last executing test programs:

2m36.839587527s ago: executing program 4 (id=86):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e"], 0x5c}}, 0x0)

2m35.403671754s ago: executing program 4 (id=91):
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@bh}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x2, 0x7, 0x77}]}]}, {0x0, [0x5f, 0x2e, 0x0, 0x30, 0x5f]}}, 0x0, 0x37, 0x0, 0x1, 0x7}, 0x28)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x42100, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e320d0000000000008001f9090309006faaaaaaaaaa11001089924ba976424b2b900000000000000003d6300624008000000000000000"], 0x35)
listen(r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)='2', 0x1}], 0x1}, 0x24000894)
read$FUSE(0xffffffffffffffff, &(0x7f0000001e00)={0x2020}, 0x2020)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd7)
pwrite64(r4, &(0x7f0000000bc0)="6ce8", 0xfdef, 0x7ff)

2m32.773393664s ago: executing program 4 (id=100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20)

2m31.407166755s ago: executing program 4 (id=103):
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
open(&(0x7f0000000240)='./bus\x00', 0x14927e, 0x9)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)

2m30.355132764s ago: executing program 3 (id=107):
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@bh}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x2, 0x7, 0x77}]}]}, {0x0, [0x5f, 0x2e, 0x0, 0x30, 0x5f]}}, 0x0, 0x37, 0x0, 0x1, 0x7}, 0x28)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x42100, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e320d0000000000008001f9090309006faaaaaaaaaa11001089924ba976424b2b900000000000000003d6300624008000000000000000"], 0x35)
listen(r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd7)
pwrite64(r3, &(0x7f0000000bc0)="6ce8", 0xfdef, 0x7ff)

2m30.030585373s ago: executing program 1 (id=109):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
unshare(0x2a020480)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32)

2m29.634054436s ago: executing program 4 (id=110):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0)

2m28.010091227s ago: executing program 1 (id=112):
syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$eJzs3UtsHHcdB/DvrDdrO6DUaZO2IKRGjYigEYmdpSQIEAEhlEOFInHphYOVOI2VTVo5LnIrRFyeV4499FCEwqEn1ANSEYeKckZCQhy45B6Ju08smtnZ9Tp+xJvEXRs+H2l2/jP/129+npl9ydoA/7cuvZpDqyly6fQrK+X2vbvtzr277Zv9cpLJJI2k2VuluJUUnyQX01vyuXJnPVyx3Twv3//ovVPvftDubTXrpWrf2KnfJlu2XK2XnEgyUa8fw4bxrjz2eMUg7jJhJ/uJg3HrbrI6SvfdX7fAvlX0njc3mUkOJ5mqXwekvjs0Pt3onryR7nIAAABwQD21lrWs5Mi44wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICDpP79/6JeGv3yiRT93/9vVftaVfPWuON9XB+POwAAAAAAAAAAeAJeWMtaVnKkv90tqu/8X6w2jlWPn8mbuZ2FLOVMVjKf5SxnKXNJZqr6d6rH1sr88vLS3HY9u93une5E1fPcoGeGep7bFFqxc+Tdycc+eAAAAAAAAAA4YHb4svxnubT+/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOwHRTLRW1XLsX55Jo1mkqkkrbLdavLnfvkg+3jcAQAAAMCn4Km1rGUlR4r/9La7RfWe/9nqff9U3sytLGcxy+lkIVerzwJ67/obf19td+7dbd8sl83jfuffI4VRjZjeZw9bzzxbtThet19N8v38MKdzIpezlMX8OPNZzkJO5HtVaT5FZqqx/vWtpI5zU7yT5cPFDaFcflisz1eRTOdaFqvYzuTK4GOQRr/N0Gx/bCUbMtTIO2V2im/XHpqdXtavDm39ZrB3P5ipDurQICOzde7LbBy9t13uK73zZHL0mZr1nsbgM6hjO800cs57DtfrMte/Gs75C7uNeK8M57yM6lwag7Pv2Z1znnz5H3+5fL1z68b1a7dP75/TaFvdbvfO9rUPnn3tQSam8tzuM7G6TSY+3Lg5sVWbqREPaI+06mz0Yly/WyaXhu+W3W6y6W75YtX3SBbzg7yeq1nI+cxmLhcym6/nXNobzrDjO+e1utYao11rJ79UF6aT/Lpe7w+tQ8nRobwO3+nKfB/dsGc9S0/vIksj3pGan68L5Rw/H3rGGb8HMzE3lIlnds7Eb8szMrc7t24sXZ9/Y5fznarX5WX7y43Ph797Esfz6Mrr8Onyj1VtbTw7yrpntqybq+qODeoam+qOD+oedqW26tdwm0fq1T23ZV27qns+/6yf9h54lZPX0xm8CgFgv+hu3nX4pcOt6fvTf5t+f/oX09enX5n67uSFyS+0cuivzT9N/KHx+8Y3i5fyfn6aI+MIGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/tfcfuvtG/OdzsLSPiykMVqv8nj2OLCpvZ9ijwqTSUbp1b3T7RbNJxvGh0keuXv/twL7e77YWchnd+jVHDrD13vti7/F4xe+8aM6GQ9p3BztMp+uB9w/Py4G7J2zyzffOHv7rbe/snhz/rWF1xZunbtw/sL59tfmvnr22mJnYbb3OO4ogb2w/uw/7kgAAAAAAAAAAACA3drLf1Qo6v/WGPcxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfbpVdzaDVF5mbPzJbb9+62O+XSL6+3bCZpJCl+khSfJBfTWzIzNFyx3Twv3//ovVPvftBeH6vZb9/Yqd/urCYTq2XhRJKJev1Agy1M7jBeBuNdGR6v8SjhFYMjLBN2sp84GLf/BgAA///RGv9P")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c851, 0x0, 0x1, 0x0, &(0x7f00000001c0))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff)
mknod(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x115d038, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f00000004c0))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

2m27.125374566s ago: executing program 3 (id=113):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0xd1, 0x0, 0x0, @multicast2, @broadcast}}}})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x31)
mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='10 1 1\x00', 0x7)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='1\x00', 0x2)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x14)
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0x7f}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m26.555337807s ago: executing program 4 (id=115):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="140000000400"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='2', 0x1)
write(r0, &(0x7f00000002c0)='2', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffbffffc, 0xffffffff, 0xffffffff, 0xffffffff, 0xff7fffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x2ed5, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x0, 0xffffff00, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0xffe, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x3, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000080)=0xfd8)
ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x2})
write(r3, &(0x7f00000003c0)='dummy_udc.0', 0xb)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20033000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf931", 0x5b)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[], 0x0)

2m23.438599276s ago: executing program 32 (id=115):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="140000000400"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='2', 0x1)
write(r0, &(0x7f00000002c0)='2', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffbffffc, 0xffffffff, 0xffffffff, 0xffffffff, 0xff7fffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x2ed5, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x0, 0xffffff00, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0xffe, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x3, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000080)=0xfd8)
ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x2})
write(r3, &(0x7f00000003c0)='dummy_udc.0', 0xb)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20033000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf931", 0x5b)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[], 0x0)

2m23.405340721s ago: executing program 1 (id=119):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
unshare(0x62040000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r1, 0x0, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x2c500, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r2)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r3, 0x5607, 0x4)
ioctl$VT_ACTIVATE(r3, 0x5606, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000005c0))
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x31, 0x2, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1eb, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x7, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})

2m23.402553602s ago: executing program 3 (id=121):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0xd1, 0x0, 0x0, @multicast2, @broadcast}}}})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x31)
mount(0x0, 0x0, 0x0, 0x1214040, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='10 1 1\x00', 0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='1', 0x1)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m23.020130222s ago: executing program 3 (id=122):
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
open(&(0x7f0000000240)='./bus\x00', 0x14927e, 0x9)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)

2m22.543198561s ago: executing program 3 (id=123):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040f00a116700000102000109022a00010100c0000904000003ff000000032401070581020002000705020200020007058303"], 0x0)
r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[], 0x0)
r2 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)

2m21.14020919s ago: executing program 3 (id=126):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$inet(0x2, 0x3, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
syz_open_dev$radio(0x0, 0x2, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x20000080)
munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x80800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e835"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006405000000907800000000e000000211009078e0000001000000020000000400000000dfb2918e359b232258398530807d624c0b2ba76d202dd0a458daa420eb195b349f"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x6, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRESOCT=r4, @ANYRES32=r5], &(0x7f0000000080)='GPL\x00', 0x7fffffff, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x6}, 0x94)

2m20.147407463s ago: executing program 33 (id=126):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$inet(0x2, 0x3, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
syz_open_dev$radio(0x0, 0x2, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x20000080)
munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x80800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e835"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006405000000907800000000e000000211009078e0000001000000020000000400000000dfb2918e359b232258398530807d624c0b2ba76d202dd0a458daa420eb195b349f"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x6, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRESOCT=r4, @ANYRES32=r5], &(0x7f0000000080)='GPL\x00', 0x7fffffff, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x6}, 0x94)

2m19.055564843s ago: executing program 1 (id=132):
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
open(&(0x7f0000000240)='./bus\x00', 0x14927e, 0x9)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)

2m18.595033091s ago: executing program 1 (id=133):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080)

2m17.292079431s ago: executing program 1 (id=136):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0)
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
shutdown(0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/xfrm_stat\x00')
read$eventfd(r4, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000100)={@private2, @rand_addr=0x64010100, 0x1b, 0x1c}})
r5 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r5, 0x0, 0x0)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x28, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, <r6=>0x0}, &(0x7f0000000040)=0x14)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r6, @empty, @dev={0xac, 0x14, 0x14, 0x37}}, 0xc)

2m16.193519675s ago: executing program 34 (id=136):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0)
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
shutdown(0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/xfrm_stat\x00')
read$eventfd(r4, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000100)={@private2, @rand_addr=0x64010100, 0x1b, 0x1c}})
r5 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r5, 0x0, 0x0)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x28, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, <r6=>0x0}, &(0x7f0000000040)=0x14)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r6, @empty, @dev={0xac, 0x14, 0x14, 0x37}}, 0xc)

17.46373298s ago: executing program 0 (id=414):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1], 0x34}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

17.165259123s ago: executing program 0 (id=417):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe)
r3 = syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000002c0)={0x1000000, 0x1, 0x0, 0x0, 0x0, 0x28fc0, 0x9f8c})

15.933214402s ago: executing program 0 (id=420):
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00')
read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020)

12.871878776s ago: executing program 6 (id=424):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9", 0x4f}], 0x1}, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000280)=[{0x30, 0x9, 0xfd, 0x5ae9}, {0x6, 0x40, 0x82, 0x1ffe}, {0x400, 0x7, 0x7, 0x7}]}, 0x10)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @rand_addr=0x64010100}, 0x10, 0x0}, 0x140060c1)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r5, 0x1)

11.39002251s ago: executing program 6 (id=427):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1], 0x34}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

11.059804549s ago: executing program 5 (id=428):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x101, 0xffffffffffffffff}}, 0x0}}], 0x0, 0x0, 0x0})

10.61372378s ago: executing program 5 (id=430):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe)
r3 = syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000002c0)={0x1000000, 0x1, 0x0, 0x0, 0x0, 0x28fc0, 0x9f8c})

9.70561729s ago: executing program 6 (id=431):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

9.525450068s ago: executing program 7 (id=432):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0x9, @local, 0x10001}, @in6={0xa, 0x4e24, 0x8, @loopback, 0xfffffff9}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x58a}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @multicast2}], 0xa0)
socket(0x2, 0x80805, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
setresuid(0xee01, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
gettid()
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), r0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002280)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)

8.593480898s ago: executing program 5 (id=434):
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x6443, &(0x7f0000000240)={0x0, 0xa241, 0x1000, 0x1, 0x121, 0x0, r0}, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = socket$key(0xf, 0x3, 0x2)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0)

7.322629041s ago: executing program 7 (id=436):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r2=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x840)
write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x2, 0x1, 0x2}}, 0x6)

7.034446562s ago: executing program 2 (id=437):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

7.024836096s ago: executing program 6 (id=438):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0)

