217.339286][ T8662]  ? folio_flags+0x120/0x120
[  217.343946][ T8662]  ? percpu_ref_tryget+0x15/0x180
[  217.349026][ T8662]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  217.354818][ T8662]  ? __memcg_kmem_charge_page+0xeb/0x380
[  217.360503][ T8662]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  217.366289][ T8662]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  217.372070][ T8662]  ? get_mem_cgroup_from_objcg+0x13c/0x150
[  217.377964][ T8662]  __memcg_kmem_charge_page+0x224/0x380
[  217.383583][ T8662]  __alloc_pages+0x222/0x460
[  217.388234][ T8662]  ? zone_statistics+0x170/0x170
[  217.393241][ T8662]  ? kvmalloc_node+0x70/0x180
[  217.397997][ T8662]  ? alloc_pages+0x4e1/0x740
[  217.402647][ T8662]  io_pages_map+0xdc/0x4e0
[  217.407160][ T8662]  io_allocate_scq_urings+0x35b/0x620
[  217.412604][ T8662]  io_uring_create+0x712/0x1330
[  217.417536][ T8662]  __se_sys_io_uring_setup+0x29f/0x2b0
[  217.423051][ T8662]  ? __x64_sys_io_uring_setup+0x60/0x60
[  217.428682][ T8662]  ? lockdep_hardirqs_on+0x98/0x150
[  217.433952][ T8662]  do_syscall_64+0x55/0xb0
[  217.438421][ T8662]  ? clear_bhb_loop+0x40/0x90
[  217.443151][ T8662]  ? clear_bhb_loop+0x40/0x90
[  217.447900][ T8662]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  217.453853][ T8662] RIP: 0033:0x7f9ee379e0d9
[  217.458323][ T8662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.478010][ T8662] RSP: 002b:00007f9ee465afb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  217.486476][ T8662] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f9ee379e0d9
[  217.494493][ T8662] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000020
[  217.502512][ T8662] RBP: 00007f9ee3835024 R08: 0000000000000000 R09: 0000000000000000
[  217.510520][ T8662] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000100
[  217.518534][ T8662] R13: 0000200000000140 R14: 00002000000000c0 R15: 00007ffd30982d18
[  217.526576][ T8662]  </TASK>
[  217.561341][ T8662] memory: usage 8kB, limit 8kB, failcnt 21
[  217.568200][ T8662] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0
[  217.582472][ T8369] veth0_macvtap: entered promiscuous mode
[  217.600995][ T8369] veth1_macvtap: entered promiscuous mode
[  217.610088][ T8662] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0
[  217.622819][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.624879][ T8662] Memory cgroup stats for 
[  217.645219][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.675914][ T8662] /syz1/test:
[  217.676085][ T8662] cache 0
[  217.682404][ T8662] rss 0
[  217.685573][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.708217][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.736124][ T8662] rss_huge 0
[  217.739467][ T8662] shmem 0
[  217.742525][ T8662] mapped_file 0
[  217.747930][ T8439] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.775307][ T8662] dirty 0
[  217.778300][ T8662] writeback 0
[  217.781619][ T8662] workingset_refault_anon 0
[  217.801305][ T8662] workingset_refault_file 0
[  217.806597][ T8662] swap 0
[  217.807652][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.809724][ T8662] pgpgin 0
[  217.827821][ T8662] pgpgout 0
[  217.831111][ T8662] pgfault 0
[  217.834388][ T8662] pgmajfault 0
[  217.838614][ T8662] inactive_anon 0
[  217.842396][ T8662] active_anon 0
[  217.846419][ T8662] inactive_file 0
[  217.850251][ T8662] active_file 0
[  217.853844][ T8662] unevictable 0
[  217.858903][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.869769][ T8662] hierarchical_memory_limit 8192
[  217.874818][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.891248][ T8662] hierarchical_memsw_limit 9223372036854771712
[  217.899973][ T8662] total_cache 0
[  217.903609][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.923904][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.934640][ T8662] total_rss 0
[  217.955158][ T8662] total_rss_huge 0
[  217.963150][ T8662] total_shmem 0
[  217.967718][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.994827][ T8439] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.002919][ T8662] total_mapped_file 0
[  218.043503][ T8439] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.065055][ T8662] total_dirty 0
[  218.068670][ T8662] total_writeback 0
[  218.072511][ T8662] total_workingset_refault_anon 0
[  218.078126][ T8439] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.087742][ T8439] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.105191][ T8439] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.130943][ T8662] total_workingset_refault_file 0
[  218.149094][ T8662] total_swap 0
[  218.156846][ T8662] total_pgpgin 0
[  218.160458][ T8662] total_pgpgout 0
[  218.174293][ T8662] total_pgfault 0
[  218.185173][ T8662] total_pgmajfault 0
[  218.189212][ T8662] total_inactive_anon 0
[  218.207420][ T8662] total_active_anon 0
[  218.208838][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.211517][ T8662] total_inactive_file 0
