last executing test programs:

23m36.776898635s ago: executing program 1 (id=255):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./file2\x00', 0x200000, &(0x7f0000000900)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'ascii'}}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@gid}, {@nobarrier}, {@nobarrier}]}, 0xfe, 0x5ea, &(0x7f0000002f00)="$eJzs3c9vHGcZB/DvbGLHDlK6SZMmICSscgA1IvGPyAQJCSgFWahClbj0aiVObWWTRvYWuT1AQJzbf6EczJkDJxSkHDjzLxj1iODum9HMztibZOOsE+Ndh89Hmn2fmXfmnWcezU5mxoo2wP+tpQ8z8Xg6Wbr6/mY5v7210NneWrjXxEnOJGklU0mKcvFfknyVPExvytebjr72GcUXS7dWH31+uTc3VU/V+sVB2w1nL5d2L9eqParx5l95vP0jnElyoW5h5HYb/xzY/YrfSwBgnBXJqUHL28nZ+ma9fA7o3RX37rFPtIejTgAAAACOwRs72clmzo06DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhJ6t//L+qp1cQzKZrf/5+sl6WOT7THo04AAAAAAAAAAI7At3ayk82ca+Z3i+pv/m9XMxerz6/lk2xkJeu5ls0sp5tu1jOXpN030OTmcre7PjfElvMDt5w/nuMFAAAAAAAAgNfU77O0//d/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYB0VyqtdU08Umbqd1OslUkslyvYfJoyY+yR6POgEAAAA4Bm/sZCebOdfM7xbVM/9b1XP/VD7J/XSzlm46Wcnt6l1A76m/tb210NneWrhXTs+O+5P/HCqNasT03j0M3vNstcalvS2W8vP8Klczkw+ynrX8Osvptlp1bzfLKdKu3160mzwH5/vjJ+Y+eFGuV6pMpnMna1Vu13IrH6eT22ml2f+Vg/f4u7I6xY9qQ9bodt2WR/SLuh0P7aoiE3sVma1rX1bj/MGVOOR58vSe5tLaewd18ehqfqYJztZtWev3xrnmE/N9Z99bB1cimZ3/94PVzv27q3c2ro7PIb2kp8+Jhb5KXD50JXZ3d3977IdwRCbravSuoi+8WmYlM3mvipbzdrXtuazll/k4t7OSm5nNzSzmRhaymB9ksa+ul4b4rrUOd3379nfrYCLJz+p2PJR1Pd9X1/4rXbvq61+yX6ULR/+vwOlv1EF5sr47dlek809dm5tKvHlwJf64W35udO7fXV9dfjDk/r5Tt2UFfvpylTh9+E2GUZ4vF/aGf/LsKPveHNg3V/Vd3OtrPdN3aa/vRd/Uyfoe7tmR5qu+ywP7Fqq+K319g+5yABh7Z985Ozn9r+l/TH85/Yfp1en3p949c/PMNycz8ffTfz3159afWj8s3smX+c3+8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDyNj797O5yp7OyLhCMPphKMuzKze8+jTrn1zQY8YUJ+J+73r334PrGp599b+3e8kcrH63cvzG3OH/jxuzi929ev7PWWZntfY46TQDgCO3f9I86EwAAAAAAAAAAAAAA4HmO478Tj/oYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA19vSh5l4nCJzs9dmy/ntrYVOOTXx/ppTSYoy+FuSr5KH6U1p9w1XPG8/xRdLt1YffX55f6ypZv3ioO2G80QuradyetXx5l95vP0jnElyoW5h5P4bAAD//5pgAJI=")
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000080)="5e8f72776b5a565ee8462a59215b63ea5c3adb725d582f4f9d2377780e33d286a0cf2f7131c18ca88b0e04bfb2c93bc588f58295adb17f1c3af829135e453bd796c2b86d866fa73547d3a117753015be9793957aafb8b1c3d1197ec81dba777b59d1cbf1f0c2f202dd967c3a88a26a26d2df234d3b6e8dc3df7ec15b930c9a16d2afd86f3f8720427ddc5f5f4c4df9914cf943c96a7e12312dbe8329153bfac5b849f40508bc58e2e1f6d846be5a4a86cef9391346b23a02fc5b77b033fe845157a362829fc4470ca1511dbf8e16b11fe81de85b80b00b849fc0b848db682dbc01ebd38d5e7e446265a652b09a74662a45f18f728e88642196a5c8939cf9dc4a")
mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0)
mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) (fail_nth: 1)

23m35.000906009s ago: executing program 1 (id=258):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9e, &(0x7f000000bc00)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x185)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x309ca00, 0x0, 0x0, 0x0, 0x0)

23m28.464484911s ago: executing program 1 (id=267):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r5 = fcntl$dupfd(r4, 0x0, r4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df69b29", "ae7ebfdf4de38175"}, 0x28)
read$FUSE(r5, &(0x7f0000000b80)={0x2020}, 0x2020)

23m23.671965028s ago: executing program 1 (id=275):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={0x0}}, 0x20000000)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f00000002c0)={[{@nodiscard}, {}, {@alloc_mode_def}, {@fsync_mode_posix}, {@noflush_merge}, {@disable_roll_forward}, {@age_extent_cache}, {@noacl}, {@heap}, {@resuid}, {@resgid}, {@resuid}, {@jqfmt_vfsold}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="080000000100010008"], 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)

23m20.860476612s ago: executing program 1 (id=278):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000079102800000000007b0000ff0000000095007400000000005d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1, 0x174, &(0x7f0000000240)="$eJzsmM9O6kAUxr+ZciGX3MVdcxfXRBLRSGmLGjcmEt250AT/hB1EKkGLKHQh7HwS4wu4cW98FldueIaatgOMRMWFmhi/3+LMd6an05nT5GtSEEJ+LFsb2+Xzh9aCAeAPskip+UdjXCO1+sV8uf3vaj19W72pbGbuBpPrCQBB8P7nJwDclwz4Kg+C53dn1bgLOdJ7kJhX+gACptJVSOwr7UKgovSxptthvWkeNT3XPGx79VBYYbDD4IShOLm/waVAXduf0K53e/2Tmue5nU8U0/o3KEmsafvT39ewN5bWPxsSttJFCJSVXkVq2Ju4Jdr5M4nx+sYXn5+CguK7ibE/BdcCc5o/JTT/KPits0K31883W7WG23BPHae4Yi1Z1rJTiIwojm/43+/In9La+r9eqU2KJC5qvt+x4zjKnTi+5LjJyP8kcrNxLtScTvQ9+CtmwiFnqJwQQgghhBBCCCGEEEI+nP8Q0V/QKTg7UfVTAAAA//8G43Nx")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$binfmt_aout(r2, &(0x7f0000000200)={{0x10b, 0x96, 0x4, 0x37f, 0x35a, 0x100, 0x367, 0xd}}, 0x20)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r3, &(0x7f0000000040), 0x0, 0x2000, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)

23m16.800554059s ago: executing program 1 (id=288):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51e, &(0x7f0000001080)="$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")
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f00000003c0)=""/237, 0x37, 0xed, 0x1}, 0x20)
mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="850000000000008007000000120000000100000000000000"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xffffffffffffff1c}, 0x70)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0)
r3 = eventfd2(0x0, 0x0)
io_setup(0x85, &(0x7f0000000400)=<r4=>0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000200))
io_submit(r4, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
close(r1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r5 = getuid()
r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2})
lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fchown(r1, r5, r7)
write$P9_RXATTRCREATE(r2, &(0x7f0000000400)={0x7}, 0x2000)

23m16.352858988s ago: executing program 32 (id=288):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51e, &(0x7f0000001080)="$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")
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f00000003c0)=""/237, 0x37, 0xed, 0x1}, 0x20)
mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="850000000000008007000000120000000100000000000000"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xffffffffffffff1c}, 0x70)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0)
r3 = eventfd2(0x0, 0x0)
io_setup(0x85, &(0x7f0000000400)=<r4=>0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000200))
io_submit(r4, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
close(r1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r5 = getuid()
r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2})
lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fchown(r1, r5, r7)
write$P9_RXATTRCREATE(r2, &(0x7f0000000400)={0x7}, 0x2000)

13m21.327006174s ago: executing program 4 (id=1107):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil)
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000a40)={[{@noblock_validity}, {@grpquota}, {@grpid}, {@nombcache}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000100)={0xe4, 0xdb89, @value=0x4})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)

13m16.02838993s ago: executing program 4 (id=1112):
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000)
read$FUSE(r0, &(0x7f000000a4c0)={0x2020}, 0xa5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0, 0x5, 0x1000000}, 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)

13m14.370959576s ago: executing program 4 (id=1115):
r0 = socket$kcm(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)={{0x0, 0x4, 0x6, 0xfffffffffffffffb, 0x412, 0x4, 0x6, 0x0, 0x2, 0x7, 0x4585d2aa, 0x100000001, 0x1, 0x7f44f33d}, 0x10, [0x0, 0x0]})
setsockopt$sock_attach_bpf(r0, 0x29, 0x10, 0x0, 0x1300)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000050012"], 0x4c}}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@sr0, 0x0, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x4, 0x2, 0x5, 0xfffb, 0x0, 0x9d})
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @loopback, 0x200000}, 0x80, 0x0}, 0x4cc54)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="8402000000000000071000000020027d0400060022eb3dff4a8100000000006e2ce32d667a3b0453938a7f91fc1d86b3445702813b075eec75140d09fe2b15c8b82db04c8d49875522ca07bf009a2d4b2669a05ce901029f1877bcee33a93ca5598fd1a57437b57751fe9a60c61041c524c7571b8d691af5564dc3ea4ddb23462cb002173e0950d099a685bb2046f1ed44f6b4e8ebe5927014b405a4170a7cc5d76f622846aa92f7a0fa1831da"], 0x20)

13m10.568274508s ago: executing program 4 (id=1118):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x2001, 0x4, 0x5, {0x200004, 0x5, 0x5, 0xa, 0x8000, 0x9, 0x0, 0x5, 0x9, 0x3, 0x7, 0x60b, 0x71, 0xfffb, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}})
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000082430ca88ace67d55576c8cd64815c168d483f89167f5b88b1b0623f86d900000001000000800100"/53, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
r6 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x4, 0x4, 0x0, 0xe2, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xd}, 0x80, 0x700, 0xb4c7, 0x1}})

13m8.191128907s ago: executing program 4 (id=1127):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x45}, {&(0x7f0000002340)="6511", 0x2}], 0x2}, 0x4000604)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x9, 0x9})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$bt_hci(r5, 0x6, 0x2b, 0x0, &(0x7f00000000c0))
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00')
write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x11)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x4000, &(0x7f0000000080)=ANY=[], 0x1, 0x554a, &(0x7f0000002380)="$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")

13m5.631661845s ago: executing program 4 (id=1131):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000002780)={0xb961, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r2=>0x0}], 0x6, "b175639e023968"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001780)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x5, "da46a7b34ab45a"})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000004c0)='./file0/file0\x00', 0x1c000, &(0x7f0000003f80)=ANY=[], 0x1, 0x301, &(0x7f00000007c0)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10)
sendmmsg$inet(r6, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

12m50.044433836s ago: executing program 33 (id=1131):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000002780)={0xb961, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r2=>0x0}], 0x6, "b175639e023968"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001780)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x5, "da46a7b34ab45a"})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000004c0)='./file0/file0\x00', 0x1c000, &(0x7f0000003f80)=ANY=[], 0x1, 0x301, &(0x7f00000007c0)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10)
sendmmsg$inet(r6, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

6m54.04219233s ago: executing program 2 (id=1642):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000330000000000000000000000850000001700000085000000070000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5)

6m53.007013213s ago: executing program 2 (id=1644):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0a03"], 0xd)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x82)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
r4 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
lseek(r3, 0x10001, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000140)=@ethtool_rxfh={0x47, 0xfffffffb, 0x6, 0xfffffffa, 0x9, '9!3', 0x0, [0x800, 0x4, 0x3, 0x0]}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x14, 0x1c, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x8000000000000000}, @nested={0x4, 0xfb}]}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40815}, 0xc000)

6m52.030168722s ago: executing program 2 (id=1645):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$vsock_stream(r2, 0x0, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x210a, r1}, 0x0)
write$cgroup_pressure(r1, &(0x7f00000000c0)={'some', 0x20, 0x3, 0x20, 0xb2c}, 0x2f)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
fcntl$notify(r6, 0x402, 0x18)
ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000100)={0x2, 0x1, @raw_data=[0xffffffff, 0x7, 0xee, 0x2, 0x3, 0x9, 0x7fffffff, 0x400, 0xd, 0x6, 0x3, 0xfffffffc, 0x9, 0xfffffffa, 0x7fff, 0x4]})
r7 = syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
getdents64(r7, &(0x7f00000002c0)=""/141, 0x8d)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000080)=0xe7)

6m45.475086754s ago: executing program 2 (id=1653):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000330000000000000000000000850000001700000085000000070000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5)

6m44.664997948s ago: executing program 2 (id=1655):
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8)
close(r0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x120c85c, &(0x7f0000000280)=ANY=[@ANYBLOB="726f64690900000000000000510fd16bbe05322dce7273686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c726f6469722c646f733178666c6f7070792c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c757466383d302c756e695f786c6169a13d312c726f6469722c726f6469722c75dd00383d312c00"], 0x1, 0x310, &(0x7f0000000a00)="$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")
r1 = socket(0x2b, 0x80801, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x2, 0x3a)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002", @ANYRES8=0x0, @ANYRESHEX=r5], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40c0810)
r6 = syz_io_uring_setup(0x4535, 0x0, 0x0, &(0x7f00000003c0), 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158, 0x0, r6}, 0x0, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load'], 0x32, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x9, 0x4, 0x4, {0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x101}}}, 0x32)
syz_usb_connect(0x0, 0x10b, &(0x7f0000000240)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02"], 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x10c06, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/22, 0x16}, {&(0x7f0000001d80)=""/131, 0x83}], 0x3)

6m41.551125282s ago: executing program 2 (id=1657):
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8)
close(r0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x120c85c, &(0x7f0000000280)=ANY=[@ANYBLOB="726f64690900000000000000510fd16bbe05322dce7273686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c726f6469722c646f733178666c6f7070792c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c757466383d302c756e695f786c6169a13d312c726f6469722c726f6469722c75dd00383d312c00"], 0x1, 0x310, &(0x7f0000000a00)="$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")
r1 = socket(0x2b, 0x80801, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet6(0xa, 0x2, 0x3a)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002", @ANYRES8=0x0, @ANYRESHEX=r6], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40c0810)
pwrite64(r6, &(0x7f0000000200)="25528b7542a9e365c7243a525e66b9eb77e81a26e8923ec42342b375d887d5d3132ca78e5cf9fedb33a377", 0x2b, 0x80000000)
sendmmsg$inet6(r5, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0)
r7 = syz_io_uring_setup(0x4535, 0x0, 0x0, &(0x7f00000003c0), 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158, 0x0, r7}, 0x0, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load'], 0x32, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x9, 0x4, 0x4, {0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x101}}}, 0x32)
syz_usb_connect(0x0, 0x10b, &(0x7f0000000240)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02"], 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x10c06, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/22, 0x16}, {&(0x7f0000001d80)=""/131, 0x83}], 0x3)