6.77606638s ago: executing program 7 (id=439):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x1}}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r5, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e01")
bind$tipc(r4, 0x0, 0x0)
close(r4)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)

6.660350812s ago: executing program 0 (id=440):
openat$ptp0(0xffffffffffffff9c, 0x0, 0x2001, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00')
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
read$FUSE(r0, &(0x7f0000005380)={0x2020}, 0x2020)

6.368785129s ago: executing program 2 (id=441):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1], 0x34}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.16997551s ago: executing program 2 (id=442):
socket$kcm(0x29, 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="3d7bc76bdbbda9b84b4fce8176a4fe0b", 0x10)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
listen(r0, 0x5)
r1 = accept(r0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x8, 0x2, 0xc, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x4, 0x98}})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_xfrm(r3, 0x0, 0x4004000)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
shutdown(r1, 0x1)

5.161706825s ago: executing program 0 (id=443):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r2=>0x0})
ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0)

5.059559601s ago: executing program 5 (id=444):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe)
r3 = syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000002c0)={0x1000000, 0x1, 0x0, 0x0, 0x0, 0x28fc0, 0x9f8c})

5.012823077s ago: executing program 7 (id=445):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@bh}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd7)
pwrite64(r0, &(0x7f0000000bc0)="6ce8", 0xfdef, 0x7ff)

4.843279186s ago: executing program 6 (id=446):
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1,soft,timeo=1'])
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000000040)={[{@bsdgroups}, {}, {@nodioread_nolock}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@inlinecrypt}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@inlinecrypt}, {@sysvgroups}]}, 0x18, 0x568, &(0x7f0000000780)="$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")
r1 = accept(r0, 0x0, 0x0)
recvfrom$inet_nvme(r1, &(0x7f0000000600)=""/4096, 0x1000, 0x102, 0x0, 0x0)

3.955368063s ago: executing program 5 (id=447):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r3, &(0x7f0000000100)=""/9, 0xfffffd87)

3.758295363s ago: executing program 0 (id=448):
semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(0x0, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r0, 0xff, 0x5, 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_set$pid(0x3, 0x0, 0x0)
ioprio_get$pid(0x2, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./dev/mapper/control\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

2.205493317s ago: executing program 2 (id=449):
socket$alg(0x26, 0x5, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

2.204065673s ago: executing program 5 (id=450):
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00')
read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020)

1.988415122s ago: executing program 7 (id=451):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
open(&(0x7f0000000240)='./bus\x00', 0x14927e, 0x9)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(0x0, 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)

1.75567227s ago: executing program 2 (id=452):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, &(0x7f0000002300), 0x4, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x1)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})

1.381561459s ago: executing program 6 (id=453):
socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r1 = open(0x0, 0x4001, 0x48)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000))
fcntl$lock(r1, 0x410, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x103881, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080))
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d61", 0x66}, {&(0x7f0000000240)}, {}], 0x3)

144.275126ms ago: executing program 2 (id=454):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)

0s ago: executing program 7 (id=455):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x1}}, 0x10)
bind$tipc(r4, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x1}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r5, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e01")
bind$tipc(r4, 0x0, 0x0)
close(r4)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)

kernel console output (not intermixed with test programs):