[  218.211529][ T8662] total_active_file 0
[  218.241074][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.259812][ T8662] total_unevictable 0
[  218.263931][ T8662] anon_cost 0
[  218.265513][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.276498][ T8662] file_cost 0
[  218.281244][ T8662] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.747,pid=8661,uid=0
[  218.295247][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.311721][ T8662] Memory cgroup out of memory: Killed process 8662 (syz.1.747) total-vm:104292kB, anon-rss:1376kB, file-rss:22784kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  218.315234][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.370443][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.393179][ T8369] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.448873][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.485249][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.498328][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.509047][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.519254][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.529975][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.549505][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.562395][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.584862][ T8369] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.619042][ T8369] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.635178][ T8369] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.643939][ T8369] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.655481][ T8369] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.870198][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.888040][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.960057][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.979743][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.058946][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.089125][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.116574][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.144747][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.599299][ T8700] loop9: detected capacity change from 0 to 1024
[  219.626828][ T8700] EXT4-fs: Ignoring removed nomblk_io_submit option
[  219.705364][ T8700] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  219.819318][ T8700] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.900707][ T8700] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.066056][ T8700] EXT4-fs error (device loop9): ext4_map_blocks:720: inode #15: comm syz.9.753: lblock 0 mapped to illegal pblock 0 (length 1)
[  220.136479][ T8700] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  220.166378][ T8700] EXT4-fs (loop9): This should not happen!! Data will be lost
[  220.166378][ T8700] 
[  220.200504][ T8714] loop6: detected capacity change from 0 to 128
[  220.312915][ T8439] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  220.439533][ T8695] loop8: detected capacity change from 0 to 32768
[  220.486356][ T7575] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  220.494230][ T7575] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  220.545892][ T8695] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.668 (8695)
[  220.667606][ T8695] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  220.680721][ T8695] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[  220.712000][ T8695] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  220.731952][ T8695] BTRFS info (device loop8): use zstd compression, level 3
[  220.743526][ T8695] BTRFS info (device loop8): using free space tree
[  220.846216][ T8695] BTRFS info (device loop8): enabling ssd optimizations
[  220.893689][ T8695] BTRFS info (device loop8): auto enabling async discard
[  221.127524][ T3475] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.427810][ T3475] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.649420][ T3475] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.811532][ T3475] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.893615][ T8766] input: syz1 as /devices/virtual/input/input20
[  222.532018][ T8369] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  222.829442][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  222.853347][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  222.871360][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  222.902120][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  222.914895][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  222.924338][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  223.461189][ T8803] loop8: detected capacity change from 0 to 256
[  223.579210][ T8803] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  224.136850][ T8784] chnl_net:caif_netlink_parms(): no params data found
[  224.325968][ T8826] netlink: 'syz.9.780': attribute type 1 has an invalid length.