6m25.967198689s ago: executing program 34 (id=1657):
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8)
close(r0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x120c85c, &(0x7f0000000280)=ANY=[@ANYBLOB="726f64690900000000000000510fd16bbe05322dce7273686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c726f6469722c646f733178666c6f7070792c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c757466383d302c756e695f786c6169a13d312c726f6469722c726f6469722c75dd00383d312c00"], 0x1, 0x310, &(0x7f0000000a00)="$eJzs3c9LI2ccx/Hv5IdJtDY5lFJKCw8WSktxMIHeelCKQmmgRU2hFgpjHduQMZFMEFJKzaHQ65734MHjsrAs7G0vy7JXL/sX7K+bF2/rsrLPMpmZJCYxmoC6ru/XwTzmeT55npnHaHx0nux/d2OjtO6ar7UW0VrHZqUhh4ZkJCJR8TXk60c7Tz9feviB/7lSC3PL2ZxSERH57Z/bUw9qE7/c+/B+QvYyv+8f5F7sfbYs8mb5r6Kriq4qa60stVqp1AwvvFZ0S6ZSPzu25dqqWHbtai2ot1YdW607lc3NurLKa5Pjm1XbdZVVrquSXVe1iqpV68r60yqWlWmaanJcICKZVinSU2eIJE8MFm4dai0HWmudaHjTb/S2aYSFeHCb6HhoXHFd8z+wbc98R89zZLgIhzp25vnH+8d//j+7yfxfT0u/rvw4l8/PLyqVFNn4f6uwVfBv/fonE1IUR2zZWfxm5aj5EjEghvdx4Yf8/IxqysiXG9tBfnur4P9wmFsP8llJe69TOvIS5rN+Xh3Px2W8M5+TtHzUP58L8xLpyI/JV1905E1Jy+M/pCKOrImXbef/zSr1/U/5rv5TzXZ9pC5wegAAAAAAAAAAGImpWtrr90b7T72mmWj+x0ervrn67bXz61vr6zOSlqP+6/Mzfdf3Y/Jp7PKOGwAAAACA68St/12yHMeunk8hupsa0EVcRLyCyH9T3mAGPuDHwYjP1vuYiPRWRQd3cayQ+tbv785iMDDpabN7nqdupEJ4sUbJcu6GVSmpxl71NI4M9QUwPdb3zCeHHWG4rjTSAZ4pFV7tMuypS/Q9wPBal0Fx4yi855O+bbRxeu/acuKte1IicuqYZ4d6OpxYSOque6afB0c84JvGy9YSHwAAAIArpOMXJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcElG2jws2Le/udlcu0qCt4hvbZxmhDsLdL9PPPv+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgHvQ0AAP//MoGxXQ==")
r1 = socket(0x2b, 0x80801, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet6(0xa, 0x2, 0x3a)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002", @ANYRES8=0x0, @ANYRESHEX=r6], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40c0810)
pwrite64(r6, &(0x7f0000000200)="25528b7542a9e365c7243a525e66b9eb77e81a26e8923ec42342b375d887d5d3132ca78e5cf9fedb33a377", 0x2b, 0x80000000)
sendmmsg$inet6(r5, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0)
r7 = syz_io_uring_setup(0x4535, 0x0, 0x0, &(0x7f00000003c0), 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158, 0x0, r7}, 0x0, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load'], 0x32, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x9, 0x4, 0x4, {0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x101}}}, 0x32)
syz_usb_connect(0x0, 0x10b, &(0x7f0000000240)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02"], 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x10c06, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/22, 0x16}, {&(0x7f0000001d80)=""/131, 0x83}], 0x3)

6.50365202s ago: executing program 0 (id=2202):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x42802, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff})
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x180000a, 0x12, r2, 0x0)

5.664072827s ago: executing program 0 (id=2203):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, &(0x7f0000000480)=""/119, 0x0, 0x4000})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x1)

5.224304666s ago: executing program 0 (id=2206):
r0 = socket$inet6(0xa, 0x2, 0x0)
recvfrom(r0, 0x0, 0x0, 0x22, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000680)="0000000000060000000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000040)={r6, @in6={{0xa, 0x4e22, 0xfffffff7, @mcast2, 0x74}}}, &(0x7f0000000280)=0x84)
r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000006c0)={{r1}, "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"})
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r9, 0x5607, 0x12)
ioctl$VT_ACTIVATE(r9, 0x5606, 0x4)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6)
ioctl$PPPIOCSNPMODE(r8, 0x4008744b, 0x0)
r10 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"})
sendmsg$can_raw(r7, &(0x7f00000003c0)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f0000000200)=@can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "817ba97dfcab7b12"}, 0x10}, 0x1, 0x0, 0x0, 0x20008090}, 0x20004800)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x5, {0x2, 0x0, 0x4}}, 0x18)

4.171001488s ago: executing program 3 (id=2212):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @remote, 0x9}, 0x1c)

3.609307116s ago: executing program 3 (id=2214):
syz_clone(0x100000, &(0x7f0000000100)="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", 0x101, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0)

1.82773473s ago: executing program 5 (id=2219):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')

1.739261587s ago: executing program 3 (id=2220):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SC_SUPPORT={{0x3}, 0x3}}}, 0x7)

1.569026433s ago: executing program 0 (id=2221):
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, 0x0, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044885}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.502311815s ago: executing program 5 (id=2222):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41)
ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}})

1.465164948s ago: executing program 3 (id=2223):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1.302143428s ago: executing program 5 (id=2224):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x1)

1.089102086s ago: executing program 0 (id=2225):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.086751397s ago: executing program 5 (id=2226):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000800)={0x28, 0x3, r1, 0x0, &(0x7f0000000700)="d5", 0x1, 0x10000})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000004c0)={0x28, 0x6, r1, 0x0, &(0x7f0000000580)="81", 0x1, 0xa3fb})

814.623969ms ago: executing program 3 (id=2227):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000003480)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x18}}], 0x1, 0x40014)

811.59543ms ago: executing program 5 (id=2228):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc45})
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x6e0, 0x0, 0x3d}]})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

468.901948ms ago: executing program 3 (id=2229):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

138.460319ms ago: executing program 0 (id=2230):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000440), &(0x7f0000000480)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r0}, 0x38)

0s ago: executing program 5 (id=2231):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x240540c7, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')

kernel console output (not intermixed with test programs):

