last executing test programs:

8m14.377063149s ago: executing program 1 (id=227):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a)
listen(r0, 0x0)

8m12.696592988s ago: executing program 1 (id=235):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000d00)=r3, 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8", 0x1}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

8m11.820137898s ago: executing program 1 (id=239):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x6, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000080)="d2df03c4ff4f84e5fbd9cb4608008cdd8af46937", 0x0, 0x95b0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

8m11.046032094s ago: executing program 1 (id=240):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
fchdir(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)

8m10.94741329s ago: executing program 1 (id=241):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

8m10.740448832s ago: executing program 1 (id=243):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
listen(r0, 0x7e5a)
accept$inet(r0, 0x0, 0x0)

7m54.63641547s ago: executing program 32 (id=243):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
listen(r0, 0x7e5a)
accept$inet(r0, 0x0, 0x0)

7m14.786772773s ago: executing program 3 (id=501):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000004d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x20000}, 0x84)

7m14.628804502s ago: executing program 3 (id=505):
r0 = timerfd_create(0x0, 0x800)
poll(&(0x7f0000000640)=[{r0, 0x22}], 0x1, 0x1)

7m14.514469168s ago: executing program 3 (id=508):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)

7m12.25631791s ago: executing program 3 (id=514):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=@ipv6_getroute={0x28, 0x1a, 0x115, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xb}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x7e}}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x240000d4)

7m12.183891664s ago: executing program 3 (id=518):
unshare(0x20000400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000640))

7m11.952208518s ago: executing program 3 (id=521):
bind$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_dest={0x18, 0x114, 0x2, {0x2, 0x7}}], 0x18}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}, 0x1, 0x0, 0x0, 0x40020}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

6m56.80570783s ago: executing program 33 (id=521):
bind$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_dest={0x18, 0x114, 0x2, {0x2, 0x7}}], 0x18}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}, 0x1, 0x0, 0x0, 0x40020}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

4m39.660601712s ago: executing program 6 (id=1021):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})

4m37.580975054s ago: executing program 6 (id=1027):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0xffffffff, {0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
flock(r3, 0x1)
close(r1)
close_range(r0, 0xffffffffffffffff, 0x0)

4m36.737116263s ago: executing program 6 (id=1033):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x44, r4, 0x7c7d1e7b9dfaf2c3, 0x70bd2c, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x40d5}, 0x20008000)

4m35.598140149s ago: executing program 6 (id=1038):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000640)='./file0\x00', 0x261)

4m34.73256581s ago: executing program 6 (id=1040):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0)

4m34.20847178s ago: executing program 6 (id=1043):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0, 0x18}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x2}, 0x6037}], 0x1, 0x1822b, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c)
sendto$inet6(r1, &(0x7f0000001440)="0d0ad7", 0x3, 0x6d91fb6102d8910c, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
open(0x0, 0x66842, 0x0)

4m34.080404038s ago: executing program 34 (id=1043):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0, 0x18}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x2}, 0x6037}], 0x1, 0x1822b, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c)
sendto$inet6(r1, &(0x7f0000001440)="0d0ad7", 0x3, 0x6d91fb6102d8910c, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
open(0x0, 0x66842, 0x0)

19.622989216s ago: executing program 2 (id=1756):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0)
socket(0x2, 0x80805, 0x0)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55)

13.467005205s ago: executing program 0 (id=1765):
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = socket$igmp6(0xa, 0x3, 0x2)
syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00c32, &(0x7f0000000680)=ANY=[@ANYRES64=r1], 0x1, 0xc56, &(0x7f00000061c0)="$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")
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[@ANYBLOB="9fbeb3fea816ffffffffffff86f0600a843500140601fe8000000000000000000000000084bbfe8000000000000000000000000000aafffd4e1e917810d2b1c8fd8c127ef0b2ca5868504d209795ee9e8446862b9ebe50f8c885243afbabdbe3a9dc9a498f4bdb1e5b603b7042", @ANYRES32=0x41424344], 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x3, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f00000000c0))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000740)=ANY=[@ANYBLOB="16000000e692358b154082aa529126354d3b634ca9dfe84b648e364e69c5bb62a1b9e74ee1f83550f447b3f8f0f44c01035cfaf2897fbf7396448000000000000000c99ebac8e97fd2bb74a1e2d15dee9a25b328cd12", @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000001900020004000e00"], 0x2c}}, 0x4000000)

11.994938901s ago: executing program 0 (id=1769):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x44, r4, 0x7c7d1e7b9dfaf2c3, 0x70bd2c, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x40d5}, 0x20008000)

7.632739995s ago: executing program 2 (id=1783):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
inotify_add_watch(r0, 0x0, 0x40000020)
r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)={r3}, &(0x7f0000000080)=0x8)

6.504787121s ago: executing program 2 (id=1789):
socket(0x28, 0x801, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r2, 0x1)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4)
r4 = fanotify_init(0x81, 0x40000)
fanotify_mark(r4, 0x105, 0x8000030, r3, 0x0)
read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020)
mmap(&(0x7f0000c60000/0x4000)=nil, 0x4000, 0x1000002, 0x810, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

6.280391754s ago: executing program 7 (id=1790):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
connect$can_j1939(r1, &(0x7f0000000240)={0x1d, r2, 0x2, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x3, 0x8}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x20000050)

5.029349207s ago: executing program 2 (id=1793):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0)
socket(0x2, 0x80805, 0x0)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55)

4.97791867s ago: executing program 4 (id=1795):
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300), 0x14)
syz_emit_ethernet(0xfc1, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
chmod(&(0x7f00000000c0)='./cgroup\x00', 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(r2, &(0x7f0000000000)=':', 0x1, 0x4fed0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)

4.868395216s ago: executing program 7 (id=1796):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
capset(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.572589023s ago: executing program 4 (id=1798):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)

3.77811417s ago: executing program 5 (id=1799):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r2, 0x15, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

3.77367403s ago: executing program 7 (id=1800):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0xfffffff8, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x205, 0x1, 0xc}, 0xb, 0xffffffff, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0xfd, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, 0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000200)="bada30fbc99b5400040000ea0756a85d86dd775a2c", 0x15, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14)

3.552346373s ago: executing program 5 (id=1801):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

3.552137503s ago: executing program 4 (id=1802):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x80c0)

3.522875074s ago: executing program 0 (id=1803):
socket(0x28, 0x801, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r2, 0x1)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4)
r4 = fanotify_init(0x81, 0x40000)
fanotify_mark(r4, 0x105, 0x8000030, r3, 0x0)
read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020)
mmap(&(0x7f0000c60000/0x4000)=nil, 0x4000, 0x1000002, 0x810, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

3.520277755s ago: executing program 7 (id=1804):
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @hoplimit={{0x14}}, @hopopts={{0x60, 0x29, 0x36, {0x5e, 0x8, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x2, 0x966, 0x7]}}, @generic={0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x0, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0xf8}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.43801414s ago: executing program 4 (id=1805):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfe000/0x400000)=nil)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
open(0x0, 0x54b93e, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x5d}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002240)=""/102400, 0x19000)
stat(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})

3.43620773s ago: executing program 5 (id=1806):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r1, 0x331, 0x3, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}}, 0x0)

2.780457708s ago: executing program 5 (id=1807):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8090)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

2.583041239s ago: executing program 0 (id=1808):
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300), 0x14)
syz_emit_ethernet(0xfc1, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
chmod(&(0x7f00000000c0)='./cgroup\x00', 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(r2, &(0x7f0000000000)=':', 0x1, 0x4fed0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)

2.544281242s ago: executing program 4 (id=1809):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0716", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8118, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

2.281590937s ago: executing program 0 (id=1810):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
capset(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.280599537s ago: executing program 7 (id=1811):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000019140), 0xe6, 0x0)
read$msr(r3, &(0x7f0000019180)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)

2.143530345s ago: executing program 2 (id=1812):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x1, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, 0x0, 0x4040)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1)

1.36322522s ago: executing program 0 (id=1813):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x44, r4, 0x7c7d1e7b9dfaf2c3, 0x70bd2c, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x40d5}, 0x20008000)

176.33777ms ago: executing program 7 (id=1814):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0xfffffff8, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x205, 0x1, 0xc}, 0xb, 0xffffffff, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0xfd, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, 0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000200)="bada30fbc99b5400040000ea0756a85d86dd775a2c", 0x15, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14)

152.634171ms ago: executing program 5 (id=1815):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0xfffd, 0x97}, 0x20)

88.647844ms ago: executing program 4 (id=1816):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140b, 0x1, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0))
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
recvfrom$ax25(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)

403.47µs ago: executing program 2 (id=1817):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8907, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7f1, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x7d9, 0x0, @wg=@data={0x4, 0x202, 0x4, "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"}}}}, 0x7ff)

0s ago: executing program 5 (id=1818):
socket(0x28, 0x801, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r2, 0x1)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4)
r4 = fanotify_init(0x81, 0x40000)
fanotify_mark(r4, 0x105, 0x8000030, r3, 0x0)
read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020)
mmap(&(0x7f0000c60000/0x4000)=nil, 0x4000, 0x1000002, 0x810, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

: mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000008,nodioread_nolock,,errors=continue. Quota mode: none.
[  155.258913][ T5848] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.069756][ T5848] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 3: comm syz.2.510: lblock 3 mapped to illegal pblock 3 (length 1)
[  156.117067][ T5864] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.510: bg 0: block 112: padding at end of block bitmap is not set
[  156.218938][ T5848] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  156.248209][ T5848] EXT4-fs (loop2): This should not happen!! Data will be lost
[  156.248209][ T5848] 
[  156.839542][ T5897] loop2: detected capacity change from 0 to 1024
[  156.945364][ T5897] hfsplus: unable to parse mount options
[  157.128984][ T4486] Bluetooth: hci2: command 0x1009 tx timeout
[  159.080795][ T5930] loop2: detected capacity change from 0 to 1024
[  159.168881][ T5930] EXT4-fs (loop2): Ignoring removed nobh option
[  159.242667][ T5930] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,quota,acl,inode_readahead_blks=0x0000000000040000,nobh,nodelalloc,noblock_validity,debug_want_extra_isize=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  159.407940][   T26] audit: type=1800 audit(1769450326.347:123): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.530" name="bus" dev="loop2" ino=18 res=0 errno=0
[  160.017699][ T5950] loop2: detected capacity change from 0 to 1024
[  160.094191][ T5950] hfsplus: unable to parse mount options
[  161.979420][ T5979] loop5: detected capacity change from 0 to 256
[  162.046589][ T5978] device bridge1 entered promiscuous mode
[  162.327622][ T5989] loop5: detected capacity change from 0 to 1024
[  163.071588][ T5989] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,journal_dev=0x00000000000000ff,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none.
[  163.600386][   T26] audit: type=1326 audit(1769450330.547:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.5.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97894c7eb9 code=0x7ffc0000
[  164.927968][   T26] audit: type=1326 audit(1769450330.547:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.5.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97894c7eb9 code=0x7ffc0000
[  164.996329][ T6033] loop4: detected capacity change from 0 to 1024
[  165.039456][ T6032] loop5: detected capacity change from 0 to 2048
[  165.046259][   T26] audit: type=1326 audit(1769450330.557:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.5.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f97894c7eb9 code=0x7ffc0000
[  165.121726][   T26] audit: type=1326 audit(1769450330.557:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.5.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97894c7eb9 code=0x7ffc0000
[  165.148845][ T6033] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  166.959650][   T26] audit: type=1326 audit(1769450330.557:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.5.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97894c7eb9 code=0x7ffc0000
[  166.983798][   T26] audit: type=1326 audit(1769450330.557:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.5.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f97894c7eb9 code=0x7ffc0000
[  166.983828][   T26] audit: type=1326 audit(1769450330.557:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.5.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97894c7eb9 code=0x7ffc0000
[  166.983853][   T26] audit: type=1326 audit(1769450330.557:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.5.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97894c7eb9 code=0x7ffc0000
[  167.175051][ T6033] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none.
[  168.673002][ T6056] loop4: detected capacity change from 0 to 256
[  168.756910][ T6058] loop2: detected capacity change from 0 to 4096
[  168.894852][ T6058] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  169.205458][ T6079] loop0: detected capacity change from 0 to 256
[  169.238431][ T6081] loop2: detected capacity change from 0 to 256
[  169.290820][ T6079] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  169.332248][ T6081] FAT-fs (loop2): Directory bread(block 64) failed
[  169.375691][ T6081] FAT-fs (loop2): Directory bread(block 65) failed
[  169.393241][ T6081] FAT-fs (loop2): Directory bread(block 66) failed
[  169.434536][ T6079] FAT-fs (loop0): Directory bread(block 64) failed
[  169.458099][ T6081] FAT-fs (loop2): Directory bread(block 67) failed
[  169.478804][ T6079] FAT-fs (loop0): Directory bread(block 65) failed
[  169.486221][ T6079] FAT-fs (loop0): Directory bread(block 66) failed
[  169.505248][ T6081] FAT-fs (loop2): Directory bread(block 68) failed
[  169.518957][ T6079] FAT-fs (loop0): Directory bread(block 67) failed
[  169.525733][ T6079] FAT-fs (loop0): Directory bread(block 68) failed
[  169.546511][ T6081] FAT-fs (loop2): Directory bread(block 69) failed
[  169.568131][ T6081] FAT-fs (loop2): Directory bread(block 70) failed
[  170.177155][ T6081] FAT-fs (loop2): Directory bread(block 71) failed
[  170.184293][ T6079] FAT-fs (loop0): Directory bread(block 69) failed
[  171.292101][ T6079] FAT-fs (loop0): Directory bread(block 70) failed
[  171.311378][ T6081] FAT-fs (loop2): Directory bread(block 72) failed
[  171.318199][ T6081] FAT-fs (loop2): Directory bread(block 73) failed
[  171.338867][ T6079] FAT-fs (loop0): Directory bread(block 71) failed
[  171.431673][ T6079] FAT-fs (loop0): Directory bread(block 72) failed
[  171.439074][ T6079] FAT-fs (loop0): Directory bread(block 73) failed
[  171.670210][ T5895] Set syz1 is full, maxelem 65536 reached
[  172.027063][ T6109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'.
[  172.812281][ T6114] tmpfs: Bad value for 'mpol'
[  172.925720][ T6118] loop0: detected capacity change from 0 to 512
[  173.057160][ T6118] EXT4-fs (loop0): Ignoring removed bh option
[  173.172897][ T6118] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  173.288943][ T6118] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  173.480643][   T26] audit: type=1800 audit(1769450340.427:132): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.578" name="file1" dev="loop0" ino=15 res=0 errno=0
[  173.525016][ T6136] loop4: detected capacity change from 0 to 2048
[  174.788402][ T6124] chnl_net:caif_netlink_parms(): no params data found
[  174.838457][ T6148] loop2: detected capacity change from 0 to 1024
[  174.968860][ T6148] EXT4-fs (loop2): Ignoring removed bh option
[  175.034854][ T6148] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,nobarrier,max_dir_size_kb=0x00000000000000eb,abort,user_xattr,bh,errors=remount-ro,. Quota mode: none.
[  175.152481][ T6148] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3887: comm syz.2.585: Allocating blocks 497-513 which overlap fs metadata
[  175.168071][ T6155] bond0: (slave vlan2): Opening slave failed
[  175.209257][ T6148] EXT4-fs (loop2): Remounting filesystem read-only
[  175.273144][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.281599][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.290265][ T6124] device bridge_slave_0 entered promiscuous mode
[  175.298727][    T7] Bluetooth: hci2: command 0x0409 tx timeout
[  175.309686][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.343523][ T6148] EXT4-fs (loop2): pa ffff888074533460: logic 16, phys. 129, len 24
[  175.352634][ T6148] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1
[  175.378912][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.418829][ T6124] device bridge_slave_1 entered promiscuous mode
[  175.479283][ T6148] EXT4-fs (loop2): Remounting filesystem read-only
[  175.606409][ T6124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.655614][ T6124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.818414][ T6124] team0: Port device team_slave_0 added
[  175.860959][ T6124] team0: Port device team_slave_1 added
[  175.963532][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.998701][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.185425][ T6124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.649258][ T4482] Bluetooth: hci4: command 0x0406 tx timeout
[  176.658040][ T4482] Bluetooth: hci1: command 0x0406 tx timeout
[  176.659599][    T7] Bluetooth: hci3: command 0x0406 tx timeout
[  176.904982][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.932629][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.050218][ T6124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.177634][ T6124] device hsr_slave_0 entered promiscuous mode
[  177.206175][ T6124] device hsr_slave_1 entered promiscuous mode
[  177.227002][ T6124] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.284541][ T6124] Cannot create hsr debugfs directory
[  177.368809][ T4252] Bluetooth: hci2: command 0x041b tx timeout
[  177.747336][ T6204] loop4: detected capacity change from 0 to 2048
[  179.670590][ T4482] Bluetooth: hci2: command 0x040f tx timeout
[  179.873540][ T6124] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  179.968100][ T6124] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  180.025735][ T6124] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  180.038739][ T4174] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  180.082098][ T6124] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  180.359917][ T4174] usb 6-1: too many configurations: 87, using maximum allowed: 8
[  180.373760][ T6124] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.443696][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  180.462612][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  180.484061][ T6124] 8021q: adding VLAN 0 to HW filter on device team0
[  180.484464][ T4174] usb 6-1: config index 0 descriptor too short (expected 64798, got 72)
[  180.510203][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  180.539188][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  180.582955][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.590128][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.633210][ T4174] usb 6-1: config index 1 descriptor too short (expected 64798, got 72)
[  180.665663][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  180.694531][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  180.748970][ T4174] usb 6-1: config index 2 descriptor too short (expected 64798, got 72)
[  180.779737][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  180.812706][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.820360][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.865118][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  180.889090][ T4174] usb 6-1: config index 3 descriptor too short (expected 64798, got 72)
[  180.928107][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  180.980565][ T4174] usb 6-1: config index 4 descriptor too short (expected 64798, got 72)
[  181.044618][ T4536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.088855][ T4174] usb 6-1: config index 5 descriptor too short (expected 64798, got 72)
[  181.106713][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  181.140299][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  181.174304][ T4536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.215211][ T4174] usb 6-1: config index 6 descriptor too short (expected 64798, got 72)
[  181.253767][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  181.267273][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  181.295164][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  181.316914][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  181.325858][ T4174] usb 6-1: config index 7 descriptor too short (expected 64798, got 72)
[  181.349348][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  181.394317][ T4536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.460059][ T6124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  181.483735][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  181.518826][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  181.531095][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  181.539637][ T4174] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  181.555489][ T4174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.587970][ T4174] usb 6-1: Product: syz
[  181.594543][ T4174] usb 6-1: Manufacturer: syz
[  181.610659][ T4174] usb 6-1: SerialNumber: syz
[  181.657342][ T4536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.689174][ T4252] Bluetooth: hci2: command 0x0419 tx timeout
[  181.695806][ T4174] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  182.021575][ T4174] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[  182.032950][    T7] usb 6-1: USB disconnect, device number 2
[  182.058365][    T7] usb 6-1: ath9k_htc: USB layer deinitialized
[  182.511111][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  182.529246][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  182.596019][ T6124] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.339001][    T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  183.788952][    T7] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30
[  183.808276][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.869365][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  183.874721][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.898509][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  183.931807][    T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252
[  183.984368][    T7] usb 3-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00
[  183.996176][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  184.036804][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  184.048769][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.081548][ T6124] device veth0_vlan entered promiscuous mode
[  184.110289][    T7] usb 3-1: config 0 descriptor??
[  184.145124][ T6315] loop0: detected capacity change from 0 to 1024
[  184.152959][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  184.194055][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  184.248337][ T6315] hfsplus: unable to parse mount options
[  184.253088][ T6124] device veth1_vlan entered promiscuous mode
[  184.433192][ T4536] device hsr_slave_0 left promiscuous mode
[  184.459162][ T4536] device hsr_slave_1 left promiscuous mode
[  184.590079][ T4174] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  185.031442][    T7] wacom 0003:056A:0302.0002: Unknown device_type for 'HID 056a:0302'. Assuming pen.
[  185.085354][    T7] wacom 0003:056A:0302.0002: hidraw0: USB HID v0.00 Device [HID 056a:0302] on usb-dummy_hcd.2-1/input0
[  185.103449][    T7] input: Wacom Intuos PT S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0302.0002/input/input5
[  185.168767][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.170916][ T6322] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  185.176767][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.210868][    T7] usb 3-1: USB disconnect, device number 2
[  185.225217][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.237662][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.268905][ T4536] device bridge_slave_1 left promiscuous mode
[  185.278555][ T4536] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.338769][ T4174] usb 6-1: Using ep0 maxpacket: 16
[  185.350208][ T4536] device bridge_slave_0 left promiscuous mode
[  185.368280][ T6325] fido_id[6325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  185.386504][ T4536] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.409425][ T4536] device veth1_macvtap left promiscuous mode
[  185.415520][ T4536] device veth0_macvtap left promiscuous mode
[  185.446079][ T6327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.608'.
[  185.484276][ T4536] device veth1_vlan left promiscuous mode
[  185.510124][ T4536] device veth0_vlan left promiscuous mode
[  185.675279][ T4174] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  185.688528][ T4174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.697902][ T4174] usb 6-1: Product: syz
[  185.709474][ T4174] usb 6-1: Manufacturer: syz
[  185.715460][ T4174] usb 6-1: SerialNumber: syz
[  185.735432][ T4174] r8152-cfgselector 6-1: config 0 descriptor??
[  185.793426][ T4536] team0 (unregistering): Port device team_slave_1 removed
[  185.815225][ T4536] team0 (unregistering): Port device team_slave_0 removed
[  185.829479][ T4536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.846473][ T4536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.913627][ T4536] bond0 (unregistering): Released all slaves
[  185.967551][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  185.981570][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  186.007642][ T6124] device veth0_macvtap entered promiscuous mode
