last executing test programs:

12.694594967s ago: executing program 1 (id=739):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804)
close(r1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

11.543605311s ago: executing program 1 (id=742):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)

10.595312689s ago: executing program 0 (id=743):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b02, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)

8.882548529s ago: executing program 3 (id=749):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8.049760003s ago: executing program 0 (id=750):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)={[{@creator={'creator', 0x3d, "91b6afda"}}, {@nls={'nls', 0x3d, 'cp866'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$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")
socket$inet(0x2, 0x2, 0x1)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f00000000c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c756d61736b3d30303030303030303030303030303230303030303030372c636f6465706167653d3836302c73686f72746e616d653d6c6f77656b2c726f6469722c73686f72746e616d653d77696e6e742c6e66733d7374616c655f72772c696f638b61727365743d6b6f69382d722c666c7573682c6e6f6e756d7461696c3d302c00"], 0x81, 0x2ae, &(0x7f0000001980)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'sh\x00', 0x1, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0xc001, 0x1}}, 0x44)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180))

7.314531965s ago: executing program 3 (id=752):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$uhid(0xffffff9c, 0x0, 0x802, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000090)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(0xffffffffffffffff, 0x2)

5.79082484s ago: executing program 0 (id=754):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

5.636552054s ago: executing program 2 (id=755):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
fcntl$lock(r4, 0x5, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0xfffffffffffffffa})
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r5 = socket(0x18, 0x0, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'})
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x4000)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

4.866047907s ago: executing program 3 (id=756):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
close(0xffffffffffffffff)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

4.599080585s ago: executing program 0 (id=757):
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0])
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb922752", 0x37, 0x5, 0xffffffff}], 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}], 0x1, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4041)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.521701797s ago: executing program 3 (id=758):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4b70cf489f5cb3b})

4.513641637s ago: executing program 1 (id=759):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b02, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)

4.011176272s ago: executing program 2 (id=760):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe(&(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.651449603s ago: executing program 2 (id=761):
syz_open_dev$vbi(0x0, 0x2, 0x2)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='gid', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x40000000000006, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = syz_io_uring_setup(0x66b4, &(0x7f0000000140)={0x0, 0xe967, 0x10000, 0x0, 0x397}, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)

3.080267219s ago: executing program 0 (id=762):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010004, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x24, 0x628f, &(0x7f000000c880)="$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")
syz_clone(0x2000000, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

2.760568099s ago: executing program 3 (id=763):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8)
tkill(0x0, 0x2a)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r5 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000009b80)={0x40000012})
read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020)
epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
sendmsg$nl_route(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

2.687745321s ago: executing program 2 (id=764):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$uhid(0xffffff9c, 0x0, 0x802, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000090)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(0xffffffffffffffff, 0x2)

2.395331719s ago: executing program 1 (id=765):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f0000000140)='./file1\x00', 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}})
r2 = fsopen(&(0x7f00000001c0)='anon_inodefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000580))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1})
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x6, 0x0, 0x0)

1.113547557s ago: executing program 1 (id=766):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

844.917945ms ago: executing program 0 (id=767):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r2)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

438.865767ms ago: executing program 3 (id=768):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
fcntl$lock(r4, 0x5, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0xfffffffffffffffa})
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r5 = socket(0x18, 0x0, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'})
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x4000)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

350.55151ms ago: executing program 2 (id=769):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe(&(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

43.217239ms ago: executing program 1 (id=770):
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0])
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb922752", 0x37, 0x5, 0xffffffff}], 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}], 0x1, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4041)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