manently added '10.128.1.81' (ED25519) to the list of known hosts.
[   82.563510][ T5608] cgroup: Unknown subsys name 'net'
[   82.678536][ T5608] cgroup: Unknown subsys name 'cpuset'
[   82.682082][ T5608] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.382071][ T5608] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.818529][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.819625][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.820069][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.824941][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.825662][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.825979][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.834728][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.836098][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.836242][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   86.836564][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.838290][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.843562][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.845953][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.847887][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.849578][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.849969][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.851212][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.851494][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.859364][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.867906][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.870412][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.875794][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.888840][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.891340][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.913774][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.944878][ T5625] Bluetooth: hci4: command tx timeout
[   88.944884][ T5626] Bluetooth: hci0: command tx timeout
[   88.945114][ T5623] Bluetooth: hci3: command tx timeout
[   89.024947][ T5623] Bluetooth: hci1: command tx timeout
[   89.024967][ T5625] Bluetooth: hci2: command tx timeout
[   89.208378][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.208482][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.208856][ T5621] bridge_slave_0: entered allmulticast mode
[   89.210736][ T5621] bridge_slave_0: entered promiscuous mode
[   89.309264][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.309389][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.309529][ T5621] bridge_slave_1: entered allmulticast mode
[   89.311583][ T5621] bridge_slave_1: entered promiscuous mode
[   89.375497][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.375607][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.375739][ T5619] bridge_slave_0: entered allmulticast mode
[   89.377836][ T5619] bridge_slave_0: entered promiscuous mode
[   89.430842][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.430952][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.431086][ T5620] bridge_slave_0: entered allmulticast mode
[   89.432813][ T5620] bridge_slave_0: entered promiscuous mode
[   89.436833][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.437253][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.437633][ T5619] bridge_slave_1: entered allmulticast mode
[   89.447431][ T5619] bridge_slave_1: entered promiscuous mode
[   89.513187][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.513284][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.513406][ T5631] bridge_slave_0: entered allmulticast mode
[   89.518460][ T5631] bridge_slave_0: entered promiscuous mode
[   89.532387][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.532669][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.533102][ T5620] bridge_slave_1: entered allmulticast mode
[   89.544565][ T5620] bridge_slave_1: entered promiscuous mode
[   89.592138][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.612354][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.612463][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.612552][ T5631] bridge_slave_1: entered allmulticast mode
[   89.616603][ T5631] bridge_slave_1: entered promiscuous mode
[   89.650386][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.652934][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.688917][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.691356][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.739637][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.779700][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.813381][ T5621] team0: Port device team_slave_0 added
[   89.831612][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.855187][ T5619] team0: Port device team_slave_0 added
[   89.859359][ T5621] team0: Port device team_slave_1 added
[   89.910764][ T5620] team0: Port device team_slave_0 added
[   89.913875][ T5619] team0: Port device team_slave_1 added
[   89.940572][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.940874][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.940972][ T5618] bridge_slave_0: entered allmulticast mode
[   89.942406][ T5618] bridge_slave_0: entered promiscuous mode
[   89.957167][ T5631] team0: Port device team_slave_0 added
[   89.968075][ T5620] team0: Port device team_slave_1 added
[   90.014141][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.014252][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.014686][ T5618] bridge_slave_1: entered allmulticast mode
[   90.016269][ T5618] bridge_slave_1: entered promiscuous mode
[   90.019180][ T5631] team0: Port device team_slave_1 added
[   90.058608][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.058622][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.058641][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.059972][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.059987][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.060014][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.061546][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.061561][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.061596][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.212664][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.212683][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.212712][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.213794][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.213816][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.213835][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.278454][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.326588][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.326623][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.326646][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.359902][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.363663][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.363717][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.363799][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.379024][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.379088][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.379174][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.578502][ T5618] team0: Port device team_slave_0 added
[   90.603680][ T5621] hsr_slave_0: entered promiscuous mode
[   90.607004][ T5621] hsr_slave_1: entered promiscuous mode
[   90.621039][ T5620] hsr_slave_0: entered promiscuous mode
[   90.622202][ T5620] hsr_slave_1: entered promiscuous mode
[   90.622843][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   90.622922][ T5620] Cannot create hsr debugfs directory
[   90.647502][ T5619] hsr_slave_0: entered promiscuous mode
[   90.648580][ T5619] hsr_slave_1: entered promiscuous mode
[   90.649190][ T5619] debugfs: 'hsr0' already exists in 'hsr'
[   90.649242][ T5619] Cannot create hsr debugfs directory
[   90.651883][ T5618] team0: Port device team_slave_1 added
[   90.695055][ T5631] hsr_slave_0: entered promiscuous mode
[   90.696450][ T5631] hsr_slave_1: entered promiscuous mode
[   90.697058][ T5631] debugfs: 'hsr0' already exists in 'hsr'
[   90.697089][ T5631] Cannot create hsr debugfs directory
[   90.825308][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.825326][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.825350][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.918557][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.918576][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.918608][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.026292][ T5623] Bluetooth: hci3: command tx timeout
[   91.026332][ T5623] Bluetooth: hci4: command tx timeout
[   91.026473][ T5625] Bluetooth: hci0: command tx timeout
[   91.105215][ T5626] Bluetooth: hci1: command tx timeout
[   91.105311][ T5625] Bluetooth: hci2: command tx timeout
[   91.214381][ T5618] hsr_slave_0: entered promiscuous mode
[   91.215232][ T5618] hsr_slave_1: entered promiscuous mode
[   91.215777][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[   91.215803][ T5618] Cannot create hsr debugfs directory
[   91.579998][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.598254][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   91.627023][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.643578][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   91.649948][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.660104][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   91.675078][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.678325][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   91.753556][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.766448][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   91.770189][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.782052][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   91.789712][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.808146][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   91.811155][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.829781][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   91.929699][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.941136][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   91.942232][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.959733][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   91.960664][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.965963][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   91.993428][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.005304][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.121669][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.131495][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.158984][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.161338][   T30] cfg80211: failed to load regulatory.db
[   92.176661][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.195825][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.200127][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.220444][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.242971][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.255150][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.330898][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.377921][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   92.381084][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.391942][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.415658][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   92.418734][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.419662][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   92.422927][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.431022][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   92.456036][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.484492][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.484891][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.490093][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   92.535934][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.536015][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.538651][ T1395] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.538783][ T1395] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.616948][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.617069][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.673413][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.750113][ T5631] 8021q: adding VLAN 0 to HW filter on device team0
[   92.780426][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.780503][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.838892][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.839006][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.888308][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.020357][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   93.073652][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.073790][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.104743][ T5626] Bluetooth: hci4: command tx timeout
[   93.104785][ T5626] Bluetooth: hci3: command tx timeout
[   93.104926][ T5625] Bluetooth: hci0: command tx timeout
[   93.161238][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.161404][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.184556][ T5623] Bluetooth: hci1: command tx timeout
[   93.184647][ T5625] Bluetooth: hci2: command tx timeout
[   93.220801][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.280699][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[   93.350411][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.350524][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.388656][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.388768][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.108718][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.302533][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.396745][ T5620] veth0_vlan: entered promiscuous mode
[   94.457812][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.490610][ T5620] veth1_vlan: entered promiscuous mode
[   94.624962][ T5621] veth0_vlan: entered promiscuous mode
[   94.689351][ T5621] veth1_vlan: entered promiscuous mode
[   94.692940][ T5631] veth0_vlan: entered promiscuous mode
[   94.734660][ T5620] veth0_macvtap: entered promiscuous mode
[   94.750224][ T5631] veth1_vlan: entered promiscuous mode
[   94.768658][ T5620] veth1_macvtap: entered promiscuous mode
[   94.809303][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.880587][ T5621] veth0_macvtap: entered promiscuous mode
[   94.911449][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.912194][ T5621] veth1_macvtap: entered promiscuous mode
[   94.939708][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.955073][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.987254][ T5631] veth0_macvtap: entered promiscuous mode
[   95.011893][ T5631] veth1_macvtap: entered promiscuous mode
[   95.023340][   T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.034166][ T1415] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.060513][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.115239][   T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.115314][   T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.118575][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.184364][ T5623] Bluetooth: hci3: command tx timeout
[   95.184401][ T5623] Bluetooth: hci4: command tx timeout
[   95.184460][ T5625] Bluetooth: hci0: command tx timeout
[   95.221859][ T5619] veth0_vlan: entered promiscuous mode
[   95.236527][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.275458][ T5626] Bluetooth: hci1: command tx timeout
[   95.275516][ T5625] Bluetooth: hci2: command tx timeout
[   95.308103][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.360507][ T5619] veth1_vlan: entered promiscuous mode
[   95.383029][ T1395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.383049][ T1395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.476790][ T1415] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.494916][  T446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.494970][  T446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.495013][  T446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.495051][  T446] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.495098][  T446] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.509336][ T1415] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.556979][  T446] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.583731][ T1395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.583755][ T1395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.701223][ T5619] veth0_macvtap: entered promiscuous mode
[   95.734594][ T5620] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.736427][ T1415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.736450][ T1415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.790739][ T5619] veth1_macvtap: entered promiscuous mode
[   95.798699][ T1415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.798761][ T1415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.929443][ T5618] veth0_vlan: entered promiscuous mode
[   95.939899][ T1415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.939920][ T1415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.970284][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.847668][ T1415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.847692][ T1415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.897212][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.899869][ T5618] veth1_vlan: entered promiscuous mode
[   97.005140][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.044120][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.044175][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.044223][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.345037][ T5618] veth0_macvtap: entered promiscuous mode
[   97.365013][ T1395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.365040][ T1395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.400745][ T5618] veth1_macvtap: entered promiscuous mode