[  186.110433][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  186.126381][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  186.139779][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  186.173264][ T6124] device veth1_macvtap entered promiscuous mode
[  186.219131][ T4174] r8152-cfgselector 6-1: Unknown version 0x0000
[  186.228340][ T4174] r8152-cfgselector 6-1: bad CDC descriptors
[  186.236913][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.249120][ T4174] r8152-cfgselector 6-1: Unknown version 0x0000
[  186.267015][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.277641][ T4174] r8152-cfgselector 6-1: USB disconnect, device number 3
[  186.289060][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.314904][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.331497][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.345438][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.364606][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.380879][ T4486] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  186.392498][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  186.409805][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  186.428928][ T4225] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  186.437225][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  186.460811][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.486129][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.515810][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.536811][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.552849][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.574329][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.612161][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.630740][ T4486] usb 1-1: Using ep0 maxpacket: 32
[  186.642423][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  186.657172][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  186.669860][ T4225] usb 5-1: Using ep0 maxpacket: 32
[  186.683759][ T6124] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.697200][ T6124] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.718322][ T6124] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.739159][ T6124] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.758893][ T4486] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  186.785150][ T4486] usb 1-1: config 0 has no interface number 0
[  186.791912][ T4225] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  186.805097][ T4225] usb 5-1: config 0 has no interface number 0
[  186.812517][ T4225] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  186.969870][ T4486] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  186.979896][ T4225] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  186.998742][ T4486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.007198][ T4225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.017304][ T4486] usb 1-1: Product: syz
[  187.038731][ T4225] usb 5-1: Product: syz
[  187.043041][ T4225] usb 5-1: Manufacturer: syz
[  187.047650][ T4225] usb 5-1: SerialNumber: syz
[  187.052947][ T4486] usb 1-1: Manufacturer: syz
[  187.057563][ T4486] usb 1-1: SerialNumber: syz
[  187.079096][ T4225] usb 5-1: config 0 descriptor??
[  187.085658][ T4486] usb 1-1: config 0 descriptor??
[  187.101119][ T6341] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  187.130973][ T4486] smsc95xx v2.0.0
[  187.134707][ T4486] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  187.158465][ T4486] smsc95xx: probe of 1-1:0.67 failed with error -22
[  187.194075][ T4499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.206035][ T4499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.241280][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  187.294252][ T4499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.323880][ T6341] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  187.340256][ T4499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.363322][ T4252] usb 1-1: USB disconnect, device number 2
[  187.382598][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  187.422215][ T6381] loop5: detected capacity change from 0 to 1024
[  187.550933][ T6381] EXT4-fs (loop5): Ignoring removed orlov option
[  187.626032][ T6381] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  187.908863][    T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  188.228866][ T1109] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  188.318891][    T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.346358][    T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  188.483772][    T7] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  188.512745][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  188.533307][    T7] usb 7-1: SerialNumber: syz
[  188.648987][ T1109] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.663314][ T1109] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  188.808757][ T4482] Bluetooth: hci0: command 0x1003 tx timeout
[  188.816028][ T4192] Bluetooth: hci0: sending frame failed (-49)
[  188.859073][ T1109] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  188.868800][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.877254][ T1109] usb 1-1: Product: syz
[  188.884148][ T1109] usb 1-1: Manufacturer: syz
[  188.889608][ T1109] usb 1-1: SerialNumber: syz
[  188.911503][    T7] usb 7-1: 0:2 : does not exist
[  189.001833][    T7] usb 7-1: USB disconnect, device number 2
[  189.098943][ T4225] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  189.118777][ T4225] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  189.154417][ T4225] asix: probe of 5-1:0.188 failed with error -71
[  189.211873][ T4225] usb 5-1: USB disconnect, device number 2
[  189.228881][ T1109] usb 1-1: 0:2 : does not exist
[  189.286486][ T1109] usb 1-1: USB disconnect, device number 3
[  189.610360][ T6426] udevd[6426]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  190.888901][ T4252] Bluetooth: hci0: command 0x1001 tx timeout
[  190.895880][ T4192] Bluetooth: hci0: sending frame failed (-49)
[  191.170107][ T6462] loop4: detected capacity change from 0 to 1024
[  191.269142][ T6462] hfsplus: unable to parse mount options
[  191.475344][ T6459] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  191.703047][ T6459] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  192.262666][ T6474] loop4: detected capacity change from 0 to 512
[  192.968935][ T4225] Bluetooth: hci0: command 0x1009 tx timeout
[  193.237169][ T6489] loop5: detected capacity change from 0 to 2048
[  194.411884][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.418225][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.663788][ T6514] loop4: detected capacity change from 0 to 1024
[  194.707526][ T6514] hfsplus: unable to parse mount options
[  194.788847][ T4303] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  194.834269][ T4174] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  195.119021][ T4174] usb 7-1: Using ep0 maxpacket: 16
[  195.219528][ T4303] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.239318][ T4174] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.322176][ T4303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  195.338383][ T4174] usb 7-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[  195.409343][ T4303] usb 1-1: config 1 has no interface number 0
[  195.422851][ T4174] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.515177][ T4303] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  195.557637][ T4174] usb 7-1: config 0 descriptor??
[  195.828948][ T4303] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  196.175771][ T4252] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  196.313108][ T4303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.351059][ T4303] usb 1-1: Product: syz
[  196.361651][ T4303] usb 1-1: Manufacturer: syz
[  196.366654][ T4303] usb 1-1: SerialNumber: syz
[  196.440911][ T4303] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing
[  196.452688][ T4303] cdc_ncm 1-1:1.1: bind() failure
[  196.539011][ T4174] usb 7-1: string descriptor 0 read error: -71
[  196.565867][ T4174] uclogic 0003:5543:0047.0003: failed retrieving string descriptor #200: -71
[  196.586208][ T4174] uclogic 0003:5543:0047.0003: failed retrieving pen parameters: -71
[  196.607072][ T4174] uclogic 0003:5543:0047.0003: failed probing pen v2 parameters: -71
[  196.615984][ T4174] uclogic 0003:5543:0047.0003: failed probing parameters: -71
[  196.624192][ T4174] uclogic: probe of 0003:5543:0047.0003 failed with error -71
[  196.632025][ T4252] usb 5-1: config 0 has no interfaces?
[  196.660652][ T4174] usb 7-1: USB disconnect, device number 3
[  196.668016][ T4225] usb 1-1: USB disconnect, device number 4
[  196.708959][ T4252] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  196.722694][ T4252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  196.731971][ T4252] usb 5-1: SerialNumber: syz
[  196.739572][ T4252] usb 5-1: config 0 descriptor??
[  197.041070][    T7] usb 5-1: USB disconnect, device number 3
[  197.192092][ T6569] loop6: detected capacity change from 0 to 2048
[  198.491121][ T6585] loop2: detected capacity change from 0 to 1024
[  198.570192][ T6585] hfsplus: unable to parse mount options
[  199.634890][ T6617] loop0: detected capacity change from 0 to 2048
[  200.798693][    T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  201.073486][    T7] usb 3-1: Using ep0 maxpacket: 32
[  201.219076][    T7] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[  201.227230][    T7] usb 3-1: config 2 has no interface number 0
[  201.244484][    T7] usb 3-1: config 2 interface 88 has no altsetting 0
[  201.459480][    T7] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  201.468766][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.476789][    T7] usb 3-1: Product: syz
[  201.481364][ T4303] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  201.489113][    T7] usb 3-1: Manufacturer: syz
[  201.493731][    T7] usb 3-1: SerialNumber: syz
[  201.552728][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.678'.
[  201.767112][ T6656] device syzkaller0 entered promiscuous mode
[  201.870507][ T4303] usb 7-1: config 0 has no interfaces?
[  201.879093][ T4303] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  201.903176][ T4303] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.935124][ T4303] usb 7-1: config 0 descriptor??
[  202.122615][ T6665] loop5: detected capacity change from 0 to 2048
[  203.190726][ T4303] usb 7-1: USB disconnect, device number 4
[  203.308878][    T7] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  203.352320][    T7] asix: probe of 3-1:2.88 failed with error -71
[  203.378032][    T7] usb 3-1: USB disconnect, device number 3
[  206.224164][ T6700] sched: RT throttling activated
[  208.535078][ T6718] ªªªªªª: renamed from vlan0
[  214.009725][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.719'.
[  215.228770][   T26] audit: type=1326 audit(1769450382.167:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.4.724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd410d99eb9 code=0x0
[  222.021857][ T6929] netlink: 80 bytes leftover after parsing attributes in process `syz.2.749'.
[  224.181495][ T4189] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  229.968097][ T7031] sd 0:0:1:0: device reset
[  231.876353][ T7060] device syzkaller0 entered promiscuous mode
[  233.179648][ T7077] xt_hashlimit: size too large, truncated to 1048576
[  233.732504][ T7089] vxcan1 speed is unknown, defaulting to 1000
[  233.755265][ T7089] vxcan1 speed is unknown, defaulting to 1000
[  233.773300][ T7089] vxcan1 speed is unknown, defaulting to 1000
[  234.222034][ T7089] infiniband syz2: set active
[  234.227235][ T7089] infiniband syz2: added vxcan1
[  234.346833][ T7089] infiniband syz2: Couldn't open port 1
[  234.362002][ T1109] vxcan1 speed is unknown, defaulting to 1000
[  234.379313][ T7089] RDS/IB: syz2: added
[  234.383822][ T7089] smc: adding ib device syz2 with port count 1
[  234.390343][ T7089] smc:    ib device syz2 port 1 has pnetid 
[  234.462887][ T7089] vxcan1 speed is unknown, defaulting to 1000
[  234.540148][ T7089] vxcan1 speed is unknown, defaulting to 1000
[  234.594743][ T7089] vxcan1 speed is unknown, defaulting to 1000
[  234.647361][ T7089] vxcan1 speed is unknown, defaulting to 1000
[  234.701036][ T7089] vxcan1 speed is unknown, defaulting to 1000
[  234.800651][ T4578] vxcan1 speed is unknown, defaulting to 1000
[  235.155916][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  235.166448][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  235.479227][ T7104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.831468][ T7110] device syzkaller0 entered promiscuous mode
[  238.183017][ T7128] netlink: 'syz.6.788': attribute type 6 has an invalid length.
[  238.628840][ T4578] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  238.878715][ T4578] usb 5-1: Using ep0 maxpacket: 8
[  238.998932][ T4578] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  239.015612][ T4578] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  239.056398][ T4578] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  239.079675][ T4578] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  239.101285][ T4578] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  239.144401][ T4578] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  239.185151][ T4578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.498818][ T4578] usb 5-1: usb_control_msg returned -32
[  239.504619][ T4578] usbtmc 5-1:16.0: can't read capabilities
[  239.508728][ T7178] device syzkaller0 entered promiscuous mode
[  242.234760][ T4482] usb 5-1: USB disconnect, device number 4
[  242.348707][ T7217] Set syz1 is full, maxelem 65536 reached
[  242.417136][ T7220] loop6: detected capacity change from 0 to 2048
[  243.604361][    T7] Bluetooth: hci5: command 0x0406 tx timeout
[  243.678796][ T4482] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  243.713687][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.5.807'.
[  243.744102][ T7230] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  243.928853][ T4482] usb 5-1: Using ep0 maxpacket: 32
[  244.048804][ T4482] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.075850][ T4482] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.116779][ T4482] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  244.151531][ T4482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.213664][ T4482] usb 5-1: config 0 descriptor??
[  244.763238][ T4482] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  245.010970][ T4174] usb 5-1: USB disconnect, device number 5
[  245.105940][ T7256] fido_id[7256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  245.346990][ T7259] kvm [7258]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0
[  245.416487][ T7259] kvm [7258]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0
[  245.426570][ T7267] loop2: detected capacity change from 0 to 2048
[  245.432223][ T7259] kvm [7258]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0
[  245.450492][ T7259] kvm [7258]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xda64
[  245.460241][ T7259] kvm [7258]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  248.062266][ T7285] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  248.099506][ T7285] overlayfs: missing 'lowerdir'
[  248.538699][ T1109] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  248.767721][ T7309] loop2: detected capacity change from 0 to 2048
[  248.785534][ T7313] device syzkaller0 entered promiscuous mode
[  250.678959][ T1109] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  250.726742][ T1109] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  250.749565][ T1109] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  250.768840][ T1109] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  250.797477][ T1109] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  250.970900][ T1109] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  251.013885][ T1109] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  251.028829][ T1109] usb 5-1: Product: syz
[  251.038692][ T1109] usb 5-1: Manufacturer: syz
[  251.099670][ T1109] cdc_wdm 5-1:1.0: skipping garbage
[  251.108104][ T1109] cdc_wdm 5-1:1.0: skipping garbage
[  251.175478][ T1109] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  252.319673][ T1109] cdc_wdm 5-1:1.0: Unknown control protocol
[  252.397431][ T4225] usb 5-1: USB disconnect, device number 6
[  254.366978][ T7361] loop2: detected capacity change from 0 to 2048
[  256.090794][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  256.097153][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  256.248144][ T7375] device syzkaller0 entered promiscuous mode
[  257.921811][ T7393] device syzkaller0 entered promiscuous mode
[  257.972110][ T7394] loop4: detected capacity change from 0 to 2048