0s ago: executing program 2 (id=771):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x2, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffff8, 0x1fe, 0x6, 0x28, 0x2, 0x5})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts.
[   78.300352][ T5764] cgroup: Unknown subsys name 'net'
[   78.438282][ T5764] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   79.963127][ T5764] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   82.085491][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.100665][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.111851][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.120483][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.128490][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   82.136369][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.151450][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.157710][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.166803][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.211608][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.219016][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.227202][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.234691][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.242296][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.249842][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.252023][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   82.258886][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.264930][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.278640][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.286493][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.293986][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   82.306469][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   82.313901][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.321126][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.647371][ T5777] chnl_net:caif_netlink_parms(): no params data found
[   82.729767][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   82.870216][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   82.881292][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.888462][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.896590][ T5777] bridge_slave_0: entered allmulticast mode
[   82.903674][ T5777] bridge_slave_0: entered promiscuous mode
[   82.913308][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.920414][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.927899][ T5777] bridge_slave_1: entered allmulticast mode
[   82.935067][ T5777] bridge_slave_1: entered promiscuous mode
[   82.979266][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.986841][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.994074][ T5775] bridge_slave_0: entered allmulticast mode
[   83.001464][ T5775] bridge_slave_0: entered promiscuous mode
[   83.035449][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.044026][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.051342][ T5775] bridge_slave_1: entered allmulticast mode
[   83.058193][ T5775] bridge_slave_1: entered promiscuous mode
[   83.076136][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.087669][ T5778] chnl_net:caif_netlink_parms(): no params data found
[   83.115545][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.144157][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.178959][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.238688][ T5777] team0: Port device team_slave_0 added
[   83.277832][ T5777] team0: Port device team_slave_1 added
[   83.292078][ T5775] team0: Port device team_slave_0 added
[   83.298199][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.308163][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.315415][ T5776] bridge_slave_0: entered allmulticast mode
[   83.323188][ T5776] bridge_slave_0: entered promiscuous mode
[   83.358919][ T5775] team0: Port device team_slave_1 added
[   83.376970][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.384230][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.392484][ T5776] bridge_slave_1: entered allmulticast mode
[   83.399565][ T5776] bridge_slave_1: entered promiscuous mode
[   83.427552][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.434682][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.460752][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.483948][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.491157][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.517189][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.528701][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.536124][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.543538][ T5778] bridge_slave_0: entered allmulticast mode
[   83.550995][ T5778] bridge_slave_0: entered promiscuous mode
[   83.568261][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.576076][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.602545][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.614702][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.622169][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.648389][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.666199][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.673768][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.681033][ T5778] bridge_slave_1: entered allmulticast mode
[   83.688258][ T5778] bridge_slave_1: entered promiscuous mode
[   83.718864][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.801887][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.846084][ T5776] team0: Port device team_slave_0 added
[   83.854939][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.878793][ T5776] team0: Port device team_slave_1 added
[   83.893365][ T5775] hsr_slave_0: entered promiscuous mode
[   83.899796][ T5775] hsr_slave_1: entered promiscuous mode
[   83.920040][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.968236][ T5777] hsr_slave_0: entered promiscuous mode
[   83.975333][ T5777] hsr_slave_1: entered promiscuous mode
[   83.981920][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   83.989711][ T5777] Cannot create hsr debugfs directory
[   84.043239][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.050219][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.076428][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.098842][ T5778] team0: Port device team_slave_0 added
[   84.107768][ T5778] team0: Port device team_slave_1 added
[   84.123798][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.130764][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.158615][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.231208][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.232315][ T5789] Bluetooth: hci1: command tx timeout
[   84.238181][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.269948][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.283129][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.290102][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.316114][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.326727][ T5789] Bluetooth: hci2: command tx timeout
[   84.365279][ T5776] hsr_slave_0: entered promiscuous mode
[   84.371756][ T5776] hsr_slave_1: entered promiscuous mode
[   84.378354][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.386836][ T5776] Cannot create hsr debugfs directory
[   84.392347][ T5789] Bluetooth: hci3: command tx timeout
[   84.398241][ T5784] Bluetooth: hci0: command tx timeout
[   84.503750][ T5778] hsr_slave_0: entered promiscuous mode
[   84.510140][ T5778] hsr_slave_1: entered promiscuous mode
[   84.516634][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.524251][ T5778] Cannot create hsr debugfs directory
[   84.759812][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   84.803750][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   84.835054][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   84.845287][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   84.902913][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   84.917544][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   84.938127][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   84.960312][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.009584][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.034151][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.045228][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.057080][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.170612][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.198570][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.209407][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.220247][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.267615][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.318878][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.337927][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   85.350623][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.357930][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.384175][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   85.400769][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.408019][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.422525][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.454142][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.461301][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.483058][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   85.518617][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.525749][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.536108][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.543316][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.563801][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.571010][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.723857][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   85.802234][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.866329][ T5778] 8021q: adding VLAN 0 to HW filter on device team0
[   85.890353][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.897568][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.944542][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.951839][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.113679][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.229231][ T5775] veth0_vlan: entered promiscuous mode
[   86.273466][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.281750][ T5775] veth1_vlan: entered promiscuous mode
[   86.316573][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.317997][ T5784] Bluetooth: hci1: command tx timeout
[   86.391779][ T5784] Bluetooth: hci2: command tx timeout
[   86.428708][ T5775] veth0_macvtap: entered promiscuous mode
[   86.456000][ T5775] veth1_macvtap: entered promiscuous mode
[   86.463959][ T5776] veth0_vlan: entered promiscuous mode
[   86.471330][ T5784] Bluetooth: hci0: command tx timeout
[   86.476760][ T5784] Bluetooth: hci3: command tx timeout
[   86.500711][ T5776] veth1_vlan: entered promiscuous mode
[   86.525326][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.544194][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.555540][ T5777] veth0_vlan: entered promiscuous mode
[   86.618168][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.632489][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.641701][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.650426][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.661012][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.679726][ T5777] veth1_vlan: entered promiscuous mode
[   86.724967][ T5776] veth0_macvtap: entered promiscuous mode
[   86.754875][ T5778] veth0_vlan: entered promiscuous mode
[   86.787384][ T5776] veth1_macvtap: entered promiscuous mode
[   86.848896][ T5778] veth1_vlan: entered promiscuous mode
[   86.918682][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.931940][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.948120][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.962050][ T5777] veth0_macvtap: entered promiscuous mode
[   86.969109][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.985278][ T5777] veth1_macvtap: entered promiscuous mode
[   86.994112][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.006323][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.018150][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.035715][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.062807][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.075683][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.085164][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.094320][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.166770][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.178249][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.188743][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.200040][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.217851][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.236996][ T5778] veth0_macvtap: entered promiscuous mode