C core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1423.957725][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2
[ 1423.960044][T15385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1424.007607][   T32] usb 6-1: USB disconnect, device number 33
[ 1424.450574][T15388] loop3: detected capacity change from 0 to 40427
[ 1424.468411][T15388] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[ 1424.468440][T15388] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1424.491969][T15388] F2FS-fs (loop3): Image doesn't support compression
[ 1424.492978][T15388] F2FS-fs (loop3): invalid crc value
[ 1425.274651][T15388] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1425.467974][T15392] loop0: detected capacity change from 0 to 40427
[ 1425.571090][ T5609] Bluetooth: hci5: command tx timeout
[ 1425.640530][T15388] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0
[ 1425.640614][T15388] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[ 1425.642165][T15388] F2FS-fs (loop3): Start checkpoint disabled!
[ 1425.699744][T15392] F2FS-fs (loop0): Invalid SB checksum offset: 0
[ 1425.699771][T15392] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[ 1425.700784][T15388] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0
[ 1425.711256][T15392] F2FS-fs (loop0): invalid crc value
[ 1425.713617][T15388] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1425.713648][T15388] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[ 1426.477790][ T5704] Flush: task=udevd[5704] dev=loop0 state=2
[ 1426.603897][T15400] loop5: detected capacity change from 0 to 32768
[ 1426.616418][T15400] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1894 (15400)
[ 1426.628224][T15400] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1426.628254][T15400] BTRFS info (device loop5): using sha256 checksum algorithm
[ 1426.681861][   T68] team0 (unregistering): Port device team_slave_1 removed
[ 1426.692013][T11786] BTRFS warning (device loop5): checksum verify failed on logical 1052672 mirror 1 wanted 0x241313e5e22152213429419a4fa60bdedb0d9d2e9150d3150eb32f4ce752aa44 found 0x69d6016a71143a964fb95387050190b060b4a22b36ec556407ed5cf258c0f499 level 0
[ 1426.740583][T15400] BTRFS error (device loop5): failed to read chunk root
[ 1426.740723][T15400] BTRFS warning (device loop5): unable to release extent buffer 1052672 owner 3 gen 5 refs 3 flags 0xc
[ 1426.769804][T15400] BTRFS error (device loop5): open_ctree failed: -5
[ 1426.834941][   T68] team0 (unregistering): Port device team_slave_0 removed
[ 1426.841427][ T5704] Teardown: task=udevd[5704] dev=loop0 state=2
[ 1427.189066][T15006] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1427.189083][T15006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1427.189107][T15006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1427.641101][ T5609] Bluetooth: hci5: command tx timeout
[ 1427.717696][ T5853] Flush: task=udevd[5853] dev=loop5 state=2
[ 1427.830428][T15006] hsr_slave_0: entered promiscuous mode
[ 1427.841761][T15006] hsr_slave_1: entered promiscuous mode
[ 1427.847298][T15006] debugfs: 'hsr0' already exists in 'hsr'
[ 1427.847325][T15006] Cannot create hsr debugfs directory
[ 1427.996227][ T5853] Teardown: task=udevd[5853] dev=loop5 state=2
[ 1429.073264][ T1423] kworker/u8:11: attempt to access beyond end of device
[ 1429.073264][ T1423] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1429.078249][ T1423] CPU: 0 UID: 0 PID: 1423 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1429.078276][ T1423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1429.078297][ T1423] Workqueue: writeback wb_workfn (flush-7:3)
[ 1429.078413][ T1423] Call Trace:
[ 1429.078421][ T1423]  <TASK>
[ 1429.078435][ T1423]  dump_stack_lvl+0xe8/0x150
[ 1429.078468][ T1423]  f2fs_stop_checkpoint+0x3f9/0x5e0
[ 1429.078501][ T1423]  f2fs_write_end_io+0x124b/0x1710
[ 1429.078551][ T1423]  __submit_merged_bio+0x258/0x6a0
[ 1429.078575][ T1423]  ? rcu_is_watching+0x15/0xb0
[ 1429.078609][ T1423]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1429.078644][ T1423]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1429.078721][ T1423]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1429.078750][ T1423]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1429.078814][ T1423]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1429.078856][ T1423]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1429.078937][ T1423]  ? __lock_acquire+0x6df/0x2e40
[ 1429.078965][ T1423]  ? __lock_acquire+0x6df/0x2e40
[ 1429.079001][ T1423]  ? __lock_acquire+0x6df/0x2e40
[ 1429.079025][ T1423]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1429.079057][ T1423]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1429.079087][ T1423]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1429.079115][ T1423]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1429.079142][ T1423]  do_writepages+0x338/0x560
[ 1429.079171][ T1423]  ? reacquire_held_locks+0x117/0x1a0
[ 1429.079197][ T1423]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1429.079230][ T1423]  __writeback_single_inode+0x12e/0xf90
[ 1429.079298][ T1423]  writeback_sb_inodes+0x9db/0x1ab0
[ 1429.079333][ T1423]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1429.079372][ T1423]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1429.079438][ T1423]  ? rcu_is_watching+0x15/0xb0
[ 1429.079464][ T1423]  ? queue_io+0x2c2/0x450
[ 1429.079501][ T1423]  wb_writeback+0x41c/0xad0
[ 1429.079526][ T1423]  ? queue_io+0x211/0x450
[ 1429.079554][ T1423]  ? __pfx_wb_writeback+0x10/0x10
[ 1429.079594][ T1423]  wb_workfn+0x437/0x10f0
[ 1429.079644][ T1423]  ? __pfx_wb_workfn+0x10/0x10
[ 1429.079696][ T1423]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1429.079725][ T1423]  ? lock_acquire+0x115/0x350
[ 1429.079757][ T1423]  ? rcu_is_watching+0x15/0xb0
[ 1429.079784][ T1423]  ? process_one_work+0x7fd/0x1480
[ 1429.079843][ T1423]  process_one_work+0xaaf/0x1480
[ 1429.079890][ T1423]  ? __pfx_process_one_work+0x10/0x10
[ 1429.079911][ T1423]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1429.079936][ T1423]  ? assign_work+0x3cf/0x5d0
[ 1429.079964][ T1423]  worker_thread+0xb05/0x10d0
[ 1429.080010][ T1423]  kthread+0x388/0x470
[ 1429.080040][ T1423]  ? __pfx_worker_thread+0x10/0x10
[ 1429.080063][ T1423]  ? __pfx_kthread+0x10/0x10
[ 1429.080093][ T1423]  ret_from_fork+0x514/0xb70
[ 1429.080126][ T1423]  ? __pfx_ret_from_fork+0x10/0x10
[ 1429.080155][ T1423]  ? __switch_to+0xc89/0x1420
[ 1429.080184][ T1423]  ? __pfx_kthread+0x10/0x10
[ 1429.080215][ T1423]  ret_from_fork_asm+0x1a/0x30
[ 1429.080251][ T1423]  </TASK>
[ 1429.083949][ T1423] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1430.531455][ T5609] Bluetooth: hci5: command tx timeout
[ 1430.675132][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2
[ 1430.821528][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2
[ 1431.673103][T15442] loop3: detected capacity change from 0 to 2048
[ 1431.857043][T15442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1432.988966][T15436] loop0: detected capacity change from 0 to 32768
[ 1433.287296][T15436] lbmIODone: I/O error in JFS log
[ 1433.287366][T15436] *** Log Format Error ! ***
[ 1433.287789][T15436] lmLogInit: exit(-22)
[ 1433.287845][T15436] lmLogOpen: exit(-22)
[ 1433.636640][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2
[ 1433.826177][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2
[ 1434.668945][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[ 1434.828613][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1434.924558][T15458] loop5: detected capacity change from 0 to 128
[ 1434.967648][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1434.970316][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1434.991694][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1435.006510][T15458] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[ 1435.010310][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1435.012680][T15458] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1435.082185][   T38] audit: type=1800 audit(1784146447.896:32): pid=15458 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.5.1906" name="file2" dev="loop5" ino=105 res=0 errno=0
[ 1435.462605][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[ 1435.558318][T11215] Flush: task=syz-executor[11215] dev=loop5 state=2
[ 1435.794745][T11215] Teardown: task=syz-executor[11215] dev=loop5 state=2
[ 1438.321113][T11216] Bluetooth: hci6: command tx timeout
[ 1438.467337][T15472] loop0: detected capacity change from 0 to 2048
[ 1438.557435][T15472] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1438.589390][T15472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1440.330508][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[ 1440.404508][T11216] Bluetooth: hci6: command tx timeout
[ 1440.451746][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[ 1441.501448][   T68] bridge_slave_1: left allmulticast mode
[ 1441.501484][   T68] bridge_slave_1: left promiscuous mode
[ 1441.501754][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1441.662727][   T68] bridge_slave_0: left allmulticast mode
[ 1441.662763][   T68] bridge_slave_0: left promiscuous mode
[ 1441.663053][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1442.571133][T11216] Bluetooth: hci6: command tx timeout
[ 1443.392980][   T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1443.471575][   T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1443.553182][   T68] bond0 (unregistering): Released all slaves
[ 1443.621832][ T5850] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1443.830637][ T5850] usb 4-1: config 0 has an invalid interface number: 237 but max is 0
[ 1443.830667][ T5850] usb 4-1: config 0 has no interface number 0
[ 1443.830711][ T5850] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1443.830739][ T5850] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1443.830762][ T5850] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1443.830788][ T5850] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024
[ 1443.833163][ T5850] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[ 1443.833201][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[ 1443.833221][ T5850] usb 4-1: Product: syz
[ 1443.833236][ T5850] usb 4-1: Manufacturer: syz
[ 1443.833251][ T5850] usb 4-1: SerialNumber: syz
[ 1443.838431][ T5850] usb 4-1: config 0 descriptor??
[ 1443.848236][ T5850] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1443.848930][ T5850] xpad 4-1:0.237: probe with driver xpad failed with error -90
[ 1444.047244][T14906] netdevsim netdevsim6: probe with driver netdevsim failed with error -12
[ 1445.552380][ T5609] Bluetooth: hci6: command tx timeout
[ 1445.652084][T15545] loop0: detected capacity change from 0 to 32768
[ 1445.746330][T15544] lbmIODone: I/O error in JFS log
[ 1445.746403][T15544] *** Log Format Error ! ***
[ 1445.746857][T15544] lmLogInit: exit(-22)
[ 1445.746905][T15544] lmLogOpen: exit(-22)
[ 1445.791827][   T68] hsr_slave_0: left promiscuous mode
[ 1445.831167][   T68] hsr_slave_1: left promiscuous mode
[ 1445.832747][   T68] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1445.871827][   T68] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1445.960226][ T5853] Flush: task=udevd[5853] dev=loop0 state=2
[ 1446.032199][ T5853] Teardown: task=udevd[5853] dev=loop0 state=2
[ 1446.355357][   T10] usb 4-1: USB disconnect, device number 73
[ 1448.433499][   T68] team0 (unregistering): Port device team_slave_1 removed
[ 1448.625891][   T68] team0 (unregistering): Port device team_slave_0 removed
[ 1448.712847][T15573] loop0: detected capacity change from 0 to 2048
[ 1448.766225][T15573] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1448.817976][T15573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1449.046649][ T5605] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 1450.493344][ T5605] usb 4-1: config 0 has an invalid interface number: 237 but max is 0
[ 1450.493374][ T5605] usb 4-1: config 0 has no interface number 0
[ 1450.493420][ T5605] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1450.493446][ T5605] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1450.493468][ T5605] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1450.493500][ T5605] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024
[ 1450.498013][ T5605] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[ 1450.498042][ T5605] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[ 1450.498061][ T5605] usb 4-1: Product: syz
[ 1450.498073][ T5605] usb 4-1: Manufacturer: syz
[ 1450.498143][ T5605] usb 4-1: SerialNumber: syz
[ 1450.631441][ T5605] usb 4-1: config 0 descriptor??
[ 1450.654752][ T5605] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1450.655524][ T5605] xpad 4-1:0.237: probe with driver xpad failed with error -90
[ 1450.698339][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[ 1450.758982][T15578] loop5: detected capacity change from 0 to 512
[ 1450.760232][T15578] Flush: task=syz.5.1934[15578] dev=loop5 state=2
[ 1450.791455][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[ 1450.833703][T15578] Teardown: task=syz.5.1934[15578] dev=loop5 state=2
[ 1450.861356][ T5605] usb 4-1: USB disconnect, device number 74
[ 1451.244223][T15584] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1934'.
[ 1451.244313][T15584] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1934'.
[ 1451.590337][T15583] loop0: detected capacity change from 0 to 2048
[ 1452.484062][T15583] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1452.518130][T15583] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1454.231342][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[ 1454.352618][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[ 1454.395745][T15591] fuse: Bad value for 'rootmode'
[ 1455.786308][T15363] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1455.786474][T15363] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1455.786654][T15363] bridge_slave_0: entered allmulticast mode
[ 1455.788561][T15363] bridge_slave_0: entered promiscuous mode
[ 1456.021462][T15591] loop5: detected capacity change from 0 to 40427
[ 1456.033133][T15591] F2FS-fs (loop5): build fault injection rate: 174
[ 1456.033152][T15591] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[ 1456.034361][T15591] F2FS-fs (loop5): invalid crc value
[ 1456.045937][T15363] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1456.046287][T15363] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1456.046583][T15363] bridge_slave_1: entered allmulticast mode
[ 1456.096695][T15283] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 1456.133756][T15591] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1456.169722][T15591] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1456.324260][T15283] usb 1-1: config 0 has an invalid interface number: 237 but max is 0
[ 1456.324287][T15283] usb 1-1: config 0 has no interface number 0
[ 1456.324329][T15283] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1456.324355][T15283] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1456.324393][T15283] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1456.324418][T15283] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024
[ 1456.325243][T15363] bridge_slave_1: entered promiscuous mode
[ 1456.327285][T15283] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[ 1456.327312][T15283] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[ 1456.327332][T15283] usb 1-1: Product: syz
[ 1456.327345][T15283] usb 1-1: Manufacturer: syz
[ 1456.327358][T15283] usb 1-1: SerialNumber: syz
[ 1456.333023][T15283] usb 1-1: config 0 descriptor??
[ 1456.341298][T15283] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1456.341656][T15283] xpad 1-1:0.237: probe with driver xpad failed with error -90
[ 1456.802841][T15363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1456.904264][T15363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1457.047595][ T5853] Flush: task=udevd[5853] dev=loop5 state=2
[ 1457.208655][T15363] team0: Port device team_slave_0 added
[ 1457.223891][ T5853] Teardown: task=udevd[5853] dev=loop5 state=2
[ 1457.269780][T15363] team0: Port device team_slave_1 added
[ 1458.105003][T15624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1941'.
[ 1458.109440][T15624] loop5: detected capacity change from 0 to 128
[ 1458.117048][T15620] loop3: detected capacity change from 0 to 32768
[ 1458.118858][T15620] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1942 (15620)
[ 1458.159381][T15620] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1458.159413][T15620] BTRFS info (device loop3): using sha256 checksum algorithm
[ 1458.263814][T15624] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1458.269705][T15624] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1458.322767][   T32] usb 1-1: USB disconnect, device number 77
[ 1458.408044][T13593] BTRFS warning (device loop3): checksum verify failed on logical 1052672 mirror 1 wanted 0x241313e5e22152213429419a4fa60bdedb0d9d2e9150d3150eb32f4ce752aa44 found 0x69d6016a71143a964fb95387050190b060b4a22b36ec556407ed5cf258c0f499 level 0
[ 1458.424665][T15620] BTRFS error (device loop3): failed to read chunk root
[ 1458.424798][T15620] BTRFS warning (device loop3): unable to release extent buffer 1052672 owner 3 gen 5 refs 3 flags 0xc
[ 1458.578096][T15363] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1458.578110][T15363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1458.578133][T15363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1458.582961][T15620] BTRFS error (device loop3): open_ctree failed: -5
[ 1458.628011][T15363] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1458.628029][T15363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1458.628057][T15363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1459.420554][ T5704] Flush: task=udevd[5704] dev=loop3 state=2
[ 1459.450223][T11215] Flush: task=syz-executor[11215] dev=loop5 state=2
[ 1459.525737][T12454] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 1459.541345][ T1179] bridge_slave_1: left allmulticast mode
[ 1459.541380][ T1179] bridge_slave_1: left promiscuous mode
[ 1459.541658][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1459.553757][ T5704] Teardown: task=udevd[5704] dev=loop3 state=2
[ 1459.632837][T11215] Teardown: task=syz-executor[11215] dev=loop5 state=2
[ 1459.675602][T15659] loop5: detected capacity change from 0 to 512
[ 1459.757243][ T5853] Flush: task=udevd[5853] dev=loop5 state=2
[ 1459.922610][T12454] usb 1-1: Using ep0 maxpacket: 8
[ 1459.927551][T12454] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1459.947905][T12454] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1459.947935][T12454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1459.947955][T12454] usb 1-1: Product: syz
[ 1459.947968][T12454] usb 1-1: Manufacturer: syz
[ 1459.947983][T12454] usb 1-1: SerialNumber: syz
[ 1459.953020][T12454] usb 1-1: config 0 descriptor??
[ 1460.105744][T15663] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1946'.
[ 1460.105818][T15663] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1946'.
[ 1460.334062][T12454] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[ 1460.368719][ T5853] Teardown: task=udevd[5853] dev=loop5 state=2
[ 1460.377419][ T1179] bridge_slave_0: left allmulticast mode
[ 1460.377456][ T1179] bridge_slave_0: left promiscuous mode