[  263.782360][ T7452] Cannot find add_set index 65532 as target
[  265.502960][ T7470] device syzkaller0 entered promiscuous mode
[  266.222556][ T4499] Bluetooth: hci0: Frame reassembly failed (-84)
[  266.233625][ T4499] Bluetooth: hci0: Frame reassembly failed (-84)
[  267.652072][ T7510] vxcan1 speed is unknown, defaulting to 1000
[  267.919089][ T4225] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  268.005866][ T7517] device syzkaller0 entered promiscuous mode
[  268.179187][ T4482] Bluetooth: hci0: command 0x1003 tx timeout
[  268.190602][ T4192] Bluetooth: hci0: sending frame failed (-49)
[  268.408957][ T4225] usb 7-1: config 8 has an invalid interface number: 177 but max is 0
[  268.428944][ T4225] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  268.450838][ T4225] usb 7-1: config 8 has no interface number 0
[  268.457124][ T4225] usb 7-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  268.472041][ T4225] usb 7-1: config 8 interface 177 has no altsetting 0
[  268.484189][ T4225] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  268.496586][ T4225] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.584970][ T4225] ir_toy 7-1:8.177: required endpoints not found
[  269.458729][ T1109] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  269.461840][ T7535] syz.4.896 (7535) used greatest stack depth: 20080 bytes left
[  270.248731][ T4225] Bluetooth: hci0: command 0x1001 tx timeout
[  270.248745][ T1109] usb 6-1: Using ep0 maxpacket: 32
[  270.254983][ T4192] Bluetooth: hci0: sending frame failed (-49)
[  270.400033][ T1109] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  270.639811][ T1109] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  270.672496][ T1109] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  270.760539][ T1109] usb 6-1: Product: syz
[  270.798022][ T1109] usb 6-1: Manufacturer: syz
[  270.852520][ T1109] usb 6-1: SerialNumber: syz
[  270.925302][    T7] usb 7-1: USB disconnect, device number 5
[  271.052989][ T1109] usb 6-1: config 0 descriptor??
[  271.119096][ T7530] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  271.140449][ T1109] hub 6-1:0.0: bad descriptor, ignoring hub
[  271.146387][ T1109] hub: probe of 6-1:0.0 failed with error -5
[  272.332568][ T4578] Bluetooth: hci0: command 0x1009 tx timeout
[  273.280089][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'.
[  273.302751][ T7567] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  273.312229][ T7567] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  273.320982][ T7567] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  273.329726][ T7567] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  273.521167][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'.
[  273.618894][ T4225] usb 6-1: USB disconnect, device number 4
[  273.823442][ T7577] device syzkaller0 entered promiscuous mode
[  275.968732][    T7] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  276.259115][ T1109] Bluetooth: hci6: command 0x1003 tx timeout
[  276.265361][ T4196] Bluetooth: hci6: sending frame failed (-49)
[  276.378897][    T7] usb 7-1: config 0 has an invalid interface number: 15 but max is 0
[  276.446696][    T7] usb 7-1: config 0 has no interface number 0
[  276.453009][    T7] usb 7-1: New USB device found, idVendor=067b, idProduct=0001, bcdDevice=af.d3
[  276.462325][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.472746][    T7] usb 7-1: config 0 descriptor??
[  276.509959][    T7] plusb: probe of 7-1:0.15 failed with error -22
[  276.894753][ T4482] usb 7-1: USB disconnect, device number 6
[  277.654364][ T7693] No such timeout policy "syz0"
[  277.850692][ T7700] device syzkaller0 entered promiscuous mode
[  278.761529][ T4262] Bluetooth: hci6: command 0x1001 tx timeout
[  278.769038][ T4189] Bluetooth: hci6: sending frame failed (-49)
[  280.809089][ T4232] Bluetooth: hci6: command 0x1009 tx timeout
[  287.100215][ T7805] No such timeout policy "syz0"
[  287.156644][ T7810] misc userio: Begin command sent, but we're already running
[  287.356779][ T1109] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  287.404133][ T1109] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  287.715409][ T7822] fido_id[7822]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  287.767772][ T7826] loop5: detected capacity change from 0 to 2048
[  287.902090][ T7830] vxcan1 speed is unknown, defaulting to 1000
[  290.798429][ T7847] device netdevsim0 entered promiscuous mode
[  291.511431][ T4225] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  291.620443][ T4225] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  292.420085][ T7864] fido_id[7864]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  292.624311][ T7880] No such timeout policy "syz0"
[  294.475387][ T7893] loop4: detected capacity change from 0 to 2048
[  295.928682][    T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  296.329014][    T7] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[  296.821718][    T7] usb 6-1: config 0 interface 0 has no altsetting 0
[  297.029186][    T7] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  297.044449][    T7] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  297.083614][    T7] usb 6-1: Product: syz
[  297.098209][    T7] usb 6-1: Manufacturer: syz
[  297.122498][    T7] usb 6-1: SerialNumber: syz
[  297.172476][    T7] usb 6-1: config 0 descriptor??
[  297.189108][ T7917] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  297.239926][    T7] usb 6-1: selecting invalid altsetting 0
[  298.269167][    T7] usb 6-1: USB disconnect, device number 5
[  299.180772][ T4174] Bluetooth: hci2: command 0x0406 tx timeout
[  299.328974][ T7951] loop5: detected capacity change from 0 to 2048
[  299.337594][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'.
[  300.675169][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  300.885495][ T7962] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1002'.
[  303.016452][ T7987] Cannot find del_set index 4 as target
[  305.085728][ T4174] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  305.304649][ T8006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1012'.
[  305.519016][ T4174] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30
[  305.653861][ T4174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.708065][ T4174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.755580][ T4174] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252
[  306.105144][ T4174] usb 5-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00
[  306.147665][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.176791][ T4174] usb 5-1: config 0 descriptor??
[  306.258964][ T4174] usb 5-1: can't set config #0, error -71
[  306.289986][ T4174] usb 5-1: USB disconnect, device number 7
[  308.868900][ T4482] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  309.098731][ T4482] usb 5-1: device descriptor read/64, error -71
[  309.500275][ T4482] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  309.828958][ T4578] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  310.208762][ T4482] usb 5-1: device descriptor read/64, error -71
[  310.239068][ T4578] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  310.252953][ T4578] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  310.271662][ T4578] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  310.305995][ T4578] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  310.429918][ T4482] usb usb5-port1: attempt power cycle
[  310.435599][ T4578] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  310.461776][ T4578] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  310.840091][ T4482] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  310.858899][ T4578] usb 1-1: string descriptor 0 read error: -22
[  310.865194][ T4578] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  310.884898][ T4578] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.907935][ T4578] usb 1-1: config 0 descriptor??
[  310.938903][ T4482] usb 5-1: device descriptor read/8, error -71
[  310.949741][ T4578] hub 1-1:0.0: bad descriptor, ignoring hub
[  310.966876][ T4578] hub: probe of 1-1:0.0 failed with error -5
[  311.209114][ T4482] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  311.309317][ T4578] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  311.317336][ T4482] usb 5-1: device descriptor read/8, error -71
[  311.451183][ T4482] usb usb5-port1: unable to enumerate USB device
[  311.879340][ T4578] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  311.894888][ T8071] netlink: 6048 bytes leftover after parsing attributes in process `syz.4.1034'.
[  311.913896][ T4578] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.953572][ T4578] usb 6-1: Product: syz
[  311.998000][ T4578] usb 6-1: Manufacturer: syz
[  312.089690][ T4578] usb 6-1: SerialNumber: syz
[  312.314375][ T4578] usb 6-1: config 0 descriptor??
[  312.482957][ T8071] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1034'.
[  312.621120][ T4579] usb 1-1: USB disconnect, device number 5
[  313.609913][ T8056] udc-core: couldn't find an available UDC or it's busy
[  313.636968][ T8056] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  313.667566][ T4192] Bluetooth: hci5: unknown advertising packet type: 0x17
[  313.667676][ T4192] Bluetooth: hci5: Dropping invalid advertising data
[  313.682504][ T4192] Bluetooth: hci5: Malicious advertising data.
[  313.709335][ T4578] usb-storage 6-1:0.0: USB Mass Storage device detected
[  313.870061][ T4578] usb 6-1: USB disconnect, device number 6
[  314.178719][ T4174] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  314.375022][  T144] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.418751][ T4174] usb 5-1: Using ep0 maxpacket: 8
[  314.549564][ T4174] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  314.562091][  T144] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.608644][ T4174] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  314.642363][ T4174] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  314.653386][ T4174] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  314.725809][ T4174] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  314.780398][  T144] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.788519][ T4174] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  314.960355][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.177567][ T8098] vxcan1 speed is unknown, defaulting to 1000
[  315.209152][  T144] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.378794][ T4174] usb 5-1: usb_control_msg returned -32
[  315.394922][ T4174] usbtmc 5-1:16.0: can't read capabilities
[  315.589053][ T4579] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  315.988933][ T4579] usb 3-1: Using ep0 maxpacket: 32
[  316.202072][ T4579] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  316.210887][ T4579] usb 3-1: config 0 has no interface number 0
[  316.295200][ T8110] kvm [8109]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x147d
[  316.345141][ T8110] kvm [8109]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  316.363368][ T8110] kvm [8109]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x81b6
[  316.376136][ T8098] chnl_net:caif_netlink_parms(): no params data found
[  316.383444][ T8110] kvm [8109]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  316.424494][ T4579] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  316.441822][ T8110] kvm [8109]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x2d7a
[  316.452897][ T4579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.471160][ T4579] usb 3-1: Product: syz
[  316.481194][ T4579] usb 3-1: Manufacturer: syz
[  316.488036][ T8098] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.505064][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.512136][ T4579] usb 3-1: SerialNumber: syz
[  316.518431][ T8098] device bridge_slave_0 entered promiscuous mode
[  316.535874][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.544671][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.560908][ T4579] usb 3-1: config 0 descriptor??
[  316.566385][ T8098] device bridge_slave_1 entered promiscuous mode
[  316.599495][ T8098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  316.611497][ T8098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  316.704759][ T8098] team0: Port device team_slave_0 added
[  316.751615][ T8098] team0: Port device team_slave_1 added
[  316.759825][ T4579] smsc95xx v2.0.0
[  317.061081][ T4252] Bluetooth: hci0: command 0x0409 tx timeout
[  317.083889][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.104140][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.194914][ T8098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.246553][ T4578] usb 5-1: USB disconnect, device number 12
[  317.253072][ T4579] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  317.430443][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.436884][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  317.497258][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.523319][ T4579] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  317.526790][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.665703][ T8098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.770127][ T4579] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  317.813574][ T4579] smsc95xx: probe of 3-1:0.67 failed with error -61
[  318.406876][ T8098] device hsr_slave_0 entered promiscuous mode
[  318.584829][ T8098] device hsr_slave_1 entered promiscuous mode
[  319.079708][ T8098] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  319.087724][ T8098] Cannot create hsr debugfs directory
[  319.218771][ T4578] Bluetooth: hci0: command 0x041b tx timeout
[  320.262968][  T144] device hsr_slave_0 left promiscuous mode
[  320.369565][  T144] device hsr_slave_1 left promiscuous mode
[  320.402614][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  320.428216][ T4303] usb 3-1: USB disconnect, device number 4
[  320.455225][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  320.478054][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  320.490242][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  320.505566][  T144] device bridge_slave_1 left promiscuous mode
[  320.522288][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.570455][  T144] device bridge_slave_0 left promiscuous mode
[  320.576721][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.636980][  T144] device veth1_macvtap left promiscuous mode
[  320.675207][  T144] device veth0_macvtap left promiscuous mode
[  320.729775][  T144] device veth1_vlan left promiscuous mode
[  320.768227][  T144] device veth0_vlan left promiscuous mode
[  321.298780][ T4482] Bluetooth: hci0: command 0x040f tx timeout
[  322.336438][  T144] team0 (unregistering): Port device team_slave_1 removed
[  322.356499][  T144] team0 (unregistering): Port device team_slave_0 removed
[  322.365024][ T4303] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  322.383114][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  322.404066][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  322.619707][  T144] bond0 (unregistering): Released all slaves
[  322.799110][ T4303] usb 1-1: Using ep0 maxpacket: 32
[  323.088332][ T4303] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  323.163738][ T4303] usb 1-1: config 0 has no interface number 0
[  323.260707][ T8208] netlink: 6048 bytes leftover after parsing attributes in process `syz.5.1068'.
[  323.313319][ T8098] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  323.363726][ T8098] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  323.373246][ T4578] Bluetooth: hci0: command 0x0419 tx timeout
[  323.428883][ T4303] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  323.451651][ T4303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.460658][ T4303] usb 1-1: Product: syz
[  323.464957][ T4303] usb 1-1: Manufacturer: syz
[  323.469856][ T4303] usb 1-1: SerialNumber: syz
[  323.519538][ T4303] usb 1-1: config 0 descriptor??
[  323.554133][ T8098] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  323.559775][ T4303] smsc95xx v2.0.0
[  323.568061][ T8098] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  323.638733][    T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  324.968790][ T4303] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  324.980840][ T4303] smsc95xx: probe of 1-1:0.67 failed with error -71
[  324.998481][ T4303] usb 1-1: USB disconnect, device number 6
[  325.028660][    T7] usb 3-1: Using ep0 maxpacket: 32
[  325.149270][    T7] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  325.169977][    T7] usb 3-1: config 0 has no interface number 0
[  325.176151][    T7] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  325.340091][    T7] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  325.359876][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.426963][    T7] usb 3-1: Product: syz