[  224.516491][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf59c00: rx timeout, send abort
[  224.736127][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.760642][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.785460][ T8784] bridge_slave_0: entered allmulticast mode
[  224.806535][ T8784] bridge_slave_0: entered promiscuous mode
[  224.844675][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.855927][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.863204][ T8784] bridge_slave_1: entered allmulticast mode
[  224.872443][ T8784] bridge_slave_1: entered promiscuous mode
[  224.885396][ T3475] hsr_slave_0: left promiscuous mode
[  224.891523][ T3475] hsr_slave_1: left promiscuous mode
[  224.899033][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.907925][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.917361][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.928053][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.938175][ T3475] bridge_slave_1: left allmulticast mode
[  224.943899][ T3475] bridge_slave_1: left promiscuous mode
[  224.949959][ T3475] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.968469][ T3475] bridge_slave_0: left allmulticast mode
[  224.980406][ T3475] bridge_slave_0: left promiscuous mode
[  224.987379][ T3475] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.015333][ T5788] Bluetooth: hci1: command tx timeout
[  225.021186][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf5a400: rx timeout, send abort
[  225.029576][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf59c00: abort rx timeout. Force session deactivation
[  225.072283][ T3475] veth1_macvtap: left promiscuous mode
[  225.080857][ T3475] veth0_macvtap: left promiscuous mode
[  225.093863][ T3475] veth1_vlan: left promiscuous mode
[  225.121013][ T3475] veth0_vlan: left promiscuous mode
[  225.527339][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf5a400: abort rx timeout. Force session deactivation
[  225.821517][ T3475] team0 (unregistering): Port device team_slave_1 removed
[  225.873399][ T3475] team0 (unregistering): Port device team_slave_0 removed
[  225.931819][ T3475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.987414][ T3475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.360467][ T3475] bond0 (unregistering): Released all slaves
[  226.498917][ T8857] netlink: 'syz.8.787': attribute type 20 has an invalid length.
[  226.525465][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.8.787'.
[  226.554693][ T8857] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.563543][ T8857] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.572522][ T8857] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.581348][ T8857] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.593090][ T8857] netlink: 'syz.8.787': attribute type 20 has an invalid length.
[  226.600980][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.8.787'.
[  226.716790][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.739835][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.871484][ T8784] team0: Port device team_slave_0 added
[  226.903766][ T8784] team0: Port device team_slave_1 added
[  227.024725][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.064083][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.095495][ T5788] Bluetooth: hci1: command tx timeout
[  227.102055][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.124286][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.132395][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.170089][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.450689][ T8784] hsr_slave_0: entered promiscuous mode
[  227.469054][ T8784] hsr_slave_1: entered promiscuous mode
[  227.480675][ T8784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.495428][ T8784] Cannot create hsr debugfs directory
[  227.663735][ T8885] loop9: detected capacity change from 0 to 2048
[  227.696951][ T8885] EXT4-fs: Ignoring removed orlov option
[  227.780541][ T3475] IPVS: stop unused estimator thread 0...
[  227.804113][ T8885] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.900936][ T8885] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.045290][ T8898] netlink: 14 bytes leftover after parsing attributes in process `syz.8.798'.
[  228.070347][   T28] audit: type=1800 audit(1786312944.644:58): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.795" name="file1" dev="loop9" ino=15 res=0 errno=0
[  228.306069][ T8439] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.087729][ T8925] overlayfs: failed to clone upperpath
[  229.175338][ T5788] Bluetooth: hci1: command tx timeout
[  229.719078][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'.
[  229.745587][ T8950] netlink: 'syz.1.814': attribute type 26 has an invalid length.
[  229.754798][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'.
[  229.766209][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'.
[  229.776005][ T8950] netlink: 'syz.1.814': attribute type 26 has an invalid length.
[  229.785558][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'.