[ 1460.377774][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1460.558461][T12454] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1460.563775][T12454] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 1461.021941][T15651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1461.040418][T15651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1461.058574][T15651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1461.059909][T15651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1461.081522][ T5850] usb 1-1: USB disconnect, device number 78
[ 1461.340088][T15672] loop5: detected capacity change from 0 to 32768
[ 1461.350746][T15672] lbmIODone: I/O error in JFS log
[ 1461.350818][T15672] *** Log Format Error ! ***
[ 1461.356301][T15672] lmLogInit: exit(-22)
[ 1461.356354][T15672] lmLogOpen: exit(-22)
[ 1462.742133][ T5853] Flush: task=udevd[5853] dev=loop5 state=2
[ 1462.981105][ T5853] Teardown: task=udevd[5853] dev=loop5 state=2
[ 1463.078508][ T1179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1464.136592][T15690] loop5: detected capacity change from 0 to 40427
[ 1464.155989][T15690] F2FS-fs (loop5): Invalid SB checksum offset: 0
[ 1464.156015][T15690] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 1464.157465][T15690] F2FS-fs (loop5): invalid crc value
[ 1464.251524][ T1179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1464.423535][ T1179] bond0 (unregistering): Released all slaves
[ 1464.459071][ T5853] Flush: task=udevd[5853] dev=loop5 state=2
[ 1464.684610][ T5853] Teardown: task=udevd[5853] dev=loop5 state=2
[ 1464.863900][T15703] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1954'.
[ 1464.939757][T15703] loop5: detected capacity change from 0 to 128
[ 1464.941766][T15703] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1464.963369][T15703] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1465.086608][T15363] hsr_slave_0: entered promiscuous mode
[ 1465.087838][T15363] hsr_slave_1: entered promiscuous mode
[ 1465.088886][T15363] debugfs: 'hsr0' already exists in 'hsr'
[ 1465.088910][T15363] Cannot create hsr debugfs directory
[ 1465.341036][T15455] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1465.341444][T15455] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1465.341704][T15455] bridge_slave_0: entered allmulticast mode
[ 1465.393218][T15455] bridge_slave_0: entered promiscuous mode
[ 1465.825392][T15714] loop3: detected capacity change from 0 to 32768
[ 1466.722001][T15713] lbmIODone: I/O error in JFS log
[ 1466.722072][T15713] *** Log Format Error ! ***
[ 1466.722557][T15713] lmLogInit: exit(-22)
[ 1466.726225][T15713] lmLogOpen: exit(-22)
[ 1466.989621][ T1179] hsr_slave_0: left promiscuous mode
[ 1467.027168][ T1179] hsr_slave_1: left promiscuous mode
[ 1467.030561][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1467.063646][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1467.143131][ T5853] Flush: task=udevd[5853] dev=loop5 state=2
[ 1467.179890][ T5704] Flush: task=udevd[5704] dev=loop3 state=2
[ 1467.221128][ T5853] Teardown: task=udevd[5853] dev=loop5 state=2
[ 1467.591160][ T5704] Teardown: task=udevd[5704] dev=loop3 state=2
[ 1468.419243][T15731] loop3: detected capacity change from 0 to 32768
[ 1468.442550][T15731] lbmIODone: I/O error in JFS log
[ 1468.442613][T15731] *** Log Format Error ! ***
[ 1468.443068][T15731] lmLogInit: exit(-22)
[ 1468.443114][T15731] lmLogOpen: exit(-22)
[ 1468.864718][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2
[ 1469.120269][T15740] loop5: detected capacity change from 0 to 32768
[ 1469.134372][T15740] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1961 (15740)
[ 1469.142999][T15740] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1469.143031][T15740] BTRFS info (device loop5): using sha256 checksum algorithm
[ 1469.193676][T15729] loop0: detected capacity change from 0 to 32768
[ 1469.221433][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2
[ 1469.331907][T15729] XFS (loop0): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[ 1469.426482][T15740] BTRFS info (device loop5): enabling ssd optimizations
[ 1469.426533][T15740] BTRFS info (device loop5): turning on sync discard
[ 1469.426551][T15740] BTRFS info (device loop5): enabling free space tree
[ 1469.790562][   T38] audit: type=1800 audit(1784146482.556:33): pid=15740 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.5.1961" name="file1" dev="loop5" ino=260 res=0 errno=0
[ 1469.798412][T15729] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x19d/0x1560, inode 0x1803 dinode
[ 1469.798533][T15729] XFS (loop0): Unmount and run xfs_repair
[ 1469.798545][T15729] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[ 1469.798563][T15729] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1469.798578][T15729] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1469.798592][T15729] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[ 1469.798605][T15729] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[ 1469.798619][T15729] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1469.798632][T15729] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[ 1469.798645][T15729] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[ 1469.798659][T15729] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[ 1469.905864][T15763] btrfs: Unknown parameter '18446744073709551615'
[ 1469.925008][ T1179] team0 (unregistering): Port device team_slave_1 removed
[ 1469.936511][ T5598] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1471.366732][ T1179] team0 (unregistering): Port device team_slave_0 removed
[ 1471.692881][T15455] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1471.693188][T15455] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1471.693429][T15455] bridge_slave_1: entered allmulticast mode
[ 1471.748085][T15455] bridge_slave_1: entered promiscuous mode
[ 1471.753294][ T5739] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1471.832480][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[ 1471.923915][ T5739] usb 4-1: Using ep0 maxpacket: 16
[ 1471.939447][ T5739] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1471.939474][ T5739] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1471.939523][ T5739] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1471.939544][ T5739] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1471.939565][ T5739] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1471.939587][ T5739] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1471.939619][ T5739] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1471.939641][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1472.019114][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[ 1472.165598][ T5739] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[ 1472.603254][T15455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1472.653144][ T5739] usb 4-1: USB disconnect, device number 75
[ 1472.704093][T15455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1472.718715][T11215] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1473.019967][T15779] openvswitch: netlink: nsh attr 251 is out of range max 3
[ 1474.467771][T15455] team0: Port device team_slave_0 added
[ 1474.641173][T15455] team0: Port device team_slave_1 added
[ 1474.893040][ T5853] Flush: task=udevd[5853] dev=loop5 state=2
[ 1474.998672][T15455] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1474.998688][T15455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1474.998711][T15455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1475.050648][T15455] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1475.050665][T15455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1475.050691][T15455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1475.133944][ T5853] Teardown: task=udevd[5853] dev=loop5 state=2
[ 1477.016742][T15455] hsr_slave_0: entered promiscuous mode
[ 1477.024185][T15455] hsr_slave_1: entered promiscuous mode
[ 1477.025763][T15455] debugfs: 'hsr0' already exists in 'hsr'
[ 1477.025786][T15455] Cannot create hsr debugfs directory
[ 1477.035797][   T32] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1477.181021][   T32] usb 6-1: Using ep0 maxpacket: 16
[ 1477.183531][   T32] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1477.183556][   T32] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1477.183604][   T32] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1477.183625][   T32] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1477.183647][   T32] usb 6-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1477.183672][   T32] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1477.183703][   T32] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1477.183726][   T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1477.229544][   T32] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[ 1477.485975][   T32] usb 6-1: USB disconnect, device number 34
[ 1479.760353][T15813] loop3: detected capacity change from 0 to 32768
[ 1479.791272][T15813] lbmIODone: I/O error in JFS log
[ 1479.791352][T15813] *** Log Format Error ! ***
[ 1479.791815][T15813] lmLogInit: exit(-22)
[ 1479.791860][T15813] lmLogOpen: exit(-22)
[ 1480.610129][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2
[ 1480.811127][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2
[ 1481.341135][T15825] loop0: detected capacity change from 0 to 2048
[ 1481.429499][T15825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1481.561070][ T5750] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1481.617248][T11216] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1481.666749][T11216] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1481.727443][ T5750] usb 4-1: Using ep0 maxpacket: 8
[ 1481.734417][ T5750] usb 4-1: config index 0 descriptor too short (expected 74, got 45)
[ 1481.734471][ T5750] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1481.734497][ T5750] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1481.734520][ T5750] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1481.734544][ T5750] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1481.734566][ T5750] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1481.734606][ T5750] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1481.734627][ T5750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1481.788648][T11216] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1482.012424][T11216] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1482.070230][T11216] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1482.566022][ T5750] usb 4-1: usb_control_msg returned -32
[ 1482.566100][ T5750] usbtmc 4-1:16.0: can't read capabilities
[ 1483.782572][ T5750] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1484.071567][ T5750] usb 6-1: Using ep0 maxpacket: 8
[ 1484.089575][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[ 1484.129776][ T5750] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1484.129807][ T5750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1484.234356][ T5750] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1484.238949][ T5750] pvrusb2: **********
[ 1484.239259][ T5750] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1484.239274][ T5750] pvrusb2: Important functionality might not be entirely working.
[ 1484.239399][ T5750] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1484.239524][ T5750] pvrusb2: **********
[ 1484.282817][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[ 1484.382987][ T5609] Bluetooth: hci1: command tx timeout
[ 1484.716173][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.716285][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.759547][T15850] openvswitch: netlink: nsh attr 251 is out of range max 3
[ 1484.792735][T15455] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1484.875110][T15283] usb 4-1: USB disconnect, device number 76
[ 1484.915550][T15455] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1484.938161][T15455] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1485.178177][T15455] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1485.203889][T15455] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1485.325947][T15455] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1485.913311][ T5750] usb 6-1: USB disconnect, device number 35
[ 1485.958839][ T2379] pvrusb2: Invalid write control endpoint
[ 1486.198502][T15455] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1486.282768][T15455] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1486.474763][ T5609] Bluetooth: hci1: command tx timeout
[ 1487.618566][ T2379] pvrusb2: Invalid write control endpoint
[ 1487.618584][ T2379] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1487.618594][ T2379] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1487.618602][ T2379] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1487.618613][ T2379] pvrusb2: Device being rendered inoperable
[ 1487.679478][ T2379] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1487.679647][ T2379] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1487.922932][ T2379] pvrusb2: Attached sub-driver cx25840
[ 1487.923020][ T2379] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1487.923032][ T2379] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1488.606057][T15877] loop5: detected capacity change from 0 to 32768
[ 1488.635015][ T5609] Bluetooth: hci1: command tx timeout
[ 1488.671946][T15877] lbmIODone: I/O error in JFS log
[ 1488.672006][T15877] *** Log Format Error ! ***
[ 1488.672407][T15877] lmLogInit: exit(-22)
[ 1488.672453][T15877] lmLogOpen: exit(-22)
[ 1489.289291][T11215] Flush: task=syz-executor[11215] dev=loop5 state=2
[ 1489.571621][T11215] Teardown: task=syz-executor[11215] dev=loop5 state=2
[ 1490.292993][T15455] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1490.705334][ T5609] Bluetooth: hci1: command tx timeout
[ 1490.920550][T15892] loop0: detected capacity change from 0 to 128
[ 1490.929535][T15892] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1490.961871][T15892] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1491.001141][ T5605] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 1491.176706][ T5605] usb 4-1: Using ep0 maxpacket: 32
[ 1491.182522][ T5605] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10
[ 1491.182558][ T5605] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024
[ 1491.185683][ T5605] usb 4-1: New USB device found, idVendor=0499, idProduct=100f, bcdDevice= 0.40
[ 1491.185715][ T5605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1491.185736][ T5605] usb 4-1: Product: syz
[ 1491.185751][ T5605] usb 4-1: Manufacturer: syz
[ 1491.185765][ T5605] usb 4-1: SerialNumber: syz
[ 1491.381739][T15888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1491.417670][T15455] 8021q: adding VLAN 0 to HW filter on device team0
[ 1491.602386][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[ 1491.658786][ T5605] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1491.832013][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[ 1491.945095][ T5605] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2
[ 1491.963259][ T5605] usb 4-1: USB disconnect, device number 77
[ 1491.977617][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1492.102057][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1492.102182][ T3669] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1492.529763][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1492.530003][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1492.595430][T15907] openvswitch: netlink: nsh attr 251 is out of range max 3
[ 1492.653350][T13593] bridge_slave_1: left allmulticast mode
[ 1492.653387][T13593] bridge_slave_1: left promiscuous mode
[ 1492.654576][T13593] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1492.791984][T15899] loop0: detected capacity change from 0 to 32768
[ 1492.799154][T13593] bridge_slave_0: left allmulticast mode
[ 1492.799185][T13593] bridge_slave_0: left promiscuous mode
[ 1492.799402][T13593] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1492.933308][T15899] lbmIODone: I/O error in JFS log
[ 1492.933375][T15899] *** Log Format Error ! ***
[ 1492.933804][T15899] lmLogInit: exit(-22)
[ 1492.933849][T15899] lmLogOpen: exit(-22)
[ 1493.459562][T15914] loop5: detected capacity change from 0 to 32768
[ 1493.496731][T15914] lbmIODone: I/O error in JFS log
[ 1493.496807][T15914] *** Log Format Error ! ***
[ 1493.497243][T15914] lmLogInit: exit(-22)
[ 1493.497291][T15914] lmLogOpen: exit(-22)
[ 1493.755635][T13593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1493.851942][T13593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1493.936913][T13593] bond0 (unregistering): Released all slaves
[ 1493.994395][T15828] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1493.994720][T15828] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1493.995000][T15828] bridge_slave_0: entered allmulticast mode
[ 1494.009178][T15828] bridge_slave_0: entered promiscuous mode
[ 1494.036293][T15828] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1494.036590][T15828] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1494.036863][T15828] bridge_slave_1: entered allmulticast mode
[ 1494.040384][T15828] bridge_slave_1: entered promiscuous mode
[ 1494.087596][T11215] Flush: task=syz-executor[11215] dev=loop5 state=2
[ 1494.221453][T11215] Teardown: task=syz-executor[11215] dev=loop5 state=2
[ 1494.356746][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[ 1494.426650][T15828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1494.451601][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[ 1494.562173][T15828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1495.096795][T15921] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1989'.
[ 1495.307728][T15923] loop3: detected capacity change from 0 to 128
[ 1495.334406][T15923] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1495.340406][T15923] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1495.370809][T13593] hsr_slave_0: left promiscuous mode
[ 1495.405573][T13593] hsr_slave_1: left promiscuous mode
[ 1495.407331][T13593] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1495.443144][T13593] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1495.933141][T11216] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1495.978753][T11216] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1496.000801][T11216] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1496.012483][T11216] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1496.026784][T11216] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1496.566475][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2
[ 1496.631930][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2
[ 1497.334406][T13593] team0 (unregistering): Port device team_slave_1 removed
[ 1497.433300][T13593] team0 (unregistering): Port device team_slave_0 removed
[ 1498.118351][T15943] loop3: detected capacity change from 0 to 32768
[ 1498.132540][T15943] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1995 (15943)
[ 1498.158136][T15943] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1498.158170][T15943] BTRFS info (device loop3): using sha256 checksum algorithm
[ 1498.215118][T15828] team0: Port device team_slave_0 added
[ 1498.298812][T11786] BTRFS warning (device loop3): checksum verify failed on logical 1052672 mirror 1 wanted 0x241313e5e22152213429419a4fa60bdedb0d9d2e9150d3150eb32f4ce752aa44 found 0x69d6016a71143a964fb95387050190b060b4a22b36ec556407ed5cf258c0f499 level 0
[ 1498.429838][T15943] BTRFS error (device loop3): failed to read chunk root
[ 1498.430099][T15943] BTRFS warning (device loop3): unable to release extent buffer 1052672 owner 3 gen 5 refs 3 flags 0xc
[ 1498.551779][T11216] Bluetooth: hci2: command tx timeout
[ 1498.596228][T15943] BTRFS error (device loop3): open_ctree failed: -5
[ 1498.745032][ T5853] Flush: task=udevd[5853] dev=loop3 state=2