[   87.275209][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.293480][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.305460][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.316538][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.328987][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.343783][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.354176][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.397277][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.409212][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.418544][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.428529][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.451791][ T5778] veth1_macvtap: entered promiscuous mode
[   87.515319][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.543414][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.555402][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.565756][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.576875][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.587744][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.600119][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.615327][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.627931][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.715381][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.731828][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.742203][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.753980][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.771084][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.787237][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.806441][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.845040][ T5845] syz.0.1[5845]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   87.874834][ T5845] loop0: detected capacity change from 0 to 1024
[   87.884062][ T5845] EXT4-fs: Ignoring removed oldalloc option
[   87.936263][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.958854][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.968473][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.980126][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.992667][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.002116][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.007191][ T5845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.058947][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.067391][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.156103][   T28] audit: type=1804 audit(1786728743.691:2): pid=5845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1" name="/newroot/0/file1/bus" dev="loop0" ino=18 res=1 errno=0
[   88.198161][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.211403][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.238135][ T5849] EXT4-fs (loop0): shut down requested (2)
[   88.359549][ T5851] loop3: detected capacity change from 0 to 16
[   88.375593][ T5851] =======================================================
[   88.375593][ T5851] WARNING: The mand mount option has been deprecated and
[   88.375593][ T5851]          and is ignored by this kernel. Remove the mand
[   88.375593][ T5851]          option from the mount to silence this warning.
[   88.375593][ T5851] =======================================================
[   88.419227][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.429032][ T5784] Bluetooth: hci1: command tx timeout
[   88.434567][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.470595][ T5851] erofs: (device loop3): mounted with root inode @ nid 36.
[   88.474330][ T5784] Bluetooth: hci2: command tx timeout
[   88.507312][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.552014][ T5789] Bluetooth: hci0: command tx timeout
[   88.557996][ T5784] Bluetooth: hci3: command tx timeout
[   89.217284][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.235853][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.248016][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   89.302822][ T5853] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   90.131781][ T5865] file system registered
[   90.545013][ T5784] Bluetooth: hci1: command tx timeout
[   90.635807][ T5784] Bluetooth: hci2: command tx timeout
[   90.641336][ T5784] Bluetooth: hci3: command tx timeout
[   90.646761][ T5784] Bluetooth: hci0: command tx timeout
[   91.839587][  T972] cfg80211: failed to load regulatory.db
[   93.226407][ T5905] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   94.640943][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   95.931349][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'.
[   95.966807][ T5920] netlink: 'syz.3.15': attribute type 1 has an invalid length.
[   96.118523][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'.
[   96.127959][ T5925] netlink: 'syz.1.16': attribute type 2 has an invalid length.
[   96.135816][ T5925] netlink: 'syz.1.16': attribute type 1 has an invalid length.
[   98.678145][ T5930] loop2: detected capacity change from 0 to 256
[   98.724002][ T5930] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   99.852459][ T5941] netlink: 'syz.3.20': attribute type 1 has an invalid length.
[   99.905884][ T5941] lo: entered promiscuous mode
[  100.003529][ T5941] tunl0: entered promiscuous mode
[  100.056427][ T5941] gre0: entered promiscuous mode
[  100.258870][ T5954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23'.
[  100.267893][ T5954] netlink: 'syz.1.23': attribute type 2 has an invalid length.
[  100.276108][ T5954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23'.
[  103.129699][ T5941] gretap0: entered promiscuous mode
[  103.181317][ T5941] erspan0: entered promiscuous mode
[  105.083956][ T5941] ip_vti0: entered promiscuous mode
[  105.174251][ T5941] ip6_vti0: entered promiscuous mode
[  105.394247][ T5941] sit0: entered promiscuous mode
[  105.906538][ T5978] 9pnet: Could not find request transport: 
[  106.102512][ T5941] ip6tnl0: entered promiscuous mode
[  106.161884][ T5941] ip6gre0: entered promiscuous mode
[  106.221572][ T5941] syz_tun: entered promiscuous mode
[  106.292364][ T5941] ip6gretap0: entered promiscuous mode
[  106.338121][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.346809][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.358336][ T5941] bridge0: entered promiscuous mode
[  106.397824][ T5983] netlink: 'syz.1.29': attribute type 1 has an invalid length.
[  106.421524][ T5983] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  106.423106][ T5985] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  106.904546][    T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  107.251663][    T8] usb 4-1: device descriptor read/64, error -71
[  107.685982][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'.
[  107.694942][ T6018] netlink: 'syz.0.28': attribute type 2 has an invalid length.
[  107.702641][ T6018] netlink: 'syz.0.28': attribute type 1 has an invalid length.
[  108.188478][    T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  109.966018][    T8] usb 4-1: device descriptor read/64, error -71
[  110.171210][    T8] usb usb4-port1: attempt power cycle
[  111.242884][ T6030] loop2: detected capacity change from 0 to 1024
[  111.321289][    T8] usb usb4-port1: Cannot enable. Maybe the USB cable is bad?
[  111.376008][ T6032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.37'.
[  111.384988][ T6032] netlink: 'syz.1.37': attribute type 2 has an invalid length.
[  111.392722][ T6032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.37'.
[  112.412590][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  113.716721][  T972] IPVS: starting estimator thread 0...
[  114.732628][ T6038] IPVS: using max 18 ests per chain, 43200 per kthread
[  114.801009][    T8] usb 4-1: device not accepting address 5, error -71
[  114.936061][    T8] usb usb4-port1: unable to enumerate USB device
[  114.958665][ T6043] netlink: 'syz.2.40': attribute type 1 has an invalid length.
[  115.104316][ T6043] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.146992][ T6047] bond2: entered promiscuous mode
[  116.179813][ T6047] bond2 (unregistering): Released all slaves
[  116.421533][ T5816] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  116.611241][ T5816] usb 1-1: device descriptor read/64, error -71
[  116.973496][ T5816] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  117.171061][ T5816] usb 1-1: device descriptor read/64, error -71
[  117.184909][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'.
[  117.194044][ T6072] netlink: 'syz.1.47': attribute type 2 has an invalid length.
[  117.201778][ T6072] netlink: 'syz.1.47': attribute type 1 has an invalid length.
[  117.409603][ T5816] usb usb1-port1: attempt power cycle
[  118.302050][ T5816] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  118.352750][ T5816] usb 1-1: device descriptor read/8, error -71
[  118.701198][ T5816] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  118.824427][ T5816] usb 1-1: device descriptor read/8, error -71
[  119.031742][ T5816] usb usb1-port1: unable to enumerate USB device
[  120.983980][ T6091] UDC core: g1: couldn't find an available UDC or it's busy
[  123.532394][ T6098] syz.3.52 (6098): drop_caches: 2
[  123.919889][ T6116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.56'.
[  125.091044][  T790] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  125.421279][  T790] usb 1-1: device descriptor read/64, error -71
[  125.602663][ T5840] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  125.732637][  T790] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  126.020842][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  126.040969][ T5840] usb 4-1: device descriptor read/64, error -71
[  126.211032][  T790] usb 1-1: device descriptor read/64, error -71
[  126.274696][ T6144] netlink: 'syz.2.54': attribute type 1 has an invalid length.
[  126.327053][ T5840] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  126.335185][ T6144] 8021q: adding VLAN 0 to HW filter on device bond2
[  126.351378][  T790] usb usb1-port1: attempt power cycle
[  126.452802][ T6144] bond3: entered promiscuous mode
[  126.465448][ T6144] bond3 (unregistering): Released all slaves
[  126.481039][ T5840] usb 4-1: device descriptor read/64, error -71
[  126.523286][ T6155] netlink: 'syz.1.61': attribute type 2 has an invalid length.
[  126.531174][ T6155] netlink: 'syz.1.61': attribute type 1 has an invalid length.
[  126.782067][  T790] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  127.565369][ T5840] usb usb4-port1: attempt power cycle
[  128.573986][  T790] usb 1-1: device not accepting address 8, error -71
[  132.694491][ T6179] loop2: detected capacity change from 0 to 1024
[  132.723054][ T6179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.805246][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  132.812907][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  133.061058][ T6182] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  133.224415][ T6192] loop3: detected capacity change from 0 to 512
[  133.232659][ T6192] EXT4-fs: inline encryption not supported
[  133.247547][ T6192] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  133.272109][ T6192] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.70: corrupted in-inode xattr: e_value size too large
[  133.306591][ T6192] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.70: couldn't read orphan inode 15 (err -117)
[  133.337232][ T6192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.358273][ T6172] loop1: detected capacity change from 0 to 32768
[  133.409869][ T6172] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  133.566331][ T6172] XFS (loop1): Ending clean mount
[  133.650264][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.101125][ T5840] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  134.113625][ T5777] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  134.276142][ T5840] usb 3-1: device descriptor read/64, error -71
[  134.598397][ T5840] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  134.828942][ T5840] usb 3-1: device descriptor read/64, error -71
[  134.966277][ T5840] usb usb3-port1: attempt power cycle
[  135.256689][  T790] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  135.339407][ T6218] netlink: 'syz.1.74': attribute type 2 has an invalid length.
[  135.347201][ T6218] netlink: 'syz.1.74': attribute type 1 has an invalid length.
[  135.405090][ T5840] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  135.501147][  T790] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  135.572026][ T5840] usb 3-1: device descriptor read/8, error -71
[  135.590370][  T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.654882][  T790] usb 1-1: Product: syz
[  135.683262][  T790] usb 1-1: Manufacturer: syz
[  135.716205][  T790] usb 1-1: SerialNumber: syz
[  135.879329][ T5840] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  135.987885][ T5840] usb 3-1: device descriptor read/8, error -71
[  136.157176][ T5840] usb usb3-port1: unable to enumerate USB device
[  136.273331][ T5818] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  137.477909][ T5818] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  137.641489][ T5818] ath9k_htc: Failed to initialize the device
[  137.994092][ T5818] usb 1-1: ath9k_htc: USB layer deinitialized
[  138.184003][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.272208][  T790] usb 1-1: USB disconnect, device number 10