[  230.051126][ T8784] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  230.272736][ T8784] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  230.304241][ T8784] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  230.342065][ T8784] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  230.607830][ T8784] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.649502][ T8784] 8021q: adding VLAN 0 to HW filter on device team0
[  230.688028][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.695253][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.795516][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.802828][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.255709][ T5788] Bluetooth: hci1: command tx timeout
[  231.483369][ T9008] loop9: detected capacity change from 0 to 1024
[  231.625239][ T9008] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.659597][ T8784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.919019][ T8784] veth0_vlan: entered promiscuous mode
[  231.974011][ T8439] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.983148][ T8784] veth1_vlan: entered promiscuous mode
[  232.067823][ T8784] veth0_macvtap: entered promiscuous mode
[  232.115043][ T8784] veth1_macvtap: entered promiscuous mode
[  232.192508][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.221416][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.242092][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.268879][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.291134][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.325132][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.359831][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.424041][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.464015][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.484433][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.515473][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.535312][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.555140][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.579033][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.615806][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.651486][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.700318][ T8784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.735208][ T8784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.764292][ T8784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.787532][ T8784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.039118][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.086212][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.199052][  T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.214453][  T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.231002][ T9046] loop8: detected capacity change from 0 to 1024
[  233.294328][ T9046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  233.524105][   T28] audit: type=1800 audit(1786312950.104:59): pid=9052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.837" name="bus" dev="loop8" ino=990 res=0 errno=0
[  234.011060][ T9066] loop3: detected capacity change from 0 to 2048
[  234.091341][ T9066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  234.139716][ T9074] overlayfs: failed to clone upperpath
[  235.223228][ T9111] loop8: detected capacity change from 0 to 512
[  235.253960][ T9111] EXT4-fs error (device loop8): ext4_orphan_get:1404: inode #15: comm syz.8.856: inode has both inline data and extents flags
[  235.278385][ T9111] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.856: couldn't read orphan inode 15 (err -117)
[  235.292893][ T9111] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.542108][ T3427] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.726917][ T3427] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.897125][ T3427] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.054301][ T3427] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.186443][ T9138] Core dump to core aborted: cannot preserve file permissions
[  236.380508][ T8369] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.617522][ T9144] loop8: detected capacity change from 0 to 128
[  236.741453][ T9144] ªªªªªª: renamed from vlan0 (while UP)
[  237.835068][    C0] sched: RT throttling activated
[  237.861740][ T9161] loop3: detected capacity change from 0 to 4096
[  237.907472][ T9161] EXT4-fs: inline encryption not supported
[  237.956048][ T9161] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  238.010176][ T9161] EXT4-fs (loop3): Test dummy encryption mode enabled
[  238.110585][ T9161] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  238.168317][ T9161] System zones: 0-5
[  238.221859][ T9161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.487940][   T28] audit: type=1800 audit(1786312955.064:60): pid=9161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.872" name="file2" dev="loop3" ino=16 res=0 errno=0
[  238.532877][ T9168] capability: warning: `syz.8.874' uses deprecated v2 capabilities in a way that may be insecure
[  238.754894][ T8784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.109584][ T9159] loop9: detected capacity change from 0 to 32768
[  239.213806][ T9182] loop8: detected capacity change from 0 to 512
[  239.242675][ T9182] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  239.255738][ T9159] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  239.343655][ T9182] EXT4-fs (loop8): 1 truncate cleaned up
[  239.355469][ T3427] hsr_slave_0: left promiscuous mode
[  239.363758][ T9182] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.383567][ T3427] hsr_slave_1: left promiscuous mode
[  239.443909][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.460581][ T9195] jffs2: notice: (9195) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  239.462932][ T9159] XFS (loop9): Ending clean mount