[   98.116340][ T5833] evm: overlay not supported
[   98.687957][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.706792][ T1375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.706817][ T1375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.810406][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.948263][ T1415] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.949326][ T1415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.949378][ T1415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.949416][ T1415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.999445][ T5837] loop2: detected capacity change from 0 to 128
[   99.260121][ T5835] loop0: detected capacity change from 0 to 4096
[   99.842719][ T5835] ntfs3(loop0): Failed to load $Extend (-22).
[   99.842757][ T5835] ntfs3(loop0): Failed to initialize $Extend.
[   99.935104][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.935128][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.221941][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.221968][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.326687][   T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  100.492042][   T25] usb 3-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00
[  100.513348][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  100.513394][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  100.561038][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  100.561070][   T25] usb 3-1: Product: syz
[  100.561086][   T25] usb 3-1: Manufacturer: syz
[  100.737263][ T5856] block nbd0: server does not support multiple connections per device.
[  100.739716][ T5856] block nbd0: shutting down sockets
[  100.897850][ T5849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.912076][ T5849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.184865][ T5849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.198928][ T5849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.421970][   T51] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.498071][ T5873] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  102.211925][ T5857] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  102.211955][ T5857] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  102.322498][ T5721] usb 3-1: USB disconnect, device number 2
[  102.447546][ T5857] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  102.447576][ T5857] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  102.730970][ T5879] loop0: detected capacity change from 0 to 512
[  103.473616][ T5857] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  103.473643][ T5857] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  103.527372][ T5857] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  103.527398][ T5857] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  103.603821][ T5888] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  103.638940][ T5857] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  103.638968][ T5857] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  103.663724][ T5890] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  103.712406][ T5879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.712531][ T5879] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.061216][   T31] audit: type=1804 audit(1788549552.040:2): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.16" name="/newroot/3/bus/bus" dev="loop0" ino=18 res=1 errno=0
[  104.730863][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.069359][ T5909] loop1: detected capacity change from 0 to 1024
[  105.070164][ T5909] =======================================================
[  105.070164][ T5909] WARNING: The mand mount option has been deprecated and
[  105.070164][ T5909]          and is ignored by this kernel. Remove the mand
[  105.070164][ T5909]          option from the mount to silence this warning.
[  105.070164][ T5909] =======================================================
[  105.070262][ T5909] EXT4-fs: Ignoring removed bh option
[  105.915833][ T5909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  105.915946][ T5909] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.305952][ T5921] loop0: detected capacity change from 0 to 1024
[  106.346400][ T5921] EXT4-fs: Ignoring removed bh option
[  106.842035][ T5921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  106.883458][ T5921] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.625551][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  107.684539][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  107.809812][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  109.343497][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  109.355924][ T5940] syzkaller0: entered promiscuous mode
[  109.355950][ T5940] syzkaller0: entered allmulticast mode
[  109.498651][ T5949] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  109.516403][ T5949] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  110.228314][    T9] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01
[  110.229410][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.466046][    T9] dln2 5-1:1.0: USB write failed: -110
[  110.466318][    T9] dln2 5-1:1.0: failed to initialize hardware
[  110.470476][    T9] dln2 5-1:1.0: probe with driver dln2 failed with error -110
[  112.774770][ T5737] usb 5-1: USB disconnect, device number 2
[  113.396730][ T5987] overlayfs: conflicting options: nfs_export=on,index=off
[  114.947478][ T5985] Cannot find add_set index 0 as target
[  115.029113][ T5991] random: crng reseeded on system resumption
[  115.151021][ T5993] netlink: 56 bytes leftover after parsing attributes in process `syz.0.37'.
[  117.179431][ T6002] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  117.179700][ T6002] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  117.910768][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'.
[  118.987749][ T5721] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  119.134925][ T5721] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  119.136605][ T5721] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  119.136638][ T5721] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  119.136684][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.373175][ T5721] usb 2-1: GET_CAPABILITIES returned 0
[  119.373227][ T5721] usbtmc 2-1:16.0: can't read capabilities
[  120.020300][ T5721] usb 2-1: USB disconnect, device number 2
[  120.876258][ T6026] loop1: detected capacity change from 0 to 512
[  120.914203][ T6026] EXT4-fs (loop1): Test dummy encryption mode enabled
[  120.914227][ T6026] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  120.914240][ T6026] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  120.962376][ T6026] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.47: bad orphan inode 131083
[  120.962912][ T6026] loop1: lost filesystem error report for type 5 error -117
[  120.964329][    C0] EXT4-fs (loop1): initial error at time 1788549568: ext4_orphan_get:1429
[  120.964376][    C0] EXT4-fs (loop1): last error at time 1788549568: ext4_orphan_get:1429
[  121.017827][ T6026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.442822][ T6031] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  121.980618][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.327016][ T6034] loop2: detected capacity change from 0 to 32768
[  123.347813][ T6034] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.48 (6034)
[  123.476681][ T6034] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  123.476732][ T6034] BTRFS info (device loop2): using blake2b checksum algorithm
[  123.519411][ T6055] overlay: filesystem on ./bus not supported as upperdir
[  125.108453][ T6034] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  125.130034][ T6034] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  125.130374][ T6034] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  125.130642][ T6034] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  125.131026][ T6034] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  125.198416][ T6034] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  125.201510][ T6034] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  125.201951][ T6034] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  125.202429][ T6034] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  125.202947][ T6034] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  125.203350][ T6034] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  125.277557][ T6034] BTRFS error (device loop2): open_ctree failed: -ENOMEM
[  125.647430][ T6082] loop3: detected capacity change from 0 to 128
[  125.776943][ T6082] FAT-fs (loop3): data area starts beyond volume (414 > 128)
[  125.776996][ T6082] FAT-fs (loop3): Can't find a valid FAT filesystem
[  126.422806][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'.
[  126.616660][ T6098] random: crng reseeded on system resumption
[  126.851955][ T6104] netlink: 56 bytes leftover after parsing attributes in process `syz.4.60'.
[  126.880577][ T6098] input: syz1 as /devices/virtual/input/input5
[  129.682309][ T6123] loop0: detected capacity change from 0 to 32768
[  129.704193][ T6123] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.66 (6123)
[  129.771703][ T6123] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  129.771739][ T6123] BTRFS info (device loop0): using sha256 checksum algorithm
[  129.910716][ T5721] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  130.314369][ T5721] usb 2-1: Using ep0 maxpacket: 16
[  130.315605][ T5721] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  130.372971][ T5721] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.373033][ T5721] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  130.733416][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.733449][ T5721] usb 2-1: Product: syz
[  130.733466][ T5721] usb 2-1: Manufacturer: syz
[  130.733483][ T5721] usb 2-1: SerialNumber: syz
[  132.624827][ T5625] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  132.799483][ T5721] usb 2-1: 0:2 : does not exist
[  132.838121][ T5721] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  132.890697][ T6123] BTRFS info (device loop0): rebuilding free space tree
[  133.110114][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  133.110201][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  133.281056][ T6178] random: crng reseeded on system resumption
[  133.303426][ T6123] BTRFS warning (device loop0): discard failed for extent [5332992, 5345279]: errno=-512 unknown
[  133.455053][ T6182] fuse: Bad value for 'fd'
[  133.519235][ T6123] BTRFS info (device loop0): turning on flush-on-commit
[  133.519324][ T6123] BTRFS info (device loop0): turning on sync discard
[  133.519375][ T6123] BTRFS info (device loop0): enabling free space tree
[  133.519560][ T6123] BTRFS info (device loop0): force clearing of disk cache
[  133.836793][ T6183] netlink: 56 bytes leftover after parsing attributes in process `syz.2.75'.
[  134.015274][ T5721] usb 2-1: USB disconnect, device number 3
[  134.571569][ T5621] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  136.740495][ T6215] loop2: detected capacity change from 0 to 512
[  137.166169][   T36] IPVS: starting estimator thread 0...
[  137.201069][ T6223] IPVS: rr: TCP 172.20.20.170:20000 - no destination available
[  137.266553][ T6234] loop1: detected capacity change from 0 to 1024
[  137.267504][ T6234] EXT4-fs: Ignoring removed bh option
[  137.269868][ T6231] IPVS: using max 29 ests per chain, 69600 per kthread
[  137.340661][ T6234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  137.340766][ T6234] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.234423][    C0] IPVS: rr: TCP 172.20.20.170:20000 - no destination available
[  138.488754][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  139.118841][ T6247] loop4: detected capacity change from 0 to 1024
[  139.263143][ T6247] EXT4-fs: Ignoring removed bh option
[  139.545417][ T6253] loop2: detected capacity change from 0 to 512
[  139.771628][ T6247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  139.771759][ T6247] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.817989][ T6253] EXT4-fs (loop2): Test dummy encryption mode enabled
[  139.923582][ T6253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.302661][ T6263] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.91: bg 0: block 112: padding at end of block bitmap is not set
[  140.516883][ T6263] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  140.531627][ T6263] EXT4-fs (loop4): This should not happen!! Data will be lost
[  140.531627][ T6263] 
[  140.531655][ T6263] EXT4-fs (loop4): Total free blocks count 0
[  140.531672][ T6263] EXT4-fs (loop4): Free/Dirty block details
[  140.542921][ T6253] fscrypt: AES-256-XTS using blk-crypto-fallback
[  140.583545][ T6263] EXT4-fs (loop4): free_blocks=0
[  140.583573][ T6263] EXT4-fs (loop4): dirty_blocks=64
[  140.583584][ T6263] EXT4-fs (loop4): Block reservation details
[  140.583593][ T6263] EXT4-fs (loop4): i_reserved_data_blocks=4
[  140.697777][ T6272] netlink: 'syz.0.96': attribute type 39 has an invalid length.
[  140.920689][ T6276] loop3: detected capacity change from 0 to 40427
[  140.942600][ T6276] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288)
[  140.955059][ T6276] F2FS-fs (loop3): invalid crc value
[  140.955637][ T6276] F2FS-fs (loop3): invalid crc value
[  140.955672][ T6276] F2FS-fs (loop3): Failed to get valid F2FS checkpoint
[  140.985814][ T6277] loop1: detected capacity change from 0 to 16
[  141.055265][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  141.135489][ T6277] erofs (device loop1): mounted with root inode @ nid 36.
[  141.157473][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.433853][ T6293] loop3: detected capacity change from 0 to 1024
[  142.452063][ T6293] EXT4-fs: Ignoring removed bh option
[  142.509641][ T6293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  142.509787][ T6293] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.577220][ T6297] loop4: detected capacity change from 0 to 512
[  143.240889][ T6297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.241363][ T6297] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  143.456262][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  143.470896][ T6310] loop2: detected capacity change from 0 to 512
[  143.479191][ T6310] EXT4-fs (loop2): Test dummy encryption mode enabled
[  143.479270][ T6310] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  143.553543][ T6310] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.106: bad orphan inode 131083
[  143.553571][ T6310] loop2: lost filesystem error report for type 5 error -117
[  143.553983][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  143.554006][    C0] EXT4-fs (loop2): initial error at time 1788549591: ext4_orphan_get:1429
[  143.554032][    C0] EXT4-fs (loop2): last error at time 1788549591: ext4_orphan_get:1429
[  143.606628][ T6310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.630339][ T6297] loop4: detected capacity change from 512 to 0
[  143.683796][    C1] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2
[  143.685334][ T6311] EXT4-fs error (device loop4): __ext4_find_entry:1617: inode #2: comm syz.4.103: reading directory lblock 0
[  143.686361][ T6311] Buffer I/O error on dev loop4, logical block 0, lost sync page write
[  143.686424][ T6311] EXT4-fs (loop4): I/O error while writing superblock
[  145.142403][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.182163][ T6333] loop3: detected capacity change from 0 to 1024
[  145.267271][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  145.800962][ T6333] EXT4-fs: Ignoring removed bh option
[  145.879963][ T6333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  145.880069][ T6333] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.163297][ T6340] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.107: bg 0: block 112: padding at end of block bitmap is not set
[  146.194207][ T6340] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  146.194253][ T6340] EXT4-fs (loop3): This should not happen!! Data will be lost
[  146.194253][ T6340] 
[  146.194307][ T6340] EXT4-fs (loop3): Total free blocks count 0
[  146.194362][ T6340] EXT4-fs (loop3): Free/Dirty block details
[  146.194417][ T6340] EXT4-fs (loop3): free_blocks=0
[  146.194473][ T6340] EXT4-fs (loop3): dirty_blocks=64
[  146.195699][ T6340] EXT4-fs (loop3): Block reservation details
[  146.195756][ T6340] EXT4-fs (loop3): i_reserved_data_blocks=4
[  146.420637][ T6342] loop2: detected capacity change from 0 to 16
[  146.648426][ T6342] erofs (device loop2): mounted with root inode @ nid 36.
[  146.662660][ T6341] loop1: detected capacity change from 0 to 1024
[  146.696372][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  146.965596][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.998813][ T6341] hfsplus: request for non-existent node 33423360 in B*Tree
[  146.998838][ T6341] hfsplus: request for non-existent node 33423360 in B*Tree
[  147.016762][ T5618] Buffer I/O error on dev loop4, logical block 0, lost sync page write
[  147.020865][ T5618] EXT4-fs (loop4): I/O error while writing superblock
[  147.042807][ T6304] Buffer I/O error on dev loop4, logical block 12, lost sync page write
[  147.081625][ T6346] hfsplus: request for non-existent node 33423360 in B*Tree
[  147.081645][ T6346] hfsplus: request for non-existent node 33423360 in B*Tree
[  147.123837][ T6341] hfsplus: request for non-existent node 33423360 in B*Tree
[  147.123859][ T6341] hfsplus: request for non-existent node 33423360 in B*Tree
[  147.616956][ T6341] hfsplus: request for non-existent node 33423360 in B*Tree
[  147.616986][ T6341] hfsplus: request for non-existent node 33423360 in B*Tree
[  147.799306][ T6346] hfsplus: request for non-existent node 33423360 in B*Tree
[  147.799343][ T6346] hfsplus: request for non-existent node 33423360 in B*Tree
[  148.432053][ T6354] hfsplus: request for non-existent node 33423360 in B*Tree
[  148.432090][ T6354] hfsplus: request for non-existent node 33423360 in B*Tree
[  148.543267][ T6356] hfsplus: request for non-existent node 33423360 in B*Tree