[ 1498.887817][ T5853] Teardown: task=udevd[5853] dev=loop3 state=2
[ 1499.066552][T15828] team0: Port device team_slave_1 added
[ 1499.285884][T15966] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1998'.
[ 1499.436584][T15828] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1499.436602][T15828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1499.436628][T15828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1499.538918][T15828] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1499.538936][T15828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1499.538964][T15828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1499.710509][T15966] loop3: detected capacity change from 0 to 32768
[ 1499.716809][T15966] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1998 (15966)
[ 1499.731060][T15966] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1499.731092][T15966] BTRFS info (device loop3): using sha256 checksum algorithm
[ 1499.812317][T15979] openvswitch: netlink: nsh attr 251 is out of range max 3
[ 1500.250602][T15828] hsr_slave_0: entered promiscuous mode
[ 1500.278771][T15828] hsr_slave_1: entered promiscuous mode
[ 1500.291573][T15828] debugfs: 'hsr0' already exists in 'hsr'
[ 1500.291600][T15828] Cannot create hsr debugfs directory
[ 1500.349323][T11786] BTRFS warning (device loop3): checksum verify failed on logical 1052672 mirror 1 wanted 0x241313e5e22152213429419a4fa60bdedb0d9d2e9150d3150eb32f4ce752aa44 found 0x69d6016a71143a964fb95387050190b060b4a22b36ec556407ed5cf258c0f499 level 0
[ 1500.369644][T15966] BTRFS error (device loop3): failed to read chunk root
[ 1500.369908][T15966] BTRFS warning (device loop3): unable to release extent buffer 1052672 owner 3 gen 5 refs 3 flags 0xc
[ 1500.459031][T15966] BTRFS error (device loop3): open_ctree failed: -5
[ 1500.621041][T11216] Bluetooth: hci2: command tx timeout
[ 1501.212128][ T5853] Flush: task=udevd[5853] dev=loop3 state=2
[ 1501.538692][ T5853] Teardown: task=udevd[5853] dev=loop3 state=2
[ 1502.049125][T16004] loop3: detected capacity change from 0 to 2048
[ 1502.151215][T16004] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1502.200385][T16004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1502.722475][T11216] Bluetooth: hci2: command tx timeout
[ 1503.146651][T16005] loop0: detected capacity change from 0 to 128
[ 1503.958851][T16005] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1504.034485][T16005] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1504.105669][T16005] ext4 filesystem being mounted at /499/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1504.631919][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1504.640496][ T5853] Flush: task=udevd[5853] dev=loop3 state=2
[ 1504.720312][ T5605] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 1504.783430][T11216] Bluetooth: hci2: command tx timeout
[ 1504.920975][ T5853] Teardown: task=udevd[5853] dev=loop3 state=2
[ 1504.941686][ T5605] usb 1-1: Using ep0 maxpacket: 16
[ 1504.943903][ T5605] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[ 1504.943930][ T5605] usb 1-1: config 0 has no interface number 0
[ 1504.946638][ T5605] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1504.946666][ T5605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1504.946686][ T5605] usb 1-1: Product: syz
[ 1504.946700][ T5605] usb 1-1: Manufacturer: syz
[ 1504.946714][ T5605] usb 1-1: SerialNumber: syz
[ 1505.009749][ T5605] usb 1-1: config 0 descriptor??
[ 1505.015330][ T5605] hub 1-1:0.132: bad descriptor, ignoring hub
[ 1505.015366][ T5605] hub 1-1:0.132: probe with driver hub failed with error -5
[ 1505.136209][ T5605] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input30
[ 1505.283675][T16003] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[ 1506.611504][ T5750] usb 1-1: USB disconnect, device number 79
[ 1506.832405][ T5598] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1506.855142][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[ 1507.073522][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[ 1507.629409][   T10] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[ 1507.799021][   T10] usb 1-1: device descriptor read/64, error -71
[ 1508.096969][   T10] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[ 1508.230109][   T10] usb 1-1: device descriptor read/64, error -71
[ 1508.331473][   T10] usb usb1-port1: attempt power cycle
[ 1508.678018][   T10] usb 1-1: new full-speed USB device number 82 using dummy_hcd
[ 1508.695227][   T10] usb 1-1: device descriptor read/8, error -71
[ 1508.981087][   T10] usb 1-1: new full-speed USB device number 83 using dummy_hcd
[ 1508.981452][T16029] loop3: detected capacity change from 0 to 32768
[ 1509.001693][   T10] usb 1-1: device descriptor read/8, error -71
[ 1509.021258][T16029] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2006 (16029)
[ 1509.111664][   T10] usb usb1-port1: unable to enumerate USB device
[ 1509.403861][T16029] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1509.403894][T16029] BTRFS info (device loop3): using sha256 checksum algorithm
[ 1509.701854][T11786] BTRFS warning (device loop3): checksum verify failed on logical 1052672 mirror 1 wanted 0x241313e5e22152213429419a4fa60bdedb0d9d2e9150d3150eb32f4ce752aa44 found 0x69d6016a71143a964fb95387050190b060b4a22b36ec556407ed5cf258c0f499 level 0
[ 1509.818855][T16029] BTRFS error (device loop3): failed to read chunk root
[ 1509.818968][T16029] BTRFS warning (device loop3): unable to release extent buffer 1052672 owner 3 gen 5 refs 3 flags 0xc
[ 1510.156096][T16029] BTRFS error (device loop3): open_ctree failed: -5
[ 1510.748213][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1510.863666][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2
[ 1510.933911][   T10] usb 1-1: new full-speed USB device number 84 using dummy_hcd
[ 1510.991417][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2
[ 1511.167930][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1511.167966][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1511.168007][   T10] usb 1-1: New USB device found, idVendor=045e, idProduct=02f9, bcdDevice= 0.11
[ 1511.168031][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1511.188267][   T10] usb 1-1: config 0 descriptor??
[ 1511.199417][   T10] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[ 1511.199439][   T10] usbhid 1-1:0.0: can't add hid device: -22
[ 1511.199540][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[ 1512.692479][   T10] usb 1-1: USB disconnect, device number 84
[ 1513.206535][    C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank
[ 1513.784623][T16098] loop3: detected capacity change from 0 to 256
[ 1513.786089][T16098] exfat: Unknown parameter 'keep_laqt_lots'
[ 1513.786725][T16098] Flush: task=syz.3.2018[16098] dev=loop3 state=2
[ 1513.927521][T16098] Teardown: task=syz.3.2018[16098] dev=loop3 state=2
[ 1513.968219][T16100] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[ 1513.968289][T16100] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1514.056387][T16100] vhci_hcd vhci_hcd.0: Device attached
[ 1514.221290][   T10] vhci_hcd vhci_hcd.0: vhci_device speed not set
[ 1514.285444][   T10] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[ 1514.299519][T15283] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 1514.451024][T15283] usb 4-1: Using ep0 maxpacket: 32
[ 1514.466301][T15283] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 26, changing to 8
[ 1514.466333][T15283] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1512, setting to 1024
[ 1514.467975][T15283] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1514.468000][T15283] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1514.468020][T15283] usb 4-1: Product: syz
[ 1514.468034][T15283] usb 4-1: Manufacturer: syz
[ 1514.476048][T16098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1514.480187][T15283] hub 4-1:4.0: USB hub found
[ 1514.602087][T16101] loop0: detected capacity change from 0 to 32768
[ 1514.717439][T15283] hub 4-1:4.0: 2 ports detected
[ 1514.924960][T16098] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2018'.
[ 1515.235643][T15283] hub 4-1:4.0: hub_hub_status failed (err = -71)
[ 1515.235670][T15283] hub 4-1:4.0: config failed, can't get hub status (err -71)
[ 1515.282257][T15926] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1515.282570][T15926] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1515.282859][T15926] bridge_slave_0: entered allmulticast mode
[ 1515.288639][T15926] bridge_slave_0: entered promiscuous mode
[ 1515.319936][T15283] usb 4-1: USB disconnect, device number 78
[ 1515.357887][T15926] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1515.358211][T15926] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1515.358511][T15926] bridge_slave_1: entered allmulticast mode
[ 1515.407030][T15926] bridge_slave_1: entered promiscuous mode
[ 1516.103751][T16109] loop5: detected capacity change from 0 to 32768
[ 1516.107430][T16109] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2019 (16109)
[ 1516.131040][T16109] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1516.131072][T16109] BTRFS info (device loop5): using sha256 checksum algorithm
[ 1516.272708][T15926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1516.326818][ T1423] BTRFS warning (device loop5): checksum verify failed on logical 1052672 mirror 1 wanted 0x241313e5e22152213429419a4fa60bdedb0d9d2e9150d3150eb32f4ce752aa44 found 0x69d6016a71143a964fb95387050190b060b4a22b36ec556407ed5cf258c0f499 level 0
[ 1516.343792][T16109] BTRFS error (device loop5): failed to read chunk root
[ 1516.343963][T16109] BTRFS warning (device loop5): unable to release extent buffer 1052672 owner 3 gen 5 refs 3 flags 0xc
[ 1516.609265][T16109] BTRFS error (device loop5): open_ctree failed: -5
[ 1517.175145][T16102] vhci_hcd: connection reset by peer
[ 1517.264751][ T3669] vhci_hcd vhci_hcd.0: stop threads
[ 1517.284611][ T3669] vhci_hcd vhci_hcd.0: release socket
[ 1517.560057][ T3669] vhci_hcd vhci_hcd.0: disconnect device
[ 1517.775203][ T5853] Flush: task=udevd[5853] dev=loop5 state=2
[ 1518.003842][T15926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1518.161243][ T5853] Teardown: task=udevd[5853] dev=loop5 state=2
[ 1518.580268][T15926] team0: Port device team_slave_0 added
[ 1518.610785][T15926] team0: Port device team_slave_1 added
[ 1518.913804][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[ 1519.063528][T16151] loop3: detected capacity change from 0 to 32768
[ 1519.083659][T15283] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1519.136931][T16151] lbmIODone: I/O error in JFS log
[ 1519.136974][T16151] *** Log Format Error ! ***
[ 1519.137221][T16151] lmLogInit: exit(-22)
[ 1519.137246][T16151] lmLogOpen: exit(-22)
[ 1519.236536][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[ 1519.303941][T15283] usb 6-1: config 0 has an invalid interface number: 237 but max is 0
[ 1519.303970][T15283] usb 6-1: config 0 has no interface number 0
[ 1519.304011][T15283] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1519.304035][T15283] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1519.304057][T15283] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1519.304081][T15283] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024
[ 1519.309649][T15283] usb 6-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[ 1519.309695][T15283] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[ 1519.309712][T15283] usb 6-1: Product: syz
[ 1519.309723][T15283] usb 6-1: Manufacturer: syz
[ 1519.309735][T15283] usb 6-1: SerialNumber: syz
[ 1519.320017][T15283] usb 6-1: config 0 descriptor??
[ 1519.332577][T15283] xpad 6-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1519.343463][T15283] xpad 6-1:0.237: probe with driver xpad failed with error -90
[ 1519.572928][ T5704] Flush: task=udevd[5704] dev=loop3 state=2
[ 1519.578767][T15926] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1519.578786][T15926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1519.578813][T15926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1519.601060][   T10] vhci_hcd vhci_hcd.0: vhci_device speed not set
[ 1519.686015][ T5704] Teardown: task=udevd[5704] dev=loop3 state=2
[ 1519.719230][T15926] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1519.719247][T15926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1519.719275][T15926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1520.882617][   T10] usb 6-1: USB disconnect, device number 36
[ 1521.003782][T15926] hsr_slave_0: entered promiscuous mode
[ 1521.016990][T15926] hsr_slave_1: entered promiscuous mode
[ 1521.024277][T15926] debugfs: 'hsr0' already exists in 'hsr'
[ 1521.024304][T15926] Cannot create hsr debugfs directory
[ 1521.849538][T16190] loop5: detected capacity change from 0 to 128
[ 1521.850655][T16190] vfat: Unknown parameter 'rodi	'
[ 1522.029169][ T5704] Flush: task=udevd[5704] dev=loop5 state=2
[ 1523.321161][T16196] trusted_key: encrypted_key: insufficient parameters specified
[ 1523.496836][ T5850] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 1523.568095][   T12] bridge_slave_1: left allmulticast mode
[ 1523.568130][   T12] bridge_slave_1: left promiscuous mode
[ 1523.568404][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1523.641512][ T5704] Teardown: task=udevd[5704] dev=loop5 state=2
[ 1523.695091][ T5850] usb 1-1: config 0 has an invalid interface number: 237 but max is 0
[ 1523.695120][ T5850] usb 1-1: config 0 has no interface number 0
[ 1523.695163][ T5850] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1523.695189][ T5850] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1523.695212][ T5850] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1523.695237][ T5850] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024
[ 1523.698104][ T5850] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[ 1523.698134][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[ 1523.698153][ T5850] usb 1-1: Product: syz
[ 1523.698173][ T5850] usb 1-1: Manufacturer: syz
[ 1523.698187][ T5850] usb 1-1: SerialNumber: syz
[ 1523.711006][   T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1523.799368][ T5850] usb 1-1: config 0 descriptor??
[ 1523.809857][ T5850] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1523.821157][ T5850] xpad 1-1:0.237: probe with driver xpad failed with error -90
[ 1523.864171][   T12] bridge_slave_0: left allmulticast mode
[ 1523.864197][   T12] bridge_slave_0: left promiscuous mode
[ 1523.864382][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1523.872711][   T10] usb 6-1: Using ep0 maxpacket: 16
[ 1523.890255][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1523.890271][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1523.890297][   T10] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1523.890309][   T10] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1523.890320][   T10] usb 6-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1523.890334][   T10] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1523.890351][   T10] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1523.890364][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1523.975005][   T10] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[ 1524.148775][T16212] loop3: detected capacity change from 0 to 32768
[ 1524.164598][T16212] lbmIODone: I/O error in JFS log
[ 1524.168991][T16212] *** Log Format Error ! ***
[ 1524.169459][T16212] lmLogInit: exit(-22)
[ 1524.169510][T16212] lmLogOpen: exit(-22)
[ 1524.228237][ T5750] usb 1-1: USB disconnect, device number 85
[ 1524.394094][   T10] usb 6-1: USB disconnect, device number 37
[ 1524.435813][ T5704] Flush: task=udevd[5704] dev=loop3 state=2
[ 1524.541108][ T5704] Teardown: task=udevd[5704] dev=loop3 state=2
[ 1525.477145][T16220] loop3: detected capacity change from 0 to 2048
[ 1526.616860][T16220] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1526.767083][T16220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1528.643465][ T5853] Flush: task=udevd[5853] dev=loop3 state=2
[ 1529.002962][ T5853] Teardown: task=udevd[5853] dev=loop3 state=2
[ 1530.079488][   T32] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 1530.311858][   T32] usb 4-1: Using ep0 maxpacket: 32
[ 1530.357003][   T32] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1530.357100][   T32] usb 4-1: config 0 has no interface number 0
[ 1530.382583][   T32] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1530.382649][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1530.382705][   T32] usb 4-1: Product: syz
[ 1530.382756][   T32] usb 4-1: Manufacturer: syz
[ 1530.382825][   T32] usb 4-1: SerialNumber: syz
[ 1530.524408][T16231] loop5: detected capacity change from 0 to 2048
[ 1530.609219][   T32] usb 4-1: config 0 descriptor??
[ 1530.669940][T16231] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1530.708662][T16231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1532.337121][   T32] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1532.337159][   T32] usb 4-1: selecting invalid altsetting 1
[ 1532.337174][   T32] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1532.404583][   T32] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1532.427156][   T32] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1532.427227][   T32] usb 4-1: media controller created
[ 1532.479558][   T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1532.497180][ T5704] Flush: task=udevd[5704] dev=loop5 state=2
[ 1532.571068][T15283] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 1532.601099][ T5704] Teardown: task=udevd[5704] dev=loop5 state=2
[ 1532.712988][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1532.721037][T15283] usb 1-1: Using ep0 maxpacket: 8
[ 1532.737160][T15283] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1532.740486][T15283] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1532.740517][T15283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1532.740571][T15283] usb 1-1: Product: syz
[ 1532.740580][T15283] usb 1-1: Manufacturer: syz
[ 1532.740587][T15283] usb 1-1: SerialNumber: syz
[ 1532.790647][T15283] usb 1-1: config 0 descriptor??
[ 1532.820714][T15283] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[ 1532.833032][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1532.876124][   T12] bond0 (unregistering): Released all slaves
[ 1533.054212][T15283] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1533.070825][T15283] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 1533.254119][T16234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1533.254883][T16234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1533.257398][T16234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1533.258081][T16234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1533.283283][ T5750] usb 1-1: USB disconnect, device number 86
[ 1533.365971][   T32] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1533.366039][   T32] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1533.368063][   T32] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1533.567419][   T32] usb 4-1: USB disconnect, device number 79
[ 1533.949530][T16242] loop3: detected capacity change from 0 to 32768
[ 1533.951648][T16242] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2041 (16242)
[ 1533.958599][T16242] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1533.958633][T16242] BTRFS info (device loop3): using sha256 checksum algorithm
[ 1534.041870][T13593] BTRFS warning (device loop3): checksum verify failed on logical 1052672 mirror 1 wanted 0x241313e5e22152213429419a4fa60bdedb0d9d2e9150d3150eb32f4ce752aa44 found 0x69d6016a71143a964fb95387050190b060b4a22b36ec556407ed5cf258c0f499 level 0