[  239.485258][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.507349][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.545357][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.598965][ T3427] bridge_slave_1: left allmulticast mode
[  239.604850][ T3427] bridge_slave_1: left promiscuous mode
[  239.611540][ T3427] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.632522][ T3427] bridge_slave_0: left allmulticast mode
[  239.644883][ T3427] bridge_slave_0: left promiscuous mode
[  239.654092][ T3427] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.791473][ T3427] veth1_macvtap: left promiscuous mode
[  239.803004][ T3427] veth0_macvtap: left promiscuous mode
[  239.825764][ T3427] veth1_vlan: left promiscuous mode
[  239.856586][ T3427] veth0_vlan: left promiscuous mode
[  239.866866][ T8439] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  239.932091][ T8369] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.191686][ T9205] mtrr: base(0x6e6f630a000) is not aligned on a size(0x6172746e000) boundary
[  240.293075][ T9207] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004ÿ€Œ
[  240.530357][ T9209] loop8: detected capacity change from 0 to 2048
[  240.576416][ T9209] EXT4-fs: Ignoring removed orlov option
[  240.692610][ T9209] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.735417][ T9209] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.783701][   T28] audit: type=1800 audit(1786312957.364:61): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.886" name="file1" dev="loop8" ino=15 res=0 errno=0
[  240.804543][  T971] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  240.924554][   T96] device offline error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  240.936138][   T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 94246)
[  240.949291][   T96] Buffer I/O error on device sda1, logical block 94208
[  240.964684][   T96] device offline error, dev sda, sector 762158 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  240.975466][   T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 95269)
[  240.989507][   T96] device offline error, dev sda, sector 766126 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 2
[  240.989549][ T3450] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2030, error -5)
[  241.001188][   T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 95765)
[  241.024942][   T96] Buffer I/O error on device sda1, logical block 95727
[  241.031898][   T96] Buffer I/O error on device sda1, logical block 95728
[  241.039186][   T96] Buffer I/O error on device sda1, logical block 95729
[  241.046842][   T96] Buffer I/O error on device sda1, logical block 95730
[  241.053747][   T96] Buffer I/O error on device sda1, logical block 95731
[  241.062156][   T96] Buffer I/O error on device sda1, logical block 95732
[  241.062400][  T971] usb 4-1: unable to get BOS descriptor or descriptor too short
[  241.069109][   T96] Buffer I/O error on device sda1, logical block 95733
[  241.069220][   T96] Buffer I/O error on device sda1, logical block 95734
[  241.069241][   T96] Buffer I/O error on device sda1, logical block 95735
[  241.102418][   T96] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  241.113337][   T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 96294)
[  241.125077][   T96] device offline error, dev sda, sector 778542 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  241.135747][   T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 97317)
[  241.147348][   T96] device offline error, dev sda, sector 782526 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  241.157871][   T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 97815)
[  241.169619][   T96] device offline error, dev sda, sector 815406 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  241.180272][   T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 101925)
[  241.187731][  T971] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  241.192062][   T96] device offline error, dev sda, sector 704862 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  241.213564][   T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88107)
[  241.225273][   T96] device offline error, dev sda, sector 704878 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  241.234619][ T3450] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2032, error -5)
[  241.235783][   T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88109)
[  241.235853][   T96] device offline error, dev sda, sector 704910 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  241.270573][   T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88113)
[  241.331315][ T9213] loop9: detected capacity change from 0 to 32768
[  241.334048][  T971] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  241.355551][ T9213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.883 (9213)
[  241.384913][ T9213] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  241.402533][ T3475] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2028, error -5)
[  241.430899][ T3475] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2035, error -5)
[  241.433486][  T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.452159][ T3475] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2029, error -5)
[  241.467291][ T9215] Buffer I/O error on dev sda1, logical block 129, lost async page write
[  241.472365][ T5103] Aborting journal on device sda1-8.
[  241.486169][ T8369] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.495446][ T9213] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm
[  241.504124][ T9213] BTRFS info (device loop9): force clearing of disk cache
[  241.513766][ T9215] Buffer I/O error on dev sda1, logical block 137, lost async page write
[  241.520721][   T24] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[  241.526477][ T9213] BTRFS info (device loop9): enabling auto defrag
[  241.537679][ T5103] JBD2: I/O error when updating journal superblock for sda1-8.