[  138.823656][ T6224] loop3: detected capacity change from 0 to 256
[  139.608028][   T28] audit: type=1800 audit(1787253083.028:3): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.76" name="file1" dev="loop3" ino=1048632 res=0 errno=0
[  140.373544][ T6247] capability: warning: `syz.2.84' uses deprecated v2 capabilities in a way that may be insecure
[  140.384912][ T6247] GUP no longer grows the stack in syz.2.84 (6247): 200000004000-20000000a000 (200000002000)
[  140.395974][ T6247] CPU: 0 PID: 6247 Comm: syz.2.84 Not tainted syzkaller #0
[  140.403243][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  140.413341][ T6247] Call Trace:
[  140.416642][ T6247]  <TASK>
[  140.419600][ T6247]  dump_stack_lvl+0x18c/0x250
[  140.424344][ T6247]  ? show_regs_print_info+0x20/0x20
[  140.429590][ T6247]  ? load_image+0x420/0x420
[  140.434143][ T6247]  ? find_vma+0x134/0x1b0
[  140.438544][ T6247]  __get_user_pages+0xfe7/0x1580
[  140.443558][ T6247]  ? populate_vma_page_range+0x380/0x380
[  140.449250][ T6247]  get_user_pages_remote+0x39e/0xb90
[  140.454587][ T6247]  ? get_dump_page+0x200/0x200
[  140.459407][ T6247]  __access_remote_vm+0x1fc/0x570
[  140.464477][ T6247]  ? generic_access_phys+0x650/0x650
[  140.469803][ T6247]  ? alloc_pages+0x4e1/0x740
[  140.474432][ T6247]  ? do_raw_spin_unlock+0x121/0x230
[  140.479669][ T6247]  proc_pid_cmdline_read+0x44b/0x830
[  140.484987][ T6247]  ? schedule+0xc7/0x170
[  140.489271][ T6247]  ? comm_show+0x150/0x150
[  140.493712][ T6247]  ? common_file_perm+0x110/0x1f0
[  140.498766][ T6247]  ? fsnotify_perm+0x271/0x5e0
[  140.503561][ T6247]  do_iter_read+0x4fb/0xcb0
[  140.508101][ T6247]  ? comm_show+0x150/0x150
[  140.512539][ T6247]  ? vfs_iter_read+0xa0/0xa0
[  140.517175][ T6247]  ? __import_iovec+0x5f2/0x850
[  140.522074][ T6247]  ? import_iovec+0x73/0xa0
[  140.526613][ T6247]  do_preadv+0x237/0x390
[  140.530911][ T6247]  ? do_writev+0x480/0x480
[  140.535373][ T6247]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  140.541386][ T6247]  ? lock_chain_count+0x20/0x20
[  140.546268][ T6247]  ? lockdep_hardirqs_on+0x98/0x150
[  140.551498][ T6247]  do_syscall_64+0x55/0xb0
[  140.555936][ T6247]  ? clear_bhb_loop+0x40/0x90
[  140.560629][ T6247]  ? clear_bhb_loop+0x40/0x90
[  140.565331][ T6247]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  140.571257][ T6247] RIP: 0033:0x7f5c1d39e0d9
[  140.575698][ T6247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  140.595339][ T6247] RSP: 002b:00007f5c1e329028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  140.603792][ T6247] RAX: ffffffffffffffda RBX: 00007f5c1d625fa0 RCX: 00007f5c1d39e0d9
[  140.611794][ T6247] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000006
[  140.619789][ T6247] RBP: 00007f5c1d435024 R08: 00000000fffffff9 R09: 0000000000000000
[  140.627780][ T6247] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  140.635768][ T6247] R13: 00007f5c1d626038 R14: 00007f5c1d625fa0 R15: 00007ffe0b868d18
[  140.643770][ T6247]  </TASK>
[  140.716196][  T790] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  140.911314][  T790] usb 2-1: Using ep0 maxpacket: 32
[  140.918984][  T790] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.933700][  T790] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  140.948127][  T790] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  140.970458][  T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.978490][  T790] usb 2-1: Product: syz
[  141.008658][  T790] usb 2-1: Manufacturer: syz
[  141.019554][  T790] usb 2-1: SerialNumber: syz
[  141.043839][  T790] usb 2-1: config 0 descriptor??
[  141.137136][ T6251] netlink: 'syz.3.85': attribute type 2 has an invalid length.
[  141.144841][ T6251] netlink: 'syz.3.85': attribute type 1 has an invalid length.
[  141.445300][    T8] usb 2-1: USB disconnect, device number 2
[  142.128338][    T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  142.404581][    T8] usb 2-1: Using ep0 maxpacket: 32
[  142.451862][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.530644][    T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  142.609308][    T8] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  142.676480][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.737035][    T8] usb 2-1: Product: syz
[  142.773474][    T8] usb 2-1: Manufacturer: syz
[  142.808979][    T8] usb 2-1: SerialNumber: syz
[  142.887826][    T8] usb 2-1: config 0 descriptor??
[  144.273865][  T790] usb 2-1: USB disconnect, device number 3
[  145.483375][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'.
[  145.492235][ T6262] netlink: 'syz.3.89': attribute type 2 has an invalid length.
[  145.499980][ T6262] netlink: 'syz.3.89': attribute type 1 has an invalid length.
[  148.658133][ T6271] Bluetooth: MGMT ver 1.22
[  148.834332][ T6275] loop2: detected capacity change from 0 to 1024
[  149.028242][   T28] audit: type=1800 audit(1787253092.834:4): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.94" name="file0" dev="overlay" ino=155 res=0 errno=0
[  150.119820][ T6281] syz.2.96 (6281): drop_caches: 2
[  150.283297][    T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  150.707470][    T8] usb 1-1: Using ep0 maxpacket: 32
[  150.769735][    T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.880932][ T6291] netlink: 'syz.1.97': attribute type 2 has an invalid length.
[  150.892172][ T6291] netlink: 'syz.1.97': attribute type 1 has an invalid length.
[  150.904857][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'.
[  150.917201][    T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  153.036549][    T8] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  153.105645][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.113698][    T8] usb 1-1: Product: syz
[  153.139811][    T8] usb 1-1: Manufacturer: syz
[  153.144465][    T8] usb 1-1: SerialNumber: syz
[  153.161272][    T8] usb 1-1: config 0 descriptor??
[  153.218627][    T8] usb 1-1: can't set config #0, error -71
[  153.256754][    T8] usb 1-1: USB disconnect, device number 11
[  153.381529][ T6299] capability: warning: `syz.0.101' uses 32-bit capabilities (legacy support in use)
[  153.466085][ T6301] NILFS (nbd0): device size too small
[  154.333397][ T6309] loop2: detected capacity change from 0 to 7
[  154.344063][ T6309] Dev loop2: unable to read RDB block 7
[  154.344546][ T6307] tipc: Started in network mode
[  154.350155][ T6309]  loop2: AHDI p1 p2 p3
[  154.350205][ T6309] loop2: partition table partially beyond EOD, truncated
[  154.350815][ T6309] loop2: p1 start 1601398130 is beyond EOD, truncated
[  154.374026][ T6309] loop2: p2 start 1702059890 is beyond EOD, truncated
[  154.414481][ T6307] tipc: Node identity 362837a2bacd, cluster identity 4711
[  154.429947][ T6307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.491968][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'.
[  154.534453][   T28] audit: type=1800 audit(1787253098.439:5): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.105" name="file0" dev="overlay" ino=126 res=0 errno=0
[  154.580310][ T6312] tipc: Resetting bearer <eth:syzkaller0>
[  154.676484][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'.
[  154.685531][ T6318] netlink: 'syz.1.106': attribute type 2 has an invalid length.
[  154.693586][ T6318] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[  156.220440][ T6306] tipc: Disabling bearer <eth:syzkaller0>
[  156.347087][ T5816] tipc: Node number set to 2363832226
[  157.298144][ T6320] syz.0.107 (6320): drop_caches: 2
[  157.710473][ T5840] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  157.841887][ T6337] netlink: 'syz.0.112': attribute type 2 has an invalid length.
[  157.849734][ T6337] netlink: 'syz.0.112': attribute type 1 has an invalid length.
[  157.857959][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'.
[  157.909042][ T5840] usb 3-1: Using ep0 maxpacket: 32
[  160.206487][ T5840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.254783][ T6340] NILFS (nbd3): device size too small
[  160.437315][ T5840] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  160.515361][ T5840] usb 3-1: string descriptor 0 read error: -71
[  160.522238][ T5840] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  160.544326][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.557286][ T5840] usb 3-1: config 0 descriptor??
[  161.569006][ T5840] usb 3-1: can't set config #0, error -71
[  161.639857][ T5840] usb 3-1: USB disconnect, device number 6
[  162.102940][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'.
[  162.323034][ T6360] syz.3.120 (6360): drop_caches: 2
[  162.434659][ T6357] tipc: Started in network mode
[  162.439595][ T6357] tipc: Node identity 6ab71ed0e622, cluster identity 4711
[  162.490067][ T6357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.557004][ T6361] tipc: Resetting bearer <eth:syzkaller0>
[  162.595039][ T6356] tipc: Disabling bearer <eth:syzkaller0>
[  163.641864][ T6383] loop1: detected capacity change from 0 to 1024
[  163.807398][ T6380] syz.2.124 (6380) used greatest stack depth: 20536 bytes left
[  163.895307][ T6387] netlink: 'syz.3.126': attribute type 2 has an invalid length.
[  163.903199][ T6387] netlink: 'syz.3.126': attribute type 1 has an invalid length.
[  163.911108][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'.
[  166.466729][ T6388] tls_set_device_offload_rx: netdev not found
[  166.542685][ T6390] loop2: detected capacity change from 0 to 2048
[  166.640919][ T6390] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.790710][   T28] audit: type=1800 audit(1787253110.757:6): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.127" name="bus" dev="loop2" ino=1367 res=0 errno=0
[  167.042878][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'.
[  167.442448][ T6397] bond1: entered promiscuous mode
[  167.508174][ T6397] bond1 (unregistering): Released all slaves
[  169.215968][ T6417] loop2: detected capacity change from 0 to 1024
[  170.002247][ T6429] netlink: 'syz.1.138': attribute type 2 has an invalid length.
[  170.010103][ T6429] netlink: 'syz.1.138': attribute type 1 has an invalid length.
[  170.441453][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'.
[  172.330707][ T6439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.746216][ T6439] syzkaller0: entered promiscuous mode
[  173.751747][ T6439] syzkaller0: entered allmulticast mode
[  173.832943][ T6439] tipc: Resetting bearer <eth:syzkaller0>
[  173.853261][ T6438] tipc: Resetting bearer <eth:syzkaller0>
[  174.372718][ T6438] tipc: Disabling bearer <eth:syzkaller0>
[  174.928323][ T6458] loop0: detected capacity change from 0 to 1024
[  175.337066][ T6461] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  175.348653][ T6461] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  175.360486][ T6461] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  175.376746][ T6461] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  175.403004][ T6461] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  175.415114][ T6461] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  175.427201][ T6461] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  175.438914][ T6461] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  175.451246][ T6461] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  175.463471][ T6461] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  176.335633][ T5816] IPVS: starting estimator thread 0...
[  176.511922][   T28] audit: type=1800 audit(1787253120.393:7): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.151" name="file0" dev="overlay" ino=243 res=0 errno=0
[  177.087796][ T6471] IPVS: using max 26 ests per chain, 62400 per kthread
[  177.268161][ T6478] netlink: 'syz.3.155': attribute type 2 has an invalid length.
[  177.275888][ T6478] netlink: 'syz.3.155': attribute type 1 has an invalid length.
[  177.851075][ T6474] bond3: entered promiscuous mode
[  178.051304][ T6474] bond3 (unregistering): Released all slaves
[  181.432180][ T6502] loop1: detected capacity change from 0 to 1024
[  181.750142][ T6502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.378447][ T6512] loop3: detected capacity change from 0 to 1024
[  183.102479][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.313738][  T790] IPVS: starting estimator thread 0...
[  183.408482][ T6516] IPVS: using max 23 ests per chain, 55200 per kthread
[  183.886576][ T6530] netlink: 'syz.3.166': attribute type 2 has an invalid length.
[  183.894461][ T6530] netlink: 'syz.3.166': attribute type 1 has an invalid length.
[  184.034231][ T6523] bond1: entered promiscuous mode
[  184.155465][ T6523] bond1 (unregistering): Released all slaves
[  186.370231][ T6534] loop0: detected capacity change from 0 to 128
[  186.552227][ T6534] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  186.751426][ T6534] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  187.085084][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  189.710179][ T6560] loop3: detected capacity change from 0 to 64
[  189.892104][ T5776] hfs: node 4:3 still has 1 user(s)!
[  189.954658][ T6546] loop0: detected capacity change from 0 to 32768
[  190.029605][ T6565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.179'.
[  190.071713][ T6565] unsupported nlmsg_type 40
[  190.115183][ T6546] JBD2: Ignoring recovery information on journal
[  190.195422][ T6546] JBD2: journal reset failed