[  148.543720][ T6356] hfsplus: request for non-existent node 33423360 in B*Tree
[  148.688795][ T6341] hfsplus: request for non-existent node 33423360 in B*Tree
[  148.715782][ T6341] hfsplus: request for non-existent node 33423360 in B*Tree
[  149.195888][ T6341] hfsplus: request for non-existent node 33423360 in B*Tree
[  149.196649][ T6341] hfsplus: request for non-existent node 33423360 in B*Tree
[  149.301962][ T6346] hfsplus: request for non-existent node 33423360 in B*Tree
[  149.302327][ T6346] hfsplus: request for non-existent node 33423360 in B*Tree
[  149.589036][ T6341] hfsplus: request for non-existent node 33423360 in B*Tree
[  149.589072][ T6341] hfsplus: request for non-existent node 33423360 in B*Tree
[  149.805981][ T6359] overlayfs: missing 'lowerdir'
[  149.890251][ T1395] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.189080][ T1395] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.478944][ T1395] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.510522][ T6366] CIFS: Attempting to mount //127.0.0.1/share
[  150.620254][ T6374] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0
[  150.731960][ T1395] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.811015][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  150.824515][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  150.832780][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.842210][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.843293][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  150.898921][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  150.903211][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  150.903839][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.953836][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.961016][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  151.036900][ T6380] loop3: detected capacity change from 0 to 512
[  151.075585][ T6380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.075705][ T6380] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  151.301022][ T6366] CIFS: VFS: cifs_mount failed w/return code = -112
[  151.362255][ T6371] loop2: detected capacity change from 0 to 32768
[  151.392417][ T5619] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  151.413383][ T5619] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  151.472281][ T6371] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  151.472281][ T6371] 
[  151.472343][ T6371] ERROR: (device loop2): remounting filesystem as read-only
[  151.697633][ T6390] loop0: detected capacity change from 0 to 1024
[  151.701957][ T6390] EXT4-fs: Ignoring removed bh option
[  151.757175][ T6390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  151.757293][ T6390] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.011314][ T6396] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.124: bg 0: block 112: padding at end of block bitmap is not set
[  152.042165][ T6396] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  152.042219][ T6396] EXT4-fs (loop0): This should not happen!! Data will be lost
[  152.042219][ T6396] 
[  152.042339][ T6396] EXT4-fs (loop0): Total free blocks count 0
[  152.042406][ T6396] EXT4-fs (loop0): Free/Dirty block details
[  152.042455][ T6396] EXT4-fs (loop0): free_blocks=0
[  152.042490][ T6396] EXT4-fs (loop0): dirty_blocks=64
[  152.042673][ T6396] EXT4-fs (loop0): Block reservation details
[  152.042846][ T6396] EXT4-fs (loop0): i_reserved_data_blocks=4
[  152.254302][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.034062][ T5626] Bluetooth: hci0: command tx timeout
[  153.128502][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  154.022084][ T1395] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.641353][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  154.654480][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  154.657924][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  154.658911][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  154.660206][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  154.807988][ T6425] loop1: detected capacity change from 0 to 512
[  154.814196][   T44] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  154.879353][ T6425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.882389][ T6425] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  154.911808][ T1395] bridge_slave_1: left allmulticast mode
[  154.911856][ T1395] bridge_slave_1: left promiscuous mode
[  154.935157][ T1395] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.981995][   T44] usb 1-1: not running at top speed; connect to a high speed hub
[  154.982023][   T44] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  155.002511][   T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  155.029897][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.029919][   T44] usb 1-1: Product: syz
[  155.029930][   T44] usb 1-1: Manufacturer: syz
[  155.029941][   T44] usb 1-1: SerialNumber: syz
[  155.106109][ T5626] Bluetooth: hci0: command tx timeout
[  155.108486][ T1395] bridge_slave_0: left allmulticast mode
[  155.110416][ T1395] bridge_slave_0: left promiscuous mode
[  155.110736][ T1395] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.176984][   T44] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected
[  155.225661][ T5631] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  155.229100][ T5631] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  155.271759][   T44] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  155.381000][   T44] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  155.434996][   T44] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  155.471206][   T44] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  155.578749][   T44] usb 1-1: USB disconnect, device number 2
[  155.720652][   T44] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  155.749635][   T44] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  155.769999][   T44] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  155.791834][   T44] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  155.797800][   T44] keyspan 1-1:1.0: device disconnected
[  155.965842][ T1395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.968582][ T1395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.969930][ T1395] bond0 (unregistering): Released all slaves
[  156.194607][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  156.352663][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.791214][ T5626] Bluetooth: hci1: command tx timeout
[  157.070304][ T5841] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  157.216766][ T5626] Bluetooth: hci0: command tx timeout
[  157.240493][ T5841] usb 1-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00
[  157.258157][ T5841] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  157.258188][ T5841] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  157.296989][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  157.297021][ T5841] usb 1-1: Product: syz
[  157.297038][ T5841] usb 1-1: Manufacturer: syz
[  157.579772][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.590026][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.754430][ T6461] Zero length message leads to an empty skb
[  159.341894][ T5626] Bluetooth: hci1: command tx timeout
[  159.341937][ T5626] Bluetooth: hci0: command tx timeout
[  159.631157][   T25] usb 1-1: USB disconnect, device number 3
[  159.730136][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  159.746649][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  159.747685][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  159.750050][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  159.751030][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  160.108460][ T1395] hsr_slave_0: left promiscuous mode
[  160.111987][ T1395] hsr_slave_1: left promiscuous mode
[  160.121294][ T1395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.121415][ T1395] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.150945][ T1395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.150972][ T1395] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.208959][ T1395] veth1_macvtap: left promiscuous mode
[  160.209029][ T1395] veth0_macvtap: left promiscuous mode
[  160.209145][ T1395] veth1_vlan: left promiscuous mode
[  160.209240][ T1395] veth0_vlan: left promiscuous mode
[  160.719360][ T1395] team0 (unregistering): Port device team_slave_1 removed
[  160.743221][ T1395] team0 (unregistering): Port device team_slave_0 removed
[  161.083421][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  161.110152][ T6488] ubi0: attaching mtd0
[  161.118160][ T6488] ubi0: scanning is finished
[  161.118231][ T6488] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  161.238735][ T6488] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  161.348478][ T5625] Bluetooth: hci1: command tx timeout
[  161.410459][ T6377] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.410644][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.410772][ T6377] bridge_slave_0: entered allmulticast mode
[  161.412706][ T6377] bridge_slave_0: entered promiscuous mode
[  161.429279][ T6377] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.429758][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.430831][ T6377] bridge_slave_1: entered allmulticast mode
[  161.467215][ T6377] bridge_slave_1: entered promiscuous mode
[  161.617143][ T6377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.649147][ T6377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.740926][ T6377] team0: Port device team_slave_0 added
[  161.752833][ T6377] team0: Port device team_slave_1 added
[  161.824953][ T5625] Bluetooth: hci4: command tx timeout
[  162.011635][ T6506] Cannot find add_set index 0 as target
[  162.121195][ T6507] overlayfs: conflicting options: nfs_export=on,index=off
[  163.073084][ T6377] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.073108][ T6377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  163.073127][ T6377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.126699][ T6377] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.126718][ T6377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  163.126742][ T6377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.426511][ T5625] Bluetooth: hci1: command tx timeout
[  163.761618][ T1395] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.823698][ T6377] hsr_slave_0: entered promiscuous mode
[  163.841291][ T6377] hsr_slave_1: entered promiscuous mode
[  163.849775][ T6377] debugfs: 'hsr0' already exists in 'hsr'
[  163.849800][ T6377] Cannot create hsr debugfs directory
[  163.934280][ T5625] Bluetooth: hci4: command tx timeout
[  164.275161][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3
[  164.787862][ T1395] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.034058][   T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  165.089171][ T1395] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.218819][   T25] usb 1-1: Using ep0 maxpacket: 16
[  165.219576][   T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  165.220752][   T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.220776][   T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  165.222839][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.222889][   T25] usb 1-1: Product: syz
[  165.222906][   T25] usb 1-1: Manufacturer: syz
[  165.222922][   T25] usb 1-1: SerialNumber: syz
[  165.242571][   T25] usb 1-1: 0:2 : does not exist
[  165.342184][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.342340][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.342491][ T6419] bridge_slave_0: entered allmulticast mode
[  165.406215][ T6419] bridge_slave_0: entered promiscuous mode
[  165.432919][ T6419] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.433085][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.433291][ T6419] bridge_slave_1: entered allmulticast mode
[  165.439260][ T6419] bridge_slave_1: entered promiscuous mode
[  165.475667][   T25] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  165.647053][ T1395] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.696773][   T25] usb 1-1: USB disconnect, device number 4
[  165.762994][ T6385] udevd[6385]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.817093][ T6419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.984421][ T5625] Bluetooth: hci4: command tx timeout
[  165.990576][ T6419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.151974][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4
[  166.251804][ T6419] team0: Port device team_slave_0 added
[  166.262374][ T6419] team0: Port device team_slave_1 added
[  166.465716][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.465735][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  166.465759][ T6419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.526948][ T6377] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  166.530872][ T6377] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  166.554256][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.554285][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  166.554312][ T6419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.611166][   T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  166.638353][ T6377] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  166.641099][ T6377] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  166.679952][ T6377] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  166.692288][ T6377] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  166.693171][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.693353][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.693511][ T6470] bridge_slave_0: entered allmulticast mode
[  166.724462][ T6470] bridge_slave_0: entered promiscuous mode
[  166.757361][   T25] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01
[  166.758770][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.771377][ T6377] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  166.806227][ T6377] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  166.823282][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.823423][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.823687][ T6470] bridge_slave_1: entered allmulticast mode
[  166.836102][ T6470] bridge_slave_1: entered promiscuous mode
[  166.938604][ T6419] hsr_slave_0: entered promiscuous mode
[  166.939639][ T6419] hsr_slave_1: entered promiscuous mode
[  166.940475][ T6419] debugfs: 'hsr0' already exists in 'hsr'
[  166.940533][ T6419] Cannot create hsr debugfs directory
[  167.015406][   T25] dln2 3-1:1.0: USB write failed: -110
[  167.015469][   T25] dln2 3-1:1.0: failed to initialize hardware
[  167.021185][    C1] dln2 3-1:1.0: short response: 6
[  167.043279][   T25] dln2 3-1:1.0: probe with driver dln2 failed with error -110
[  167.060843][ T1395] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.140256][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.142140][ T6573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.183722][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.223580][   T44] usb 3-1: USB disconnect, device number 3
[  167.265130][ T6470] team0: Port device team_slave_0 added
[  167.292635][ T1395] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.319784][ T6470] team0: Port device team_slave_1 added
[  167.366927][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.366946][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  167.366983][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.426908][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.426928][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  167.426955][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.460834][ T1395] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.649860][ T1395] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.684631][ T6470] hsr_slave_0: entered promiscuous mode
[  167.687382][ T6470] hsr_slave_1: entered promiscuous mode
[  167.689848][ T6470] debugfs: 'hsr0' already exists in 'hsr'
[  167.689871][ T6470] Cannot create hsr debugfs directory
[  168.075325][ T5625] Bluetooth: hci4: command tx timeout
[  169.970049][ T6419] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  169.990312][ T6419] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  170.002096][ T6419] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  170.039181][ T6419] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  170.118743][ T6419] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  171.062694][ T6419] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  171.305064][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5
[  171.313841][ T6419] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  171.380771][ T6419] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  171.503586][ T1395] bridge_slave_1: left allmulticast mode
[  171.503619][ T1395] bridge_slave_1: left promiscuous mode
[  171.503954][ T1395] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.526385][ T1395] bridge_slave_0: left allmulticast mode
[  171.526415][ T1395] bridge_slave_0: left promiscuous mode
[  171.528681][ T1395] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.631663][ T1395] bridge_slave_1: left allmulticast mode
[  171.631692][ T1395] bridge_slave_1: left promiscuous mode
[  171.632007][ T1395] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.670964][ T1395] bridge_slave_0: left allmulticast mode
[  171.670994][ T1395] bridge_slave_0: left promiscuous mode
[  171.671203][ T1395] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.963217][ T1395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.979952][ T1395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.981274][ T1395] bond0 (unregistering): Released all slaves
[  172.089923][ T6619] Bluetooth: MGMT ver 1.23
[  172.592775][   T44] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[  172.693329][ T1395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.711952][ T1395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.723539][ T1395] bond0 (unregistering): Released all slaves