[  241.561244][ T9215] Buffer I/O error on dev sda1, logical block 224, lost async page write
[  241.569940][  T971] usb 4-1: Product: syz
[  241.578718][  T971] usb 4-1: Manufacturer: syz
[  241.583380][  T971] usb 4-1: SerialNumber: syz
[  241.600147][ T9213] BTRFS info (device loop9): enabling disk space caching
[  241.607907][ T9213] BTRFS info (device loop9): disk space caching is enabled
[  241.615710][ T9215] Buffer I/O error on dev sda1, logical block 273, lost async page write
[  241.615814][ T9215] Buffer I/O error on dev sda1, logical block 8192, lost async page write
[  241.615851][ T9215] Buffer I/O error on dev sda1, logical block 8193, lost async page write
[  241.615884][ T9215] Buffer I/O error on dev sda1, logical block 8194, lost async page write
[  241.684726][ T9215] Buffer I/O error on dev sda1, logical block 8195, lost async page write
[  241.693570][ T9226] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.8.889: Detected aborted journal
[  241.695713][ T9215] Buffer I/O error on dev sda1, logical block 8196, lost async page write
[  241.768555][ T9226] EXT4-fs (sda1): I/O error while writing superblock
[  241.785269][ T9226] EXT4-fs (sda1): Remounting filesystem read-only
[  241.819836][  T971] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  241.838834][ T9213] BTRFS info (device loop9): enabling ssd optimizations
[  241.872018][ T9213] BTRFS info (device loop9): rebuilding free space tree
[  241.890612][ T9235] udevd[9235]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  241.947589][ T9213] BTRFS info (device loop9): disabling free space tree
[  241.956592][ T9213] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  241.976431][ T9213] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  242.021784][  T971] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  242.030382][  T971] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  242.136961][ T9238] udevd[9238]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  242.411568][ T9215] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  242.430340][  T143] BTRFS info (device loop9): qgroup scan completed (inconsistency flag cleared)
[  242.435717][ T8439] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  242.444753][  T971] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  242.470801][  T971] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  242.657320][  T971] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  242.726000][  T971] usb 4-1: USB disconnect, device number 2
[  242.851429][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  243.377629][ T3427] team0 (unregistering): Port device team_slave_1 removed
[  243.486969][ T3427] team0 (unregistering): Port device team_slave_0 removed
[  243.632234][ T3427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  243.713407][ T3427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.305049][ T3427] bond0 (unregistering): Released all slaves
[  244.803595][ T9265] overlayfs: refusing to follow metacopy origin for (/file1)
[  245.277468][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.9.904'.
[  245.508918][ T3427] tipc: Subscription rejected, illegal request
[  246.955496][  T971] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  247.164584][  T971] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.187881][  T971] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.199525][  T971] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  247.213717][  T971] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.228312][  T971] usb 9-1: config 0 descriptor??
[  247.849664][  T971] usb 9-1: string descriptor 0 read error: -22
[  248.013972][ T9414] device-mapper: ioctl: Unable to rename non-existent device,  to uuid §
[  248.051186][  T971] uclogic 0003:256C:006D.0005: interface is invalid, ignoring
[  248.261107][ T5834] usb 9-1: USB disconnect, device number 2
[  248.530034][   T28] audit: type=1800 audit(1786312965.114:62): pid=9436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.928" name="use" dev="configfs" ino=22141 res=0 errno=0
[  249.325261][ T9426] loop3: detected capacity change from 0 to 131072
[  249.335403][ T9426] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  249.343400][ T9426] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  249.354382][ T9426] F2FS-fs (loop3): invalid crc value
[  249.374047][ T9426] F2FS-fs (loop3): Found nat_bits in checkpoint
[  249.456759][ T9426] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  249.463906][ T9426] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  249.524695][   T28] audit: type=1800 audit(1786312966.104:63): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.926" name="file1" dev="loop3" ino=7 res=0 errno=0
[  250.678932][ T9536] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  250.714330][  T143] Bluetooth: hci4: Frame reassembly failed (-84)
[  251.067226][ T9547] fuse: Bad value for 'fd'
[  251.127064][ T9549] loop9: detected capacity change from 0 to 1024
[  251.199269][ T9549] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  251.245693][ T9549] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.327466][ T9549] EXT4-fs error (device loop9): ext4_free_blocks:6694: comm syz.9.942: Freeing blocks not in datazone - block = 0, count = 16
[  251.383350][ T9549] EXT4-fs (loop9): Remounting filesystem read-only
[  251.517239][ T8439] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  251.935331][ T9508] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  252.135752][ T9508] usb 4-1: Using ep0 maxpacket: 32
[  252.144203][ T9508] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  252.159304][ T9508] usb 4-1: config 0 has no interface number 0
[  252.172164][ T9508] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.192733][ T9508] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.209934][ T9508] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  252.219616][ T9508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.230141][ T9508] usb 4-1: config 0 descriptor??