[  190.200124][ T6546] (syz.0.173,6546,1):ocfs2_journal_load:1168 ERROR: Failed to load journal!
[  190.209249][ T6546] (syz.0.173,6546,1):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -4
[  190.366674][ T6571] netlink: 'syz.1.180': attribute type 2 has an invalid length.
[  190.374821][ T6571] netlink: 'syz.1.180': attribute type 1 has an invalid length.
[  193.800640][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  193.807091][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  194.171118][ T6583] tls_set_device_offload_rx: netdev not found
[  194.270803][ T6585] bond3: entered promiscuous mode
[  194.301746][ T6585] bond3 (unregistering): Released all slaves
[  195.467512][ T5840] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  195.657478][ T5840] usb 2-1: Using ep0 maxpacket: 32
[  195.673611][ T5840] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  195.682364][ T5840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.747444][ T5840] usb 2-1: config 0 has no interface number 0
[  195.831585][ T5840] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  195.846825][ T5840] usb 2-1: config 0 interface 1 has no altsetting 0
[  195.888755][ T5840] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  195.904685][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.937353][ T5840] usb 2-1: Product: syz
[  195.941573][ T5840] usb 2-1: Manufacturer: syz
[  195.946200][ T5840] usb 2-1: SerialNumber: syz
[  195.960007][ T6607] loop3: detected capacity change from 0 to 512
[  195.982651][ T5840] usb 2-1: config 0 descriptor??
[  196.002482][ T6607] EXT4-fs: Ignoring removed oldalloc option
[  196.029814][ T6607] EXT4-fs: Ignoring removed oldalloc option
[  196.066252][ T6607] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.190: corrupted in-inode xattr: invalid ea_ino
[  196.086277][ T6607] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.190: couldn't read orphan inode 15 (err -117)
[  196.116418][ T6607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.233191][ T5840] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  196.263990][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.273127][ T5840] cx231xx 2-1:0.1: Not found matching IAD interface
[  196.309947][ T5840] usb 2-1: USB disconnect, device number 4
[  197.156552][ T5840] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  197.346633][ T5840] usb 2-1: Using ep0 maxpacket: 32
[  197.400250][ T5840] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  197.549866][ T5840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.792346][ T5840] usb 2-1: config 0 has no interface number 0
[  197.855092][ T5840] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  197.876489][ T6615] loop3: detected capacity change from 0 to 32768
[  197.946190][ T5840] usb 2-1: config 0 interface 1 has no altsetting 0
[  197.965127][ T5840] usb 2-1: string descriptor 0 read error: -71
[  197.993706][ T5840] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  198.033279][ T6615] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  198.048955][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.109186][ T5840] usb 2-1: config 0 descriptor??
[  198.142555][ T5840] usb 2-1: can't set config #0, error -71
[  198.347409][ T5840] usb 2-1: USB disconnect, device number 5
[  198.723860][ T6615] XFS (loop3): Ending clean mount
[  198.803971][ T5776] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  201.938465][ T6672] sctp_transport_update_pmtu: 49 callbacks suppressed
[  201.938494][ T6672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  201.957034][ T6672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  201.968816][ T6672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  201.980752][ T6672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  202.006775][ T6672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  202.018673][ T6672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  202.030541][ T6672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  202.042748][ T6672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  202.054751][ T6672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  202.066913][ T6672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  204.680636][ T6690] syzkaller0: entered promiscuous mode
[  204.688349][ T6690] syzkaller0: entered allmulticast mode
[  204.700013][ T6696] tipc: Started in network mode
[  204.720499][ T6696] tipc: Node identity a2dcfae167c4, cluster identity 4711
[  204.745787][ T6696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.935936][ T6684] loop3: detected capacity change from 0 to 32768
[  204.978721][ T6684] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  205.134780][ T6684] XFS (loop3): Ending clean mount
[  205.259439][ T5776] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  206.066068][ T5785] Bluetooth: hci1: command 0x0406 tx timeout
[  206.308507][ T5784] Bluetooth: hci2: command 0x0406 tx timeout
[  206.313242][ T5789] Bluetooth: hci3: command 0x0406 tx timeout
[  206.321192][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  207.168362][ T6706] tipc: Resetting bearer <eth:syzkaller0>
[  207.192397][ T5842] tipc: Node number set to 3306748641
[  207.258850][ T6695] tipc: Disabling bearer <eth:syzkaller0>
[  209.202791][ T6748] loop0: detected capacity change from 0 to 4096
[  209.665610][ T6748] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  210.197666][ T6748] ntfs3: loop0: Failed to load $Extend (-22).
[  210.204642][ T6748] ntfs3: loop0: Failed to initialize $Extend.
[  214.715391][ T6771] tipc: Started in network mode
[  214.761348][ T6771] tipc: Node identity 32b8b68a3624, cluster identity 4711
[  214.768680][ T6771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.843662][ T6771] syzkaller0: entered promiscuous mode
[  214.858285][ T6771] syzkaller0: entered allmulticast mode
[  215.891776][ T6771] tipc: Resetting bearer <eth:syzkaller0>
[  215.929598][  T790] tipc: Node number set to 77379210
[  216.004665][ T6770] tipc: Resetting bearer <eth:syzkaller0>
[  216.211956][ T6770] tipc: Disabling bearer <eth:syzkaller0>
[  217.368301][ T6796] netlink: 'syz.3.239': attribute type 10 has an invalid length.
[  217.533716][ T6801] Zero length message leads to an empty skb
[  217.972494][ T6796] team0: Port device dummy0 added
[  218.251384][ T6796] syz.3.239 (6796) used greatest stack depth: 20104 bytes left
[  219.972958][ T6819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.980830][ T6819] syzkaller0: entered promiscuous mode
[  219.986376][ T6819] syzkaller0: entered allmulticast mode
[  220.016970][ T6819] tipc: Resetting bearer <eth:syzkaller0>
[  220.026372][ T6817] tipc: Resetting bearer <eth:syzkaller0>
[  220.194946][ T6817] tipc: Disabling bearer <eth:syzkaller0>
[  222.616643][ T6850] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  223.054792][ T6839] syz.1.250 (6839): drop_caches: 2
[  224.153367][ T6856] loop0: detected capacity change from 0 to 1024
[  224.170110][  T790] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  224.919087][  T790] usb 3-1: Using ep0 maxpacket: 32
[  224.944405][  T790] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  224.971207][  T790] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.094269][  T790] usb 3-1: config 0 has no interface number 0
[  225.100742][  T790] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  225.111569][  T790] usb 3-1: config 0 interface 1 has no altsetting 0
[  225.354207][  T790] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  225.366001][ T6868] NILFS (nbd3): device size too small
[  225.375002][  T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.383711][  T790] usb 3-1: Product: syz
[  225.388008][  T790] usb 3-1: Manufacturer: syz
[  225.393046][  T790] usb 3-1: SerialNumber: syz
[  225.460030][  T790] usb 3-1: config 0 descriptor??
[  225.576643][ T6872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.585942][ T6872] syzkaller0: entered promiscuous mode
[  225.591653][ T6872] syzkaller0: entered allmulticast mode
[  225.610473][ T6872] tipc: Resetting bearer <eth:syzkaller0>
[  225.627997][ T6871] tipc: Resetting bearer <eth:syzkaller0>
[  225.695830][  T790] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  225.705548][  T790] cx231xx 3-1:0.1: Not found matching IAD interface
[  225.707079][ T6871] tipc: Disabling bearer <eth:syzkaller0>
[  225.722027][  T790] usb 3-1: USB disconnect, device number 7
[  226.369279][  T972] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  226.421081][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'.
[  226.740019][  T972] usb 2-1: Using ep0 maxpacket: 8
[  226.956843][  T972] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  226.960260][  T790] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  227.052059][  T972] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  227.075950][  T972] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  227.234474][  T972] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  227.535442][  T972] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  227.665442][  T972] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  227.769242][  T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.199668][  T790] usb 3-1: device not accepting address 8, error -71
[  228.379782][   T28] audit: type=1800 audit(1787253172.392:8): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.267" name="file0" dev="overlay" ino=407 res=0 errno=0
[  228.442774][  T972] usb 2-1: usb_control_msg returned -32
[  228.452826][  T972] usbtmc 2-1:16.0: can't read capabilities
[  228.622284][ T6901] loop0: detected capacity change from 0 to 1024
[  228.822445][  T972] usb 2-1: USB disconnect, device number 6
[  228.829656][ T6870] usbtmc 2-1:16.0: usb_control_msg returned -71
[  228.838498][ T6903] NILFS (nbd3): device size too small
[  230.804721][   T28] audit: type=1800 audit(1787253174.773:9): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.277" name="file0" dev="overlay" ino=355 res=0 errno=0
[  231.484400][ T6937] NILFS (nbd0): device size too small
[  232.212960][ T6943] loop0: detected capacity change from 0 to 1024
[  232.377166][ T6949] loop2: detected capacity change from 0 to 2048
[  232.600822][ T6949] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  232.821985][ T6949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.949981][   T28] audit: type=1800 audit(1787253176.953:10): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.283" name="file1" dev="loop2" ino=1346 res=0 errno=0
[  233.695683][   T28] audit: type=1800 audit(1787253177.713:11): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.288" name="file0" dev="overlay" ino=382 res=0 errno=0
[  234.367356][ T6955] loop3: detected capacity change from 0 to 32768
[  234.447193][ T6955] JBD2: Ignoring recovery information on journal
[  235.498469][ T6955] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  235.520008][ T6970] NILFS (nbd2): device size too small
[  236.020683][ T5776] ocfs2: Unmounting device (7,3) on (node local)
[  236.282968][ T6990] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  236.291195][ T6992] loop2: detected capacity change from 0 to 7
[  236.298382][ T6992] Dev loop2: unable to read RDB block 7
[  236.317504][ T6992]  loop2: AHDI p1 p2 p3
[  236.325069][ T6992] loop2: partition table partially beyond EOD, truncated
[  236.332630][ T6992] loop2: p1 start 1601398130 is beyond EOD, truncated
[  236.346757][ T6992] loop2: p2 start 1702059890 is beyond EOD, truncated
[  237.750118][ T7010] NILFS (nbd2): device size too small
[  237.947524][ T7017] netlink: 'syz.2.306': attribute type 2 has an invalid length.
[  237.947577][ T7017] netlink: 'syz.2.306': attribute type 1 has an invalid length.
[  237.948490][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'.
[  240.141008][ T7002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  241.522570][ T7022] loop0: detected capacity change from 0 to 32768
[  243.907241][ T7059] Bluetooth: hci0: invalid length 0, exp 2 for type 23
[  244.955073][ T7072] loop2: detected capacity change from 0 to 7
[  245.004928][ T7072] Dev loop2: unable to read RDB block 7
[  245.032993][ T7072]  loop2: AHDI p1 p2 p3
[  245.037329][ T7072] loop2: partition table partially beyond EOD, truncated
[  245.070914][ T7072] loop2: p1 start 1601398130 is beyond EOD, truncated
[  245.077753][ T7072] loop2: p2 start 1702059890 is beyond EOD, truncated
[  245.298405][ T7074] loop2: detected capacity change from 0 to 256
[  245.344144][ T6040] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  246.214837][ T7085] Bluetooth: hci0: invalid length 0, exp 2 for type 23
[  248.299667][ T5818] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  248.478820][ T5818] usb 1-1: Using ep0 maxpacket: 8
[  248.488381][ T5818] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  248.497373][ T5818] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  248.509119][ T5818] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  248.519512][ T5818] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  248.531210][ T5818] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  248.551230][ T5818] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  248.591987][ T5818] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  248.606760][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.689201][ T7120] loop2: detected capacity change from 0 to 1024