[  172.757653][   T44] usb 3-1: unable to get BOS descriptor or descriptor too short
[  172.757710][   T44] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29
[  172.758860][   T44] usb 3-1: config 8 has an invalid interface number: 109 but max is 0
[  172.758888][   T44] usb 3-1: config 8 has no interface number 0
[  172.758930][   T44] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8
[  172.758971][   T44] usb 3-1: config 8 interface 109 altsetting 0 has an invalid endpoint descriptor of length 6, skipping
[  172.758997][   T44] usb 3-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  172.762636][   T44] usb 3-1: string descriptor 0 read error: -22
[  172.762780][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.771288][ T6597] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  172.784105][   T44] metro_usb 3-1:8.109: required endpoints missing
[  173.060829][ T6377] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.154295][ T5737] usb 3-1: USB disconnect, device number 4
[  173.315565][ T6377] 8021q: adding VLAN 0 to HW filter on device team0
[  173.486595][ T6470] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  173.499387][ T6632] loop2: detected capacity change from 0 to 1024
[  173.500493][ T6632] EXT4-fs: Ignoring removed bh option
[  173.538970][ T6470] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  173.540316][ T6470] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  173.573633][ T6632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  173.573749][ T6632] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.617151][ T6470] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  174.365494][  T131] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.365610][  T131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.370038][ T6470] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  174.374373][ T6470] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  174.375363][ T6470] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  174.430164][ T6470] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  174.451326][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.451438][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.609609][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  175.045997][ T1395] hsr_slave_0: left promiscuous mode
[  175.046826][ T1395] hsr_slave_1: left promiscuous mode
[  175.047794][ T1395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.047816][ T1395] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.048708][ T1395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.048727][ T1395] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.069156][ T1395] hsr_slave_0: left promiscuous mode
[  175.078387][ T1395] hsr_slave_1: left promiscuous mode
[  175.083119][ T1395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.083179][ T1395] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.130209][ T1395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.130235][ T1395] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.149686][ T5814] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  175.183589][ T1395] veth1_macvtap: left promiscuous mode
[  175.183632][ T1395] veth0_macvtap: left promiscuous mode
[  175.183761][ T1395] veth1_vlan: left promiscuous mode
[  175.185073][ T1395] veth0_vlan: left promiscuous mode
[  175.221971][ T1395] veth1_macvtap: left promiscuous mode
[  175.222012][ T1395] veth0_macvtap: left promiscuous mode
[  175.222239][ T1395] veth1_vlan: left promiscuous mode
[  175.222339][ T1395] veth0_vlan: left promiscuous mode
[  175.295096][ T5814] usb 3-1: Using ep0 maxpacket: 16
[  175.297749][ T5814] usb 3-1: unable to get BOS descriptor or descriptor too short
[  175.297805][ T5814] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40
[  175.298921][ T5814] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7
[  175.303444][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.303473][ T5814] usb 3-1: Product: syz
[  175.303490][ T5814] usb 3-1: Manufacturer: syz
[  175.303506][ T5814] usb 3-1: SerialNumber: syz
[  175.592404][ T5814] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  175.813008][ T5814] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  175.874440][ T5814] usb 3-1: invalid MIDI EP
[  175.874466][ T5814] usb 3-1: snd-bcd2000: error during probing
[  175.935848][ T5814] snd-bcd2000 3-1:1.0: probe with driver snd-bcd2000 failed with error -22
[  175.963291][ T5814] usb 3-1: invalid MIDI EP
[  175.963317][ T5814] usb 3-1: snd-bcd2000: error during probing
[  175.993650][ T5814] snd-bcd2000 3-1:1.1: probe with driver snd-bcd2000 failed with error -22
[  176.023050][ T5814] usb 3-1: invalid MIDI EP
[  176.023075][ T5814] usb 3-1: snd-bcd2000: error during probing
[  176.023684][ T5814] snd-bcd2000 3-1:1.2: probe with driver snd-bcd2000 failed with error -22
[  176.049265][ T5814] usb 3-1: USB disconnect, device number 5
[  176.157721][ T6385] udevd[6385]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.461738][ T1395] team0 (unregistering): Port device team_slave_1 removed
[  176.522158][ T6670] loop0: detected capacity change from 0 to 16
[  176.552543][ T1395] team0 (unregistering): Port device team_slave_0 removed
[  176.562841][ T6670] erofs (device loop0): mounted with root inode @ nid 36.
[  177.676041][ T6678] loop0: detected capacity change from 0 to 1024
[  177.685769][ T6678] EXT4-fs: Ignoring removed bh option
[  177.690357][ T1395] team0 (unregistering): Port device team_slave_1 removed
[  177.716703][ T1395] team0 (unregistering): Port device team_slave_0 removed
[  177.723853][ T6678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  177.737852][ T6678] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.961221][ T6684] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.170: bg 0: block 112: padding at end of block bitmap is not set
[  177.987081][ T6684] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  177.987252][ T6684] EXT4-fs (loop0): This should not happen!! Data will be lost
[  177.987252][ T6684] 
[  177.987563][ T6684] EXT4-fs (loop0): Total free blocks count 0
[  177.987623][ T6684] EXT4-fs (loop0): Free/Dirty block details
[  177.987818][ T6684] EXT4-fs (loop0): free_blocks=0
[  177.987891][ T6684] EXT4-fs (loop0): dirty_blocks=64
[  177.990633][ T6684] EXT4-fs (loop0): Block reservation details
[  177.990656][ T6684] EXT4-fs (loop0): i_reserved_data_blocks=4
[  178.147894][   T44] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[  178.342648][   T44] usb 3-1: unable to get BOS descriptor or descriptor too short
[  178.343414][   T44] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29
[  178.376869][   T44] usb 3-1: config 8 has an invalid interface number: 109 but max is 0
[  178.377174][   T44] usb 3-1: config 8 has no interface number 0
[  178.378052][   T44] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8
[  178.378292][   T44] usb 3-1: config 8 interface 109 altsetting 0 has an invalid endpoint descriptor of length 6, skipping
[  178.378597][   T44] usb 3-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  178.518880][   T44] usb 3-1: string descriptor 0 read error: -22
[  178.519589][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.659970][ T6674] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  178.676803][   T44] metro_usb 3-1:8.109: required endpoints missing
[  178.772574][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  178.920237][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6
[  178.952653][   T10] usb 3-1: USB disconnect, device number 6
[  178.968626][ T6419] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.151855][ T6419] 8021q: adding VLAN 0 to HW filter on device team0
[  179.245366][ T1415] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.245492][ T1415] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.277556][ T1371] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.277649][ T1371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.457206][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.593185][ T6470] 8021q: adding VLAN 0 to HW filter on device team0
[  179.671380][ T1415] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.671491][ T1415] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.716772][ T6419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  179.836306][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.836416][ T1415] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.764476][ T6377] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.898536][ T6738] loop0: detected capacity change from 0 to 1024
[  180.903693][ T6738] EXT4-fs: Ignoring removed bh option
[  180.995427][ T6738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  180.995535][ T6738] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.094219][ T5814] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  181.332579][ T5814] usb 3-1: Using ep0 maxpacket: 16
[  181.335959][ T5814] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  181.441304][ T5814] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.441347][ T5814] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  181.578245][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.578293][ T5814] usb 3-1: Product: syz
[  181.578354][ T5814] usb 3-1: Manufacturer: syz
[  181.578468][ T5814] usb 3-1: SerialNumber: syz
[  182.300923][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  182.369113][ T5814] usb 3-1: 0:2 : does not exist
[  182.406677][ T5814] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  182.572661][ T5814] usb 3-1: USB disconnect, device number 7
[  182.679602][ T6385] udevd[6385]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  182.754432][ T6419] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.907878][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.967663][ T6377] veth0_vlan: entered promiscuous mode
[  182.972958][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7
[  183.023781][ T6377] veth1_vlan: entered promiscuous mode
[  183.217915][ T6377] veth0_macvtap: entered promiscuous mode
[  183.248244][ T6377] veth1_macvtap: entered promiscuous mode
[  183.368438][ T6377] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.417294][ T6377] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.494479][ T1415] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.517612][  T131] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.518914][  T131] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.518956][  T131] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.927347][  T131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.927377][  T131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.100605][ T5282] 8021q: adding VLAN 0 to HW filter on device eth8
[  184.102736][  T446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.102759][  T446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.222522][ T6804] IPv6: NLM_F_CREATE should be specified when creating new route
[  184.864627][ T6470] veth0_vlan: entered promiscuous mode
[  184.873223][ T6470] veth1_vlan: entered promiscuous mode
[  184.902151][ T6470] veth0_macvtap: entered promiscuous mode
[  184.906750][ T6470] veth1_macvtap: entered promiscuous mode
[  185.093191][ T6419] veth0_vlan: entered promiscuous mode
[  185.108291][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.153069][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.212708][ T6419] veth1_vlan: entered promiscuous mode
[  185.295722][ T5737] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  185.398850][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.403838][ T1395] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.466776][ T5737] usb 1-1: unable to get BOS descriptor or descriptor too short
[  185.466848][ T5737] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29
[  185.468840][ T5737] usb 1-1: config 8 has an invalid interface number: 109 but max is 0
[  185.468869][ T5737] usb 1-1: config 8 has no interface number 0
[  185.468914][ T5737] usb 1-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8
[  185.468944][ T5737] usb 1-1: config 8 interface 109 altsetting 0 has an invalid endpoint descriptor of length 6, skipping
[  185.468970][ T5737] usb 1-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  185.503288][ T5737] usb 1-1: string descriptor 0 read error: -22
[  185.503746][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.593794][ T6778] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  185.614121][   T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  185.637210][ T5737] metro_usb 1-1:8.109: required endpoints missing
[  185.763743][ T6419] veth0_macvtap: entered promiscuous mode
[  185.775241][ T1371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.775265][ T1371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.775513][ T1371] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.784069][   T25] usb 6-1: Using ep0 maxpacket: 16
[  185.786961][   T25] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  185.790618][   T25] usb 6-1: config 8 has an invalid interface number: 223 but max is 0
[  185.790694][   T25] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  185.790747][   T25] usb 6-1: config 8 has no interface number 0
[  185.790869][   T25] usb 6-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32
[  185.790938][   T25] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  185.796366][ T1415] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.909042][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.909075][   T25] usb 6-1: Product: syz
[  185.909093][   T25] usb 6-1: Manufacturer: syz
[  185.909111][   T25] usb 6-1: SerialNumber: syz
[  185.943802][ T6816] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  185.952141][ T5759] usb 1-1: USB disconnect, device number 5
[  186.018608][ T6419] veth1_macvtap: entered promiscuous mode
[  186.057764][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.057818][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.216769][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.284379][   T25] usb 6-1: USB disconnect, device number 2
[  186.291812][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.380291][ T1395] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.380370][ T1395] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.380409][ T1395] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.380447][ T1395] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.477560][ T6832] loop2: detected capacity change from 0 to 1024
[  186.479474][ T6832] EXT4-fs: Ignoring removed bh option
[  186.566169][ T6832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  186.566319][ T6832] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.114122][ T6837] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  187.420068][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9
[  187.552470][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  187.576955][   T31] audit: type=1326 audit(1788549635.550:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.7.189" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bb319e159 code=0x0
[  187.832206][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.832230][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.942115][ T6854] loop0: detected capacity change from 0 to 512
[  188.050686][ T1415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.050709][ T1415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.180266][ T6854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.180387][ T6854] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  189.026242][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.967876][ T6881] loop0: detected capacity change from 0 to 1024
[  189.975210][ T6881] EXT4-fs: Ignoring removed bh option
[  190.082453][ T6881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  190.082594][ T6881] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.390805][ T6884] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  190.879117][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  191.034179][ T5721] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  191.205527][ T5721] usb 7-1: Using ep0 maxpacket: 16
[  191.206519][ T5721] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  191.208912][ T5721] usb 7-1: config 8 has an invalid interface number: 223 but max is 0
[  191.208940][ T5721] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  191.208960][ T5721] usb 7-1: config 8 has no interface number 0
[  191.209002][ T5721] usb 7-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32
[  191.209029][ T5721] usb 7-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  191.284415][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.284446][ T5721] usb 7-1: Product: syz
[  191.284463][ T5721] usb 7-1: Manufacturer: syz
[  191.284479][ T5721] usb 7-1: SerialNumber: syz
[  191.327729][ T6895] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  191.715153][ T5721] usb 7-1: USB disconnect, device number 2
[  192.401382][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10
[  194.025368][    T9] usb 8-1: new low-speed USB device number 2 using dummy_hcd
[  194.547359][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  194.547413][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  195.415984][ T6951] loop7: detected capacity change from 0 to 1024
[  195.474656][ T6951] EXT4-fs: Ignoring removed bh option
[  195.617434][ T6951] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  195.617546][ T6951] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.665060][ T5721] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  195.743046][ T6961] loop2: detected capacity change from 0 to 1024
[  195.743801][ T6961] EXT4-fs: Ignoring removed bh option
[  195.824518][ T6958] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  195.854277][ T5721] usb 6-1: Using ep0 maxpacket: 32
[  195.859437][ T5721] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  195.865082][ T5721] usb 6-1: config 0 has no interfaces?
[  196.071419][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.071519][ T5721] usb 6-1: Product: syz
[  196.071576][ T5721] usb 6-1: Manufacturer: syz
[  196.071632][ T5721] usb 6-1: SerialNumber: syz
[  196.328632][ T5721] usb 6-1: config 0 descriptor??