[  252.456798][ T9508] usbhid 4-1:0.1: can't add hid device: -71
[  252.471796][ T9508] usbhid: probe of 4-1:0.1 failed with error -71
[  252.490726][ T9508] usb 4-1: USB disconnect, device number 3
[  252.550760][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.954'.
[  252.695245][ T5785] Bluetooth: hci4: command 0x1003 tx timeout
[  252.703364][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  253.045666][ T9615] loop8: detected capacity change from 0 to 256
[  253.066131][ T9615] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  253.306204][ T9625] Bluetooth: MGMT ver 1.22
[  253.314462][ T9627] loop8: detected capacity change from 0 to 128
[  253.337085][ T9627] EXT4-fs: Ignoring removed bh option
[  253.382454][ T9627] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  253.455391][ T9627] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  253.524507][ T9629] netlink: 64 bytes leftover after parsing attributes in process `syz.1.966'.
[  253.647510][ T9627] loop8: detected capacity change from 128 to 64
[  253.682450][ T9635] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5940: Out of memory
[  253.708807][ T9635] EXT4-fs error (device loop8): ext4_ext_tree_init:891: inode #13: comm syz.8.965: mark_inode_dirty error
[  253.713936][ T5948] udevd[5948]: incorrect ext4 checksum on /dev/loop8
[  253.738353][ T9635] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5940: Out of memory
[  253.783986][ T9635] EXT4-fs error (device loop8): __ext4_new_inode:1354: inode #13: comm syz.8.965: mark_inode_dirty error
[  253.842858][ T9635] EXT4-fs error (device loop8) in __ext4_new_inode:1356: Out of memory
[  253.918914][ T9635] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5940: Out of memory
[  253.959305][ T9635] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #13: comm syz.8.965: mark_inode_dirty error
[  254.001957][ T9635] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -12)
[  254.328346][ T9662] loop3: detected capacity change from 0 to 4096
[  254.480961][ T9667] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  254.540563][ T8369] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5940: Out of memory
[  254.568370][ T8369] EXT4-fs error (device loop8): ext4_dirty_inode:6144: inode #2: comm syz-executor: mark_inode_dirty error
[  254.591317][ T8369] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  254.630377][ T9662] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[  254.720134][ T3427] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.731083][ T9662] Remounting filesystem read-only
[  254.737424][ T3427] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.910561][ T3427] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.928384][ T8784] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  254.936424][ T3427] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.959938][ T8784] NILFS (loop3): discard dirty page: offset=0, ino=2
[  254.970137][ T8784] NILFS (loop3): discard dirty block: blocknr=14, size=4096
[  254.983766][ T8784] NILFS (loop3): discard dirty page: offset=0, ino=6
[  254.994910][ T8784] NILFS (loop3): discard dirty block: blocknr=23, size=4096
[  255.007830][ T8784] NILFS (loop3): discard dirty page: offset=4096, ino=6
[  255.014812][ T8784] NILFS (loop3): discard dirty block: blocknr=24, size=4096
[  255.038130][ T8784] NILFS (loop3): discard dirty page: offset=8192, ino=6
[  255.057650][ T8784] NILFS (loop3): discard dirty block: blocknr=25, size=4096
[  255.072338][ T3427] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.105372][ T3427] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
SYZFAIL: posix_spawnp failed
 (errno 5: Input/output error)
[  255.228982][ T3427] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.239550][ T3427] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.825642][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  255.832103][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  257.441871][ T3427] hsr_slave_0: left promiscuous mode
[  257.451244][ T3427] hsr_slave_1: left promiscuous mode
[  257.457733][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.465219][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.472897][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.480486][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.489442][ T3427] bridge_slave_1: left allmulticast mode
[  257.495934][ T3427] bridge_slave_1: left promiscuous mode
[  257.501711][ T3427] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.513694][ T3427] bridge_slave_0: left allmulticast mode
[  257.519609][ T3427] bridge_slave_0: left promiscuous mode
[  257.525499][ T3427] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.558647][ T3427] veth1_macvtap: left promiscuous mode
[  257.564174][ T3427] veth0_macvtap: left promiscuous mode
[  257.570589][ T3427] veth1_vlan: left promiscuous mode