[  249.491801][ T5818] usb 1-1: usb_control_msg returned -32
[  249.497493][ T5818] usbtmc 1-1:16.0: can't read capabilities
[  249.578990][ T7124] Bluetooth: hci0: unsupported parameter 255
[  249.588454][ T7124] Bluetooth: hci0: unsupported parameter 255
[  251.379107][ T5842] usb 1-1: USB disconnect, device number 12
[  251.606607][ T7146] NILFS (nbd1): device size too small
[  251.635838][ T7148] syzkaller0: entered promiscuous mode
[  251.661913][ T7148] syzkaller0: entered allmulticast mode
[  251.719417][ T7150] netlink: 112 bytes leftover after parsing attributes in process `syz.0.348'.
[  251.795510][ T7153] loop1: detected capacity change from 0 to 1024
[  251.911159][ T7155] Bluetooth: hci0: unsupported parameter 255
[  251.927985][ T7155] Bluetooth: hci0: unsupported parameter 255
[  251.937934][ T5818] IPVS: starting estimator thread 0...
[  252.072798][ T7156] IPVS: using max 19 ests per chain, 45600 per kthread
[  253.034305][ T7165] netlink: 'syz.2.352': attribute type 2 has an invalid length.
[  253.042190][ T7165] netlink: 'syz.2.352': attribute type 1 has an invalid length.
[  255.186358][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  255.250360][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  255.992609][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'.
[  256.107394][ T7190] Bluetooth: hci0: unsupported parameter 255
[  256.120930][ T7190] Bluetooth: hci0: unsupported parameter 255
[  256.166230][ T7192] loop2: detected capacity change from 0 to 1024
[  256.495926][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'.
[  258.208730][   T28] audit: type=1800 audit(1787253202.213:12): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.370" name="file0" dev="overlay" ino=500 res=0 errno=0
[  258.290519][ T7230] netlink: 'syz.2.369': attribute type 2 has an invalid length.
[  258.298264][ T7230] netlink: 'syz.2.369': attribute type 1 has an invalid length.
[  260.847995][ T7236] loop1: detected capacity change from 0 to 1024
[  261.994253][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'.
[  263.017250][ T7268] jffs2: notice: (7268) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  263.128659][ T5841] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  263.328591][ T5841] usb 4-1: Using ep0 maxpacket: 32
[  263.361838][ T5841] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  263.438652][ T5841] usb 4-1: config 0 has no interface number 0
[  263.455274][ T5841] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  263.502985][ T5841] usb 4-1: config 0 interface 1 has no altsetting 0
[  263.541973][ T5841] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  263.578446][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.612086][ T5841] usb 4-1: Product: syz
[  263.626796][ T5841] usb 4-1: Manufacturer: syz
[  263.635689][ T5841] usb 4-1: SerialNumber: syz
[  263.654766][ T5841] usb 4-1: config 0 descriptor??
[  263.849966][ T7276] syz.2.380 (7276): drop_caches: 2
[  264.274135][ T5841] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  264.614227][ T5841] cx231xx 4-1:0.1: Failed to read PCB config
[  264.626207][ T5841] cx231xx: probe of 4-1:0.1 failed with error -71
[  264.670601][ T5841] usb 4-1: USB disconnect, device number 9
[  264.812002][ T7298] netlink: 'syz.1.384': attribute type 2 has an invalid length.
[  264.820351][ T7298] netlink: 'syz.1.384': attribute type 1 has an invalid length.
[  267.466108][ T7301] NILFS (nbd0): device size too small
[  268.568644][ T7311] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  269.971220][ T7329] zram0: detected capacity change from 0 to 8
[  270.817237][ T7343] IPVS: sh: FWM 3 0x00000003 - no destination available
[  270.844919][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  270.891375][ T7346] loop3: detected capacity change from 0 to 1024
[  271.057340][ T7350] loop2: detected capacity change from 0 to 7
[  271.083462][ T7350] Dev loop2: unable to read RDB block 7
[  271.106086][ T7350]  loop2: AHDI p1 p2 p3
[  271.125530][ T7350] loop2: partition table partially beyond EOD, truncated
[  271.168044][ T7350] loop2: p1 start 1601398130 is beyond EOD, truncated
[  271.178425][ T7350] loop2: p2 start 1702059890 is beyond EOD, truncated
[  271.459081][ T7358] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  272.131006][ T7361] netlink: 'syz.3.399': attribute type 2 has an invalid length.
[  272.138915][ T7361] netlink: 'syz.3.399': attribute type 1 has an invalid length.
[  276.430267][ T7417] loop1: detected capacity change from 0 to 2048
[  276.492533][ T7417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.541152][ T7417] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  276.557402][ T7417] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  276.570356][ T7417] EXT4-fs (loop1): This should not happen!! Data will be lost
[  276.570356][ T7417] 
[  276.591057][ T7417] EXT4-fs (loop1): Total free blocks count 0
[  276.634674][ T7417] EXT4-fs (loop1): Free/Dirty block details
[  276.773525][ T7417] EXT4-fs (loop1): free_blocks=4096
[  276.800529][ T7417] EXT4-fs (loop1): dirty_blocks=64
[  276.813777][ T7417] EXT4-fs (loop1): Block reservation details
[  276.849677][ T7417] EXT4-fs (loop1): i_reserved_data_blocks=4
[  276.954560][ T7427] netlink: 32 bytes leftover after parsing attributes in process `syz.3.412'.
[  277.437056][ T7416] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  277.780764][ T7432] loop3: detected capacity change from 0 to 1024
[  278.195549][ T7437] netlink: 'syz.1.413': attribute type 2 has an invalid length.
[  278.203419][ T7437] netlink: 'syz.1.413': attribute type 1 has an invalid length.
[  281.630647][ T7452] loop2: detected capacity change from 0 to 32768
[  281.698469][ T7463] netlink: 32 bytes leftover after parsing attributes in process `syz.1.424'.
[  282.493753][ T7468] syzkaller0: entered promiscuous mode
[  282.518603][ T7468] syzkaller0: entered allmulticast mode
[  282.597788][ T7470] loop1: detected capacity change from 0 to 1024
[  282.667577][ T7475] netlink: 'syz.2.428': attribute type 2 has an invalid length.
[  282.675616][ T7475] netlink: 'syz.2.428': attribute type 1 has an invalid length.
[  285.881029][   T28] audit: type=1800 audit(1787253229.903:13): pid=7490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.431" name="file0" dev="overlay" ino=645 res=0 errno=0
[  286.498514][ T7502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.435'.
[  287.547205][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'.
[  287.670440][ T7513] loop3: detected capacity change from 0 to 1024
[  288.190150][ T7517] syzkaller0: entered promiscuous mode
[  288.223513][ T7517] syzkaller0: entered allmulticast mode
[  289.587327][ T7534] netlink: 'syz.3.443': attribute type 2 has an invalid length.
[  289.598709][ T7534] netlink: 'syz.3.443': attribute type 1 has an invalid length.
[  289.838475][   T28] audit: type=1800 audit(1787253233.853:14): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.444" name="file0" dev="overlay" ino=619 res=0 errno=0
[  289.966785][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'.
[  291.715541][ T7548] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  292.499618][ T7556] loop2: detected capacity change from 0 to 7
[  292.513426][ T7556] Dev loop2: unable to read RDB block 7
[  292.523868][ T7556]  loop2: AHDI p1 p2 p3
[  292.528209][ T7556] loop2: partition table partially beyond EOD, truncated
[  292.535656][ T7556] loop2: p1 start 1601398130 is beyond EOD, truncated
[  292.559890][ T7556] loop2: p2 start 1702059890 is beyond EOD, truncated
[  292.911496][ T7564] syzkaller0: entered promiscuous mode
[  292.925643][ T7564] syzkaller0: entered allmulticast mode
[  293.069922][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'.
[  293.508072][ T7576] netlink: 'syz.0.457': attribute type 2 has an invalid length.
[  293.516099][ T7576] netlink: 'syz.0.457': attribute type 1 has an invalid length.
[  296.304749][ T7579] overlayfs: failed to resolve './file1': -2
[  296.923096][ T7584] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  297.789228][ T7592] loop2: detected capacity change from 0 to 7
[  297.804910][ T7592] Dev loop2: unable to read RDB block 7
[  297.815021][ T7592]  loop2: AHDI p1 p2 p3
[  297.828881][ T7592] loop2: partition table partially beyond EOD, truncated
[  297.862898][ T7592] loop2: p1 start 1601398130 is beyond EOD, truncated
[  297.898681][ T7592] loop2: p2 start 1702059890 is beyond EOD, truncated
[  298.515058][ T7594] netlink: 32 bytes leftover after parsing attributes in process `syz.3.465'.
[  298.943183][ T7607] overlayfs: failed to resolve './file1': -2
[  300.160453][ T7616] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  300.604482][ T7624] loop2: detected capacity change from 0 to 7
[  301.077774][ T7624] Dev loop2: unable to read RDB block 7
[  301.095939][ T7624]  loop2: AHDI p1 p2 p3
[  301.117053][ T7624] loop2: partition table partially beyond EOD, truncated
[  301.138045][ T7624] loop2: p1 start 1601398130 is beyond EOD, truncated
[  301.169024][ T7624] loop2: p2 start 1702059890 is beyond EOD, truncated
[  301.537753][ T7629] netlink: 32 bytes leftover after parsing attributes in process `syz.2.476'.
[  301.799897][ T7634] overlayfs: failed to resolve './file1': -2
[  303.560305][ T7654] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  304.291461][ T7659] netlink: 1 bytes leftover after parsing attributes in process `syz.0.485'.
[  305.458720][ T5842] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  305.547672][ T7672] loop0: detected capacity change from 0 to 128
[  305.586919][ T7672] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  305.600778][ T7672] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  305.658489][ T5842] usb 2-1: Using ep0 maxpacket: 8
[  305.693112][ T5842] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  305.720795][ T5842] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  305.754977][ T5842] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  305.775485][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  305.786923][ T5842] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  305.802009][ T5842] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  305.861907][ T5842] usb 2-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00
[  305.883732][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.150783][ T7689] usbtmc 2-1:16.0: simple usb_control_msg returned 0
[  307.447631][   T27] usb 2-1: USB disconnect, device number 7
[  307.476331][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'.
[  307.537346][ T7697] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  308.782528][ T7706] loop2: detected capacity change from 0 to 128
[  308.869504][ T7706] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  308.883994][ T7706] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  309.152104][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  309.582186][ T7719] loop2: detected capacity change from 0 to 32768
[  309.605594][ T7719] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  309.665511][ T7719] XFS (loop2): Ending clean mount
[  309.989356][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'.
[  310.162988][ T5778] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  310.834717][ T7743] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  310.848634][ T7744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.508'.
[  311.234958][   T28] audit: type=1326 audit(1787253255.243:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.3.512" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e519e0d9 code=0x7ffc0000
[  311.292672][   T28] audit: type=1326 audit(1787253255.263:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.3.512" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e519e0d9 code=0x7ffc0000
[  311.335853][   T28] audit: type=1326 audit(1787253255.283:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.3.512" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fd1e519e0d9 code=0x7ffc0000
[  311.553391][   T28] audit: type=1326 audit(1787253255.283:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.3.512" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e519e0d9 code=0x7ffc0000
[  311.898278][   T28] audit: type=1326 audit(1787253255.303:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.3.512" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1e519e0d9 code=0x7ffc0000
[  312.201007][   T28] audit: type=1326 audit(1787253255.303:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.3.512" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e519e0d9 code=0x7ffc0000
[  312.431114][   T28] audit: type=1326 audit(1787253255.303:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.3.512" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e519e0d9 code=0x7ffc0000
[  312.601861][   T28] audit: type=1326 audit(1787253255.303:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.3.512" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd1e519e0d9 code=0x7ffc0000
[  312.663926][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'.
[  312.702297][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'.
[  312.714849][   T28] audit: type=1326 audit(1787253255.303:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.3.512" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e519e0d9 code=0x7ffc0000