[ 1534.061342][T16242] BTRFS error (device loop3): failed to read chunk root
[ 1534.061528][T16242] BTRFS warning (device loop3): unable to release extent buffer 1052672 owner 3 gen 5 refs 3 flags 0xc
[ 1534.322483][T16242] BTRFS error (device loop3): open_ctree failed: -5
[ 1534.879859][T16259] loop0: detected capacity change from 0 to 128
[ 1534.904074][ T5853] Flush: task=udevd[5853] dev=loop3 state=2
[ 1535.038489][T16259] vfat: Unknown parameter 'rodi	'
[ 1535.054255][ T5704] Flush: task=udevd[5704] dev=loop0 state=2
[ 1535.115807][ T5853] Teardown: task=udevd[5853] dev=loop3 state=2
[ 1535.486355][T16262] trusted_key: encrypted_key: insufficient parameters specified
[ 1535.732354][ T5750] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1535.763506][T16263] FAULT_INJECTION: forcing a failure.
[ 1535.763506][T16263] name failslab, interval 1, probability 0, space 0, times 0
[ 1535.763541][T16263] CPU: 0 UID: 0 PID: 16263 Comm: syz.5.2044 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1535.763564][T16263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1535.763577][T16263] Call Trace:
[ 1535.763585][T16263]  <TASK>
[ 1535.763594][T16263]  dump_stack_lvl+0xe8/0x150
[ 1535.763630][T16263]  should_fail_ex+0x467/0x600
[ 1535.763667][T16263]  should_failslab+0xa8/0x100
[ 1535.763694][T16263]  __kmalloc_noprof+0xfb/0x790
[ 1535.763715][T16263]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1535.763740][T16263]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1535.763768][T16263]  tomoyo_realpath_from_path+0xef/0x640
[ 1535.763802][T16263]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1535.763834][T16263]  tomoyo_path_number_perm+0x246/0x5f0
[ 1535.763868][T16263]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1535.763900][T16263]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1535.763934][T16263]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1535.763965][T16263]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1535.764011][T16263]  ? __fget_files+0x2a/0x420
[ 1535.764041][T16263]  ? __fget_files+0x3a8/0x420
[ 1535.764064][T16263]  ? __fget_files+0x2a/0x420
[ 1535.764092][T16263]  security_file_ioctl+0xb9/0x260
[ 1535.764124][T16263]  __se_sys_ioctl+0x47/0x170
[ 1535.764158][T16263]  do_syscall_64+0x17b/0x530
[ 1535.764187][T16263]  ? irqentry_exit+0x10f/0x8f0
[ 1535.764215][T16263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1535.764235][T16263]  ? clear_bhb_loop+0x40/0x90
[ 1535.764269][T16263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1535.764289][T16263] RIP: 0033:0x7f2a1bcede59
[ 1535.764312][T16263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1535.764330][T16263] RSP: 002b:00007f2a19f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1535.764352][T16263] RAX: ffffffffffffffda RBX: 00007f2a1bf75fa0 RCX: 00007f2a1bcede59
[ 1535.764367][T16263] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1535.764380][T16263] RBP: 00007f2a19f46090 R08: 0000000000000000 R09: 0000000000000000
[ 1535.764394][T16263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1535.764406][T16263] R13: 00007f2a1bf76038 R14: 00007f2a1bf75fa0 R15: 00007fff5ef58878
[ 1535.764438][T16263]  </TASK>
[ 1535.764477][T16263] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1536.071072][ T5750] usb 1-1: Using ep0 maxpacket: 16
[ 1536.079026][ T5750] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1536.079058][ T5750] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1536.079107][ T5750] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1536.079130][ T5750] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1536.079153][ T5750] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1536.079180][ T5750] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1536.079212][ T5750] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1536.079235][ T5750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1536.195291][ T5750] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[ 1536.553841][ T5704] Teardown: task=udevd[5704] dev=loop0 state=2
[ 1536.852246][T16270] overlayfs: overlapping lowerdir path
[ 1537.578939][T16271] overlayfs: failed lookup in lower (newroot/530, name='file0', err=-40): overlapping layers
[ 1537.822524][ T5750] usb 1-1: USB disconnect, device number 87
[ 1538.541029][ T5718] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1538.751564][ T5718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1538.751603][ T5718] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1538.759522][ T5718] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[ 1538.759553][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1538.759573][ T5718] usb 6-1: Product: syz
[ 1538.759587][ T5718] usb 6-1: Manufacturer: syz
[ 1538.759600][ T5718] usb 6-1: SerialNumber: syz
[ 1538.764283][ T5718] usb 6-1: config 0 descriptor??
[ 1538.844824][ T5718] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[ 1538.849908][ T5718] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1538.854934][ T5718] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[ 1538.855040][ T5718] usb 6-1: media controller created
[ 1538.951853][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1539.218326][ T5718] DVB: Unable to find symbol tda10046_attach()
[ 1539.218406][ T5718] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[ 1539.218458][ T5718] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[ 1539.484393][ T5718] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[ 1539.494416][ T5718] usb 6-1: USB disconnect, device number 38
[ 1539.625563][T15828] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1539.674463][T15828] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1539.973656][T16286] loop0: detected capacity change from 0 to 2048
[ 1540.042830][T16286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1541.108161][T16290] loop3: detected capacity change from 0 to 32768
[ 1541.180518][   T12] hsr_slave_0: left promiscuous mode
[ 1541.195248][T16287] lbmIODone: I/O error in JFS log
[ 1541.198718][T16287] *** Log Format Error ! ***
[ 1541.199001][T16287] lmLogInit: exit(-22)
[ 1541.199032][T16287] lmLogOpen: exit(-22)
[ 1541.222935][   T12] hsr_slave_1: left promiscuous mode
[ 1541.229487][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1541.270186][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1541.482822][ T5853] Flush: task=udevd[5853] dev=loop3 state=2
[ 1541.591710][ T5853] Teardown: task=udevd[5853] dev=loop3 state=2
[ 1541.931619][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1541.972611][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1542.274374][T15828] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1543.337968][T16300] loop3: detected capacity change from 0 to 32768
[ 1543.396732][T15828] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1543.543240][T16298] lbmIODone: I/O error in JFS log
[ 1543.543313][T16298] *** Log Format Error ! ***
[ 1543.543791][T16298] lmLogInit: exit(-22)
[ 1543.543835][T16298] lmLogOpen: exit(-22)
[ 1543.591794][T16301] loop5: detected capacity change from 0 to 32768
[ 1543.605046][T16301] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2052 (16301)
[ 1543.690788][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1543.703576][T16301] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1543.703609][T16301] BTRFS info (device loop5): using sha256 checksum algorithm
[ 1543.816916][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1543.825310][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1543.830216][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1543.831116][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1544.275592][T12271] BTRFS warning (device loop5): checksum verify failed on logical 1052672 mirror 1 wanted 0x241313e5e22152213429419a4fa60bdedb0d9d2e9150d3150eb32f4ce752aa44 found 0x69d6016a71143a964fb95387050190b060b4a22b36ec556407ed5cf258c0f499 level 0
[ 1544.332789][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2
[ 1544.494478][T16301] BTRFS error (device loop5): failed to read chunk root
[ 1544.494617][T16301] BTRFS warning (device loop5): unable to release extent buffer 1052672 owner 3 gen 5 refs 3 flags 0xc
[ 1544.502172][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[ 1544.707912][T16301] BTRFS error (device loop5): open_ctree failed: -5
[ 1544.807979][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2
[ 1544.843244][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[ 1545.607441][T10352] Flush: task=udevd[10352] dev=loop5 state=2
[ 1545.931507][T16337] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[ 1545.931535][T16337] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1545.931647][T16337] vhci_hcd vhci_hcd.0: Device attached
[ 1546.111062][ T5739] vhci_hcd vhci_hcd.3: vhci_device speed not set
[ 1546.147880][T11216] Bluetooth: hci5: command tx timeout
[ 1546.150044][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.150152][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.170982][ T5739] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[ 1546.296913][T16341] loop3: detected capacity change from 0 to 32768
[ 1547.055591][T16342] trusted_key: encrypted_key: insufficient parameters specified
[ 1547.291504][T10352] Teardown: task=udevd[10352] dev=loop5 state=2
[ 1547.427217][T16350] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1547.462969][ T5850] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1547.642769][ T5850] usb 6-1: Using ep0 maxpacket: 16
[ 1547.644955][ T5850] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1547.644980][ T5850] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1547.645027][ T5850] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1547.645048][ T5850] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1547.645070][ T5850] usb 6-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1547.645092][ T5850] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1547.645122][ T5850] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1547.645142][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1547.838055][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1547.865751][ T5850] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[ 1548.299891][T11216] Bluetooth: hci5: command tx timeout
[ 1548.396670][ T5850] usb 6-1: USB disconnect, device number 39
[ 1548.545250][T16361] loop0: detected capacity change from 0 to 64
[ 1548.993407][ T5850] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1549.141075][ T5850] usb 1-1: Using ep0 maxpacket: 32
[ 1549.143452][ T5850] usb 1-1: config 0 has an invalid descriptor of length 139, skipping remainder of the config
[ 1549.143491][ T5850] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[ 1549.143532][ T5850] usb 1-1: config 0 interface 0 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 223
[ 1549.143560][ T5850] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1549.143593][ T5850] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00
[ 1549.143616][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1549.150811][ T5850] usb 1-1: config 0 descriptor??
[ 1549.244364][ T5850] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1549.521893][ T5850] usb 1-1: USB disconnect, device number 88
[ 1549.845086][T16339] vhci_hcd: connection reset by peer
[ 1549.845496][   T84] vhci_hcd vhci_hcd.3: stop threads
[ 1549.845519][   T84] vhci_hcd vhci_hcd.3: release socket
[ 1549.845591][   T84] vhci_hcd vhci_hcd.3: disconnect device
[ 1550.314128][T11216] Bluetooth: hci5: command tx timeout
[ 1550.642290][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[ 1550.715296][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[ 1550.858125][T16380] FAULT_INJECTION: forcing a failure.
[ 1550.858125][T16380] name failslab, interval 1, probability 0, space 0, times 0
[ 1550.858163][T16380] CPU: 1 UID: 0 PID: 16380 Comm: syz.0.2061 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1550.858187][T16380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1550.858199][T16380] Call Trace:
[ 1550.858206][T16380]  <TASK>
[ 1550.858215][T16380]  dump_stack_lvl+0xe8/0x150
[ 1550.858250][T16380]  should_fail_ex+0x467/0x600
[ 1550.858285][T16380]  should_failslab+0xa8/0x100
[ 1550.858310][T16380]  __kmalloc_noprof+0xfb/0x790
[ 1550.858332][T16380]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1550.858355][T16380]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1550.858386][T16380]  tomoyo_realpath_from_path+0xef/0x640
[ 1550.858422][T16380]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1550.858453][T16380]  tomoyo_path_number_perm+0x246/0x5f0
[ 1550.858483][T16380]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1550.858514][T16380]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1550.858544][T16380]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1550.858573][T16380]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1550.858616][T16380]  ? __fget_files+0x2a/0x420
[ 1550.858643][T16380]  ? __fget_files+0x3a8/0x420
[ 1550.858665][T16380]  ? __fget_files+0x2a/0x420
[ 1550.858689][T16380]  security_file_ioctl+0xb9/0x260
[ 1550.858719][T16380]  __se_sys_ioctl+0x47/0x170
[ 1550.858752][T16380]  do_syscall_64+0x17b/0x530
[ 1550.858780][T16380]  ? irqentry_exit+0x10f/0x8f0
[ 1550.858806][T16380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1550.858826][T16380]  ? clear_bhb_loop+0x40/0x90
[ 1550.858849][T16380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1550.858869][T16380] RIP: 0033:0x7fb9be64de59
[ 1550.858887][T16380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1550.858905][T16380] RSP: 002b:00007fb9bc8a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1550.858924][T16380] RAX: ffffffffffffffda RBX: 00007fb9be8d5fa0 RCX: 00007fb9be64de59
[ 1550.858939][T16380] RDX: 0000200000000080 RSI: 0000000000003ba0 RDI: 0000000000000004
[ 1550.858952][T16380] RBP: 00007fb9bc8a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1550.858965][T16380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1550.858978][T16380] R13: 00007fb9be8d6038 R14: 00007fb9be8d5fa0 R15: 00007ffe3c56e568
[ 1550.859010][T16380]  </TASK>
[ 1550.914021][T16380] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1551.266161][ T5739] vhci_hcd vhci_hcd.3: vhci_device speed not set
[ 1551.368787][T16387] FAULT_INJECTION: forcing a failure.
[ 1551.368787][T16387] name failslab, interval 1, probability 0, space 0, times 0
[ 1551.368821][T16387] CPU: 0 UID: 0 PID: 16387 Comm: syz.5.2062 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1551.368844][T16387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1551.368857][T16387] Call Trace:
[ 1551.368872][T16387]  <TASK>
[ 1551.368880][T16387]  dump_stack_lvl+0xe8/0x150
[ 1551.368915][T16387]  should_fail_ex+0x467/0x600
[ 1551.368953][T16387]  should_failslab+0xa8/0x100
[ 1551.368979][T16387]  __kmalloc_noprof+0xfb/0x790
[ 1551.369000][T16387]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1551.369023][T16387]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1551.369054][T16387]  tomoyo_realpath_from_path+0xef/0x640
[ 1551.369087][T16387]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1551.369117][T16387]  tomoyo_path_number_perm+0x246/0x5f0
[ 1551.369152][T16387]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1551.369184][T16387]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1551.369216][T16387]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1551.369244][T16387]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1551.369295][T16387]  ? __fget_files+0x2a/0x420
[ 1551.369323][T16387]  ? __fget_files+0x3a8/0x420
[ 1551.369344][T16387]  ? __fget_files+0x2a/0x420
[ 1551.369371][T16387]  security_file_ioctl+0xb9/0x260
[ 1551.369402][T16387]  __se_sys_ioctl+0x47/0x170
[ 1551.369435][T16387]  do_syscall_64+0x17b/0x530
[ 1551.369464][T16387]  ? irqentry_exit+0x10f/0x8f0
[ 1551.369492][T16387]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1551.369512][T16387]  ? clear_bhb_loop+0x40/0x90
[ 1551.369538][T16387]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1551.369558][T16387] RIP: 0033:0x7f2a1bcede59
[ 1551.369575][T16387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1551.369593][T16387] RSP: 002b:00007f2a19f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1551.369620][T16387] RAX: ffffffffffffffda RBX: 00007f2a1bf75fa0 RCX: 00007f2a1bcede59
[ 1551.369635][T16387] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[ 1551.369648][T16387] RBP: 00007f2a19f46090 R08: 0000000000000000 R09: 0000000000000000
[ 1551.369661][T16387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1551.369673][T16387] R13: 00007f2a1bf76038 R14: 00007f2a1bf75fa0 R15: 00007fff5ef58878
[ 1551.369705][T16387]  </TASK>
[ 1551.369725][T16387] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1551.435078][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2
[ 1552.761995][T16395] loop0: detected capacity change from 0 to 32768
[ 1552.768137][T11216] Bluetooth: hci5: command tx timeout
[ 1552.854115][T16392] lbmIODone: I/O error in JFS log
[ 1552.854184][T16392] *** Log Format Error ! ***
[ 1552.854658][T16392] lmLogInit: exit(-22)
[ 1552.854706][T16392] lmLogOpen: exit(-22)
[ 1553.033317][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2
[ 1553.314265][ T5853] Flush: task=udevd[5853] dev=loop0 state=2
[ 1553.534342][ T5853] Teardown: task=udevd[5853] dev=loop0 state=2
[ 1554.521403][ T5850] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 1554.695815][ T5850] usb 4-1: config 0 has an invalid interface number: 237 but max is 0
[ 1554.695843][ T5850] usb 4-1: config 0 has no interface number 0
[ 1554.695885][ T5850] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1554.695910][ T5850] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1554.695930][ T5850] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1554.695952][ T5850] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024
[ 1554.699062][ T5850] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[ 1554.699092][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[ 1554.699111][ T5850] usb 4-1: Product: syz
[ 1554.699126][ T5850] usb 4-1: Manufacturer: syz
[ 1554.699141][ T5850] usb 4-1: SerialNumber: syz
[ 1554.796269][ T5850] usb 4-1: config 0 descriptor??
[ 1554.809011][ T5850] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1554.831411][ T5850] xpad 4-1:0.237: probe with driver xpad failed with error -90
[ 1556.300681][ T5850] usb 4-1: USB disconnect, device number 80
[ 1557.492260][T16429] loop5: detected capacity change from 0 to 512
[ 1557.561779][T16425] loop0: detected capacity change from 0 to 2048
[ 1557.652654][T16425] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1557.671496][T16425] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1558.225445][T16432] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2067'.
[ 1558.225530][T16432] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2067'.
[ 1559.302640][ T5704] Flush: task=udevd[5704] dev=loop5 state=2
[ 1559.624813][ T5704] Teardown: task=udevd[5704] dev=loop5 state=2
[ 1559.997770][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[ 1560.001672][T16442] loop5: detected capacity change from 0 to 2048
[ 1560.017868][T16442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1560.319372][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[ 1560.615165][T11216] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1560.707141][T11216] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1560.752010][T11216] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1560.759025][T11216] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1560.789058][T11216] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1561.041807][T16456] loop3: detected capacity change from 0 to 128