[  325.434402][    T7] usb 3-1: Manufacturer: syz
[  325.447852][    T7] usb 3-1: SerialNumber: syz
[  325.482634][    T7] usb 3-1: config 0 descriptor??
[  325.495725][ T8098] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.529043][ T8215] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  325.590596][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  325.607229][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  325.650807][ T8098] 8021q: adding VLAN 0 to HW filter on device team0
[  325.690261][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  325.715949][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  325.753154][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.760811][ T5104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.773848][ T8215] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  325.870331][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  325.895150][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  325.917788][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  325.939341][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.946468][ T5104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.991356][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  326.097434][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  326.132943][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  326.207964][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  326.260893][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  326.268720][ T4174] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  326.306964][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  326.460878][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  326.521504][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  326.528852][ T4174] usb 1-1: Using ep0 maxpacket: 32
[  326.552361][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  326.618479][ T8098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  326.645663][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  326.648834][ T4174] usb 1-1: config 180 has too many interfaces: 78, using maximum allowed: 32
[  326.670347][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  326.684960][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  326.734626][ T4174] usb 1-1: config 180 has 1 interface, different from the descriptor's value: 78
[  326.789039][ T4174] usb 1-1: config 180 has no interface number 0
[  326.851172][ T4174] usb 1-1: config 180 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  326.904338][ T4174] usb 1-1: config 180 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  327.108885][ T4174] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  327.136258][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.184445][ T4174] usb 1-1: Product: syz
[  327.195223][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  327.212996][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  327.235958][ T4174] usb 1-1: Manufacturer: syz
[  327.262749][ T4174] usb 1-1: SerialNumber: syz
[  327.292734][ T8098] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.558913][    T7] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  327.591191][    T7] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  327.662218][    T7] asix: probe of 3-1:0.188 failed with error -71
[  327.733305][    T7] usb 3-1: USB disconnect, device number 5
[  328.867646][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  329.067872][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  329.877672][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  329.892400][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  329.942748][ T8098] device veth0_vlan entered promiscuous mode
[  329.962698][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  330.836949][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  330.920607][ T8098] device veth1_vlan entered promiscuous mode
[  331.115585][ T8309] sd 0:0:1:0: device reset
[  331.131545][ T8098] device veth0_macvtap entered promiscuous mode
[  331.142834][ T8098] device veth1_macvtap entered promiscuous mode
[  331.161846][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.174006][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.270430][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.303418][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.317539][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.330646][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.354429][ T8098] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.407250][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.418824][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.445800][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.555524][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.062353][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.110229][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.162550][ T8098] batman_adv: batadv0: Interface activated: batadv_slave_1
[  332.180018][ T4174] radio-si470x 1-1:180.35: this is not a si470x device.
[  332.231471][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  332.252996][ T4174] radio-raremono 1-1:180.35: this is not Thanko's Raremono.
[  332.276424][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  332.316516][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  332.336607][ T4174] usb 1-1: USB disconnect, device number 7
[  332.386594][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  332.510292][ T8337] comedi comedi3: pcl816: I/O port conflict (0x1,16)
[  333.507373][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  333.517011][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  333.526232][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  333.546354][ T8098] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.556196][ T8098] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.565147][ T8098] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  333.579668][ T8098] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  333.596582][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  333.658447][ T8342] loop5: detected capacity change from 0 to 2048
[  333.813941][ T8347] Set syz1 is full, maxelem 65536 reached
[  333.832944][ T3045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.862641][ T3045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.931840][ T8356] binder: BINDER_SET_CONTEXT_MGR already set
[  334.998054][ T8356] binder: 8355:8356 ioctl 4018620d 200000004a80 returned -16
[  335.156687][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  335.234065][ T4536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.253393][ T4536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.912007][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  338.979728][ T8396] sd 0:0:1:0: device reset
[  339.215416][ T8409] netlink: 'syz.7.1108': attribute type 6 has an invalid length.
[  341.428987][ T8434] IPv6: Can't replace route, no match found
[  342.323964][   T26] audit: type=1326 audit(1769450509.267:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.5.1115" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97894c7eb9 code=0x0
[  342.871161][ T8465] tmpfs: Unknown parameter 'grpquota'
[  342.961646][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.970828][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.469506][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1120'.
[  343.853389][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  343.904048][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  344.224570][ T8450] device ªªªªªª left promiscuous mode
[  344.423396][ T8450] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  344.442352][ T8450] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  344.458761][ T8450] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  344.467718][ T8450] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  344.622159][ T8450] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.631378][ T8450] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.640322][ T8450] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.649368][ T8450] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.684041][ T8480] device syzkaller0 entered promiscuous mode
[  344.924909][ T8488] sd 0:0:1:0: device reset
[  345.150221][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  345.201294][ T8493] vxcan1 speed is unknown, defaulting to 1000
[  346.759225][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'.
[  348.886593][ T8561] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  348.893792][ T8561] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  348.918914][ T8564] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13)
[  348.925587][ T8564] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  348.962594][ T8561] vhci_hcd vhci_hcd.0: Device attached
[  348.983194][ T8564] vhci_hcd vhci_hcd.0: Device attached
[  349.147912][ T8577] sd 0:0:1:0: device reset
[  349.289144][ T4578] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  349.337435][ T8571] vhci_hcd: connection closed
[  349.343178][ T8568] vhci_hcd: connection reset by peer
[  349.365786][ T4332] vhci_hcd: stop threads
[  349.388845][ T4332] vhci_hcd: release socket
[  349.418437][ T4332] vhci_hcd: disconnect device
[  349.521359][ T4332] vhci_hcd: stop threads
[  349.526323][ T4332] vhci_hcd: release socket
[  349.531351][ T4332] vhci_hcd: disconnect device
[  350.642812][ T8600] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  351.368913][ T4174] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  351.575749][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'.
[  351.638885][ T4174] usb 3-1: Using ep0 maxpacket: 32
[  351.758869][ T4174] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  351.785423][ T4174] usb 3-1: config 0 has no interface number 0
[  351.824001][ T4174] usb 3-1: config 0 interface 184 has no altsetting 0
[  351.838740][ T4252] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  352.019035][ T4174] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  352.135961][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.177656][ T8641] sd 0:0:1:0: device reset
[  352.190410][ T4174] usb 3-1: Product: syz
[  352.199053][ T4252] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  352.316890][ T4174] usb 3-1: Manufacturer: syz
[  352.328225][ T4174] usb 3-1: SerialNumber: syz
[  352.360732][ T4174] usb 3-1: config 0 descriptor??
[  352.465445][ T4174] smsc75xx v1.0.0
[  352.997087][ T4252] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  353.057894][ T4252] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  353.158962][ T4252] usb 6-1: config 0 interface 0 has no altsetting 0
[  353.268996][ T4174] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  353.274173][ T4252] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  353.304687][ T4174] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  353.524948][ T4252] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  353.572384][ T4252] usb 6-1: config 0 interface 0 has no altsetting 0
[  353.819338][ T4252] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  353.942880][ T4252] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  353.997857][ T4252] usb 6-1: config 0 interface 0 has no altsetting 0
[  354.687468][ T4578] vhci_hcd: vhci_device speed not set
[  354.718840][ T4252] usb 6-1: unable to read config index 3 descriptor/all
[  354.725985][ T4252] usb 6-1: can't read configurations, error -71
[  354.770581][ T4174] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  354.796287][ T4174] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  354.837258][ T8686] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1166'.
[  354.860897][ T4174] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  354.882541][ T4174] smsc75xx: probe of 3-1:0.184 failed with error -71
[  354.917653][ T4174] usb 3-1: USB disconnect, device number 6
[  356.371352][ T4482] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  358.315739][ T8720] program syz.5.1178 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  358.452781][ T8725] program syz.5.1178 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  359.700297][ T4482] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  359.713258][ T8725] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  359.723568][ T4482] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  359.737823][ T4482] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  359.750435][ T4482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.788811][ T4482] usb 3-1: can't set config #16, error -71
[  359.808870][ T4482] usb 3-1: USB disconnect, device number 7
[  359.972746][ T8750] overlayfs: failed to clone upperpath
[  362.312735][ T8781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1190'.
[  362.425789][ T8781] device bond0 entered promiscuous mode
[  362.438793][ T8781] device bond_slave_0 entered promiscuous mode
[  362.499353][ T8781] device bond_slave_1 entered promiscuous mode
[  362.537217][ T8781] device gretap0 entered promiscuous mode
[  362.589642][ T8781] device hsr1 entered promiscuous mode
[  364.528393][ T8850] loop4: detected capacity change from 0 to 2048
[  364.905643][ T4579] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  364.926945][ T4579] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  368.278704][ T4482] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  368.528736][ T4482] usb 3-1: Using ep0 maxpacket: 8
[  368.669759][ T4482] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  369.197383][ T4482] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  369.216962][ T4482] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  369.296495][ T4482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.315129][ T4482] usb 3-1: config 0 descriptor??
[  369.611067][ T4482] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  369.911138][ T8886] netlink: 'syz.2.1209': attribute type 6 has an invalid length.
[  371.075980][ T8939] loop7: detected capacity change from 0 to 2048
[  372.169047][ T4578] usb 3-1: USB disconnect, device number 8
[  372.454254][ T8952] sd 0:0:1:0: device reset
[  373.718790][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1229'.
[  376.985893][ T8993] sd 0:0:1:0: device reset
[  378.176647][ T9007] could not allocate digest TFM handle cbcmac(aes)
[  378.326151][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1246'.
[  378.381420][ T9030] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  378.390503][ T9030] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  378.399365][ T9030] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  378.408215][ T9030] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  378.839433][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.846233][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  379.239866][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1246'.
[  381.138221][ T4482] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  381.498906][ T4482] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  381.758999][ T4482] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  382.028714][ T4482] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  382.059686][ T4482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.080336][ T4482] usb 3-1: config 0 descriptor??
[  382.132231][ T4482] hub 3-1:0.0: USB hub found
[  382.184685][ T9075] sd 0:0:1:0: device reset
[  382.395304][ T4482] hub 3-1:0.0: 1 port detected
[  382.571316][ T4482] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  382.578544][ T4482] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  383.287956][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.325454][ T9081] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  383.343856][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.352472][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.360970][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.368510][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.378414][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.386129][ T4482] usbhid 3-1:0.0: can't add hid device: -71
[  383.392521][ T4482] usbhid: probe of 3-1:0.0 failed with error -71
[  383.400106][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.408499][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.423267][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.431864][ T4482] usb 3-1: USB disconnect, device number 9
[  383.437961][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.447272][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.455607][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.545204][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.567188][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.868464][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  383.960347][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.143679][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.273716][ T9099] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1261'.