[  312.807140][   T28] audit: type=1326 audit(1787253255.303:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.3.512" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e519e0d9 code=0x7ffc0000
[  313.859101][ T7775] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  315.050292][ T7784] syz.3.523 (7784): drop_caches: 2
[  316.623060][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  316.631816][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  317.148751][  T790] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  317.360035][  T790] usb 2-1: Using ep0 maxpacket: 16
[  317.378901][  T790] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  317.398731][  T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  317.415152][  T790] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  317.451100][  T790] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  317.489022][  T790] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  317.507323][  T790] usb 2-1: Manufacturer: syz
[  317.533152][  T790] usb 2-1: config 0 descriptor??
[  317.639302][ T7808] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  319.590916][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'.
[  319.630455][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'.
[  319.639952][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'.
[  319.651555][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'.
[  319.666030][ T7829] 9pnet_virtio: no channels available for device syz
[  319.867212][  T790] usb 2-1: USB disconnect, device number 8
[  320.118143][ T7834] syz.3.539 (7834): drop_caches: 2
[  320.344182][ T7831] loop2: detected capacity change from 0 to 32768
[  320.623259][ T7843] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  323.856802][ T7878] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  325.305870][ T7899] jffs2: notice: (7899) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  326.292594][ T7903] syz.3.557 (7903): drop_caches: 2
[  326.339145][ T7906] loop0: detected capacity change from 0 to 1024
[  326.498901][ T7908] NILFS (nbd1): device size too small
[  328.979245][ T7932] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  330.078386][    C0] sched: RT throttling activated
[  330.288059][ T7944] jffs2: notice: (7944) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  330.460577][ T7947] NILFS (nbd0): device size too small
[  332.146295][ T7964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'.
[  332.243211][ T7950] loop2: detected capacity change from 0 to 32768
[  333.003811][ T7970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.576'.
[  333.954462][ T7980] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  334.220700][ T7988] jffs2: notice: (7988) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  334.714907][ T7998] syz.3.582 (7998): drop_caches: 2
[  335.809259][ T8006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.584'.
[  336.795771][ T8012] netlink: 32 bytes leftover after parsing attributes in process `syz.0.587'.
[  337.407275][ T8003] loop1: detected capacity change from 0 to 32768
[  339.416709][ T8038] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  340.103182][ T8037] NILFS (nbd2): device size too small
[  340.475840][ T8046] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  340.484511][ T8046] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  340.493122][ T8046] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  340.870754][ T8056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.597'.
[  342.538196][ T8060] netlink: 32 bytes leftover after parsing attributes in process `syz.2.598'.
[  345.455654][ T8071] loop3: detected capacity change from 0 to 512
[  345.501209][ T8071] EXT4-fs (loop3): Test dummy encryption mode enabled
[  345.533810][ T8071] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  345.608551][ T8071] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  345.801324][ T8071] EXT4-fs (loop3): 1 truncate cleaned up
[  345.814258][ T8071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.234852][ T8085] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  348.064907][ T8106] NILFS (nbd0): device size too small
[  348.782241][ T8116] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  348.789342][ T8116] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  348.798225][ T8116] vhci_hcd vhci_hcd.0: Device attached
[  349.300017][ T8118] vhci_hcd: connection closed
[  349.441749][ T1140] vhci_hcd: stop threads
[  349.551314][ T6219] usb 36-1: SetAddress Request (2) to port 0
[  349.692284][ T6219] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd
[  349.704025][ T1140] vhci_hcd: release socket
[  349.770059][ T1140] vhci_hcd: disconnect device
[  349.858518][ T6219] usb 36-1: enqueue for inactive port 0
[  349.881751][ T8124] gadgetfs: bound to dummy_udc driver
[  350.258493][ T5842] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  350.335278][    C0] gadgetfs: connected
[  350.409436][ T5842] gadgetfs: disconnected
[  350.633224][    C0] gadgetfs: connected
[  350.662450][ T5842] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  350.729072][ T8120] gadgetfs: suspended from state 3
[  350.734981][ T8120] gadgetfs: disconnected
[  350.773110][ T5842] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  350.836162][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.914888][ T5842] usb 1-1: can't set config #1, error -71
[  350.935902][ T5842] usb 1-1: USB disconnect, device number 13
[  350.948241][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.079801][ T6219] usb usb36-port1: attempt power cycle
[  351.769495][ T6219] usb usb36-port1: unable to enumerate USB device
[  351.883318][ T8141] comedi comedi1: dt2814: I/O port conflict (0x5,2)
[  352.619793][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'.
[  352.995099][ T8127] loop1: detected capacity change from 0 to 32768
[  353.076706][ T8127] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  353.179190][ T8161] NILFS (nbd2): device size too small
[  353.675130][ T8127] XFS (loop1): Ending clean mount
[  353.952355][ T5777] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  355.792554][ T8190] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  355.799220][ T8190] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  355.808280][ T8190] vhci_hcd vhci_hcd.0: Device attached
[  356.210354][ T6219] usb 38-1: SetAddress Request (2) to port 0
[  356.231522][ T6219] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[  356.552562][ T8191] vhci_hcd: connection reset by peer
[  356.588195][ T1140] vhci_hcd: stop threads
[  356.636346][ T1140] vhci_hcd: release socket
[  356.692731][ T1140] vhci_hcd: disconnect device
[  357.234793][ T8199] NILFS (nbd2): device size too small
[  359.141606][ T8206] loop0: detected capacity change from 0 to 1024
[  359.328596][  T173] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  360.389741][  T173] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00
[  360.470004][  T173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.591420][  T173] usb 2-1: Product: syz
[  360.599644][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'.
[  360.612116][  T173] usb 2-1: Manufacturer: syz
[  360.638429][  T173] usb 2-1: SerialNumber: syz
[  360.686811][  T173] usb 2-1: Found UVC 1.00 device syz (046d:0821)
[  360.735474][ T8213] bond3: entered promiscuous mode
[  360.741217][  T173] usb 2-1: No streaming interface found for terminal 2.
[  360.771053][ T8213] bond3 (unregistering): Released all slaves
[  361.012031][  T173] usb 2-1: USB disconnect, device number 9
[  361.418871][ T6219] usb 38-1: device descriptor read/8, error -110
[  361.679224][ T8236] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  361.685804][ T8236] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  361.694019][ T8236] vhci_hcd vhci_hcd.0: Device attached
[  362.068708][  T173] usb 36-1: SetAddress Request (6) to port 0
[  362.097711][ T6219] usb usb38-port1: attempt power cycle
[  362.123174][  T173] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd
[  362.448016][ T8237] vhci_hcd: connection reset by peer
[  362.513662][   T11] vhci_hcd: stop threads
[  362.576950][   T11] vhci_hcd: release socket
[  362.644110][   T11] vhci_hcd: disconnect device
[  364.007682][ T8251] NILFS (nbd2): device size too small
[  364.094205][ T8243] syz.3.636 uses obsolete (PF_INET,SOCK_PACKET)
[  364.235300][ T8253] loop0: detected capacity change from 0 to 1024
[  364.278530][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'.
[  364.290178][ T6219] usb usb38-port1: unable to enumerate USB device
[  366.245326][ T8255] bond3: entered promiscuous mode
[  366.266111][ T8255] bond3 (unregistering): Released all slaves
[  367.268533][  T173] usb 36-1: device descriptor read/8, error -110
[  368.094848][ T8282] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  368.094905][ T8282] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  368.095094][ T8282] vhci_hcd vhci_hcd.0: Device attached
[  368.224564][ T8284] vhci_hcd: connection closed
[  368.243903][ T1140] vhci_hcd: stop threads
[  368.243957][ T1140] vhci_hcd: release socket
[  368.244071][ T1140] vhci_hcd: disconnect device
[  368.367635][  T173] usb usb36-port1: attempt power cycle
[  368.954077][ T8289] syz.2.650 (8289): drop_caches: 2
[  368.980615][ T8292] loop3: detected capacity change from 0 to 1024
[  369.459427][  T173] usb usb36-port1: unable to enumerate USB device
[  369.553810][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'.
[  369.680348][ T8296] bond1: entered promiscuous mode
[  369.695593][ T8296] bond1 (unregistering): Released all slaves
[  370.083661][ T8304] syzkaller0: entered promiscuous mode
[  370.094091][ T8304] syzkaller0: entered allmulticast mode
[  370.115153][ T8304] syzkaller0: mtu less than device minimum
[  371.836830][ T8318] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  371.843450][ T8318] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  371.851527][ T8318] vhci_hcd vhci_hcd.0: Device attached
[  371.928821][ T8319] vhci_hcd: connection closed
[  371.995349][   T43] vhci_hcd: stop threads
[  372.130538][   T43] vhci_hcd: release socket
[  372.190770][   T43] vhci_hcd: disconnect device
[  373.051964][ T8330] loop1: detected capacity change from 0 to 2048
[  373.191554][ T8330] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  373.223247][ T8332] syzkaller0: entered promiscuous mode
[  373.238815][ T8332] syzkaller0: entered allmulticast mode
[  373.253673][ T8330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  373.285732][ T8334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.665'.
[  373.323959][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  373.323972][   T28] audit: type=1800 audit(1787253317.343:33): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.662" name="file1" dev="loop1" ino=1346 res=0 errno=0
[  374.431481][ T8348] NILFS (nbd0): device size too small
[  375.369856][ T8350] syz.2.668 (8350): drop_caches: 2
[  376.670472][  T173] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  377.058501][  T173] usb 2-1: Using ep0 maxpacket: 16
[  377.066673][  T173] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[  377.094572][  T173] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  377.107722][  T173] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  377.142528][  T173] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  377.156952][  T173] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  377.170924][  T173] usb 2-1: config 0 has no interface number 0
[  377.177187][  T173] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  377.200763][ T8366] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  377.209112][  T173] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  377.221583][ T8366] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  377.228528][  T173] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  377.242035][ T8366] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  377.248794][  T173] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  377.297884][  T173] usb 2-1: config 0 interface 125 has no altsetting 0
[  377.305272][  T173] usb 2-1: config 0 interface 125 has no altsetting 2
[  377.349215][  T173] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  377.369422][  T173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.387275][  T173] usb 2-1: Product: syz
[  377.392156][  T173] usb 2-1: Manufacturer: syz
[  377.398849][  T173] usb 2-1: SerialNumber: syz
[  377.406796][  T173] usb 2-1: config 0 descriptor??
[  377.429503][ T8368] netlink: 32 bytes leftover after parsing attributes in process `syz.3.675'.
[  377.446244][  T173] usb 2-1: selecting invalid altsetting 2
[  377.678581][ T8371] gadgetfs: bound to dummy_udc driver
[  377.948766][ T5842] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  377.956917][    C0] gadgetfs: connected
[  377.964291][ T5842] gadgetfs: disconnected
[  378.062565][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  378.069566][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  378.169603][    C0] gadgetfs: connected
[  378.191345][ T5842] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  378.290775][ T5842] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  378.405158][ T8369] gadgetfs: suspended from state 3