[  196.426805][ T6961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  196.453284][ T6961] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.780802][ T6972] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.216: bg 0: block 112: padding at end of block bitmap is not set
[  196.926534][ T6972] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  196.926588][ T6972] EXT4-fs (loop2): This should not happen!! Data will be lost
[  196.926588][ T6972] 
[  196.926649][ T6972] EXT4-fs (loop2): Total free blocks count 0
[  196.926740][ T6972] EXT4-fs (loop2): Free/Dirty block details
[  196.926804][ T6972] EXT4-fs (loop2): free_blocks=0
[  196.926866][ T6972] EXT4-fs (loop2): dirty_blocks=64
[  196.926912][ T6972] EXT4-fs (loop2): Block reservation details
[  196.926976][ T6972] EXT4-fs (loop2): i_reserved_data_blocks=4
[  197.162898][    T9] usb 6-1: USB disconnect, device number 3
[  197.181887][ T6470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  197.353345][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  197.587570][ T6978] syzkaller1: entered promiscuous mode
[  197.587598][ T6978] syzkaller1: entered allmulticast mode
[  198.124449][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  198.453970][    T9] usb 6-1: Using ep0 maxpacket: 16
[  198.456731][    T9] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  198.457743][    T9] usb 6-1: config 8 has an invalid interface number: 223 but max is 0
[  198.457769][    T9] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  198.457789][    T9] usb 6-1: config 8 has no interface number 0
[  198.457832][    T9] usb 6-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32
[  198.457858][    T9] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  198.461065][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.461090][    T9] usb 6-1: Product: syz
[  198.461106][    T9] usb 6-1: Manufacturer: syz
[  198.461121][    T9] usb 6-1: SerialNumber: syz
[  199.155611][ T6992] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  199.329204][ T7016] loop0: detected capacity change from 0 to 1024
[  199.330238][ T7016] EXT4-fs: Ignoring removed bh option
[  199.382795][ T7016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  199.382927][ T7016] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.465598][    T9] usb 6-1: USB disconnect, device number 4
[  199.584335][ T7019] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  200.592362][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  200.935807][ T5814] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  200.940155][ T7046] macsec1: entered promiscuous mode
[  200.940213][ T7046] hsr0: entered promiscuous mode
[  201.096574][ T5814] usb 8-1: Using ep0 maxpacket: 32
[  201.097360][ T5814] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  201.099008][ T5814] usb 8-1: config 0 has no interfaces?
[  201.103061][ T5814] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.103092][ T5814] usb 8-1: Product: syz
[  201.103111][ T5814] usb 8-1: Manufacturer: syz
[  201.103129][ T5814] usb 8-1: SerialNumber: syz
[  201.152502][ T5814] usb 8-1: config 0 descriptor??
[  202.110349][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11
[  202.134245][ T5759] usb 8-1: USB disconnect, device number 3
[  203.015801][ T7089] loop7: detected capacity change from 0 to 1024
[  203.038153][ T7089] EXT4-fs: Ignoring removed bh option
[  203.082698][ T7089] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  203.100293][ T7089] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.945412][ T7094] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  204.207843][ T7102] bridge1: entered promiscuous mode
[  204.209846][ T6470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  204.271729][ T7102] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  204.420460][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.7.251'.
[  204.420489][ T7115] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  204.420489][ T7115] Please contact the netfilter-devel mailing list or update your nftables rules.
[  205.317929][ T7118] loop6: detected capacity change from 0 to 1024
[  205.319010][ T7118] EXT4-fs: Ignoring removed bh option
[  205.406387][ T7118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  205.406506][ T7118] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.704016][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  205.764110][ T7133] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.250: bg 0: block 112: padding at end of block bitmap is not set
[  205.933963][    T9] usb 6-1: Using ep0 maxpacket: 32
[  205.936117][    T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  205.962611][    T9] usb 6-1: config 0 has no interfaces?
[  205.976469][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.976502][    T9] usb 6-1: Product: syz
[  205.976518][    T9] usb 6-1: Manufacturer: syz
[  205.976534][    T9] usb 6-1: SerialNumber: syz
[  206.008826][    T9] usb 6-1: config 0 descriptor??
[  206.091960][ T7133] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  206.091996][ T7133] EXT4-fs (loop6): This should not happen!! Data will be lost
[  206.091996][ T7133] 
[  206.092060][ T7133] EXT4-fs (loop6): Total free blocks count 0
[  206.092076][ T7133] EXT4-fs (loop6): Free/Dirty block details
[  206.092091][ T7133] EXT4-fs (loop6): free_blocks=0
[  206.092107][ T7133] EXT4-fs (loop6): dirty_blocks=64
[  206.092123][ T7133] EXT4-fs (loop6): Block reservation details
[  206.092136][ T7133] EXT4-fs (loop6): i_reserved_data_blocks=4
[  206.232702][ T5759] usb 6-1: USB disconnect, device number 5
[  206.314869][ T6419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  206.438093][ T7146] loop6: detected capacity change from 0 to 1024
[  206.439839][ T7146] EXT4-fs: Ignoring removed bh option
[  206.497184][ T7146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  206.497298][ T7146] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.555106][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12
[  207.616797][ T6419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  207.841564][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.894837][   T44] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  209.000665][ T7175] bridge_slave_0: left allmulticast mode
[  209.000696][ T7175] bridge_slave_0: left promiscuous mode
[  209.055135][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.074080][   T44] usb 8-1: Using ep0 maxpacket: 16
[  209.074793][   T44] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  209.075826][   T44] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.075850][   T44] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  209.080492][   T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.080521][   T44] usb 8-1: Product: syz
[  209.080537][   T44] usb 8-1: Manufacturer: syz
[  209.080552][   T44] usb 8-1: SerialNumber: syz
[  209.190718][ T7175] bridge_slave_1: left allmulticast mode
[  209.190748][ T7175] bridge_slave_1: left promiscuous mode
[  209.191269][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.192848][   T44] usb 8-1: 0:2 : does not exist
[  209.273303][ T7175] bond0: (slave bond_slave_0): Releasing backup interface
[  209.329133][ T7175] bond0: (slave bond_slave_1): Releasing backup interface
[  209.366542][   T44] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  209.456961][   T44] usb 8-1: USB disconnect, device number 4
[  209.497213][ T7175] team0: Port device team_slave_0 removed
[  209.537549][ T7175] team0: Port device team_slave_1 removed
[  209.550826][ T7175] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.550854][ T7175] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.573982][ T6385] udevd[6385]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  209.610303][ T7175] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.610330][ T7175] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.650646][ T7175] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  210.377962][ T7203] loop7: detected capacity change from 0 to 1024
[  210.381356][ T7203] EXT4-fs: Ignoring removed bh option
[  210.424434][ T7203] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  210.424591][ T7203] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.464880][ T7174] loop5: detected capacity change from 0 to 32768
[  210.659630][ T5737] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  210.683092][ T7206] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.269: bg 0: block 112: padding at end of block bitmap is not set
[  210.770196][ T7206] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  210.770234][ T7206] EXT4-fs (loop7): This should not happen!! Data will be lost
[  210.770234][ T7206] 
[  210.770251][ T7206] EXT4-fs (loop7): Total free blocks count 0
[  210.770266][ T7206] EXT4-fs (loop7): Free/Dirty block details
[  210.770307][ T7206] EXT4-fs (loop7): free_blocks=0
[  210.770323][ T7206] EXT4-fs (loop7): dirty_blocks=64
[  210.770337][ T7206] EXT4-fs (loop7): Block reservation details
[  210.770351][ T7206] EXT4-fs (loop7): i_reserved_data_blocks=4
[  210.974186][ T5737] usb 7-1: unable to get BOS descriptor or descriptor too short
[  210.974369][ T5737] usb 7-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba
[  211.053223][ T5737] usb 7-1: config 8 has an invalid interface number: 129 but max is 1
[  211.053313][ T5737] usb 7-1: config 8 has an invalid interface number: 158 but max is 1
[  211.053336][ T5737] usb 7-1: config 8 has no interface number 0
[  211.053411][ T5737] usb 7-1: config 8 has no interface number 1
[  211.053526][ T5737] usb 7-1: config 8 interface 158 has no altsetting 0
[  211.225896][ T5737] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.225964][ T5737] usb 7-1: Product: syz
[  211.226051][ T5737] usb 7-1: Manufacturer: syz
[  211.226069][ T5737] usb 7-1: SerialNumber: syz
[  211.699703][ T5737] cxacru 7-1:8.129: cxacru_bind: interface has incorrect endpoints
[  211.699872][ T5737] cxacru 7-1:8.129: usbatm_usb_probe: bind failed: -19!
[  211.741909][ T5737] cxacru 7-1:8.158: cxacru_bind: interface has incorrect endpoints
[  211.742081][ T5737] cxacru 7-1:8.158: usbatm_usb_probe: bind failed: -19!
[  211.789027][ T5737] usb 7-1: USB disconnect, device number 3
[  211.868666][ T6470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  212.016501][ T7174] JBD2: Ignoring recovery information on journal
[  212.051062][ T7218] loop2: detected capacity change from 0 to 1024
[  212.059891][ T7218] EXT4-fs: Ignoring removed bh option
[  212.119223][ T7218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  212.119363][ T7218] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.396315][ T7174] JBD2: journal reset failed
[  212.396368][ T7174] (syz.5.266,7174,0):ocfs2_journal_load:1165 ERROR: Failed to load journal!
[  212.396458][ T7174] (syz.5.266,7174,0):ocfs2_check_volume:2394 ERROR: ocfs2 journal load failed! -4
[  213.190608][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  213.435942][ T7234] overlayfs: failed to resolve './file0': -2
[  213.573248][ T7235] loop5: detected capacity change from 0 to 1024
[  213.579804][ T7235] EXT4-fs: Ignoring removed bh option
[  213.777279][ T7235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  213.777396][ T7235] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.100660][ T6377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  215.132959][ T7249] syz.7.278 uses obsolete (PF_INET,SOCK_PACKET)
[  215.493169][ T7271] netlink: 'syz.6.284': attribute type 16 has an invalid length.
[  215.493192][ T7271] netlink: 'syz.6.284': attribute type 17 has an invalid length.
[  215.907514][ T7284] overlayfs: failed to resolve './file0': -2
[  217.154145][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  218.064596][ T5759] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  218.105598][ T7299] loop6: detected capacity change from 0 to 1024
[  218.106854][ T7299] EXT4-fs: Ignoring removed bh option
[  218.153188][ T7277] loop5: detected capacity change from 0 to 32768
[  218.195031][ T7299] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  218.195171][ T7299] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.235856][ T5759] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  218.244052][ T5759] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  218.244158][ T5759] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.244239][ T5759] usb 1-1: config 0 interface 0 has no altsetting 0
[  218.244346][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.568265][ T5759] usb 1-1: config 0 descriptor??
[  218.996531][ T7277] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR
[  218.996600][ T7277] (syz.5.287,7277,1):ocfs2_initialize_super:2247 ERROR: status = -12
[  218.997132][ T7277] (syz.5.287,7277,1):ocfs2_fill_super:1185 ERROR: status = -12
[  219.027233][ T7293] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  219.124558][ T6419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  219.484900][ T5814] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  219.517682][ T5759] kye 0003:0458:501A.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  219.526176][ T5759] kye 0003:0458:501A.0001: unknown main item tag 0x7
[  219.634862][ T5814] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  219.636758][ T5814] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  219.636787][ T5814] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.636806][ T5814] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  219.636853][ T5814] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.641846][ T5814] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  219.641871][ T5814] usb 6-1: Product: syz
[  219.641887][ T5814] usb 6-1: Manufacturer: syz
[  219.729232][ T5814] cdc_wdm 6-1:1.0: skipping garbage
[  219.729259][ T5814] cdc_wdm 6-1:1.0: skipping garbage
[  219.729613][ T5814] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  219.855363][ T5759] kye 0003:0458:501A.0001: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0
[  219.855401][ T5759] kye 0003:0458:501A.0001: tablet-enabling feature report not found
[  219.855417][ T5759] kye 0003:0458:501A.0001: tablet enabling failed
[  220.070214][ T5759] usb 1-1: USB disconnect, device number 6
[  220.109112][ T5282] 8021q: adding VLAN 0 to HW filter on device eth13
[  220.164602][ T5721] usb 6-1: USB disconnect, device number 6
[  220.206757][ T7325] fido_id[7325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  223.194207][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  223.680547][ T7342] overlayfs: failed to resolve './file0': -2
[  225.402577][ T7345] loop0: detected capacity change from 0 to 32768
[  225.518617][ T7345] JBD2: Ignoring recovery information on journal
[  225.736167][ T7345] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  225.774956][ T1371] (kworker/u8:8,1371,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  225.774991][ T1371] (kworker/u8:8,1371,0):ocfs2_read_locked_inode:633 ERROR: status = -12
[  225.775273][ T1371] (kworker/u8:8,1371,0):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0
[  225.902567][ T7376] netlink: 16 bytes leftover after parsing attributes in process `syz.6.310'.
[  225.902597][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.310'.
[  226.350729][ T5625] Bluetooth: hci4: link tx timeout
[  226.351518][ T5625] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  226.444463][ T5759] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  228.138928][ T5759] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  228.160889][ T5759] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  228.160924][ T5759] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  228.160945][ T5759] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  228.160993][ T5759] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.208208][ T5759] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  228.208238][ T5759] usb 8-1: Product: syz
[  228.208255][ T5759] usb 8-1: Manufacturer: syz
[  228.247579][ T5759] cdc_wdm 8-1:1.0: skipping garbage
[  228.247602][ T5759] cdc_wdm 8-1:1.0: skipping garbage
[  228.247716][ T5759] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[  228.275617][ T7395] loop5: detected capacity change from 0 to 1024
[  228.290414][ T7395] EXT4-fs: Ignoring removed bh option
[  228.338284][ T7395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  228.338408][ T7395] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.384601][ T5625] Bluetooth: hci4: command 0x0406 tx timeout
[  229.504010][ T7400] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  229.603222][ T7386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  229.921938][ T5721] usb 8-1: USB disconnect, device number 5
[  229.979211][ T6377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  230.056443][ T5621] ocfs2: Unmounting device (7,0) on (node local)
[  232.373980][ T5353] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  232.481845][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.323'.
[  233.434144][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  233.844185][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  233.954296][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  234.065894][ T5353] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  234.067135][ T5353] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  234.067169][ T5353] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  234.067196][ T5353] usb 1-1: config 0 interface 0 has no altsetting 0
[  234.067230][ T5353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.073249][ T5353] usb 1-1: config 0 descriptor??
[  234.134379][ T7424] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  234.299571][ T5353] usbhid 1-1:0.0: can't add hid device: -71
[  234.299685][ T5353] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  234.324950][ T5353] usb 1-1: USB disconnect, device number 7
[  234.597956][ T7457] loop0: detected capacity change from 0 to 1024
[  234.612138][ T7457] EXT4-fs: Ignoring removed bh option