[  384.302653][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.334458][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.352698][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.374475][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.406383][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.437449][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.471804][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.508886][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.538144][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.568656][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.576131][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.633355][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.652999][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.676359][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.705076][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.724943][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.758735][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.766434][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.779973][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.792391][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.801415][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.813924][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.824206][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.833643][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.842765][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.853086][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.862704][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.872822][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.890007][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.913320][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.944239][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.952208][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.966967][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.974632][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.988204][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  384.996506][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.009733][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.017674][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.031397][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.041626][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.052555][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.063352][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.076201][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.086360][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.097302][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.108458][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.121759][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.132172][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.139772][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.147318][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.155671][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.163685][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.171237][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.178848][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.186264][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.193721][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.201211][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.208751][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.216176][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.223680][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.231215][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.238720][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.246145][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.253607][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.261096][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.269068][ T4579] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.277258][ T4579] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  385.367874][ T9099] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1261'.
[  385.431550][ T9111] device bond1 entered promiscuous mode
[  385.438056][ T9111] 8021q: adding VLAN 0 to HW filter on device bond1
[  385.547692][ T9114] fido_id[9114]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  385.728441][ T9136] sd 0:0:1:0: device reset
[  386.655107][   T26] audit: type=1800 audit(386.618:135): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1264" name="/" dev="fuse" ino=9 res=0 errno=0
[  387.102016][ T9161] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  387.115660][ T9161] blk_update_request: I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  387.127316][ T9161] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  387.138773][ T9161] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  387.150045][ T9161] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  387.160060][ T9161] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  387.168129][ T9161] UDF-fs: Scanning with blocksize 512 failed
[  387.177478][ T9161] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  387.189059][ T9161] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  387.200240][ T9161] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  387.210911][ T9161] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  387.222164][ T9161] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  387.231799][ T9161] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  387.239522][ T9161] UDF-fs: Scanning with blocksize 1024 failed
[  387.247109][ T9161] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  387.259694][ T9161] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  387.271008][ T9161] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  387.280846][ T9161] blk_update_request: I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  387.292158][ T9161] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  387.301818][ T9161] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  387.309631][ T9161] UDF-fs: Scanning with blocksize 2048 failed
[  387.316338][ T9161] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  387.327668][ T9161] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  387.337551][ T9161] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  387.347232][ T9161] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  387.354967][ T9161] UDF-fs: Scanning with blocksize 4096 failed
[  387.361136][ T9161] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  388.325676][ T1109] Bluetooth: hci0: command 0x0405 tx timeout
[  388.708345][ T9159] block device autoloading is deprecated and will be removed.
[  389.812723][ T9201] sd 0:0:1:0: device reset
[  393.065802][ T9238] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1290'.
[  399.965900][ T9310] qrtr: Invalid version 4
[  401.746916][ T9323] device syzkaller0 entered promiscuous mode
[  403.658782][ T4225] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  404.268799][    T7] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  405.728946][    T7] usb 5-1: Using ep0 maxpacket: 32
[  405.743142][ T4482] libceph: connect (1)[c::]:6789 error -101
[  405.757167][ T4482] libceph: mon0 (1)[c::]:6789 connect error
[  405.770969][ T9357] ceph: No mds server is up or the cluster is laggy
[  405.781675][ T4482] libceph: connect (1)[c::]:6789 error -101
[  405.788447][ T4482] libceph: mon0 (1)[c::]:6789 connect error
[  405.849022][    T7] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  405.858426][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.916455][    T7] usb 5-1: config 0 descriptor??
[  406.058911][ T4225] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  406.092620][ T4225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.118988][ T4225] usb 6-1: Product: syz
[  406.123311][ T4225] usb 6-1: Manufacturer: syz
[  406.127920][ T4225] usb 6-1: SerialNumber: syz
[  406.201934][    T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  406.255398][    T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  406.349429][    T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  406.364083][    T7] usb 5-1: media controller created
[  407.100636][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  407.218855][ T4225] cdc_ncm 6-1:1.0: bind() failure
[  407.251656][ T4225] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  407.258512][ T4225] cdc_ncm 6-1:1.1: bind() failure
[  407.338793][    T7] az6027: usb out operation failed. (-71)
[  407.346158][ T4225] usb 6-1: USB disconnect, device number 9
[  407.378958][    T7] az6027: usb out operation failed. (-71)
[  407.387045][    T7] stb0899_attach: Driver disabled by Kconfig
[  407.428328][    T7] az6027: no front-end attached
[  407.428328][    T7] 
[  407.499203][    T7] az6027: usb out operation failed. (-71)
[  407.605269][    T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  407.866222][    T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9
[  408.083728][    T7] dvb-usb: schedule remote query interval to 400 msecs.
[  408.108502][    T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  408.487922][    T7] usb 5-1: USB disconnect, device number 13
[  408.888016][    T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  410.976789][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1343'.
[  411.689111][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'.
[  420.671572][    T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  420.886311][ T9507] netlink: 'syz.7.1352': attribute type 2 has an invalid length.
[  420.894235][ T9507] netlink: 'syz.7.1352': attribute type 8 has an invalid length.
[  420.902449][ T9507] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1352'.
[  421.609329][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1375'.
[  421.618668][    T7] usb 3-1: Using ep0 maxpacket: 16
[  422.319305][    T7] usb 3-1: config 0 has an invalid interface number: 62 but max is 0
[  422.339653][    T7] usb 3-1: config 0 has no interface number 0
[  422.367305][ T9517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1376'.
[  422.465620][    T7] usb 3-1: config 0 interface 62 altsetting 0 endpoint 0xF has an invalid bInterval 127, changing to 10
[  422.589151][    T7] usb 3-1: string descriptor 0 read error: -71
[  422.595460][    T7] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=f7.f9
[  422.734237][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.901024][ T9522] device syzkaller0 entered promiscuous mode
[  422.908094][    T7] usb 3-1: config 0 descriptor??
[  423.158304][    T7] usb 3-1: can't set config #0, error -71
[  423.175405][    T7] usb 3-1: USB disconnect, device number 10
[  424.074432][ T9555] print_req_error: 2 callbacks suppressed
[  424.074473][ T9555] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  424.093142][ T9555] blk_update_request: I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  424.104714][ T9555] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  424.115665][ T9555] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  424.127662][ T9555] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  424.137509][ T9555] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  424.145415][ T9555] UDF-fs: Scanning with blocksize 512 failed
[  424.157772][ T9555] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  424.170305][ T9555] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  424.182564][ T9555] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  424.193568][ T9555] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  424.205342][ T9555] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  424.215175][ T9555] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  424.223076][ T9555] UDF-fs: Scanning with blocksize 1024 failed
[  424.231400][ T9555] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  424.243777][ T9555] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  424.255577][ T9555] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  424.266285][ T9555] blk_update_request: I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  424.278050][ T9555] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  424.287857][ T9555] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  424.295761][ T9555] UDF-fs: Scanning with blocksize 2048 failed
[  424.303761][ T9555] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  424.316229][ T9555] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  424.327120][ T9555] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  424.336974][ T9555] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  424.344845][ T9555] UDF-fs: Scanning with blocksize 4096 failed
[  424.351131][ T9555] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1)
[  424.650810][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'.
[  424.857530][ T9557] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  424.866604][ T9557] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  424.875469][ T9557] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  424.884793][ T9557] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  425.035213][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'.
[  425.212524][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'.
[  425.270268][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'.
[  432.676137][ T9670] sd 0:0:1:0: device reset
[  435.628316][ T9683] loop5: detected capacity change from 0 to 2048
[  440.196208][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  440.258778][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  441.677059][ T9729] loop2: detected capacity change from 0 to 2048
[  442.248820][   T23] Bluetooth: hci0: command 0x0406 tx timeout
[  445.613684][ T9772] sd 0:0:1:0: device reset
[  452.112592][ T9814] print_req_error: 2 callbacks suppressed
[  452.112610][ T9814] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  452.226021][ T9814] blk_update_request: I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  452.327677][ T9814] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  452.369037][ T9814] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  453.484488][ T9814] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  453.504815][ T9814] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  453.512972][ T9814] UDF-fs: Scanning with blocksize 512 failed
[  453.529517][ T9814] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  453.600343][ T9814] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  453.648778][ T9814] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  453.688971][ T9814] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  453.741263][ T9814] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  453.863050][ T9814] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  453.873188][ T9814] UDF-fs: Scanning with blocksize 1024 failed
[  453.880255][ T9814] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  453.892815][ T9814] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  453.905096][ T9814] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  453.915461][ T9814] blk_update_request: I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  453.961292][ T9814] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  454.060604][ T9842] netlink: 'syz.0.1457': attribute type 1 has an invalid length.
[  454.110733][ T9814] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  454.191249][ T9814] UDF-fs: Scanning with blocksize 2048 failed
[  454.284133][ T9814] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  454.457690][ T9814] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  454.489237][ T9833] loop7: detected capacity change from 0 to 2048
[  454.509169][ T9814] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  454.519209][ T9814] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  454.527146][ T9814] UDF-fs: Scanning with blocksize 4096 failed
[  454.535229][ T9814] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  455.332014][ T9845] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  455.576862][ T9845] bond2: (slave vxcan3): Error -22 calling dev_set_mtu
[  457.138246][ T9846] bond2: (slave bridge2): Enslaving as an active interface with a down link
[  460.496641][ T9883] loop4: detected capacity change from 0 to 2048
[  462.240178][ T9918] sd 0:0:1:0: device reset
[  467.525861][ T9962] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1494'.
[  467.634096][ T9966] loop7: detected capacity change from 0 to 1024