[  378.410655][ T8369] gadgetfs: disconnected
[  378.436316][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.518795][ T5842] usb 1-1: can't set config #1, error -71
[  378.536082][    C0] usb 2-1: async_complete: urb error -71
[  378.541842][    C0] usb 2-1: async_complete: urb error -71
[  378.591723][  T173] get_1284_register: usb error -71
[  378.610167][ T5842] usb 1-1: USB disconnect, device number 14
[  378.654090][  T173] usb 2-1: USB disconnect, device number 10
[  378.877247][ T8375] syzkaller0: mtu less than device minimum
[  379.391022][ T8391] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  379.397608][ T8391] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  379.405584][ T8391] vhci_hcd vhci_hcd.0: Device attached
[  379.728840][  T173] usb 38-1: SetAddress Request (6) to port 0
[  379.750787][  T173] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd
[  380.159003][ T8392] vhci_hcd: connection reset by peer
[  380.212208][   T43] vhci_hcd: stop threads
[  380.247563][   T43] vhci_hcd: release socket
[  380.307862][   T43] vhci_hcd: disconnect device
[  380.862568][ T8400] netlink: 32 bytes leftover after parsing attributes in process `syz.1.684'.
[  381.056979][ T8405] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  381.065526][ T8405] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  381.074468][ T8405] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  381.930882][ T8412] loop0: detected capacity change from 0 to 1024
[  381.946773][ T8414] syzkaller0: entered promiscuous mode
[  381.972636][ T8414] syzkaller0: entered allmulticast mode
[  382.989675][ T8425] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  382.996261][ T8425] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  383.004520][ T8425] vhci_hcd vhci_hcd.0: Device attached
[  383.005450][ T8428] syz.0.689 (8428): drop_caches: 2
[  384.189423][ T8426] vhci_hcd: connection closed
[  384.222356][   T11] vhci_hcd: stop threads
[  384.268631][   T11] vhci_hcd: release socket
[  384.293342][   T11] vhci_hcd: disconnect device
[  384.395187][ T8433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.694'.
[  384.759026][ T8441] loop3: detected capacity change from 0 to 1024
[  384.858537][  T173] usb 38-1: device descriptor read/8, error -110
[  387.049311][  T173] usb usb38-port1: attempt power cycle
[  387.134532][ T8449] loop1: detected capacity change from 0 to 1024
[  388.059791][  T173] usb usb38-port1: unable to enumerate USB device
[  388.183911][ T8458] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  388.192918][ T8458] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  388.201561][ T8458] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  389.385339][ T8473] NILFS (nbd0): device size too small
[  390.352088][ T8479] netlink: 32 bytes leftover after parsing attributes in process `syz.1.704'.
[  391.436654][ T8512] syz.0.711 (8512): drop_caches: 2
[  391.478687][  T790] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  391.688858][  T790] usb 2-1: Using ep0 maxpacket: 8
[  391.708988][  T790] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  391.734700][  T790] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  391.762960][  T790] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  391.790331][  T790] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  391.816742][  T790] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  391.862852][  T790] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  391.882468][  T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.127599][  T790] usb 2-1: usb_control_msg returned -32
[  392.141394][  T790] usbtmc 2-1:16.0: can't read capabilities
[  392.350989][ T5842] usb 2-1: USB disconnect, device number 11
[  392.465185][ T8532] NILFS (nbd2): device size too small
[  394.741851][ T8550] sd 0:0:1:0: PR command failed: 1026
[  394.756587][ T8550] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  394.765599][ T8550] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  396.598786][ T5841] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  396.683317][ T8554] loop3: detected capacity change from 0 to 32768
[  396.788423][ T5841] usb 3-1: Using ep0 maxpacket: 8
[  396.822092][ T5841] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  396.842903][ T5841] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  396.868486][ T5841] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  396.893995][ T5841] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  396.917177][ T5841] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  396.948474][ T5841] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  396.980181][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.050148][ T8577] NILFS (nbd1): device size too small
[  398.056934][ T5841] usb 3-1: usb_control_msg returned -32
[  398.088675][ T5841] usbtmc 3-1:16.0: can't read capabilities
[  398.148058][ T8582] syz.3.729 (8582): drop_caches: 2
[  399.138531][ T5841] usb 3-1: USB disconnect, device number 10
[  400.182094][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.736'.
[  400.692765][ T8600] bond1: entered promiscuous mode
[  400.899458][ T8600] bond1 (unregistering): Released all slaves
[  401.275050][ T8617] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  401.312257][ T8618] NILFS (nbd0): device size too small
[  401.347739][ T8619] syzkaller0: entered promiscuous mode
[  401.383417][ T8619] syzkaller0: entered allmulticast mode
[  403.608492][ T5842] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  403.818802][ T5842] usb 1-1: Using ep0 maxpacket: 8
[  403.842277][ T5842] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  403.857306][ T5842] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  403.888123][ T5842] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  403.908239][ T5842] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  403.928852][ T5842] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  403.948445][ T5842] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  403.977879][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.216576][ T5842] usb 1-1: usb_control_msg returned -32
[  404.243949][ T5842] usbtmc 1-1:16.0: can't read capabilities
[  404.279338][ T5842] usb 1-1: USB disconnect, device number 15
[  406.177854][ T8661] loop0: detected capacity change from 0 to 1024
[  407.383884][ T8671] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  407.392671][ T8671] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  407.403491][ T8671] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  409.638681][ T6219] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  409.828473][ T6219] usb 2-1: Using ep0 maxpacket: 8
[  409.845938][ T6219] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  409.864216][ T6219] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  409.888738][ T6219] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  409.908482][ T6219] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  409.928599][ T6219] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  409.958551][ T6219] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  409.968672][ T6219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.307711][ T6219] usb 2-1: usb_control_msg returned -32
[  410.379961][ T6219] usbtmc 2-1:16.0: can't read capabilities
[  410.614417][ T6219] usb 2-1: USB disconnect, device number 12
[  411.489915][ T8716] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  411.498296][ T8716] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  411.507072][ T8716] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  412.415287][ T8705] loop0: detected capacity change from 0 to 32768
[  412.604718][   T28] audit: type=1800 audit(1787253356.623:34): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.762" name="file1" dev="loop0" ino=4 res=0 errno=0
[  412.936661][ T5775] non-latin1 character 0x3ff found in JFS file name
[  412.958709][ T5775] mount with iocharset=utf8 to access
[  413.012996][ T5775] read_mapping_page failed!
[  413.017565][ T5775] ERROR: (device loop0): txCommit: 
[  413.017565][ T5775] 
[  413.058587][ T5775] ERROR: (device loop0): remounting filesystem as read-only
[  413.849020][   T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.876933][ T8724] ------------[ cut here ]------------
[  413.882977][ T8724] kernel BUG at fs/jfs/inode.c:175!
[  413.893172][ T8724] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  413.899282][ T8724] CPU: 0 PID: 8724 Comm: syz.0.762 Not tainted syzkaller #0
[  413.906595][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  413.916705][ T8724] RIP: 0010:jfs_evict_inode+0x424/0x430
[  413.922294][ T8724] Code: df fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 36 ac df fe e9 16 fe ff ff e8 1c 29 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 56 41 54
[  413.941930][ T8724] RSP: 0000:ffffc900033cf728 EFLAGS: 00010293
[  413.948020][ T8724] RAX: ffffffff83004904 RBX: ffff88805daf3bb0 RCX: ffff88802a34bc00
[  413.956010][ T8724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805daf3bb0
[  413.964000][ T8724] RBP: 0000000000000001 R08: ffffffff911ed677 R09: 1ffffffff223dace
[  413.971989][ T8724] R10: dffffc0000000000 R11: fffffbfff223dacf R12: dffffc0000000000
[  413.979978][ T8724] R13: dffffc0000000000 R14: ffff88805daf3838 R15: ffff88805daf3be8
[  413.987991][ T8724] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  413.996938][ T8724] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  414.003538][ T8724] CR2: 000000110c347cd8 CR3: 0000000031472000 CR4: 00000000003526f0
[  414.011533][ T8724] Call Trace:
[  414.014831][ T8724]  <TASK>
[  414.017777][ T8724]  ? jfs_write_inode+0x220/0x220
[  414.022741][ T8724]  evict+0x4b7/0x8a0
[  414.026700][ T8724]  ? proc_nr_inodes+0x230/0x230
[  414.031580][ T8724]  ? do_raw_spin_unlock+0x121/0x230
[  414.036829][ T8724]  ? do_raw_spin_unlock+0x121/0x230
[  414.042058][ T8724]  evict_inodes+0x64a/0x6e0
[  414.046590][ T8724]  ? clear_inode+0x150/0x150
[  414.051201][ T8724]  ? dentry_kill+0xb8/0x290
[  414.055737][ T8724]  generic_shutdown_super+0x97/0x2b0
[  414.061097][ T8724]  kill_block_super+0x44/0x90
[  414.065790][ T8724]  deactivate_locked_super+0x97/0x100
[  414.071181][ T8724]  cleanup_mnt+0x3d7/0x460
[  414.075620][ T8724]  task_work_run+0x1d4/0x260
[  414.080245][ T8724]  ? task_work_cancel+0x220/0x220
[  414.085287][ T8724]  ? do_exit+0x981/0x2530
[  414.089639][ T8724]  ? kmem_cache_free+0xf8/0x290
[  414.094524][ T8724]  do_exit+0x986/0x2530
[  414.098701][ T8724]  ? nfs_stat_to_errno+0x170/0x170
[  414.103832][ T8724]  ? put_task_struct+0xc0/0xc0
[  414.108619][ T8724]  ? lock_chain_count+0x20/0x20
[  414.113482][ T8724]  do_group_exit+0x22d/0x2f0
[  414.118130][ T8724]  ? lockdep_hardirqs_on+0x98/0x150
[  414.123459][ T8724]  get_signal+0x12a6/0x1390
[  414.127995][ T8724]  arch_do_signal_or_restart+0xc2/0x7b0
[  414.133610][ T8724]  ? get_sigframe_size+0x20/0x20
[  414.138567][ T8724]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  414.144566][ T8724]  ? exit_to_user_mode_loop+0x3b/0x110
[  414.150043][ T8724]  exit_to_user_mode_loop+0x70/0x110
[  414.155356][ T8724]  exit_to_user_mode_prepare+0xee/0x180
[  414.160928][ T8724]  irqentry_exit_to_user_mode+0x9/0x30
[  414.166448][ T8724]  exc_page_fault+0x8c/0x100
[  414.171059][ T8724]  asm_exc_page_fault+0x26/0x30
[  414.175994][ T8724] RIP: 0033:0x0
[  414.179463][ T8724] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  414.186929][ T8724] RSP: 002b:0000200000000448 EFLAGS: 00010217
[  414.193012][ T8724] RAX: 0000000000000000 RBX: 00007f4a15625fa0 RCX: 00007f4a1539e0d9
[  414.201062][ T8724] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000002000000
[  414.209050][ T8724] RBP: 00007f4a15435024 R08: 0000000000000000 R09: 0000000000000000
[  414.217055][ T8724] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  414.225033][ T8724] R13: 00007f4a15626038 R14: 00007f4a15625fa0 R15: 00007ffff1b29e38
[  414.233019][ T8724]  </TASK>
[  414.236053][ T8724] Modules linked in:
[  414.254734][ T8724] ---[ end trace 0000000000000000 ]---
[  414.260386][ T8724] RIP: 0010:jfs_evict_inode+0x424/0x430
[  414.266072][ T8724] Code: df fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 36 ac df fe e9 16 fe ff ff e8 1c 29 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 56 41 54
[  414.306097][ T8724] RSP: 0000:ffffc900033cf728 EFLAGS: 00010293
[  414.319505][ T8724] RAX: ffffffff83004904 RBX: ffff88805daf3bb0 RCX: ffff88802a34bc00
[  414.329552][   T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.349481][ T8724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805daf3bb0
[  414.358010][ T8724] RBP: 0000000000000001 R08: ffffffff911ed677 R09: 1ffffffff223dace
[  414.380451][ T8724] R10: dffffc0000000000 R11: fffffbfff223dacf R12: dffffc0000000000
[  414.388672][ T8724] R13: dffffc0000000000 R14: ffff88805daf3838 R15: ffff88805daf3be8
[  414.396674][ T8724] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  414.405887][ T8724] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  414.412937][ T8724] CR2: 00007f43821dc558 CR3: 000000005c478000 CR4: 00000000003526e0
[  414.416506][   T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.422758][ T8724] Kernel panic - not syncing: Fatal exception
[  414.431877][ T8724] Kernel Offset: disabled