[ 1561.046779][T16456] udf: Unknown parameter '/dev/net/tun'
[ 1561.047183][T16456] Flush: task=syz.3.2070[16456] dev=loop3 state=2
[ 1561.243166][T16456] Teardown: task=syz.3.2070[16456] dev=loop3 state=2
[ 1561.299739][T11215] Flush: task=syz-executor[11215] dev=loop5 state=2
[ 1561.341103][ T5750] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 1561.344315][T16447] loop3: detected capacity change from 0 to 1024
[ 1561.474809][T11215] Teardown: task=syz-executor[11215] dev=loop5 state=2
[ 1561.503121][ T5750] usb 1-1: config 0 has an invalid interface number: 237 but max is 0
[ 1561.503148][ T5750] usb 1-1: config 0 has no interface number 0
[ 1561.503188][ T5750] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1561.503209][ T5750] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1561.503227][ T5750] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1561.503247][ T5750] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024
[ 1561.505485][ T5750] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[ 1561.505513][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[ 1561.505533][ T5750] usb 1-1: Product: syz
[ 1561.505556][ T5750] usb 1-1: Manufacturer: syz
[ 1561.505570][ T5750] usb 1-1: SerialNumber: syz
[ 1561.622644][ T5750] usb 1-1: config 0 descriptor??
[ 1561.644997][ T5750] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1561.646453][ T5750] xpad 1-1:0.237: probe with driver xpad failed with error -90
[ 1562.275011][   T32] usb 1-1: USB disconnect, device number 89
[ 1562.413044][ T5739] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1562.659759][ T5739] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1562.662867][ T5739] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1562.662902][ T5739] usb 6-1: can't read configurations, error -71
[ 1563.031890][T16299] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1563.032341][T16299] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1563.032611][T16299] bridge_slave_0: entered allmulticast mode
[ 1563.039127][T16299] bridge_slave_0: entered promiscuous mode
[ 1563.103015][ T5609] Bluetooth: hci1: command tx timeout
[ 1563.488404][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2
[ 1563.594546][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2
[ 1563.621925][T16299] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1563.622301][T16299] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1563.622593][T16299] bridge_slave_1: entered allmulticast mode
[ 1563.648821][T16299] bridge_slave_1: entered promiscuous mode
[ 1565.181028][ T5609] Bluetooth: hci1: command tx timeout
[ 1565.495364][T16496] loop0: detected capacity change from 0 to 2048
[ 1565.852331][T16496] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1565.910893][T16496] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1566.513193][T16299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1567.214627][T16299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1567.261055][ T5609] Bluetooth: hci1: command tx timeout
[ 1567.715020][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[ 1567.801354][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[ 1567.882845][T16299] team0: Port device team_slave_0 added
[ 1567.931776][T16299] team0: Port device team_slave_1 added
[ 1568.307463][T16504] openvswitch: netlink: nsh attr 251 is out of range max 3
[ 1569.226748][T16299] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1569.226765][T16299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1569.226792][T16299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1569.343197][ T5609] Bluetooth: hci1: command tx timeout
[ 1569.554961][T16299] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1569.554978][T16299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1569.555005][T16299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1569.659061][T16510] binder: 16506:16510 ioctl 6611 0 returned -22
[ 1571.141322][T16299] hsr_slave_0: entered promiscuous mode
[ 1571.143803][T16299] hsr_slave_1: entered promiscuous mode
[ 1571.145629][T16299] debugfs: 'hsr0' already exists in 'hsr'
[ 1571.145655][T16299] Cannot create hsr debugfs directory
[ 1573.682415][   T12] bridge_slave_1: left allmulticast mode
[ 1573.682451][   T12] bridge_slave_1: left promiscuous mode
[ 1573.682749][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1573.843978][   T12] bridge_slave_0: left allmulticast mode
[ 1573.844015][   T12] bridge_slave_0: left promiscuous mode
[ 1573.844293][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1574.427794][T16547] loop0: detected capacity change from 0 to 512
[ 1574.531125][ T5739] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1574.688019][ T5853] Flush: task=udevd[5853] dev=loop0 state=2
[ 1574.775640][T16549] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2090'.
[ 1574.775740][T16549] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2090'.
[ 1575.041025][ T5739] usb 6-1: Using ep0 maxpacket: 8
[ 1575.069438][ T5739] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1575.073226][ T5739] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1575.073257][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1575.073278][ T5739] usb 6-1: Product: syz
[ 1575.073293][ T5739] usb 6-1: Manufacturer: syz
[ 1575.073307][ T5739] usb 6-1: SerialNumber: syz
[ 1575.144619][ T5739] usb 6-1: config 0 descriptor??
[ 1575.243042][ T5739] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found
[ 1575.271094][ T5853] Teardown: task=udevd[5853] dev=loop0 state=2
[ 1575.499341][ T5739] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1575.510014][ T5739] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 1576.428026][T16545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1576.428566][T16545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1576.434876][T16545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1576.491208][T16545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1576.506473][T15283] usb 6-1: USB disconnect, device number 42
[ 1576.686485][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1576.773681][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1576.833953][   T12] bond0 (unregistering): Released all slaves
[ 1578.538368][   T12] hsr_slave_0: left promiscuous mode
[ 1579.502335][T16571] loop3: detected capacity change from 0 to 2048
[ 1579.558516][T16571] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1579.584695][T16571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1579.730547][T16569] loop5: detected capacity change from 0 to 8192
[ 1579.869145][   T12] hsr_slave_1: left promiscuous mode
[ 1579.879486][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1579.913329][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1580.356050][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2
[ 1580.441639][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2
[ 1580.621286][T11215] Flush: task=syz-executor[11215] dev=loop5 state=2
[ 1581.613578][T11215] Teardown: task=syz-executor[11215] dev=loop5 state=2
[ 1581.832186][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1581.881519][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1581.991042][ T5750] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1582.151089][ T5750] usb 6-1: Using ep0 maxpacket: 8
[ 1582.171487][ T5750] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1582.174497][ T5750] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1582.174527][ T5750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1582.174545][ T5750] usb 6-1: Product: syz
[ 1582.174555][ T5750] usb 6-1: Manufacturer: syz
[ 1582.174562][ T5750] usb 6-1: SerialNumber: syz
[ 1582.178500][ T5750] usb 6-1: config 0 descriptor??
[ 1582.245481][ T5750] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found
[ 1582.457121][ T5750] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1582.459948][ T5750] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 1582.673380][T16603] netlink: 'syz.0.2103': attribute type 8 has an invalid length.
[ 1582.673399][T16603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2103'.
[ 1582.726200][T16604] FAULT_INJECTION: forcing a failure.
[ 1582.726200][T16604] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1582.726235][T16604] CPU: 1 UID: 0 PID: 16604 Comm: syz.0.2103 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1582.726261][T16604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1582.726272][T16604] Call Trace:
[ 1582.726280][T16604]  <TASK>
[ 1582.726288][T16604]  dump_stack_lvl+0xe8/0x150
[ 1582.726323][T16604]  should_fail_ex+0x467/0x600
[ 1582.726357][T16604]  _copy_from_user+0x2d/0xb0
[ 1582.726379][T16604]  ___sys_sendmsg+0x1c6/0x360
[ 1582.726406][T16604]  ? __lock_acquire+0x6df/0x2e40
[ 1582.726433][T16604]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1582.726490][T16604]  ? __fget_files+0x2a/0x420
[ 1582.726512][T16604]  ? __fget_files+0x3a8/0x420
[ 1582.726540][T16604]  __sys_sendmmsg+0x279/0x4d0
[ 1582.726568][T16604]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1582.726596][T16604]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1582.726640][T16604]  ? fput+0xa0/0xd0
[ 1582.726662][T16604]  ? ksys_write+0x248/0x270
[ 1582.726690][T16604]  ? __pfx_ksys_write+0x10/0x10
[ 1582.726717][T16604]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1582.726745][T16604]  do_syscall_64+0x17b/0x530
[ 1582.726774][T16604]  ? irqentry_exit+0x10f/0x8f0
[ 1582.726799][T16604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1582.726820][T16604]  ? clear_bhb_loop+0x40/0x90
[ 1582.726843][T16604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1582.726864][T16604] RIP: 0033:0x7fb9be64de59
[ 1582.726882][T16604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1582.726899][T16604] RSP: 002b:00007fb9bc885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1582.726917][T16604] RAX: ffffffffffffffda RBX: 00007fb9be8d6090 RCX: 00007fb9be64de59
[ 1582.726929][T16604] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[ 1582.726940][T16604] RBP: 00007fb9bc885090 R08: 0000000000000000 R09: 0000000000000000
[ 1582.726951][T16604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1582.726963][T16604] R13: 00007fb9be8d6128 R14: 00007fb9be8d6090 R15: 00007ffe3c56e568
[ 1582.726993][T16604]  </TASK>
[ 1582.809718][T16603] bond0: entered promiscuous mode
[ 1582.809738][T16603] bond_slave_0: entered promiscuous mode
[ 1582.812272][T16603] bond_slave_1: entered promiscuous mode
[ 1582.847425][T16603] gretap0: entered promiscuous mode
[ 1582.960621][T16607] loop3: detected capacity change from 0 to 128
[ 1582.962493][T16607] udf: Unknown parameter './file1'
[ 1582.963699][T16607] Flush: task=syz.3.2104[16607] dev=loop3 state=2
[ 1583.012921][T16587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1583.015915][T16587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1583.039027][T16587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1583.039558][T16587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1583.098325][T16603] bond0: left promiscuous mode
[ 1583.098346][T16603] bond_slave_0: left promiscuous mode
[ 1583.098600][T16603] bond_slave_1: left promiscuous mode
[ 1583.099710][ T5750] usb 6-1: USB disconnect, device number 43
[ 1583.271500][T16603] gretap0: left promiscuous mode
[ 1583.372675][T16607] Teardown: task=syz.3.2104[16607] dev=loop3 state=2
[ 1583.660322][T16452] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1583.666800][T16452] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1583.667122][T16452] bridge_slave_0: entered allmulticast mode
[ 1583.672279][T16452] bridge_slave_0: entered promiscuous mode
[ 1583.688679][T16452] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1583.689076][T16452] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1583.691706][T16452] bridge_slave_1: entered allmulticast mode
[ 1583.712888][T16452] bridge_slave_1: entered promiscuous mode
[ 1584.215377][T16623] loop0: detected capacity change from 0 to 8192
[ 1584.309235][T16238] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 1584.501052][T16238] usb 4-1: Using ep0 maxpacket: 8
[ 1584.504159][T16238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 1584.504186][T16238] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[ 1584.504210][T16238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1584.507076][T16238] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[ 1584.507102][T16238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1584.507119][T16238] usb 4-1: Product: syz
[ 1584.507130][T16238] usb 4-1: Manufacturer: syz
[ 1584.507143][T16238] usb 4-1: SerialNumber: syz
[ 1584.672121][T16238] usb 4-1: config 0 descriptor??
[ 1584.678174][T16238] radioshark2 4-1:0.0: Invalid radioSHARK2 device
[ 1584.678257][T16238] radioshark2 4-1:0.0: probe with driver radioshark2 failed with error -22
[ 1584.678848][T16238] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1584.955479][T16621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2105'.
[ 1585.007113][T16618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2105'.
[ 1585.410689][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1585.435351][T16621] bond0: entered promiscuous mode
[ 1585.435375][T16621] bond_slave_0: entered promiscuous mode
[ 1585.435609][T16621] bond_slave_1: entered promiscuous mode
[ 1585.438769][T16621] gretap0: entered promiscuous mode
[ 1585.468092][T16621] hsr1: entered promiscuous mode
[ 1585.571941][ T5853] Flush: task=udevd[5853] dev=loop0 state=2
[ 1586.185043][ T5853] Teardown: task=udevd[5853] dev=loop0 state=2
[ 1586.812484][T16452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1587.026520][T16452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1587.053513][   T10] usb 4-1: USB disconnect, device number 81
[ 1587.395753][T16644] loop0: detected capacity change from 0 to 128
[ 1587.403342][T16644] udf: Unknown parameter './file1'
[ 1587.482070][ T5853] Flush: task=udevd[5853] dev=loop0 state=2
[ 1587.597528][ T5853] Teardown: task=udevd[5853] dev=loop0 state=2
[ 1587.608191][T16452] team0: Port device team_slave_0 added
[ 1587.614955][T16452] team0: Port device team_slave_1 added
[ 1587.681015][T16238] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 1587.733268][T16452] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1587.733278][T16452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1587.733293][T16452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1587.736198][T16452] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1587.736209][T16452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1587.736223][T16452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1587.849598][T16238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1587.849625][T16238] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1587.878440][T16238] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[ 1587.878472][T16238] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[ 1587.878492][T16238] usb 4-1: Product: syz
[ 1587.878506][T16238] usb 4-1: Manufacturer: syz
[ 1587.878521][T16238] usb 4-1: SerialNumber: syz
[ 1587.901005][T15283] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 1587.930620][T16238] usb 4-1: config 0 descriptor??
[ 1587.966969][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2116'.
[ 1588.020773][T16652] FAULT_INJECTION: forcing a failure.
[ 1588.020773][T16652] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1588.020795][T16652] CPU: 0 UID: 0 PID: 16652 Comm: syz.5.2116 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1588.020807][T16652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1588.020817][T16652] Call Trace:
[ 1588.020823][T16652]  <TASK>
[ 1588.020830][T16652]  dump_stack_lvl+0xe8/0x150
[ 1588.020860][T16652]  should_fail_ex+0x467/0x600
[ 1588.020887][T16652]  _copy_from_user+0x2d/0xb0
[ 1588.020908][T16652]  ___sys_sendmsg+0x1c6/0x360
[ 1588.020931][T16652]  ? __lock_acquire+0x6df/0x2e40
[ 1588.020955][T16652]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1588.021010][T16652]  ? __fget_files+0x2a/0x420
[ 1588.021031][T16652]  ? __fget_files+0x3a8/0x420
[ 1588.021063][T16652]  __sys_sendmmsg+0x279/0x4d0
[ 1588.021089][T16652]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1588.021116][T16652]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1588.021149][T16652]  ? fput+0xa0/0xd0
[ 1588.021177][T16652]  ? ksys_write+0x248/0x270
[ 1588.021200][T16652]  ? __pfx_ksys_write+0x10/0x10
[ 1588.021225][T16652]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1588.021247][T16652]  do_syscall_64+0x17b/0x530
[ 1588.021270][T16652]  ? irqentry_exit+0x10f/0x8f0
[ 1588.021294][T16652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1588.021313][T16652]  ? clear_bhb_loop+0x40/0x90
[ 1588.021336][T16652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1588.021353][T16652] RIP: 0033:0x7f2a1bcede59
[ 1588.021370][T16652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1588.021386][T16652] RSP: 002b:00007f2a19f25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1588.021406][T16652] RAX: ffffffffffffffda RBX: 00007f2a1bf76090 RCX: 00007f2a1bcede59
[ 1588.021420][T16652] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[ 1588.021432][T16652] RBP: 00007f2a19f25090 R08: 0000000000000000 R09: 0000000000000000
[ 1588.021444][T16652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1588.021455][T16652] R13: 00007f2a1bf76128 R14: 00007f2a1bf76090 R15: 00007fff5ef58878
[ 1588.021475][T16652]  </TASK>
[ 1588.072768][T15283] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[ 1588.072796][T15283] usb 1-1: config 0 has no interface number 0
[ 1588.072840][T15283] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1588.075070][T15283] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1588.075099][T15283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1588.075118][T15283] usb 1-1: Product: syz
[ 1588.075132][T15283] usb 1-1: Manufacturer: syz
[ 1588.075146][T15283] usb 1-1: SerialNumber: syz
[ 1588.146241][   T10] usb 4-1: USB disconnect, device number 82
[ 1588.316023][T15283] usb 1-1: config 0 descriptor??
[ 1588.346690][T16452] hsr_slave_0: entered promiscuous mode
[ 1588.348806][T16452] hsr_slave_1: entered promiscuous mode
[ 1588.350674][T16452] debugfs: 'hsr0' already exists in 'hsr'
[ 1588.350699][T16452] Cannot create hsr debugfs directory
[ 1588.356216][T11786] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1588.387333][T15283] yurex 1-1:0.50: Could not find endpoints
[ 1588.503239][   T12] bridge_slave_1: left allmulticast mode
[ 1588.503274][   T12] bridge_slave_1: left promiscuous mode
[ 1588.503583][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1588.538871][T16649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1588.539427][T16649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1588.541602][ T5750] usb 1-1: USB disconnect, device number 90
[ 1588.592465][T16656] loop5: detected capacity change from 0 to 2048
[ 1588.600084][T16656] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1588.604427][T16656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1588.722695][   T12] bridge_slave_0: left allmulticast mode
[ 1588.722731][   T12] bridge_slave_0: left promiscuous mode
[ 1588.723031][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1588.814037][T11215] Flush: task=syz-executor[11215] dev=loop5 state=2
[ 1589.832731][T11215] Teardown: task=syz-executor[11215] dev=loop5 state=2
[ 1589.962225][T16660] loop3: detected capacity change from 0 to 32768
[ 1590.114465][T16659] lbmIODone: I/O error in JFS log
[ 1590.114536][T16659] *** Log Format Error ! ***
[ 1590.115019][T16659] lmLogInit: exit(-22)
[ 1590.115066][T16659] lmLogOpen: exit(-22)
[ 1590.669269][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2
[ 1590.882271][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2
[ 1591.120567][T16670] loop5: detected capacity change from 0 to 512
[ 1591.243417][T16670] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[ 1591.271722][T16670] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2123: iget: bogus i_mode (2)
[ 1591.271758][T16670] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1591.281336][    C0] EXT4-fs (loop5): error count since last fsck: 1
[ 1591.281362][    C0] EXT4-fs (loop5): initial error at time 1784146604: ext4_orphan_get:1399: inode 15
[ 1591.281392][    C0] EXT4-fs (loop5): last error at time 1784146604: ext4_orphan_get:1399: inode 15
[ 1591.331010][T16670] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2123: couldn't read orphan inode 15 (err -117)
[ 1591.331046][T16670] loop5: lost filesystem error report for type 5 error -117
[ 1591.389063][T16670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1591.397464][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1591.490998][T16238] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[ 1591.531933][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1591.615327][   T12] bond0 (unregistering): Released all slaves
[ 1591.651522][T16238] usb 4-1: Using ep0 maxpacket: 8
[ 1591.654305][T11786] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1591.691124][T16238] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1591.719049][T16238] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1591.719078][T16238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1591.719096][T16238] usb 4-1: Product: syz
[ 1591.719109][T16238] usb 4-1: Manufacturer: syz
[ 1591.719124][T16238] usb 4-1: SerialNumber: syz
[ 1591.741417][T16238] usb 4-1: config 0 descriptor??
[ 1591.890624][T11215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1591.898230][T11786] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1591.921931][T11786] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1591.977431][T16238] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[ 1592.129214][T16238] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1592.163724][T16238] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 1592.343924][T16672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1592.344809][T16672] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1592.376666][T16672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1592.377160][T16672] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1592.436579][   T10] usb 4-1: USB disconnect, device number 83
[ 1592.524231][T11215] Flush: task=syz-executor[11215] dev=loop5 state=2
[ 1592.803417][T11215] Teardown: task=syz-executor[11215] dev=loop5 state=2
[ 1594.990357][T16703] loop3: detected capacity change from 0 to 128
[ 1594.998542][T16703] vfat: Unknown parameter 'rodi	'
[ 1596.467844][T16238] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 1596.515358][ T5853] Flush: task=udevd[5853] dev=loop3 state=2
[ 1596.561021][   T12] hsr_slave_0: left promiscuous mode
[ 1596.593979][ T5853] Teardown: task=udevd[5853] dev=loop3 state=2
[ 1596.602674][   T12] hsr_slave_1: left promiscuous mode
[ 1596.613862][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1596.647128][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1596.651744][T15283] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 1596.801031][T15283] usb 4-1: Using ep0 maxpacket: 16
[ 1596.803495][T15283] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1596.803522][T15283] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1596.803570][T15283] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1596.803591][T15283] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1596.803615][T15283] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1596.803639][T15283] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1596.803669][T15283] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1596.803691][T15283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1597.807584][T15283] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[ 1597.976788][T16715] loop5: detected capacity change from 0 to 2048
[ 1597.993940][T15283] usb 4-1: USB disconnect, device number 84
[ 1598.048084][T16715] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1598.461578][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1598.571762][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1599.678809][T11215] Flush: task=syz-executor[11215] dev=loop5 state=2
[ 1599.755666][T11215] Teardown: task=syz-executor[11215] dev=loop5 state=2
[ 1600.542375][T16729] openvswitch: netlink: nsh attr 251 is out of range max 3
[ 1601.851143][T16738] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0)
[ 1602.175692][T16238] usb 6-1: new full-speed USB device number 44 using dummy_hcd
[ 1602.373536][T16238] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1602.373564][T16238] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1602.376993][T16238] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1602.377023][T16238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1602.377042][T16238] usb 6-1: Product: syz
[ 1602.377056][T16238] usb 6-1: Manufacturer: syz
[ 1602.377071][T16238] usb 6-1: SerialNumber: syz
[ 1602.466697][T16238] usb 6-1: 0:2 : does not exist
[ 1605.816995][T11216] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1607.832842][T11216] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1607.838463][T11216] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1607.840449][T11216] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1607.846697][T11216] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1609.956132][T16782] openvswitch: netlink: nsh attr 251 is out of range max 3
[ 1614.642194][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1614.642299][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1615.033571][ T5739] usb 6-1: USB disconnect, device number 44
[ 1616.264594][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 6 < 9
[ 1616.579567][ T5609] Bluetooth: hci2: command tx timeout
[ 1616.801204][T16832] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1616.965632][T16856] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1617.198891][T16832] batman_adv: batadv0: Interface activated: vlan2
[ 1617.356276][T11786] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1617.356459][T11786] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1617.703019][ T1423] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1618.488398][T11216] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1618.618990][T11216] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1618.622533][T11216] Bluetooth: hci2: command tx timeout
[ 1618.628650][T14914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1618.650053][T14914] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1618.686909][T14914] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1619.503931][T16895] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1619.560046][T16895] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1620.321995][T14914] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1620.322340][T14914] Bluetooth: hci4: Injecting HCI hardware error event
[ 1620.325655][T14914] Bluetooth: hci4: hardware error 0x00
[ 1620.710855][ T5609] Bluetooth: hci2: command tx timeout
[ 1621.110135][ T5609] Bluetooth: hci5: command tx timeout
[ 1622.061245][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1622.551051][T14914] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1622.785215][T14914] Bluetooth: hci2: command tx timeout
[ 1622.901061][ T5850] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1623.071368][ T5850] usb 1-1: Using ep0 maxpacket: 32
[ 1623.083965][ T5850] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1623.119374][ T5850] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1623.119401][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1623.119416][ T5850] usb 1-1: Product: syz
[ 1623.119426][ T5850] usb 1-1: Manufacturer: syz
[ 1623.119437][ T5850] usb 1-1: SerialNumber: syz
[ 1623.187741][ T5850] usb 1-1: config 0 descriptor??
[ 1623.189851][T16944] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1623.192678][T14914] Bluetooth: hci5: command tx timeout
[ 1623.193470][T16938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1623.232631][ T5850] hub 1-1:0.0: bad descriptor, ignoring hub
[ 1623.232671][ T5850] hub 1-1:0.0: probe with driver hub failed with error -5
[ 1623.318169][T16775] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1623.318456][T16775] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1623.320011][T16775] bridge_slave_0: entered allmulticast mode
[ 1623.349606][T16775] bridge_slave_0: entered promiscuous mode
[ 1623.386194][T16775] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1623.386485][T16775] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1623.386762][T16775] bridge_slave_1: entered allmulticast mode
[ 1623.391684][T16775] bridge_slave_1: entered promiscuous mode
[ 1624.340673][T16944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1624.341448][T16944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1624.852220][T16775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1624.897445][T16775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1624.911369][ T5850] usb 1-1: USB disconnect, device number 92
[ 1625.261868][T16775] team0: Port device team_slave_0 added
[ 1625.277125][ T5609] Bluetooth: hci5: command tx timeout
[ 1625.298705][T16775] team0: Port device team_slave_1 added
[ 1625.447273][T16775] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1625.447284][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1625.447299][T16775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1625.496547][T16775] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1625.496577][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1625.496593][T16775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1625.591159][   T32] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1625.621241][ T1122] bridge_slave_1: left allmulticast mode
[ 1625.621273][ T1122] bridge_slave_1: left promiscuous mode
[ 1625.621481][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1625.741978][   T32] usb 6-1: Using ep0 maxpacket: 32
[ 1625.744245][   T32] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1625.744263][   T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1625.747915][   T32] usb 6-1: config 0 descriptor??
[ 1625.819638][ T1122] bridge_slave_0: left allmulticast mode
[ 1625.819673][ T1122] bridge_slave_0: left promiscuous mode
[ 1625.819936][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1625.852487][   T32] as10x_usb: device has been detected
[ 1625.853477][   T32] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1625.893121][   T32] usb 6-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)...
[ 1626.514106][   T32] as10x_usb: error during firmware upload part1
[ 1626.514900][   T32] Registered device nBox DVB-T Dongle
[ 1626.519567][   T32] usb 6-1: USB disconnect, device number 45
[ 1626.738880][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1626.799098][T14914] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1626.823568][ T5609] Bluetooth: hci1: command 0x1003 tx timeout
[ 1626.931516][   T32] Unregistered device nBox DVB-T Dongle
[ 1626.934312][   T32] as10x_usb: device has been disconnected
[ 1626.941894][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1627.035869][ T1122] bond0 (unregistering): Released all slaves
[ 1627.380893][ T5609] Bluetooth: hci5: command tx timeout
[ 1628.271132][ T1122] hsr_slave_0: left promiscuous mode
[ 1628.321078][ T1122] hsr_slave_1: left promiscuous mode
[ 1628.322918][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1628.362377][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1628.931923][ T1122] team0 (unregistering): Port device team_slave_1 removed
[ 1629.013189][ T1122] team0 (unregistering): Port device team_slave_0 removed
[ 1629.300072][T16775] hsr_slave_0: entered promiscuous mode
[ 1629.306779][T16775] hsr_slave_1: entered promiscuous mode
[ 1629.308692][T16775] debugfs: 'hsr0' already exists in 'hsr'
[ 1629.308718][T16775] Cannot create hsr debugfs directory
[ 1629.309250][T16883] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1629.310376][T16883] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1629.310639][T16883] bridge_slave_0: entered allmulticast mode
[ 1629.316510][T16883] bridge_slave_0: entered promiscuous mode
[ 1629.369587][T16883] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1629.369901][T16883] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1629.370190][T16883] bridge_slave_1: entered allmulticast mode
[ 1629.396653][T16883] bridge_slave_1: entered promiscuous mode
[ 1629.610732][T16883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1629.701040][T16883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1630.135802][T11786] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1630.314148][T16883] team0: Port device team_slave_0 added
[ 1630.382373][T16883] team0: Port device team_slave_1 added
[ 1630.621562][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1630.975215][T16883] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1630.975234][T16883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1630.975256][T16883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1631.001210][T16883] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1631.001228][T16883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1631.001256][T16883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1631.635056][T16883] hsr_slave_0: entered promiscuous mode
[ 1631.655576][T16883] hsr_slave_1: entered promiscuous mode
[ 1631.659450][T16883] debugfs: 'hsr0' already exists in 'hsr'
[ 1631.659475][T16883] Cannot create hsr debugfs directory
[ 1631.950330][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1632.695386][T17023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1636.771780][T17112] warning: `syz.0.2206' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1639.187038][T17168] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.2230/17168
[ 1639.187063][T17168] caller is bpf_mem_cache_free_rcu+0x48/0xc0
[ 1639.187224][T17168] CPU: 1 UID: 0 PID: 17168 Comm: syz.0.2230 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1639.187249][T17168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1639.187263][T17168] Call Trace:
[ 1639.187271][T17168]  <TASK>
[ 1639.187281][T17168]  dump_stack_lvl+0xe8/0x150
[ 1639.187314][T17168]  check_preemption_disabled+0xd3/0xe0
[ 1639.187336][T17168]  bpf_mem_cache_free_rcu+0x48/0xc0
[ 1639.187365][T17168]  rhtab_delete_elem+0x185a/0x1b30
[ 1639.187463][T17168]  ? rhtab_delete_elem+0x15c/0x1b30
[ 1639.187494][T17168]  ? check_and_init_map_value+0x57/0x410
[ 1639.187523][T17168]  __rhtab_map_lookup_and_delete_batch+0x935/0xcb0
[ 1639.187574][T17168]  ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10
[ 1639.187614][T17168]  bpf_map_do_batch+0x451/0x640
[ 1639.187648][T17168]  __sys_bpf+0x906/0xd90
[ 1639.187683][T17168]  ? __pfx___sys_bpf+0x10/0x10
[ 1639.187711][T17168]  ? do_futex+0x3e7/0x4e0
[ 1639.187824][T17168]  ? rcu_is_watching+0x15/0xb0
[ 1639.187860][T17168]  __x64_sys_bpf+0xba/0xd0
[ 1639.187885][T17168]  do_syscall_64+0x17b/0x530
[ 1639.187916][T17168]  ? irqentry_exit+0x10f/0x8f0
[ 1639.187944][T17168]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1639.187964][T17168]  ? clear_bhb_loop+0x40/0x90
[ 1639.187989][T17168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1639.188009][T17168] RIP: 0033:0x7fb9be64de59
[ 1639.188029][T17168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1639.188048][T17168] RSP: 002b:00007fb9bc8a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1639.188071][T17168] RAX: ffffffffffffffda RBX: 00007fb9be8d5fa0 RCX: 00007fb9be64de59
[ 1639.188086][T17168] RDX: 0000000000000038 RSI: 0000200000000700 RDI: 0000000000000019
[ 1639.188101][T17168] RBP: 00007fb9be6e3e6f R08: 0000000000000000 R09: 0000000000000000
[ 1639.188114][T17168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1639.188127][T17168] R13: 00007fb9be8d6038 R14: 00007fb9be8d5fa0 R15: 00007ffe3c56e568
[ 1639.188160][T17168]  </TASK>
[ 1641.751266][ T1122] bridge_slave_1: left allmulticast mode
[ 1641.751300][ T1122] bridge_slave_1: left promiscuous mode
[ 1641.751590][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1641.912005][ T1122] bridge_slave_0: left allmulticast mode
[ 1641.912030][ T1122] bridge_slave_0: left promiscuous mode
[ 1641.912231][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1642.331865][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1642.413128][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1642.472477][ T1122] bond0 (unregistering): Released all slaves
[ 1642.499253][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1643.361138][ T1122] hsr_slave_0: left promiscuous mode
[ 1643.401034][ T1122] hsr_slave_1: left promiscuous mode
[ 1643.402155][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1643.441769][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1643.851549][ T1122] team0 (unregistering): Port device team_slave_1 removed
[ 1643.901598][ T1122] team0 (unregistering): Port device team_slave_0 removed
[ 1644.088631][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1646.899954][T16775] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1647.048672][T16775] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1647.050144][T16775] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1647.120457][T16775] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1647.164485][T16775] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1647.266633][T16775] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1647.304536][T16775] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1647.347210][T16775] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1647.901895][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1648.115416][T16883] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1648.154630][T16883] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1648.156176][T16883] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1648.238915][T16883] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1648.248685][T16883] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1648.295352][T16883] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1648.314070][T16775] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1648.314894][T16883] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1648.355067][T16883] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1648.419455][T16775] 8021q: adding VLAN 0 to HW filter on device team0
[ 1648.458910][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1648.459079][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1648.556719][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1648.556881][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1648.905812][T16883] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1649.029888][T16883] 8021q: adding VLAN 0 to HW filter on device team0
[ 1649.073694][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1649.073926][ T1423] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1649.125122][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1649.125239][ T3669] bridge0: port 2(bridge_slave_1) entered forwarding state