[  467.745876][ T9966] hfsplus: unable to parse mount options
[  468.935567][ T9993] print_req_error: 2 callbacks suppressed
[  468.935614][ T9993] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  468.953944][ T9993] blk_update_request: I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  468.965399][ T9993] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  468.976187][ T9993] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  468.987689][ T9993] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  468.997505][ T9993] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  469.005589][ T9993] UDF-fs: Scanning with blocksize 512 failed
[  469.014078][ T9993] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  469.026813][ T9993] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  469.038516][ T9993] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  469.049273][ T9993] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  469.060962][ T9993] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  469.070736][ T9993] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  469.078531][ T9993] UDF-fs: Scanning with blocksize 1024 failed
[  469.086801][ T9993] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  469.098948][ T9993] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  469.110969][ T9993] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  469.121428][ T9993] blk_update_request: I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  469.133023][ T9993] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  469.142810][ T9993] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  469.150662][ T9993] UDF-fs: Scanning with blocksize 2048 failed
[  469.158498][ T9993] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  469.170916][ T9993] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  469.181899][ T9993] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  469.192054][ T9993] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  469.199881][ T9993] UDF-fs: Scanning with blocksize 4096 failed
[  469.206117][ T9993] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1)
[  469.769903][ T9973] crypto_alloc_aead failed rc=-4
[  469.881197][T10012] netlink: 512 bytes leftover after parsing attributes in process `syz.7.1507'.
[  469.992543][T10017] loop4: detected capacity change from 0 to 1024
[  470.059076][T10017] hfsplus: unable to parse mount options
[  478.838741][ T4578] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  479.319424][ T4578] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  479.335463][ T4578] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  479.346266][ T4578] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  479.410865][ T4578] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.416134][T10136] print_req_error: 2 callbacks suppressed
[  479.416152][T10136] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  479.437374][T10136] blk_update_request: I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  479.449157][T10136] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  479.460117][T10136] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  479.472166][T10136] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  479.482259][T10136] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  479.490278][T10136] UDF-fs: Scanning with blocksize 512 failed
[  479.498879][T10136] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  479.512185][T10136] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  479.524029][T10136] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  479.534769][T10136] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  479.546746][T10136] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  479.556600][T10136] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  479.564510][T10136] UDF-fs: Scanning with blocksize 1024 failed
[  479.572787][T10136] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  479.585246][T10136] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  479.596999][T10136] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  479.607784][T10136] blk_update_request: I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  479.619456][T10136] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  479.629644][T10136] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  479.637481][T10136] UDF-fs: Scanning with blocksize 2048 failed
[  479.645486][T10136] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  479.657627][T10136] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  479.668559][T10136] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  479.678471][T10136] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  479.686488][T10136] UDF-fs: Scanning with blocksize 4096 failed
[  479.693095][T10136] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  480.234395][ T4578] usb 6-1: config 0 descriptor??
[  481.798817][ T4578] usbhid 6-1:0.0: can't add hid device: -71
[  481.807591][ T4578] usbhid: probe of 6-1:0.0 failed with error -71
[  481.841647][ T4578] usb 6-1: USB disconnect, device number 10
[  482.444668][T10166] ceph: No mds server is up or the cluster is laggy
[  487.395395][T10227] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  497.141897][T10303] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  501.983392][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  501.991156][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  502.152917][ T4232] libceph: connect (1)[c::]:6789 error -22
[  502.183873][ T4232] libceph: mon0 (1)[c::]:6789 connect error
[  502.223323][T10350] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  502.979393][T10330] ceph: No mds server is up or the cluster is laggy
[  503.073223][    T7] libceph: connect (1)[c::]:6789 error -22
[  503.803674][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  504.276120][T10355] vxcan1 speed is unknown, defaulting to 1000
[  505.312192][T10363] print_req_error: 2 callbacks suppressed
[  505.312239][T10363] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  505.331052][T10363] blk_update_request: I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  505.342957][T10363] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  505.353795][T10363] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  505.365480][T10363] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  505.375902][T10363] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  505.384118][T10363] UDF-fs: Scanning with blocksize 512 failed
[  505.393313][T10363] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  505.406075][T10363] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  505.417726][T10363] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  505.428666][T10363] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  505.440263][T10363] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  505.450203][T10363] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  505.458140][T10363] UDF-fs: Scanning with blocksize 1024 failed
[  505.466389][T10363] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  505.478605][T10363] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  505.490209][T10363] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  505.500903][T10363] blk_update_request: I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  505.512515][T10363] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  505.522390][T10363] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  505.530430][T10363] UDF-fs: Scanning with blocksize 2048 failed
[  505.538494][T10363] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  505.550744][T10363] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  505.561495][T10363] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  505.571423][T10363] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  505.579323][T10363] UDF-fs: Scanning with blocksize 4096 failed
[  505.585643][T10363] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  506.016337][ T4303] libceph: connect (1)[c::]:6789 error -22
[  506.034901][ T4303] libceph: mon0 (1)[c::]:6789 connect error
[  506.124527][ T4303] libceph: connect (1)[c::]:6789 error -22
[  506.964687][ T4303] libceph: mon0 (1)[c::]:6789 connect error
[  508.592202][T10387] loop7: detected capacity change from 0 to 1024
[  508.679439][T10387] hfsplus: unable to parse mount options
[  512.045448][T10417] print_req_error: 2 callbacks suppressed
[  512.045515][T10417] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  512.064465][T10417] blk_update_request: I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  512.075961][T10417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  512.087260][T10417] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  512.098868][T10417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  512.108713][T10417] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  512.116574][T10417] UDF-fs: Scanning with blocksize 512 failed
[  512.125971][T10417] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  512.138665][T10417] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  512.150281][T10417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  512.161127][T10417] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  512.172753][T10417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  512.182622][T10417] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  512.190657][T10417] UDF-fs: Scanning with blocksize 1024 failed
[  512.198670][T10417] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  512.210720][T10417] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  512.222445][T10417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  512.233160][T10417] blk_update_request: I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  512.244819][T10417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  512.254603][T10417] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  512.262450][T10417] UDF-fs: Scanning with blocksize 2048 failed
[  512.270322][T10417] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  512.282659][T10417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  512.293327][T10417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  512.303124][T10417] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  512.310997][T10417] UDF-fs: Scanning with blocksize 4096 failed
[  512.317351][T10417] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  512.978432][T10424] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0)
[  514.404655][ T4482] libceph: connect (1)[c::]:6789 error -22
[  514.454203][ T4482] libceph: mon0 (1)[c::]:6789 connect error
[  514.469646][T10428] ceph: No mds server is up or the cluster is laggy
[  515.293316][ T4578] libceph: connect (1)[c::]:6789 error -22
[  515.299972][ T4578] libceph: mon0 (1)[c::]:6789 connect error
[  515.614630][T10440] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  515.623986][T10440] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  515.633671][T10440] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  515.649621][T10440] syz.0.1636 (10440) used greatest stack depth: 17336 bytes left
[  515.657698][   T26] audit: type=1800 audit(515.578:136): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1636" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  520.376069][T10477] print_req_error: 2 callbacks suppressed
[  520.376116][T10477] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  520.394647][T10477] blk_update_request: I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  520.406598][T10477] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  520.417687][T10477] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  520.429879][T10477] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  520.440104][T10477] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  520.448168][T10477] UDF-fs: Scanning with blocksize 512 failed
[  520.456732][T10477] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  520.468700][T10477] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  520.480321][T10477] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  520.491305][T10477] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  520.503027][T10477] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  520.512953][T10477] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  520.520962][T10477] UDF-fs: Scanning with blocksize 1024 failed
[  520.529347][T10477] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  520.541689][T10477] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  520.553418][T10477] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  520.564264][T10477] blk_update_request: I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  520.575979][T10477] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  520.585767][T10477] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  520.593637][T10477] UDF-fs: Scanning with blocksize 2048 failed
[  520.601462][T10477] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  520.614206][T10477] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  520.625089][T10477] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  520.634965][T10477] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  520.642776][T10477] UDF-fs: Scanning with blocksize 4096 failed
[  520.649046][T10477] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  525.611708][T10504] Error parsing options; rc = [-22]
[  527.284283][T10524] print_req_error: 2 callbacks suppressed
[  527.284328][T10524] blk_update_request: I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  527.303153][T10524] blk_update_request: I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  527.314783][T10524] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  527.326101][T10524] blk_update_request: I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  527.337901][T10524] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  527.347763][T10524] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  527.356101][T10524] UDF-fs: Scanning with blocksize 512 failed
[  527.364593][T10524] blk_update_request: I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  527.376812][T10524] blk_update_request: I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  527.389153][T10524] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  527.400128][T10524] blk_update_request: I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  527.412209][T10524] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  527.422350][T10524] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  527.430324][T10524] UDF-fs: Scanning with blocksize 1024 failed
[  527.438652][T10524] blk_update_request: I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  527.451560][T10524] blk_update_request: I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  527.463298][T10524] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  527.474081][T10524] blk_update_request: I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  527.486314][T10524] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  527.496634][T10524] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  527.504554][T10524] UDF-fs: Scanning with blocksize 2048 failed
[  527.513723][T10524] blk_update_request: I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  527.526106][T10524] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  527.537298][T10524] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  527.547098][T10524] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  527.554986][T10524] UDF-fs: Scanning with blocksize 4096 failed
[  527.561480][T10524] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
[  536.217388][T10559] nvme_fabrics: missing parameter 'transport=%s'
[  536.334420][T10559] nvme_fabrics: missing parameter 'nqn=%s'
[  536.768940][T10582] tipc: Started in network mode
[  536.802322][T10582] tipc: Node identity 961a2e59e321, cluster identity 4711
[  536.843989][T10582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  536.885479][T10584] device syzkaller0 entered promiscuous mode
[  536.983322][T10587] loop7: detected capacity change from 0 to 2048
[  537.005256][T10582] tipc: Resetting bearer <eth:syzkaller0>
[  537.064977][T10578] tipc: Resetting bearer <eth:syzkaller0>
[  538.183480][T10578] tipc: Disabling bearer <eth:syzkaller0>
[  538.261503][ T4225] tipc: Node number set to 1966812761
[  541.057342][T10618] loop2: detected capacity change from 0 to 2048
[  541.338063][T10625] sctp: failed to load transform for md5: -2
[  543.317260][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'.
[  544.155399][ T4261] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  544.398937][ T4261] usb 5-1: Using ep0 maxpacket: 32
[  545.987298][T10678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1702'.
[  547.718998][ T4261] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  547.728094][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.854300][ T4261] usb 5-1: Product: syz
[  547.858542][ T4261] usb 5-1: Manufacturer: syz
[  548.405480][ T4261] usb 5-1: config 0 descriptor??
[  548.458881][ T4261] usb 5-1: can't set config #0, error -71
[  548.495897][ T4261] usb 5-1: USB disconnect, device number 14
[  550.202300][T10701] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in;
[  550.202300][T10701]    program syz.5.1710 not setting count and/or reply_len properly
[  551.420678][    T7] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  551.467056][T10716] loop4: detected capacity change from 0 to 2048
[  552.639316][T10457] libceph: connect (1)[c::]:6789 error -101
[  552.645736][T10457] libceph: mon0 (1)[c::]:6789 connect error
[  552.668352][T10720] ceph: No mds server is up or the cluster is laggy
[  553.704987][    T7] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  553.801772][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.022686][    T7] usb 6-1: Product: syz
[  555.026925][    T7] usb 6-1: Manufacturer: syz
[  555.032082][    T7] usb 6-1: SerialNumber: syz
[  555.756852][    T7] usb 6-1: config 0 descriptor??
[  555.790039][    T7] usb 6-1: can't set config #0, error -71
[  555.797895][    T7] usb 6-1: USB disconnect, device number 11
[  557.932120][ T4486] Bluetooth: hci2: command 0x1003 tx timeout
[  557.977096][ T4196] Bluetooth: hci2: sending frame failed (-49)
[  560.867257][ T4486] Bluetooth: hci2: command 0x1001 tx timeout
[  560.879235][ T4196] Bluetooth: hci2: sending frame failed (-49)
[  562.888911][ T4232] Bluetooth: hci2: command 0x1009 tx timeout
[  563.064442][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  563.071168][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  566.972627][T10850] loop7: detected capacity change from 0 to 2048
[  570.102885][T10878] netlink: 'syz.0.1761': attribute type 10 has an invalid length.
[  570.452848][T10878] device syz_tun entered promiscuous mode
[  570.470301][T10878] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  570.578728][ T1109] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  570.704226][T10878] 8021q: adding VLAN 0 to HW filter on device bond3
[  570.918810][ T1109] usb 5-1: Using ep0 maxpacket: 16
[  571.054523][ T1109] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  571.098425][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.191360][ T1109] usb 5-1: config 0 descriptor??
[  574.764409][T10888] vxcan1 speed is unknown, defaulting to 1000
[  575.685680][ T1109] usbhid 5-1:0.0: can't add hid device: -71
[  575.715805][ T1109] usbhid: probe of 5-1:0.0 failed with error -71
[  575.757843][ T1109] usb 5-1: USB disconnect, device number 15
[  576.923956][T10926] bridge0: port 3(gretap0) entered blocking state
[  576.930973][T10926] bridge0: port 3(gretap0) entered disabled state
[  576.943887][T10926] device gretap0 entered promiscuous mode
[  576.975225][T10926] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  576.987840][T10926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1771'.
[  579.163808][T10936] sd 0:0:1:0: device reset
[  579.903659][T10944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1778'.
[  580.415330][T10957] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  581.312892][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1786'.
[  581.323015][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1786'.
[  581.906733][T10965] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1785'.
[  581.949580][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1786'.
[  581.978741][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1786'.
[  582.713333][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1790'.
[  583.765208][T11005] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  584.758173][T11018] device syzkaller0 entered promiscuous mode
[  585.943839][T11042] netlink: 'syz.5.1807': attribute type 1 has an invalid length.
[  586.180755][T11042] 8021q: adding VLAN 0 to HW filter on device bond1
[  586.345260][T11046] bond1: (slave vlan2): making interface the new active one
[  586.459681][T11046] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  586.490668][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  588.525915][T11077] device syzkaller1 entered promiscuous mode
[  588.935212][T11081] ==================================================================
[  588.943869][T11081] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870
[  588.950962][T11081] Read of size 8 at addr ffff88801e54c008 by task syz.4.1816/11081
[  588.958874][T11081] 
[  588.961229][T11081] CPU: 1 PID: 11081 Comm: syz.4.1816 Not tainted syzkaller #0
[  588.968701][T11081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  588.978908][T11081] Call Trace:
[  588.982206][T11081]  <TASK>
[  588.985149][T11081]  dump_stack_lvl+0x188/0x250
[  588.989858][T11081]  ? show_regs_print_info+0x20/0x20
[  588.995084][T11081]  ? _printk+0xda/0x130
[  588.999270][T11081]  ? load_image+0x400/0x400
[  589.003817][T11081]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  589.009315][T11081]  print_address_description+0x60/0x2d0
[  589.014899][T11081]  ? ax25_release+0x5ca/0x870
[  589.019605][T11081]  kasan_report+0xdf/0x130
[  589.024062][T11081]  ? ax25_release+0x5ca/0x870
[  589.028774][T11081]  ax25_release+0x5ca/0x870
[  589.033317][T11081]  sock_close+0xd5/0x240
[  589.037593][T11081]  ? sock_mmap+0x90/0x90
[  589.041871][T11081]  __fput+0x234/0x930
[  589.045900][T11081]  task_work_run+0x125/0x1a0
[  589.050605][T11081]  do_exit+0x626/0x20c0
[  589.054792][T11081]  ? put_task_struct+0x80/0x80
[  589.059589][T11081]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  589.065608][T11081]  ? lock_chain_count+0x20/0x20
[  589.070499][T11081]  ? cgroup_freezing+0x264/0x310
[  589.075475][T11081]  do_group_exit+0x12e/0x300
[  589.080092][T11081]  ? lockdep_hardirqs_on+0x94/0x140
[  589.085331][T11081]  get_signal+0x6ca/0x12c0
[  589.089882][T11081]  arch_do_signal_or_restart+0xe7/0x12c0
[  589.095705][T11081]  ? __ia32_sys_send+0xb0/0xb0
[  589.100536][T11081]  ? get_sigframe_size+0x10/0x10
[  589.105532][T11081]  ? exit_to_user_mode_loop+0x3b/0x130
[  589.111037][T11081]  exit_to_user_mode_loop+0x9e/0x130
[  589.116376][T11081]  exit_to_user_mode_prepare+0xee/0x180
[  589.121970][T11081]  syscall_exit_to_user_mode+0x16/0x40
[  589.127457][T11081]  do_syscall_64+0x58/0xa0
[  589.131949][T11081]  ? clear_bhb_loop+0x30/0x80
[  589.136653][T11081]  ? clear_bhb_loop+0x30/0x80
[  589.141366][T11081]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  589.147741][T11081] RIP: 0033:0x7fd410d99eb9
[  589.152192][T11081] Code: Unable to access opcode bytes at RIP 0x7fd410d99e8f.
[  589.159573][T11081] RSP: 002b:00007fd40efd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  589.168198][T11081] RAX: fffffffffffffe00 RBX: 00007fd411015090 RCX: 00007fd410d99eb9
[  589.176192][T11081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c
[  589.184181][T11081] RBP: 00007fd410e07c1f R08: 0000000000000000 R09: 0000000000000000
[  589.192165][T11081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  589.200151][T11081] R13: 00007fd411015128 R14: 00007fd411015090 R15: 00007ffc38c5d1f8
[  589.208137][T11081]  </TASK>
[  589.211150][T11081] 
[  589.213462][T11081] Allocated by task 8501:
[  589.217866][T11081]  __kasan_kmalloc+0xb5/0xf0
[  589.222455][T11081]  ax25_dev_device_up+0x50/0x580
[  589.227403][T11081]  ax25_device_event+0x483/0x4f0
[  589.232347][T11081]  raw_notifier_call_chain+0xcb/0x160
[  589.237858][T11081]  __dev_notify_flags+0x194/0x300
[  589.242901][T11081]  dev_change_flags+0xe3/0x1a0
[  589.247673][T11081]  dev_ifsioc+0x130/0xd50
[  589.252000][T11081]  dev_ioctl+0x545/0xe30
[  589.256249][T11081]  sock_do_ioctl+0x245/0x320
[  589.260856][T11081]  sock_ioctl+0x4d2/0x710
[  589.265186][T11081]  __se_sys_ioctl+0xfa/0x170
[  589.269776][T11081]  do_syscall_64+0x4c/0xa0
[  589.274228][T11081]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  589.280135][T11081] 
[  589.282465][T11081] Freed by task 11082:
[  589.286529][T11081]  kasan_set_track+0x4b/0x70
[  589.291129][T11081]  kasan_set_free_info+0x1f/0x40
[  589.296077][T11081]  ____kasan_slab_free+0xd5/0x110
[  589.301112][T11081]  slab_free_freelist_hook+0xea/0x170
[  589.306504][T11081]  kfree+0xef/0x2a0
[  589.310332][T11081]  ax25_device_event+0x4b4/0x4f0
[  589.315365][T11081]  raw_notifier_call_chain+0xcb/0x160
[  589.320748][T11081]  __dev_notify_flags+0x158/0x300
[  589.325793][T11081]  dev_change_flags+0xe3/0x1a0
[  589.330564][T11081]  dev_ifsioc+0x130/0xd50
[  589.334907][T11081]  dev_ioctl+0x545/0xe30
[  589.339162][T11081]  sock_do_ioctl+0x245/0x320
[  589.343767][T11081]  sock_ioctl+0x4d2/0x710
[  589.348109][T11081]  __se_sys_ioctl+0xfa/0x170
[  589.352698][T11081]  do_syscall_64+0x4c/0xa0
[  589.357120][T11081]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  589.363034][T11081] 
[  589.365355][T11081] Last potentially related work creation:
[  589.371070][T11081]  kasan_save_stack+0x35/0x60
[  589.375785][T11081]  kasan_record_aux_stack+0xb8/0x100
[  589.381167][T11081]  insert_work+0x54/0x3d0
[  589.385682][T11081]  __queue_work+0x9c5/0xd50
[  589.390206][T11081]  queue_work_on+0x124/0x1f0
[  589.394818][T11081]  inet6addr_event+0x9c/0xc0
[  589.399431][T11081]  atomic_notifier_call_chain+0x15d/0x280
[  589.405163][T11081]  addrconf_ifdown+0xe0c/0x19c0
[  589.410087][T11081]  addrconf_notify+0x445/0xf00
[  589.414884][T11081]  raw_notifier_call_chain+0xcb/0x160
[  589.420310][T11081]  dev_close_many+0x29f/0x400
[  589.424999][T11081]  unregister_netdevice_many+0x481/0x19f0
[  589.430747][T11081]  default_device_exit_batch+0x364/0x3c0
[  589.436419][T11081]  cleanup_net+0x791/0xba0
[  589.440862][T11081]  process_one_work+0x85f/0x1010
[  589.445923][T11081]  worker_thread+0xaa6/0x1290
[  589.450846][T11081]  kthread+0x436/0x520
[  589.454928][T11081]  ret_from_fork+0x1f/0x30
[  589.459393][T11081] 
[  589.461720][T11081] Second to last potentially related work creation:
[  589.468317][T11081]  kasan_save_stack+0x35/0x60
[  589.473016][T11081]  kasan_record_aux_stack+0xb8/0x100
[  589.478328][T11081]  call_rcu+0x189/0x950
[  589.482612][T11081]  addrconf_ifdown+0x16ee/0x19c0
[  589.487574][T11081]  addrconf_notify+0x445/0xf00
[  589.492456][T11081]  raw_notifier_call_chain+0xcb/0x160
[  589.497873][T11081]  unregister_netdevice_many+0x1049/0x19f0
[  589.503688][T11081]  default_device_exit_batch+0x364/0x3c0
[  589.509432][T11081]  cleanup_net+0x791/0xba0
[  589.513910][T11081]  process_one_work+0x85f/0x1010
[  589.518855][T11081]  worker_thread+0xaa6/0x1290
[  589.523549][T11081]  kthread+0x436/0x520
[  589.527652][T11081]  ret_from_fork+0x1f/0x30
[  589.532079][T11081] 
[  589.534529][T11081] The buggy address belongs to the object at ffff88801e54c000
[  589.534529][T11081]  which belongs to the cache kmalloc-192 of size 192
[  589.549757][T11081] The buggy address is located 8 bytes inside of
[  589.549757][T11081]  192-byte region [ffff88801e54c000, ffff88801e54c0c0)
[  589.562881][T11081] The buggy address belongs to the page:
[  589.568559][T11081] page:ffffea0000795300 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801e54cd00 pfn:0x1e54c
[  589.580487][T11081] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  589.588069][T11081] raw: 00fff00000000200 ffffea000066e7c8 ffffea000066ec88 ffff888016c41a00
[  589.596680][T11081] raw: ffff88801e54cd00 000000000010000c 00000001ffffffff 0000000000000000
[  589.605269][T11081] page dumped because: kasan: bad access detected
[  589.611720][T11081] page_owner tracks the page as allocated
[  589.617730][T11081] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 5943572162, free_ts 5941940920
[  589.634159][T11081]  get_page_from_freelist+0x1bbd/0x1ca0
[  589.639754][T11081]  __alloc_pages+0x1ee/0x480
[  589.644369][T11081]  alloc_page_interleave+0x24/0x1e0
[  589.649809][T11081]  new_slab+0xc0/0x4b0
[  589.654249][T11081]  ___slab_alloc+0x80a/0xdd0
[  589.658866][T11081]  kmem_cache_alloc_trace+0x1a5/0x2a0
[  589.664348][T11081]  call_usermodehelper_setup+0x8a/0x260
[  589.669989][T11081]  kobject_uevent_env+0x65e/0x890
[  589.675014][T11081]  driver_register+0x3e2/0x430
[  589.679780][T11081]  acpi_processor_driver_init+0x52/0x140
[  589.685424][T11081]  do_one_initcall+0x272/0x730
[  589.690200][T11081]  do_initcall_level+0x137/0x1f0
[  589.695152][T11081]  do_initcalls+0x4b/0x90
[  589.699584][T11081]  kernel_init_freeable+0x3e9/0x570
[  589.704989][T11081]  kernel_init+0x19/0x1b0
[  589.709357][T11081]  ret_from_fork+0x1f/0x30
[  589.713822][T11081] page last free stack trace:
[  589.718506][T11081]  free_unref_page_prepare+0x637/0x6c0
[  589.723984][T11081]  free_unref_page+0x8f/0x2a0
[  589.728669][T11081]  __vunmap+0x8b9/0xa50
[  589.732842][T11081]  free_work+0x56/0x80
[  589.737089][T11081]  process_one_work+0x85f/0x1010
[  589.742047][T11081]  worker_thread+0xaa6/0x1290
[  589.746751][T11081]  kthread+0x436/0x520
[  589.751081][T11081]  ret_from_fork+0x1f/0x30
[  589.755604][T11081] 
[  589.757960][T11081] Memory state around the buggy address:
[  589.763606][T11081]  ffff88801e54bf00: fb fb fb fb fb fb fc fc fc fc fb fb fb fb fb fb
[  589.771671][T11081]  ffff88801e54bf80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  589.779733][T11081] >ffff88801e54c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  589.787802][T11081]                       ^
[  589.792138][T11081]  ffff88801e54c080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  589.800203][T11081]  ffff88801e54c100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  589.808299][T11081] ==================================================================
[  589.816371][T11081] Disabling lock debugging due to kernel taint
[  589.824866][T11081] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  589.832107][T11081] CPU: 0 PID: 11081 Comm: syz.4.1816 Tainted: G    B             syzkaller #0
[  589.840966][T11081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  589.851034][T11081] Call Trace:
[  589.854320][T11081]  <TASK>
[  589.857250][T11081]  dump_stack_lvl+0x188/0x250
[  589.862274][T11081]  ? show_regs_print_info+0x20/0x20
[  589.867684][T11081]  ? load_image+0x400/0x400
[  589.872316][T11081]  panic+0x2e5/0x810
[  589.876234][T11081]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  589.882936][T11081]  ? bpf_jit_dump+0xd0/0xd0
[  589.887466][T11081]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  589.893475][T11081]  ? _raw_spin_unlock+0x40/0x40
[  589.898352][T11081]  ? ax25_release+0x5ca/0x870
[  589.903138][T11081]  check_panic_on_warn+0x80/0xa0
[  589.908131][T11081]  ? ax25_release+0x5ca/0x870
[  589.912912][T11081]  end_report+0x6d/0xf0
[  589.917092][T11081]  kasan_report+0x102/0x130
[  589.921612][T11081]  ? ax25_release+0x5ca/0x870
[  589.926315][T11081]  ax25_release+0x5ca/0x870
[  589.930925][T11081]  sock_close+0xd5/0x240
[  589.935192][T11081]  ? sock_mmap+0x90/0x90
[  589.939454][T11081]  __fput+0x234/0x930
[  589.943464][T11081]  task_work_run+0x125/0x1a0
[  589.948081][T11081]  do_exit+0x626/0x20c0
[  589.952431][T11081]  ? put_task_struct+0x80/0x80
[  589.957217][T11081]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  589.963226][T11081]  ? lock_chain_count+0x20/0x20
[  589.968438][T11081]  ? cgroup_freezing+0x264/0x310
[  589.973398][T11081]  do_group_exit+0x12e/0x300
[  589.978004][T11081]  ? lockdep_hardirqs_on+0x94/0x140
[  589.983235][T11081]  get_signal+0x6ca/0x12c0
[  589.987683][T11081]  arch_do_signal_or_restart+0xe7/0x12c0
[  589.993346][T11081]  ? __ia32_sys_send+0xb0/0xb0
[  589.998148][T11081]  ? get_sigframe_size+0x10/0x10
[  590.003153][T11081]  ? exit_to_user_mode_loop+0x3b/0x130
[  590.008638][T11081]  exit_to_user_mode_loop+0x9e/0x130
[  590.013951][T11081]  exit_to_user_mode_prepare+0xee/0x180
[  590.019526][T11081]  syscall_exit_to_user_mode+0x16/0x40
[  590.025012][T11081]  do_syscall_64+0x58/0xa0
[  590.029517][T11081]  ? clear_bhb_loop+0x30/0x80
[  590.034215][T11081]  ? clear_bhb_loop+0x30/0x80
[  590.038918][T11081]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  590.044943][T11081] RIP: 0033:0x7fd410d99eb9
[  590.049388][T11081] Code: Unable to access opcode bytes at RIP 0x7fd410d99e8f.
[  590.056768][T11081] RSP: 002b:00007fd40efd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  590.065195][T11081] RAX: fffffffffffffe00 RBX: 00007fd411015090 RCX: 00007fd410d99eb9
[  590.073295][T11081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c
[  590.081276][T11081] RBP: 00007fd410e07c1f R08: 0000000000000000 R09: 0000000000000000
[  590.089268][T11081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  590.097913][T11081] R13: 00007fd411015128 R14: 00007fd411015090 R15: 00007ffc38c5d1f8
[  590.105910][T11081]  </TASK>
[  590.109349][T11081] Kernel Offset: disabled
[  590.113715][T11081] Rebooting in 86400 seconds..