[  234.674623][ T7457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  234.674766][ T7457] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.811132][ T5353] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  235.090930][ T5353] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  235.166942][ T5353] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  235.166987][ T5353] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.167044][ T5353] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  235.167245][ T5353] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.282474][ T5353] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  235.282541][ T5353] usb 6-1: Product: syz
[  235.282594][ T5353] usb 6-1: Manufacturer: syz
[  235.583547][ T5353] cdc_wdm 6-1:1.0: skipping garbage
[  235.583565][ T5353] cdc_wdm 6-1:1.0: skipping garbage
[  235.583622][ T5353] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  235.688923][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  235.778902][ T5353] usb 6-1: USB disconnect, device number 7
[  236.130557][ T7451] loop6: detected capacity change from 0 to 32768
[  236.853621][ T7451] JBD2: Ignoring recovery information on journal
[  237.030981][ T7451] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  237.180931][   T36] (kworker/u8:2,36,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  237.180969][   T36] (kworker/u8:2,36,0):ocfs2_read_locked_inode:633 ERROR: status = -12
[  237.181237][   T36] (kworker/u8:2,36,0):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0
[  240.307128][ T6419] ocfs2: Unmounting device (7,6) on (node local)
[  243.790204][ T5353] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  243.977421][ T5353] usb 1-1: unable to get BOS descriptor or descriptor too short
[  243.977476][ T5353] usb 1-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba
[  243.978686][ T5353] usb 1-1: config 8 has an invalid interface number: 129 but max is 1
[  243.978714][ T5353] usb 1-1: config 8 has an invalid interface number: 158 but max is 1
[  243.978736][ T5353] usb 1-1: config 8 has no interface number 0
[  243.978754][ T5353] usb 1-1: config 8 has no interface number 1
[  243.978795][ T5353] usb 1-1: config 8 interface 158 has no altsetting 0
[  243.986740][ T5353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.986816][ T5353] usb 1-1: Product: syz
[  243.986873][ T5353] usb 1-1: Manufacturer: syz
[  243.986916][ T5353] usb 1-1: SerialNumber: syz
[  244.314657][ T5353] cxacru 1-1:8.129: usbatm_usb_probe: bind failed: -19!
[  244.341322][ T5353] cxacru 1-1:8.158: usbatm_usb_probe: bind failed: -19!
[  244.360112][ T5353] usb 1-1: USB disconnect, device number 8
[  244.773955][ T5758] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  244.927556][ T5758] usb 8-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  244.931917][ T5758] usb 8-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  244.931956][ T5758] usb 8-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  244.931984][ T5758] usb 8-1: config 0 interface 0 has no altsetting 0
[  244.932019][ T5758] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.997027][ T5758] usb 8-1: config 0 descriptor??
[  244.997795][ T7547] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  245.101709][ T7553] loop2: detected capacity change from 0 to 1024
[  245.116764][ T7553] EXT4-fs: Ignoring removed bh option
[  245.166146][ T7553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  245.166275][ T7553] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.333896][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  246.663410][ T5758] usbhid 8-1:0.0: can't add hid device: -71
[  246.663991][ T5758] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  247.037530][ T5758] usb 8-1: USB disconnect, device number 6
[  247.088514][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  248.793977][    T0] NOHZ tick-stop error: local softirq work is pending, handler #46!!!
[  251.354145][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  252.055433][ T7611] loop2: detected capacity change from 0 to 1024
[  252.068767][ T7611] EXT4-fs: Ignoring removed bh option
[  252.130405][ T7611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  252.130539][ T7611] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.898638][ T7614] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  253.249300][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  255.874006][ T7568] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[  255.986202][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  255.986267][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  256.255996][ T7568] usb 3-1: unable to get BOS descriptor or descriptor too short
[  256.256051][ T7568] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29
[  256.257312][ T7568] usb 3-1: config 8 has an invalid interface number: 109 but max is 0
[  256.257338][ T7568] usb 3-1: config 8 has no interface number 0
[  256.257394][ T7568] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8
[  256.257424][ T7568] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8
[  256.257453][ T7568] usb 3-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  256.274543][ T7568] usb 3-1: string descriptor 0 read error: -22
[  256.274835][ T7568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.315658][ T7629] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  256.361382][ T7568] metro_usb 3-1:8.109: Metrologic USB to Serial converter detected
[  256.438747][ T7568] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  256.569655][ T7568] usb 3-1: USB disconnect, device number 8
[  256.599799][ T7568] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  256.600470][ T7568] metro_usb 3-1:8.109: device disconnected
[  259.040716][ T7684] syzkaller0: entered promiscuous mode
[  259.040744][ T7684] syzkaller0: entered allmulticast mode
[  259.617800][ T7639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  260.622170][ T7701] loop5: detected capacity change from 0 to 32768
[  260.678707][ T7701] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  260.748864][ T7701] XFS (loop5): Ending clean mount
[  262.038548][ T6377] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  264.978151][ T7747] LUN: removable file: (no medium)
[  264.996554][ T7747] LUN: removable file: (no medium)
[  266.066846][ T7759] loop7: detected capacity change from 0 to 512
[  266.105808][ T7756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  266.168773][ T7759] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.189508][ T7759] ext4 filesystem being mounted at /38/. supports timestamps until 2038-01-19 (0x7fffffff)
[  267.867739][ T6470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.936923][ T5721] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  268.095421][ T5721] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  268.096431][ T5721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  268.096456][ T5721] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  268.096490][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.154021][ T5721] usb-storage 1-1:1.0: USB Mass Storage device detected
[  268.191815][ T5721] scsi host1: usb-storage 1-1:1.0
[  268.285335][ T7810] netlink: 48 bytes leftover after parsing attributes in process `syz.6.392'.
[  269.384968][ T7767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  270.847227][ T5759] usb 1-1: USB disconnect, device number 9
[  271.083295][ T7837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.206737][ T7842] loop7: detected capacity change from 0 to 128
[  271.224053][ T5721] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  271.249980][ T7842] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  271.251832][ T7842] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  271.543949][ T5721] usb 7-1: Using ep0 maxpacket: 16
[  271.544682][ T5721] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  271.545718][ T5721] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  271.545742][ T5721] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  271.547961][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.547985][ T5721] usb 7-1: Product: syz
[  271.548002][ T5721] usb 7-1: Manufacturer: syz
[  271.548017][ T5721] usb 7-1: SerialNumber: syz
[  271.637400][ T5721] usb 7-1: 0:2 : does not exist
[  271.715897][ T7851] xt_hashlimit: size too large, truncated to 1048576
[  271.716060][ T7851] xt_hashlimit: max too large, truncated to 1048576
[  271.716183][ T7851] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  271.866883][   T60] IPVS: starting estimator thread 0...
[  271.956545][ T7852] IPVS: using max 24 ests per chain, 57600 per kthread
[  272.229076][ T5721] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  272.308330][ T5721] usb 7-1: USB disconnect, device number 4
[  272.384394][ T7842] fscrypt (loop7, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4
[  272.498463][ T6385] udevd[6385]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  272.611268][ T6470] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  272.963151][ T7863] loop7: detected capacity change from 0 to 1024
[  273.005616][ T7870] Cannot find add_set index 4 as target
[  273.176835][ T7863] ext2: Unknown parameter 'dont_hash'
[  273.399012][ T7874] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  273.705470][ T5625] Bluetooth: hci0: command 0x0406 tx timeout
[  275.604275][ T7885] mmap: syz.6.408 (7885) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  275.966134][ T7891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.370158][ T7899] loop2: detected capacity change from 0 to 1024
[  276.386828][ T7899] EXT4-fs: Ignoring removed bh option
[  276.422533][ T7899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.506970][ T7898] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  276.775450][ T7890] loop5: detected capacity change from 0 to 32768
[  276.781475][ T7890] BTRFS warning: excessive commit interval 3581, use with care
[  276.826804][ T7890] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.411 (7890)
[  276.829843][ T7911] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.281499][ T7890] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  277.282056][ T7890] BTRFS info (device loop5): using crc32c checksum algorithm
[  277.904684][ T7923] input: syz0 as /devices/virtual/input/input7
[  278.553932][ T5626] Bluetooth: hci1: command 0x0406 tx timeout
[  279.654232][ T7890] BTRFS error (device loop5): open_ctree failed: -EINTR
[  280.189681][ T7957] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  281.079147][ T7962] 9p: Bad value for 'rfdno'
[  282.829281][ T7973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.564107][ T5737] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  286.673737][ T8018] 9p: Bad value for 'rfdno'
[  286.734004][ T5737] usb 6-1: Using ep0 maxpacket: 16
[  286.735373][ T5737] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  286.742172][ T5737] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  286.742205][ T5737] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  286.757885][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.757959][ T5737] usb 6-1: Product: syz
[  286.758003][ T5737] usb 6-1: Manufacturer: syz
[  286.758054][ T5737] usb 6-1: SerialNumber: syz
[  286.869129][ T5737] usb 6-1: 0:2 : does not exist
[  287.097369][ T5737] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  287.319154][ T5737] usb 6-1: USB disconnect, device number 8
[  287.930693][ T8045] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  289.042557][ T6385] udevd[6385]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  289.870735][ T8061] loop7: detected capacity change from 0 to 1024
[  289.897607][ T8061] EXT4-fs: Ignoring removed bh option
[  289.933512][ T8061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  289.933617][ T8061] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.011415][ T8061] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.445: bg 0: block 112: padding at end of block bitmap is not set
[  290.040155][ T8061] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  290.040214][ T8061] EXT4-fs (loop7): This should not happen!! Data will be lost
[  290.040214][ T8061] 
[  290.040235][ T8061] EXT4-fs (loop7): Total free blocks count 0
[  290.040253][ T8061] EXT4-fs (loop7): Free/Dirty block details
[  290.040271][ T8061] EXT4-fs (loop7): free_blocks=0
[  290.040288][ T8061] EXT4-fs (loop7): dirty_blocks=64
[  290.040305][ T8061] EXT4-fs (loop7): Block reservation details
[  290.040320][ T8061] EXT4-fs (loop7): i_reserved_data_blocks=4
[  291.665510][ T8074] loop6: detected capacity change from 0 to 512
[  291.738919][ T8074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  291.738951][ T8074] EXT4-fs (loop6): blocks per group (34) and clusters per group (32768) inconsistent
[  291.809487][ T6470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  291.971930][ T8079] 9p: Bad value for 'rfdno'
[  292.152517][ T8082] loop7: detected capacity change from 0 to 512
[  292.241851][ T8082] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.241931][ T8082] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  293.812526][ T6470] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  293.824852][ T6470] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  294.236312][ T6470] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  294.248288][ T6470] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  294.256781][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  294.266374][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  294.276462][ T6470] RIP: 0010:klist_remove+0x156/0x340
[  294.281783][ T6470] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 5d 65 5a f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 3e 65 5a f6 49 8b 44 24 58 48 89 44 24 08
[  294.301452][ T6470] RSP: 0018:ffffc90004077880 EFLAGS: 00010202
[  294.307532][ T6470] RAX: 000000000000000b RBX: ffff8880285c5dc0 RCX: ffffffff9a9f4501
[  294.315518][ T6470] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058
[  294.323503][ T6470] RBP: ffffc90004077980 R08: ffffffff905fe6a3 R09: 1ffffffff20bfcd4
[  294.331499][ T6470] R10: dffffc0000000000 R11: fffffbfff20bfcd5 R12: 0000000000000000
[  294.339486][ T6470] R13: 1ffff1100d03518c R14: ffff8880681a8c60 R15: dffffc0000000000
[  294.347478][ T6470] FS:  0000000000000000(0000) GS:ffff888124dc0000(0000) knlGS:0000000000000000
[  294.356427][ T6470] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  294.363029][ T6470] CR2: 000020000001e000 CR3: 0000000055aa6000 CR4: 00000000003526f0
[  294.371046][ T6470] Call Trace:
[  294.374371][ T6470]  <TASK>
[  294.377316][ T6470]  ? __pfx_klist_remove+0x10/0x10
[  294.382367][ T6470]  ? kobject_move+0x5e2/0x720
[  294.387066][ T6470]  ? __pfx_kobject_move+0x10/0x10
[  294.392123][ T6470]  ? do_raw_spin_unlock+0xf5/0x200
[  294.397264][ T6470]  ? get_device_parent+0x366/0x3a0
[  294.402418][ T6470]  device_move+0x18e/0x720
[  294.406870][ T6470]  hci_conn_del_sysfs+0xb8/0x1a0
[  294.411829][ T6470]  hci_conn_del+0xc98/0x1290
[  294.416445][ T6470]  hci_conn_hash_flush+0x189/0x260
[  294.421572][ T6470]  hci_dev_close_sync+0x7f1/0xf50
[  294.426636][ T6470]  ? __pfx___mutex_lock+0x10/0x10
[  294.431719][ T6470]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  294.437300][ T6470]  ? up_write+0x19d/0x4a0
[  294.441653][ T6470]  ? rcu_is_watching+0x16/0xb0
[  294.446446][ T6470]  hci_unregister_dev+0x232/0x5b0
[  294.451501][ T6470]  vhci_release+0x16d/0x1c0
[  294.456024][ T6470]  ? __pfx_vhci_release+0x10/0x10
[  294.461065][ T6470]  __fput+0x413/0xa50
[  294.465078][ T6470]  task_work_run+0x1d9/0x260
[  294.469717][ T6470]  ? __pfx_task_work_run+0x10/0x10
[  294.474854][ T6470]  ? do_exit+0x735/0x2360
[  294.479209][ T6470]  ? kmem_cache_free+0x182/0x650
[  294.484173][ T6470]  ? put_net+0x191/0x260
[  294.488454][ T6470]  do_exit+0x73a/0x2360
[  294.492655][ T6470]  ? __pfx_do_exit+0x10/0x10
[  294.497289][ T6470]  ? do_raw_spin_lock+0x12b/0x2f0
[  294.502339][ T6470]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.507670][ T6470]  do_group_exit+0x22d/0x2f0
[  294.512301][ T6470]  __x64_sys_exit_group+0x3f/0x40
[  294.517345][ T6470]  x64_sys_call+0x18c6/0x18d0
[  294.522052][ T6470]  do_syscall_64+0x166/0x520
[  294.526675][ T6470]  ? trace_irq_disable+0x3b/0x140
[  294.531722][ T6470]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.537807][ T6470]  ? clear_bhb_loop+0x70/0xc0
[  294.542526][ T6470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.548433][ T6470] RIP: 0033:0x7f8bb319e159
[  294.552874][ T6470] Code: Unable to access opcode bytes at 0x7f8bb319e12f.
[  294.559922][ T6470] RSP: 002b:00007ffcd8a251e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  294.568359][ T6470] RAX: ffffffffffffffda RBX: 00007f8bb3234499 RCX: 00007f8bb319e159
[  294.576439][ T6470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  294.584424][ T6470] RBP: 0000000000000075 R08: 0000000000000000 R09: 00007f8bb3234474
[  294.592408][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd8a264a0
[  294.600392][ T6470] R13: 00007f8bb3234474 R14: 00000000000475dd R15: 00007ffcd8a27570
[  294.608389][ T6470]  </TASK>
[  294.611418][ T6470] Modules linked in:
[  294.616071][ T6470] ---[ end trace 0000000000000000 ]---
[  294.645443][ T6470] RIP: 0010:klist_remove+0x156/0x340
[  294.794547][ T6470] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 5d 65 5a f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 3e 65 5a f6 49 8b 44 24 58 48 89 44 24 08
[  294.794600][ T6470] RSP: 0018:ffffc90004077880 EFLAGS: 00010202
[  294.794672][ T6470] RAX: 000000000000000b RBX: ffff8880285c5dc0 RCX: ffffffff9a9f4501
[  294.794714][ T6470] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058
[  294.794753][ T6470] RBP: ffffc90004077980 R08: ffffffff905fe6a3 R09: 1ffffffff20bfcd4
[  294.794794][ T6470] R10: dffffc0000000000 R11: fffffbfff20bfcd5 R12: 0000000000000000
[  294.794996][ T6470] R13: 1ffff1100d03518c R14: ffff8880681a8c60 R15: dffffc0000000000
[  294.795178][ T6470] FS:  0000000000000000(0000) GS:ffff888124dc0000(0000) knlGS:0000000000000000
[  294.795362][ T6470] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  294.795577][ T6470] CR2: 000055558b5354e8 CR3: 0000000055aa6000 CR4: 00000000003526f0
[  294.796006][ T6470] Kernel panic - not syncing: Fatal exception
[  294.896923][ T6470] Kernel Offset: disabled
[  294.901263][ T6470] Rebooting in 86400 seconds..