[  257.576265][ T3427] veth0_vlan: left promiscuous mode
[  258.258369][ T3427] team0 (unregistering): Port device team_slave_1 removed
[  258.309740][ T3427] team0 (unregistering): Port device team_slave_0 removed
[  258.356110][ T3427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  258.409158][ T3427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  258.771489][ T3427] bond0 (unregistering): Released all slaves
[  259.261519][ T3427] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.359136][ T3427] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.416916][ T3427] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.500133][ T3427] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.674693][ T3427] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.764209][ T3427] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.850401][ T3427] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.939547][ T3427] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.131061][ T3427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.213937][ T3427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.291431][ T3427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.380876][ T3427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.681306][ T3427] tipc: Disabling bearer <udp:syz2>
[  260.701318][ T3427] tipc: Left network mode
[  262.341188][ T3427] hsr_slave_0: left promiscuous mode
[  262.347614][ T3427] hsr_slave_1: left promiscuous mode
[  262.357268][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.364702][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.373760][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.384089][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.392078][ T3427] bridge_slave_1: left allmulticast mode
[  262.397799][ T3427] bridge_slave_1: left promiscuous mode
[  262.403483][ T3427] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.412556][ T3427] bridge_slave_0: left allmulticast mode
[  262.418607][ T3427] bridge_slave_0: left promiscuous mode
[  262.424309][ T3427] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.439530][ T3427] hsr_slave_0: left promiscuous mode
[  262.447174][ T3427] hsr_slave_1: left promiscuous mode
[  262.453017][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.460704][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.471450][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.479009][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.486958][ T3427] bridge_slave_1: left allmulticast mode
[  262.492667][ T3427] bridge_slave_1: left promiscuous mode
[  262.498667][ T3427] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.509765][ T3427] bridge_slave_0: left allmulticast mode
[  262.515876][ T3427] bridge_slave_0: left promiscuous mode
[  262.521573][ T3427] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.536412][ T3427] hsr_slave_0: left promiscuous mode
[  262.542301][ T3427] hsr_slave_1: left promiscuous mode
[  262.549571][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.559262][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.567023][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.574968][ T3427] bridge_slave_1: left allmulticast mode
[  262.581054][ T3427] bridge_slave_1: left promiscuous mode
[  262.588308][ T3427] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.598336][ T3427] bridge_slave_0: left allmulticast mode
[  262.604026][ T3427] bridge_slave_0: left promiscuous mode
[  262.610267][ T3427] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.671323][ T3427] veth1_macvtap: left promiscuous mode
[  262.677079][ T3427] veth0_macvtap: left promiscuous mode
[  262.682676][ T3427] veth1_vlan: left promiscuous mode
[  262.691802][ T3427] veth0_vlan: left promiscuous mode
[  262.701248][ T3427] veth1_macvtap: left promiscuous mode
[  262.709642][ T3427] veth0_macvtap: left promiscuous mode
[  262.715374][ T3427] veth1_vlan: left promiscuous mode
[  262.720676][ T3427] veth0_vlan: left promiscuous mode
[  262.729911][ T3427] veth1_macvtap: left promiscuous mode
[  262.737164][ T3427] veth0_macvtap: left promiscuous mode
[  262.742879][ T3427] veth1_vlan: left promiscuous mode
[  262.749208][ T3427] veth0_vlan: left promiscuous mode
[  263.632695][ T3427] team0 (unregistering): Port device team_slave_1 removed
[  263.686712][ T3427] team0 (unregistering): Port device team_slave_0 removed
[  263.743639][ T3427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.795891][ T3427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  264.167632][ T3427] bond0 (unregistering): Released all slaves
[  264.829583][ T3427] team0 (unregistering): Port device team_slave_1 removed
[  264.887736][ T3427] team0 (unregistering): Port device team_slave_0 removed
[  264.943169][ T3427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  264.994516][ T3427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface