last executing test programs:

3m41.439988839s ago: executing program 2 (id=60):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m40.950392341s ago: executing program 2 (id=62):
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0)

3m40.562266355s ago: executing program 2 (id=68):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="04", 0x1}], 0x1, 0x0, 0x50000000)

3m40.343471022s ago: executing program 2 (id=71):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./lower1/dir1\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/dir2\x00', 0x0)
umount2(&(0x7f0000000600)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000640)='./mnt\x00', 0x0, 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xe10, 0x80000001f000000})

3m39.677471622s ago: executing program 2 (id=74):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./lower1/dir1\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/dir2\x00', 0x0)
umount2(&(0x7f0000000600)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000640)='./mnt\x00', 0x0, 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xe10, 0x80000001f000000})

3m37.779842807s ago: executing program 2 (id=78):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000c40)={[{@grpquota}, {@noblock_validity}, {@discard}, {@nogrpid}, {@data_writeback, 0x0}, {@sysvgroups}, {@nodioread_nolock}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9b}}, {@data_writeback}, {@errors_continue}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x87cb}}, {@abort}, {@dax_never}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}], [{@obj_role}, {@context={'context', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}], 0x2c}, 0x1, 0x532, &(0x7f0000000480)="$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")
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,showexec\x00dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESOCT, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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")

3m22.714084712s ago: executing program 32 (id=78):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000c40)={[{@grpquota}, {@noblock_validity}, {@discard}, {@nogrpid}, {@data_writeback, 0x0}, {@sysvgroups}, {@nodioread_nolock}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9b}}, {@data_writeback}, {@errors_continue}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x87cb}}, {@abort}, {@dax_never}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}], [{@obj_role}, {@context={'context', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}], 0x2c}, 0x1, 0x532, &(0x7f0000000480)="$eJzs3M9rHNcdAPDvrn7XUrV1f7pua7VuqWipZck/Dz3YpgVfWgotxb0UFEk2jmUnWArYRmA5BBtySPBf4CS3QP6B5JRcQhJySPA1JpBLQsAEXaz4ECbMzuxqV6vVL+9KyPp8YHe/8+bNznsz72nnzdtVALvWUPpUiOiPiM/6IwazxfoMQ9nL4sLcxLcLcxOFSJJ/f1Mo53u0MDdRyVrZbk++MFyMKL5UiP2Nu+2ZuX7j0vj09NTVPGFktphHl8cvTF2YujJ28uTRI30njo8da0k9OyrBvrP/u/uPiXN3n/nwrbS8SZ5cW49MqfzcvfE9VA/EUAzVH8saf1j3++4MAzVxoTN9Lm5fYVi3tNWmp6sr7f8xGB3lpcxg/P3FbS0c0FZJkiQ9DanVz7L5pFahkG2QJLcS4ClQiLVyLPsrADwlKh/0jxbSkercROM4+On28HSUR0BpvRfzR7amszyCHSplY6OuNu3/JxFxbv7xvco12G47/gDA1nv3dMSdM9l1R+WRrSnGz2ry/TCyuaFSRPwoIvZGxI8j4u2I+GlEOe/PI+IXNdsMrDkL0JXNP9VovP75tC8Pai9XWya9/vtrPrdVf/1XLXmpI18aKNe/q3D+4vTU4fyYDEdXT7o82vjW1dtq7/3t/qvN9j+UX/9VHun+09elHMWvO5fdoJscnx1/0npXPLxVPrA36+r/RZQnsTrzyav0ZV9E/HIT758es4t/evNXzdbX1T+tZ0P9X1kKS8s27txEgZZJXo/4Y3b+56Pu/GeV786jkdnLz4/MXL/xl4u185OjJ46PHRvpjempwyOVVtHoo09u/ysPG4YRq5z/Stdo60Taw1vR+4MV23915rKURtX52pmN7+P2gztNxzSbbf/dhf+U48r87LXx2dmroxHdhfnG9LGlba+N99XlT9v/8MGV+//eiO9ey7fbHxFpI/51RPwmIg7kZf9tRPwuIg6uUv8Pzvz+2WZDyKE0ddX6t1da/8kNnf9mwamPI1Ze1XHp/Xcadvxy1rxrz39XPL632DBhnp7/o+VoOE+ZHJ/tXateq5W0NniCQwcAAAA7xoGI6I9C8VB+o6k/isVDhyL2VO+gzMz++fxzL1yZzH4jUIquYuVO12DN/dDR/PZcupxuNVaznK4/Ur5vnCRJ0pcup+P36YHtrTrsenua9P/UVx3bXTqg7TY0j9bsF23AjrS8/z9Y95at/0IGsLVa8D0aYIfS/2H3Wnf/b9ev4IBts1L/vxmxuA1FAbbYSv3/vw0pp7akLMDWMv6H3Wvz/d+XAWCn8/kPu9K6fiS/iWDv2VXyFDrbs9PmQTGy4Mv/Z9Ve/l8AShGVlMo1zepv+HkxojUl7HjyCqYlzlP66s5pccWteqMVRzWKa+bp3MA/Ymga9LXoONcFxaWUwhqZ++LSP++3tYn2NDbI5a232thuVoIb7e4y5U7wxjb+aQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiJ7wMAAP//shfFRw==")
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,showexec\x00dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESOCT, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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")

3m6.056778251s ago: executing program 3 (id=146):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/net/stat\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000001140)='rt_cache\x00', 0x0, 0x0)
read(r1, &(0x7f0000001180)=""/4096, 0x1000)
readv(r1, 0x0, 0x0)

3m5.474900428s ago: executing program 3 (id=149):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x2017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362b, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0)
wait4(0x0, 0x0, 0xa, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0xa, "87e87b8f"}, @main=@item_012={0x2, 0x0, 0x8, "6285"}, @main=@item_012={0x0, 0x0, 0xc}, @global=@item_4={0x3, 0x1, 0x2, "621307cf"}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0x9, "7b805979"}, @local=@item_012={0x1, 0x2, 0x7, '{'}, @global=@item_012={0x1, 0x1, 0x8, '}'}]}}, 0x0}, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

3m1.219940915s ago: executing program 3 (id=159):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})

3m0.213211282s ago: executing program 3 (id=161):
syz_open_dev$ptys(0xc, 0x3, 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r5, 0x200a0204)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3})
keyctl$join(0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f00000006c0)=[@increfs, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0})
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff)

2m58.36074047s ago: executing program 3 (id=163):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./lower1/dir1\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/dir2\x00', 0x0)
umount2(&(0x7f0000000600)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000640)='./mnt\x00', 0x0, 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xe10, 0x80000001f000000})

2m57.651194628s ago: executing program 3 (id=168):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0x1, 0x392, &(0x7f0000001000)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140))

2m42.534050631s ago: executing program 33 (id=168):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0x1, 0x392, &(0x7f0000001000)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140))

2m38.903303265s ago: executing program 0 (id=208):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', r0}, 0x18)

2m38.625094701s ago: executing program 0 (id=211):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./lower1/dir1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./lower1/dir1\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/dir2\x00', 0x0)
umount2(&(0x7f0000000600)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000640)='./mnt\x00', 0x0, 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xe10, 0x80000001f000000})

2m38.020306991s ago: executing program 0 (id=213):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000080)={[{@orlov}, {@norecovery}, {@data_err_ignore}, {@norecovery}]}, 0x8, 0x617, &(0x7f0000001100)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000640)=""/204, 0x1a, 0xcc, 0x1}, 0x28)
r0 = socket$igmp6(0xa, 0x3, 0x2)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@private0, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010100, {0x0, 0x9, 0x6, 0xfffb, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x6, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000002300)={'nat\x00', 0x0, 0x3, 0x1000, [0x2, 0x80000000, 0x1, 0x7, 0x6, 0x6], 0x1, &(0x7f0000000140)=[{}], &(0x7f0000001300)=""/4096}, 0x0)
llistxattr(0x0, &(0x7f0000000040)=""/228, 0xe4)
syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}]}}}}}, 0x0)
r5 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r5, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)

2m33.867961002s ago: executing program 0 (id=215):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:07.0/remove\x00', 0x1, 0x0)
write(r0, &(0x7f00000004c0), 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

2m33.537615667s ago: executing program 0 (id=218):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000400)={0x1e52, 0x4, 0xe, 0x6, 0xff, "04000dcd00000c00", 0x0, 0x400076c})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x7)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x688100)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})

2m29.853313569s ago: executing program 0 (id=221):
openat$kvm(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000240)=0x5, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x6000)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xe5e1}, 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
recvmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001c00)=[{0x0}], 0x1}, 0x81}], 0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
socket(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711841000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

2m27.02153561s ago: executing program 4 (id=229):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f00000007c0)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x1a83fea49a0a00b0, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x33, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x35, 0x30, 0x35]}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000940)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30, 0x30, 0x75a52dfb969e39f, 0x30, 0x30, 0x61]}, &(0x7f00000009c0)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x33, 0x61, 0x31, 0x30, 0x35, 0x63, 0x62, 0x38, 0x62, 0x39, 0x38, 0x62, 0x37, 0xf, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0)

2m25.830027278s ago: executing program 4 (id=230):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0xb}, [@generic={0x73, 0x1, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x32600)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000000a00)="c7", 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0xab, 0x0, &(0x7f0000000240)="8d6df4c84b9f202e99126cc8dfa38fedc0781cf0689ccf88fdc9e17bdc8fae647f56dc4e2ab2e6a4935ad76ff09391ef31ab54fdddb920ae6614adc620890cae994458d2d3370c5c218599b583779307ce30a0209d45a2456bcf605865f391063cb9c2e2d0696304b03fd53da5bf44c23977ba7a9c5fa7ccf548bf79364feb15fa040bab8ab5419b0eb43a17b8105f40e40dca063b214eeb4ac072810b3c97453599295efa6e063015efe3"})
sendfile(r2, r0, 0x0, 0x2fffe)

2m21.30357387s ago: executing program 4 (id=233):
syz_open_dev$ptys(0xc, 0x3, 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r5, 0x200a0204)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3})
keyctl$join(0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff)

2m18.218353113s ago: executing program 4 (id=235):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x4)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)

2m17.39735522s ago: executing program 4 (id=237):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000001200fbad2dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04020000200000000800128004"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4040000)

2m15.361241688s ago: executing program 4 (id=240):
socket$tipc(0x1e, 0x5, 0x0)
pipe(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = open(&(0x7f00000000c0)='./file1\x00', 0x108843, 0x98)
fcntl$setlease(r3, 0x400, 0x1)
r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'dummy0\x00'})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000100)=0x9, 0x4)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r6, 0x852ac000)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c)
setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000280)=0x6c, 0x4)
recvmmsg(r6, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x3ffffffe}], 0x1, 0x40002002, 0x0)

2m14.536451665s ago: executing program 34 (id=240):
socket$tipc(0x1e, 0x5, 0x0)
pipe(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = open(&(0x7f00000000c0)='./file1\x00', 0x108843, 0x98)
fcntl$setlease(r3, 0x400, 0x1)
r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'dummy0\x00'})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000100)=0x9, 0x4)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r6, 0x852ac000)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c)
setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000280)=0x6c, 0x4)
recvmmsg(r6, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x3ffffffe}], 0x1, 0x40002002, 0x0)

2m14.394503549s ago: executing program 35 (id=221):
openat$kvm(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000240)=0x5, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x6000)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xe5e1}, 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
recvmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001c00)=[{0x0}], 0x1}, 0x81}], 0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
socket(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711841000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

1m41.795841978s ago: executing program 1 (id=259):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./lower1/dir1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./lower1/dir1\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/dir2\x00', 0x0)
umount2(&(0x7f0000000600)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000640)='./mnt\x00', 0x0, 0x0, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0xe10, 0x80000001f000000})

1m37.648683647s ago: executing program 1 (id=265):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)

1m27.549489017s ago: executing program 1 (id=270):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)="306663353a313232373a620afaf6379a248d1d6534518f1095109da34b6d6537a638885eff400aa56f6ea2e5bf276be4483f51727ff6d4f35a49946368aa4531310375bc7bb8ec4878820dcb0cec31ccf973afca20626f31b1f61769f04b55210168f24399b07173", 0x68)

1m27.083879824s ago: executing program 1 (id=273):
socket$netlink(0x10, 0x3, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x7a)
close(0x3)
socket$tipc(0x1e, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet_udp(0x2, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000003, 0x401d031, r0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r1 = open(0x0, 0x10507e, 0xa6)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
syz_ublk_setup_queues(r1, r2, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0x3, 0x3b2}, 0x0, 0x1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0)

1m25.425913809s ago: executing program 1 (id=277):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x8)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)

1m21.776797196s ago: executing program 1 (id=278):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)

1m5.214834849s ago: executing program 36 (id=278):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)

12.26908232s ago: executing program 8 (id=389):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='esdfs\x00', 0x22000, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x1e, 0x21, 0x70bd27, 0x0, {0x7}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x0)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x102, 0x4932, 0x7f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6   \x00'}, 0x20)

8.630051375s ago: executing program 8 (id=391):
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x800000, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES16=r1])
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x200540c0, &(0x7f00000001c0)={0x11, 0x8, r3, 0x1, 0xda, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

8.05692964s ago: executing program 6 (id=397):
r0 = socket(0x1, 0x5, 0x0)
close(r0)
r1 = timerfd_create(0x0, 0x80000)
timerfd_settime(r1, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)={0x3})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000)
epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x4, 0x0, 0x0)

7.951586678s ago: executing program 8 (id=398):
socket$netlink(0x10, 0x3, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x7a)
close(0x3)
socket$tipc(0x1e, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet_udp(0x2, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000003, 0x401d031, r0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
open(0x0, 0x10507e, 0xa6)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0)

7.815827141s ago: executing program 6 (id=401):
socket$netlink(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000200)='msdos\x00', 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x7a)
close(0x3)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, 0x0, 0x50007a2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20, 0x80)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, 0x0, 0x0)
preadv2(r1, 0x0, 0x0, 0x2, 0x7, 0x1f)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0)

6.13481248s ago: executing program 8 (id=410):
userfaultfd(0x801)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket(0x1, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
clock_adjtime(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xee65, 0x0, 0x2, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x89fb8, 0x20000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2, 0x0, 0x2a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x20000, 0x40040001, 0x3d5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x400001, 0xffffffff}}], 0x1, 0x0, 0x0)

6.064032352s ago: executing program 7 (id=411):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@barrier}, {@mblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)

5.960997729s ago: executing program 6 (id=412):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac3(0x3, 0x98, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000008410e494240000102030109028600030109200c080b0001010130080904000000010130000a24010122000010000013240303000001060004000002050004000a001f24", @ANYRES16=r2], 0x0)

5.35274378s ago: executing program 7 (id=415):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

5.29272882s ago: executing program 5 (id=416):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
setrlimit(0x9, &(0x7f0000002140)={0xfffffffffffeffff, 0x7fffffff})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0xbf5, 0x20000)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x10000008}, {0x9, 0xfffffff6}], 0xee01}, 0x18, 0x0)

5.074026627s ago: executing program 7 (id=417):
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x800000, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES16=r1])
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x200540c0, &(0x7f00000001c0)={0x11, 0x8, r3, 0x1, 0xda, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

4.913318183s ago: executing program 8 (id=418):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000080)={[{@nogrpid}, {@data_journal}, {@norecovery}, {@errors_remount}, {@nodiscard}]}, 0x1, 0x61d, &(0x7f0000000180)="$eJzs3c9vE1ceAPDvjJ0fJLubgFa7yx6WSKsVSLskJMAKVZUKd4Toj1tPKQmIEghKUrWhSA0SvVSqeumhUk89lP4XLVKvPfTaQy89VUioQjmUChVXM7aD49iJY+w4JJ+PNPG8mfG8N5Bv3vPzezMB7Ftj2Y804nBE3EwiRjYckeYHZcetPrp9afVRtq1Uev2XJG5/kKzUHplUXoezH8WI30ci+T6NOFTYmO/i8q1r03NzswuV9MTS9ZsTi8u3jl+9Pn1l9srsjan/T505fer0mckT7V9c4VmZMufvvv3uyEcX3vzy8yfJ5Fc/XkjibDytlC27tvq3D7Sfc24sxqJU9rh2ezEizjznuXeLX0fK11Mrqd/ArnW58vvYFxF/j5Eo1PxvjsSHr/a0cEBXlZKo1lHAvpO0Ff+DnS8IsMOq7YDyZ/vysnWrIe1yqwTYCQ/PlTsAyrHfFxHV+C+W+wZjMO8bGFpN1vXzJBHxHD1za7I8vvv2wt1sibp+uAbdhkAHrdyp9nLX1/9JHpujMZinhlbTdfGf1izZ9tfazH+sLt1a+wPohJU7EfGPSv3fH9uK/7Ga+H+rzfzFPwAAAAAAAHTO/XMR8b9G4//StfE//Q3G/wxHxNkO5L/193/pg8pK0oHsgBoPz0W83HD879oY39FCJfXnfDxAX3L56tzsiYj4S0Qci76BLD1Zd97aEcLHPz70WbP8a8f/ZUuWf3UsYOVMD4p1E3Fnppemn/e6gYiHdyL+mY//PVLZsn78T1b/Jw3q/yy+b7aYx6H/3LvYbN/W8Q90S+mLiKMN6/9nze1k8/tzTOTtgYlqq2Cjf73/ydfN8hf/0DtZ/T+0efwPJLX361nc3vn7I+LkcrHUbH+77f/+5I1CrOTnr05iXFqYjOhPzheq+Wbem15aWpjaXplhr6rGQ/46WY7/Y//evP9vrf1fE4cHImKlxTz/9nT4p2b71P/QO1n8z2xe/4+ur/+3vzJ1b/SbJtknF1uq/0/ldfqxyhb9f1Br4/04Wg3QnhQXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5waUT8KZJ0fG09TcfHI4Yj4q8xlM7NLy799/L8Ozdmsn358//T6pN+R8rppPr8/9GI6IuILD1VSVf3n4yIgxHxaeFAnh6/ND830+uLBwAAAAAAAAAAAAAAAAAAgF1iOJ/zXxqon/+f+bnQ69IBXVesvIp32H+Kbb+zNNDRggA7rv34B150rcd/X1fLAey85vH/+Ekpt6PFAXaQ9j/sX23Gv68LYA9Q/8N+1WKf3mC3ywH0gvofAAAAAAD2lINH7v+QRMTKSwfyJdNf2WewP+xtaa8LAPSMMbywfxXne10CoFd8xgeStbXfGk72bz76P+lOgQAAAAAAAAAAAACADY4eNv8f9qvN5/8b2w972Sbz/xsFv9sFwB7S/NEf6n7Y63zGB5It/hCY/w8AAAAAAAAAAAAAu8DgrWvTc3OzC4vLL97KK228a6DXhV+Z3g3/dJ1dedqdM/dFxO64wE6tJBHRysHVW3D0sKg9/rsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs+SMAAP///o0lsQ==")
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xb}]}}, 0x0, 0x26}, 0x28)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x41000}, 0x0)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

4.530343486s ago: executing program 7 (id=419):
socket$netlink(0x10, 0x3, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x7a)
close(0x3)
socket$tipc(0x1e, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet_udp(0x2, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000003, 0x401d031, r0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
open(0x0, 0x10507e, 0xa6)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0)

4.415315516s ago: executing program 5 (id=420):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
inotify_init1(0x80800)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)

2.88395421s ago: executing program 8 (id=421):
socket$netlink(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000200)='msdos\x00', 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x7a)
close(0x3)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, 0x0, 0x50007a2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20, 0x80)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, 0x0, 0x0)
preadv2(r1, 0x0, 0x0, 0x2, 0x7, 0x1f)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0)

2.795096185s ago: executing program 6 (id=422):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r3, 0x200a0204)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX], 0x1c}}, 0x8800)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0xfc, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@loopback, 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x80, 0x80}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}, {}, 0x0, 0x0, 0x1}, [@etimer_thresh={0x8, 0xc, 0x5}, @tfcpad={0x8}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2d, 0x70bd2d, 0x70bd2c, 0x70bd28, 0x5, [0x669, 0xffff]}}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd2d, 0xffff7fff}}]}, 0xfc}}, 0x0)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3})
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3})
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40})
ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x2e44)
setpriority(0x0, 0x0, 0x2a14b58)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.750614842s ago: executing program 5 (id=423):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xa5e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)

1.195696071s ago: executing program 5 (id=424):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./lower1/dir1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./lower1/dir1\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/dir2\x00', 0x0)
umount2(&(0x7f0000000600)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000640)='./mnt\x00', 0x0, 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xe10, 0x80000001f000000})

1.08228482s ago: executing program 7 (id=425):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

1.039004817s ago: executing program 6 (id=426):
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000240)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@grpquota}, {@nojournal_checksum}, {@dax_always}, {@delalloc}, {@noblock_validity}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0xb, 0x572, &(0x7f00000006c0)="$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")
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x45, 0x1, 0x2, 0xfffffffc}, {0x61}, {0x0, 0x0, 0x0, 0x5b4c}, {0x6}]})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001900010000000000027640a03e75725ad2a38e4db03607920b98"], 0x2c}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12)
quotactl$Q_SYNC(0xffffffff80000102, 0xfb, 0x0, 0x0)
keyctl$link(0x8, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x300000b, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x78)
socket$vsock_stream(0x28, 0x1, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x25800000, &(0x7f0000000340), 0x0, 0x0, {0x400026}, 0x0, 0x0, 0x0, 0x0}, 0x58)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000600))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='^', 0xb2b1, 0x8000c61)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x20)
sendfile(r2, r3, 0x0, 0xe3aa6ea)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='q\xa9', 0x0)

871.231235ms ago: executing program 5 (id=427):
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x800000, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES16=r1])
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x200540c0, &(0x7f00000001c0)={0x11, 0x8, r3, 0x1, 0xda, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

794.209628ms ago: executing program 7 (id=428):
r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x20, 0xf, 0x4, "82d92e69"}, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r3, 0x82, 0x5, &(0x7f0000002340)='hello')
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0xa000, 0x0, {}, 0x1}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

384.651426ms ago: executing program 5 (id=429):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010003bd7000fcdb71c300000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)

0s ago: executing program 6 (id=430):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000200)={[{@data_err_ignore}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x200004}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nodelalloc}]}, 0x1, 0x48d, &(0x7f0000000c80)="$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")
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x9, 0x200, 0x3ff, 0x7, 0x2b})

kernel console output (not intermixed with test programs):

[  124.305204][ T5841] usb 1-1: SerialNumber: syz
[  124.317302][    T8] usb 2-1: SerialNumber: syz
[  124.344413][    T8] usb 2-1: config 0 descriptor??
[  124.576183][ T5841] usb 1-1: 0:2 : does not exist
[  124.588194][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'.
[  124.605291][ T5841] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  124.658957][ T5841] usb 1-1: USB disconnect, device number 4
[  124.735638][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  124.782991][    T8] usb 2-1: USB disconnect, device number 3
[  125.838761][ T6172] FAULT_INJECTION: forcing a failure.
[  125.838761][ T6172] name fail_futex, interval 1, probability 0, space 0, times 0
[  125.922359][ T6172] CPU: 0 PID: 6172 Comm: syz.0.115 Not tainted syzkaller #0
[  125.929804][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  125.940039][ T6172] Call Trace:
[  125.943339][ T6172]  <TASK>
[  125.946275][ T6172]  dump_stack_lvl+0x18c/0x250
[  125.950968][ T6172]  ? show_regs_print_info+0x20/0x20
[  125.956177][ T6172]  ? load_image+0x420/0x420
[  125.960696][ T6172]  should_fail_ex+0x394/0x4c0
[  125.965382][ T6172]  get_futex_key+0x136/0x1030
[  125.970066][ T6172]  ? kasan_save_stack+0x3e/0x60
[  125.974924][ T6172]  ? __se_sys_close+0x15c/0x1e0
[  125.979805][ T6172]  ? futex_setup_timer+0xc0/0xc0
[  125.984758][ T6172]  futex_wake+0x127/0x4f0
[  125.989099][ T6172]  ? futex_wake_mark+0x150/0x150
[  125.994054][ T6172]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  126.000162][ T6172]  do_futex+0x35d/0x3e0
[  126.004332][ T6172]  ? __ia32_sys_get_robust_list+0x110/0x110
[  126.010248][ T6172]  ? slab_free_freelist_hook+0x130/0x1a0
[  126.015906][ T6172]  __se_sys_futex+0x3a9/0x440
[  126.020594][ T6172]  ? __x64_sys_futex+0xf0/0xf0
[  126.025369][ T6172]  ? __x64_sys_futex+0x21/0xf0
[  126.030143][ T6172]  do_syscall_64+0x55/0xb0
[  126.034571][ T6172]  ? clear_bhb_loop+0x40/0x90
[  126.039275][ T6172]  ? clear_bhb_loop+0x40/0x90
[  126.044059][ T6172]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.049966][ T6172] RIP: 0033:0x7f912959e159
[  126.054405][ T6172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.074035][ T6172] RSP: 002b:00007f912a4130e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  126.082452][ T6172] RAX: ffffffffffffffda RBX: 00007f9129825fa8 RCX: 00007f912959e159
[  126.090429][ T6172] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9129825fac
[  126.098419][ T6172] RBP: 00007f9129825fa0 R08: 0000000000745d1e R09: 0000000000000000
[  126.106397][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.114368][ T6172] R13: 00007f9129826038 R14: 00007ffed8414520 R15: 00007ffed8414608
[  126.122345][ T6172]  </TASK>
[  126.481407][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  126.495273][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  126.509542][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  126.518342][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  126.528463][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  126.539904][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  126.942562][    T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  127.080657][ T6176] chnl_net:caif_netlink_parms(): no params data found
[  127.123767][    T8] usb 4-1: Using ep0 maxpacket: 16
[  127.142609][    T8] usb 4-1: config 0 has an invalid interface number: 98 but max is 0
[  127.163883][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.221967][    T8] usb 4-1: config 0 has no interface number 0
[  127.263936][    T8] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  127.318890][    T8] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  127.367691][    T8] usb 4-1: config 0 interface 98 has no altsetting 0
[  127.409143][    T8] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  127.422419][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.447495][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.459165][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.469556][    T8] usb 4-1: Product: syz
[  127.477335][ T6176] bridge_slave_0: entered allmulticast mode
[  127.486513][    T8] usb 4-1: Manufacturer: syz
[  127.494590][ T6176] bridge_slave_0: entered promiscuous mode
[  128.741450][ T5782] Bluetooth: hci4: command tx timeout
[  128.863068][    T8] usb 4-1: SerialNumber: syz
[  128.894852][    T8] usb 4-1: config 0 descriptor??
[  128.909690][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.927384][ T6181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  128.941266][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.017222][ T6181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  129.028185][ T6176] bridge_slave_1: entered allmulticast mode
[  129.062479][ T6176] bridge_slave_1: entered promiscuous mode
[  129.169226][ T6176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.202203][ T6176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.289795][ T6176] team0: Port device team_slave_0 added
[  129.326746][ T6181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  129.336087][ T6176] team0: Port device team_slave_1 added
[  129.362473][ T5841] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  129.385302][ T6181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  129.472789][ T6176] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.497423][ T6176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.577314][ T6176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.599869][ T6209] FAULT_INJECTION: forcing a failure.
[  129.599869][ T6209] name failslab, interval 1, probability 0, space 0, times 0
[  129.613715][ T5841] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9
[  129.638858][ T6176] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.647746][ T6209] CPU: 0 PID: 6209 Comm: syz.0.125 Not tainted syzkaller #0
[  129.655081][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  129.665142][ T6209] Call Trace:
[  129.668436][ T6209]  <TASK>
[  129.671374][ T6209]  dump_stack_lvl+0x18c/0x250
[  129.676068][ T6209]  ? show_regs_print_info+0x20/0x20
[  129.681300][ T6209]  ? load_image+0x420/0x420
[  129.685807][ T6209]  ? __might_sleep+0xe0/0xe0
[  129.690427][ T6209]  ? __lock_acquire+0x7d80/0x7d80
[  129.695460][ T6209]  should_fail_ex+0x394/0x4c0
[  129.700165][ T6209]  should_failslab+0x9/0x20
[  129.704679][ T6209]  slab_pre_alloc_hook+0x59/0x300
[  129.709724][ T6209]  kmem_cache_alloc+0x5a/0x2c0
[  129.714500][ T6209]  ? __kernfs_new_node+0xe5/0x7f0
[  129.719535][ T6209]  __kernfs_new_node+0xe5/0x7f0
[  129.724415][ T6209]  ? kernfs_new_node+0x260/0x260
[  129.729374][ T6209]  ? up_write+0x1be/0x410
[  129.733727][ T6209]  kernfs_new_node+0x14c/0x260
[  129.738508][ T6209]  __kernfs_create_file+0x4b/0x2e0
[  129.743628][ T6209]  sysfs_add_file_mode_ns+0x237/0x2f0
[  129.749030][ T6209]  internal_create_group+0x431/0xd10
[  129.754328][ T6209]  ? sysfs_create_group+0x20/0x20
[  129.759357][ T6209]  ? up_write+0x1be/0x410
[  129.763722][ T6209]  ? kernfs_remove_by_name_ns+0x117/0x150
[  129.769455][ T6209]  sysfs_slab_add+0x159/0x290
[  129.774134][ T6209]  __kmem_cache_create+0x4fc/0x750
[  129.779254][ T6209]  kmem_cache_create_usercopy+0x197/0x320
[  129.784990][ T6209]  kmem_cache_create+0x13/0x20
[  129.789761][ T6209]  copy_pid_ns+0x446/0x9d0
[  129.794205][ T6209]  ? cmp_extents_reverse+0x90/0x90
[  129.799328][ T6209]  ? copy_ipcs+0x92/0x500
[  129.803666][ T6209]  ? copy_utsname+0x97/0x430
[  129.808289][ T6209]  create_new_namespaces+0x2a6/0x700
[  129.813597][ T6209]  unshare_nsproxy_namespaces+0x11a/0x160
[  129.819329][ T6209]  ksys_unshare+0x4fa/0x8f0
[  129.823875][ T6209]  ? sighand_ctor+0x50/0x50
[  129.828546][ T6209]  ? lock_chain_count+0x20/0x20
[  129.833416][ T6209]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  129.839449][ T6209]  ? syscall_enter_from_user_mode+0x25/0x80
[  129.845356][ T6209]  __x64_sys_unshare+0x38/0x40
[  129.850131][ T6209]  do_syscall_64+0x55/0xb0
[  129.854555][ T6209]  ? clear_bhb_loop+0x40/0x90
[  129.859244][ T6209]  ? clear_bhb_loop+0x40/0x90
[  129.863949][ T6209]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  129.869853][ T6209] RIP: 0033:0x7f912959e159
[  129.874279][ T6209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.893906][ T6209] RSP: 002b:00007f912a413028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  129.902328][ T6209] RAX: ffffffffffffffda RBX: 00007f9129825fa0 RCX: 00007f912959e159
[  129.910318][ T6209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000
[  129.918328][ T6209] RBP: 00007f912963506b R08: 0000000000000000 R09: 0000000000000000
[  129.926307][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.934282][ T6209] R13: 00007f9129826038 R14: 00007f9129825fa0 R15: 00007ffed8414608
[  129.942286][ T6209]  </TASK>
[  129.974247][ T6176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.012293][ T6176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.101971][ T6176] hsr_slave_0: entered promiscuous mode
[  130.122345][ T5841] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  130.131510][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.141367][ T6176] hsr_slave_1: entered promiscuous mode
[  130.159128][ T5841] usb 2-1: Product: syz
[  130.170256][ T5841] usb 2-1: Manufacturer: syz
[  130.175328][ T5841] usb 2-1: SerialNumber: syz
[  130.224140][ T6176] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.231750][ T6176] Cannot create hsr debugfs directory
[  130.347304][ T6209] kmem_cache_create_usercopy(pid_3) failed with error -12
[  130.374246][ T6209] CPU: 0 PID: 6209 Comm: syz.0.125 Not tainted syzkaller #0
[  130.381562][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  130.391631][ T6209] Call Trace:
[  130.394918][ T6209]  <TASK>
[  130.397860][ T6209]  dump_stack_lvl+0x18c/0x250
[  130.402594][ T6209]  ? show_regs_print_info+0x20/0x20
[  130.407833][ T6209]  ? load_image+0x420/0x420
[  130.412358][ T6209]  ? slab_free_freelist_hook+0x130/0x1a0
[  130.418086][ T6209]  ? kmem_cache_create_usercopy+0x218/0x320
[  130.424003][ T6209]  ? __kmem_cache_free+0xba/0x1f0
[  130.429053][ T6209]  kmem_cache_create_usercopy+0x29e/0x320
[  130.434790][ T6209]  kmem_cache_create+0x13/0x20
[  130.439568][ T6209]  copy_pid_ns+0x446/0x9d0
[  130.444014][ T6209]  ? cmp_extents_reverse+0x90/0x90
[  130.449138][ T6209]  ? copy_ipcs+0x92/0x500
[  130.453476][ T6209]  ? copy_utsname+0x97/0x430
[  130.458076][ T6209]  create_new_namespaces+0x2a6/0x700
[  130.463391][ T6209]  unshare_nsproxy_namespaces+0x11a/0x160
[  130.469120][ T6209]  ksys_unshare+0x4fa/0x8f0
[  130.473637][ T6209]  ? sighand_ctor+0x50/0x50
[  130.478146][ T6209]  ? lock_chain_count+0x20/0x20
[  130.483002][ T6209]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  130.489008][ T6209]  ? syscall_enter_from_user_mode+0x25/0x80
[  130.494904][ T6209]  __x64_sys_unshare+0x38/0x40
[  130.499669][ T6209]  do_syscall_64+0x55/0xb0
[  130.504095][ T6209]  ? clear_bhb_loop+0x40/0x90
[  130.508781][ T6209]  ? clear_bhb_loop+0x40/0x90
[  130.513471][ T6209]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  130.519395][ T6209] RIP: 0033:0x7f912959e159
[  130.523988][ T6209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  130.543598][ T6209] RSP: 002b:00007f912a413028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  130.552013][ T6209] RAX: ffffffffffffffda RBX: 00007f9129825fa0 RCX: 00007f912959e159
[  130.559987][ T6209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000
[  130.567962][ T6209] RBP: 00007f912963506b R08: 0000000000000000 R09: 0000000000000000
[  130.576025][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.584016][ T6209] R13: 00007f9129826038 R14: 00007f9129825fa0 R15: 00007ffed8414608
[  130.592020][ T6209]  </TASK>
[  130.718373][    T8] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  130.769700][    T8] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  130.822711][    T8] asix: probe of 4-1:0.98 failed with error -71
[  130.855069][    T8] usb 4-1: USB disconnect, device number 4
[  130.871129][ T5782] Bluetooth: hci4: command tx timeout
[  130.886516][ T6176] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  130.960488][ T6176] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  130.998425][ T6176] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  131.030711][ T6176] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  131.291494][ T6176] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.331266][ T6214] FAULT_INJECTION: forcing a failure.
[  131.331266][ T6214] name fail_futex, interval 1, probability 0, space 0, times 0
[  131.393581][ T6176] 8021q: adding VLAN 0 to HW filter on device team0
[  131.400973][ T6214] CPU: 0 PID: 6214 Comm: syz.0.126 Not tainted syzkaller #0
[  131.408290][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  131.418347][ T6214] Call Trace:
[  131.421630][ T6214]  <TASK>
[  131.424566][ T6214]  dump_stack_lvl+0x18c/0x250
[  131.429276][ T6214]  ? show_regs_print_info+0x20/0x20
[  131.434482][ T6214]  ? load_image+0x420/0x420
[  131.439001][ T6214]  should_fail_ex+0x394/0x4c0
[  131.443697][ T6214]  get_futex_key+0x136/0x1030
[  131.448398][ T6214]  ? kasan_save_stack+0x3e/0x60
[  131.453254][ T6214]  ? __se_sys_close+0x15c/0x1e0
[  131.458113][ T6214]  ? futex_setup_timer+0xc0/0xc0
[  131.463057][ T6214]  futex_wake+0x127/0x4f0
[  131.467394][ T6214]  ? futex_wake_mark+0x150/0x150
[  131.472353][ T6214]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  131.478344][ T6214]  do_futex+0x35d/0x3e0
[  131.482521][ T6214]  ? __ia32_sys_get_robust_list+0x110/0x110
[  131.488440][ T6214]  ? slab_free_freelist_hook+0x130/0x1a0
[  131.494079][ T6214]  __se_sys_futex+0x3a9/0x440
[  131.498758][ T6214]  ? __x64_sys_futex+0xf0/0xf0
[  131.503553][ T6214]  ? __x64_sys_futex+0x21/0xf0
[  131.508408][ T6214]  do_syscall_64+0x55/0xb0
[  131.512849][ T6214]  ? clear_bhb_loop+0x40/0x90
[  131.517536][ T6214]  ? clear_bhb_loop+0x40/0x90
[  131.522221][ T6214]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  131.528125][ T6214] RIP: 0033:0x7f912959e159
[  131.532541][ T6214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.552146][ T6214] RSP: 002b:00007f912a4130e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  131.560558][ T6214] RAX: ffffffffffffffda RBX: 00007f9129825fa8 RCX: 00007f912959e159
[  131.568535][ T6214] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9129825fac
[  131.576511][ T6214] RBP: 00007f9129825fa0 R08: 0000000000745d1e R09: 0000000000000000
[  131.584486][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.592471][ T6214] R13: 00007f9129826038 R14: 00007ffed8414520 R15: 00007ffed8414608
[  131.600455][ T6214]  </TASK>
[  131.648671][ T6176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  131.659436][ T6176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  131.696563][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.703727][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.723999][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.731190][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.903028][ T5841] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  131.909520][ T5841] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  131.935382][ T5841] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  132.042416][ T5877] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  132.118330][ T6074] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  132.134522][ T5841] cdc_ncm 2-1:1.0: setting tx_max = 88
[  132.157351][   T32] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.243980][ T5877] usb 4-1: Using ep0 maxpacket: 16
[  132.272446][ T5877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.312972][ T5841] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  132.329441][ T5877] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  132.371078][ T5877] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  132.380663][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.439046][ T5877] usb 4-1: Product: syz
[  132.478514][ T5841] usb 2-1: USB disconnect, device number 4
[  132.485730][ T5877] usb 4-1: Manufacturer: syz
[  132.509936][ T5877] usb 4-1: SerialNumber: syz
[  132.519402][ T5841] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  132.538748][   T32] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.658893][ T6176] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.797081][ T5877] usb 4-1: 0:2 : does not exist
[  132.813152][   T32] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.844121][ T1199] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  132.867434][ T5877] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  132.896021][ T5782] Bluetooth: hci4: command tx timeout
[  132.942138][ T5877] usb 4-1: USB disconnect, device number 5
[  133.020060][   T32] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.035475][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  133.078966][ T1199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  133.100892][ T1199] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  133.141602][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  133.148303][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  133.178251][ T1199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  133.253435][ T1199] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  133.326830][ T1199] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  133.380110][ T1199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.454657][ T1199] usb 1-1: Product: syz
[  133.458860][ T1199] usb 1-1: Manufacturer: syz
[  133.528868][ T1199] usb 1-1: SerialNumber: syz
[  133.579516][ T1199] usb 1-1: config 0 descriptor??
[  133.617451][ T1199] ums-isd200 1-1:0.0: USB Mass Storage device detected
[  133.795043][ T6243] capability: warning: `syz.3.133' uses deprecated v2 capabilities in a way that may be insecure
[  133.911630][ T1199] ums-isd200: probe of 1-1:0.0 failed with error -22
[  134.245927][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.307198][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.451930][ T6176] veth0_vlan: entered promiscuous mode
[  134.583362][ T5877] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  134.609799][ T6176] veth1_vlan: entered promiscuous mode
[  134.798745][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.855249][ T5877] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  134.939220][ T5877] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.976922][ T5782] Bluetooth: hci4: command tx timeout
[  135.012545][ T5877] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  135.031303][ T6176] veth0_macvtap: entered promiscuous mode
[  135.077799][ T5877] usb 2-1: config 0 interface 0 has no altsetting 0
[  135.104722][ T5877] usb 2-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 1.00
[  135.134769][ T5909] usb 1-1: USB disconnect, device number 5
[  135.177958][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.200605][ T6176] veth1_macvtap: entered promiscuous mode
[  135.235866][ T5877] usb 2-1: config 0 descriptor??
[  135.485716][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.518186][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.539127][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.551759][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.561784][ T1199] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  135.575108][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.587589][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.600993][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.618577][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.631462][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.696494][ T5877] hid-generic 0003:18D1:503C.0001: unexpected long global item
[  135.738606][ T5877] hid-generic: probe of 0003:18D1:503C.0001 failed with error -22
[  135.763283][ T1199] usb 4-1: Using ep0 maxpacket: 32
[  135.780174][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.805509][ T1199] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  135.838804][ T1199] usb 4-1: config 0 has no interface number 0
[  135.850431][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.862401][ T1199] usb 4-1: config 0 interface 184 has no altsetting 0
[  135.880648][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.896503][ T5909] usb 2-1: USB disconnect, device number 5
[  135.909762][ T1199] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  135.935331][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.953247][ T1199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.970714][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.981309][ T1199] usb 4-1: Product: syz
[  135.990538][ T1199] usb 4-1: Manufacturer: syz
[  135.995552][ T1199] usb 4-1: SerialNumber: syz
[  136.000230][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.015900][ T1199] usb 4-1: config 0 descriptor??
[  136.025836][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.042856][ T1199] smsc75xx v1.0.0
[  136.048374][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.082155][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.176922][   T32] hsr_slave_0: left promiscuous mode
[  136.196021][   T32] hsr_slave_1: left promiscuous mode
[  136.228077][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.246679][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.275517][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.301709][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.324745][   T32] bridge_slave_1: left allmulticast mode
[  136.354538][   T32] bridge_slave_1: left promiscuous mode
[  136.361246][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.399870][   T32] bridge_slave_0: left allmulticast mode
[  136.420464][   T32] bridge_slave_0: left promiscuous mode
[  136.448761][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.521523][   T32] veth1_macvtap: left promiscuous mode
[  136.540324][   T32] veth0_macvtap: left promiscuous mode
[  136.557211][   T32] veth1_vlan: left promiscuous mode
[  136.575918][   T32] veth0_vlan: left promiscuous mode
[  136.673070][ T5909] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  136.876748][ T5909] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.892106][ T1199] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  136.923843][ T5909] usb 1-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping
[  136.941935][ T1199] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  136.970611][ T5909] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  136.990145][ T1199] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  137.011571][ T1199] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  137.040407][ T5909] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  137.056230][ T1199] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  137.077293][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.099833][ T5909] usb 1-1: Product: syz
[  137.106503][ T1199] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  137.125958][ T5909] usb 1-1: Manufacturer: syz
[  137.138705][ T5909] usb 1-1: SerialNumber: syz
[  137.144631][ T1199] smsc75xx: probe of 4-1:0.184 failed with error -71
[  137.174161][ T5909] usb-storage 1-1:1.0: USB Mass Storage device detected
[  137.199156][ T1199] usb 4-1: USB disconnect, device number 6
[  137.224257][ T5909] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  137.268231][ T5909] scsi host1: usb-storage 1-1:1.0
[  137.435307][ T5909] usb 1-1: USB disconnect, device number 6
[  137.851557][   T32] team0 (unregistering): Port device team_slave_1 removed
[  137.900926][   T32] team0 (unregistering): Port device team_slave_0 removed
[  137.941363][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.025848][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.409782][ T6297] loop0: detected capacity change from 0 to 512
[  138.445554][ T6297] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  138.507510][ T6297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c816e018, mo2=0002]
[  138.537129][ T6297] EXT4-fs (loop0): orphan cleanup on readonly fs
[  138.573182][ T6297] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.144: bad orphan inode 3
[  138.610062][ T6297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  138.715584][   T32] bond0 (unregistering): Released all slaves
[  142.266658][ T6176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.306544][ T6176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.346436][ T6176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.367559][ T6176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.393139][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  142.774822][ T6306] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  142.910995][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.007727][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.171982][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.237233][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.482603][ T5909] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  144.719443][ T5909] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.047174][ T5909] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  145.152379][ T5909] usb 4-1: config 0 interface 0 has no altsetting 0
[  145.191525][ T5909] usb 4-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00
[  145.245629][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.308451][ T5909] usb 4-1: config 0 descriptor??
[  145.532583][ T5877] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  145.750389][ T5877] usb 5-1: config 0 interface 0 altsetting 206 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  145.796180][ T5909] hid-generic 0003:057E:2017.0002: collection stack underflow
[  145.827618][ T5877] usb 5-1: config 0 interface 0 altsetting 206 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  145.864922][ T5909] hid-generic 0003:057E:2017.0002: item 0 0 0 12 parsing failed
[  145.904622][ T5909] hid-generic: probe of 0003:057E:2017.0002 failed with error -22
[  145.919271][ T5877] usb 5-1: config 0 interface 0 has no altsetting 0
[  145.948846][ T5877] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  146.017540][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.059865][ T5877] usb 5-1: config 0 descriptor??
[  146.502773][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  146.588567][ T5877] sony 0003:054C:024B.0003: hiddev0,hidraw0: USB HID v10.04 Device [HID 054c:024b] on usb-dummy_hcd.4-1/input0
[  146.640671][ T5877] sony 0003:054C:024B.0003: failed to claim input
[  146.712392][    T9] usb 1-1: Using ep0 maxpacket: 32
[  146.748575][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024
[  146.816917][    T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[  146.877382][ T1199] usb 5-1: USB disconnect, device number 2
[  146.894026][    T9] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  146.951202][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.969080][ T6373] fido_id (6373) used greatest stack depth: 20312 bytes left
[  147.010710][    T9] usb 1-1: Product: syz
[  147.037311][    T9] usb 1-1: Manufacturer: syz
[  147.061490][    T9] usb 1-1: SerialNumber: syz
[  147.094636][ T6362] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  147.127094][ T5877] usb 4-1: USB disconnect, device number 7
[  147.183743][ T6371] loop1: detected capacity change from 0 to 40427
[  147.268708][ T6371] F2FS-fs (loop1): invalid crc value
[  147.576727][ T6354] kvm: kvm [6353]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[  147.725365][ T6371] F2FS-fs (loop1): access invalid blkaddr:0
[  147.762655][    T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  147.781452][ T6371] CPU: 0 PID: 6371 Comm: syz.1.158 Not tainted syzkaller #0
[  147.788770][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  147.798841][ T6371] Call Trace:
[  147.802123][ T6371]  <TASK>
[  147.805056][ T6371]  dump_stack_lvl+0x18c/0x250
[  147.809753][ T6371]  ? show_regs_print_info+0x20/0x20
[  147.814968][ T6371]  ? __up_read+0x2b8/0x6b0
[  147.819392][ T6371]  ? __lock_acquire+0x7d80/0x7d80
[  147.824423][ T6371]  f2fs_is_valid_blkaddr+0xe6c/0x15c0
[  147.829812][ T6371]  sanity_check_extent_cache+0xfc/0x1f0
[  147.835386][ T6371]  f2fs_iget+0x336f/0x47d0
[  147.839824][ T6371]  f2fs_fill_super+0x4853/0x6b60
[  147.844804][ T6371]  ? kill_f2fs_super+0x3f0/0x3f0
[  147.849756][ T6371]  ? down_write+0x16e/0x200
[  147.854282][ T6371]  ? down_read_killable+0x340/0x340
[  147.859499][ T6371]  ? setup_bdev_super+0x56b/0x660
[  147.864527][ T6371]  mount_bdev+0x21c/0x2c0
[  147.868862][ T6371]  ? kfree+0x31/0x1a0
[  147.872873][ T6371]  ? kill_f2fs_super+0x3f0/0x3f0
[  147.877834][ T6371]  ? get_tree_bdev+0x520/0x520
[  147.882610][ T6371]  ? vfs_parse_fs_param+0x420/0x420
[  147.887831][ T6371]  legacy_get_tree+0xea/0x180
[  147.892525][ T6371]  ? trace_raw_output_f2fs__rw_end+0x110/0x110
[  147.898703][ T6371]  vfs_get_tree+0x8c/0x280
[  147.903141][ T6371]  do_new_mount+0x24a/0xa40
[  147.907659][ T6371]  __se_sys_mount+0x2e7/0x3d0
[  147.912353][ T6371]  ? __x64_sys_mount+0xc0/0xc0
[  147.917121][ T6371]  ? lockdep_hardirqs_on+0x98/0x150
[  147.922325][ T6371]  ? __x64_sys_mount+0x20/0xc0
[  147.927107][ T6371]  do_syscall_64+0x55/0xb0
[  147.931529][ T6371]  ? clear_bhb_loop+0x40/0x90
[  147.936214][ T6371]  ? clear_bhb_loop+0x40/0x90
[  147.940901][ T6371]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  147.946803][ T6371] RIP: 0033:0x7f5cc2f9f3ca
[  147.951221][ T6371] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.970830][ T6371] RSP: 002b:00007f5cc3da4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  147.979245][ T6371] RAX: ffffffffffffffda RBX: 00007f5cc3da4ee0 RCX: 00007f5cc2f9f3ca
[  147.987218][ T6371] RDX: 0000200000000140 RSI: 0000200000000000 RDI: 00007f5cc3da4ea0
[  147.995211][ T6371] RBP: 0000200000000140 R08: 00007f5cc3da4ee0 R09: 0000000000000000
[  148.003200][ T6371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  148.011173][ T6371] R13: 00007f5cc3da4ea0 R14: 000000000000553e R15: 0000200000001480
[  148.019161][ T6371]  </TASK>
[  148.035368][    T9] usb 1-1: MIDIStreaming interface descriptor not found
[  148.183196][    T9] usb 1-1: USB disconnect, device number 7
[  148.236231][ T6371] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 24244] is incorrect, run fsck to fix
[  148.345213][ T6371] F2FS-fs (loop1): Failed to read root inode
[  150.461133][ T6411] loop4: detected capacity change from 0 to 512
[  150.523978][ T6411] EXT4-fs: Ignoring removed i_version option
[  150.627920][ T6411] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  150.692402][ T1199] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  150.709550][ T6411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  150.759153][ T6417] loop0: detected capacity change from 0 to 256
[  150.829741][ T6411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.927828][ T1199] usb 2-1: config 1 has an invalid interface number: 1 but max is 0
[  150.936180][ T6411] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.962736][ T1199] usb 2-1: config 1 has no interface number 0
[  151.001544][ T1199] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  151.039382][ T6423] loop3: detected capacity change from 0 to 512
[  151.065273][ T1199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.127136][ T1199] usb 2-1: Product: syz
[  151.131343][ T1199] usb 2-1: Manufacturer: syz
[  151.198394][ T1199] usb 2-1: SerialNumber: syz
[  151.440592][ T6176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.557898][ T6407] loop1: detected capacity change from 0 to 4096
[  151.650498][ T6407] EXT4-fs: inline encryption not supported
[  151.769318][ T6407] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  151.863068][ T6407] EXT4-fs (loop1): Test dummy encryption mode enabled
[  151.946654][ T6407] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  152.003989][ T6433] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1.
[  152.027398][ T6407] System zones: 0-5
[  152.082120][ T6407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.025951][ T6407] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  154.391841][ T1199] snd-usb-audio: probe of 2-1:1.1 failed with error -71
[  154.456052][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.491723][ T1199] usb 2-1: USB disconnect, device number 6
[  155.172549][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  155.191880][ T6474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.392878][ T6479] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1.
[  155.413090][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.445913][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  155.523996][    T9] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  156.869351][ T6484] binder: 6481:6484 ioctl c0306201 0 returned -14
[  157.140552][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.189177][    T9] usb 1-1: Product: syz
[  157.210289][    T9] usb 1-1: Manufacturer: syz
[  157.290123][    T9] usb 1-1: SerialNumber: syz
[  157.335157][    T9] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  157.382033][    T9] gspca_mr97310a: reg write [21] error -8
[  157.422335][    T9] mr97310a: probe of 1-1:1.0 failed with error -8
[  157.608187][ T6493] process 'syz.4.185' launched './file0' with NULL argv: empty string added
[  158.110633][    T8] usb 1-1: USB disconnect, device number 8
[  158.341250][ T6503] loop0: detected capacity change from 0 to 4096
[  158.882049][ T6503] ext4: Unknown parameter 'noacl'
[  159.203669][ T6514] loop1: detected capacity change from 0 to 256
[  159.361641][ T6514] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x111902d0, checksum : 0x1119abd0)
[  159.465302][ T6514] exFAT-fs (loop1): invalid boot region
[  159.470891][ T6514] exFAT-fs (loop1): failed to recognize exfat type
[  159.552815][    T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  159.783127][    T8] usb 1-1: Using ep0 maxpacket: 16
[  159.807511][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.867413][    T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  159.935202][    T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  159.984596][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.026597][    T8] usb 1-1: Product: syz
[  160.030798][    T8] usb 1-1: Manufacturer: syz
[  160.077423][    T8] usb 1-1: SerialNumber: syz
[  160.369251][    T8] usb 1-1: 0:2 : does not exist
[  160.421506][    T8] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  160.520911][    T8] usb 1-1: USB disconnect, device number 9
[  160.656900][ T6348] udevd[6348]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  160.856285][ T6549] loop4: detected capacity change from 0 to 512
[  161.620738][ T6572] loop0: detected capacity change from 0 to 512
[  161.686729][ T6572] EXT4-fs (loop0): Test dummy encryption mode enabled
[  161.744174][ T6572] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  161.842353][ T6572] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  161.932141][ T6572] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.201: bad orphan inode 131083
[  162.048689][ T6581] loop4: detected capacity change from 0 to 1024
[  162.058455][ T6572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.671355][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.715252][ T6587] bridge0: port 3(syz_tun) entered blocking state
[  165.773789][ T6587] bridge0: port 3(syz_tun) entered disabled state
[  165.816169][ T6587] syz_tun: entered allmulticast mode
[  165.887715][ T6587] syz_tun: entered promiscuous mode
[  165.930170][ T6587] bridge0: port 3(syz_tun) entered blocking state
[  165.936947][ T6587] bridge0: port 3(syz_tun) entered forwarding state
[  170.272406][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  170.472490][    T9] usb 2-1: Using ep0 maxpacket: 16
[  170.505414][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.533942][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  170.544606][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  170.565007][ T6623] loop0: detected capacity change from 0 to 1024
[  170.574951][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  170.623434][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  170.630848][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  170.642065][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  170.649390][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  170.669456][ T6623] EXT4-fs: Ignoring removed orlov option
[  170.727855][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  170.761197][ T6623] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  170.822339][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.830446][    T9] usb 2-1: Product: syz
[  170.897078][    T9] usb 2-1: Manufacturer: syz
[  171.997342][    T9] usb 2-1: SerialNumber: syz
[  172.972650][ T5788] Bluetooth: hci0: command tx timeout
[  174.603556][    T9] usb 2-1: can't set config #1, error -71
[  174.665157][    T9] usb 2-1: USB disconnect, device number 7
[  175.052624][ T5788] Bluetooth: hci0: command tx timeout
[  177.986724][ T5788] Bluetooth: hci0: command tx timeout
[  178.584619][ T6621] chnl_net:caif_netlink_parms(): no params data found
[  179.021639][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.083194][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.090409][ T6621] bridge_slave_0: entered allmulticast mode
[  179.141404][ T6621] bridge_slave_0: entered promiscuous mode
[  179.194411][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.231898][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.270188][ T6621] bridge_slave_1: entered allmulticast mode
[  179.291551][ T6621] bridge_slave_1: entered promiscuous mode
[  179.423942][ T6621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.433216][    T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  179.486109][ T6621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.631878][ T6621] team0: Port device team_slave_0 added
[  179.643985][    T8] usb 5-1: Using ep0 maxpacket: 16
[  179.696146][ T6621] team0: Port device team_slave_1 added
[  179.722444][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.764315][    T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  179.862584][    T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  179.914489][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.949730][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.978350][    T8] usb 5-1: Product: syz
[  180.008489][    T8] usb 5-1: Manufacturer: syz
[  180.015770][ T5788] Bluetooth: hci0: command tx timeout
[  180.031784][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.068795][    T8] usb 5-1: SerialNumber: syz
[  180.170521][ T6621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.317883][    T8] usb 5-1: 0:2 : does not exist
[  180.370553][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.407010][    T8] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  180.436312][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.579099][    T8] usb 5-1: USB disconnect, device number 3
[  180.650159][ T6621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.690569][ T6668] udevd[6668]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  180.976970][ T6621] hsr_slave_0: entered promiscuous mode
[  181.021885][ T6621] hsr_slave_1: entered promiscuous mode
[  181.050751][ T6621] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.087784][ T6621] Cannot create hsr debugfs directory
[  182.858249][ T6694] loop4: detected capacity change from 0 to 8192
[  182.968600][  T987] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.038557][ T6698] loop1: detected capacity change from 0 to 1024
[  183.090697][ T6698] EXT4-fs: Ignoring removed orlov option
[  183.116760][   T28] audit: type=1804 audit(1790934179.705:2): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.230" name="/newroot/30/bus/bus" dev="loop4" ino=1048599 res=1 errno=0
[  183.182810][ T6698] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  187.191810][  T987] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.538303][ T6707] loop1: detected capacity change from 0 to 512
[  188.595529][ T6707] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.232: iget: bad i_size value: 38620345925642
[  188.608681][ T6707] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.232: couldn't read orphan inode 15 (err -117)
[  188.621929][ T6707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.022137][ T6715] binder: 6711:6715 ioctl c0306201 0 returned -14
[  190.053643][  T987] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.126425][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.309951][ T6621] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  190.326646][ T6720] loop4: detected capacity change from 0 to 512
[  190.403112][ T6720] EXT4-fs (loop4): Test dummy encryption mode enabled
[  190.467676][ T6720] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #11: comm syz.4.235: casefold flag without casefold feature
[  190.518079][ T6722] overlayfs: failed to resolve 'upper': -2
[  190.550104][  T987] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.588110][ T6720] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.235: couldn't read orphan inode 11 (err -117)
[  190.655742][ T6621] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  190.680880][ T6720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.724732][ T6621] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  190.792830][ T6621] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  191.012777][ T6176] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /32/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0
[  191.183992][ T6176] EXT4-fs error (device loop4): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 11
[  191.341692][ T6176] EXT4-fs error (device loop4): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 11
[  192.490977][ T6712] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[  192.534908][ T6621] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.927250][ T6176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.997413][ T6621] 8021q: adding VLAN 0 to HW filter on device team0
[  193.199502][ T6716] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.206681][ T6716] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.282355][ T5877] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  193.444827][ T6716] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.451997][ T6716] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.512348][ T5877] usb 2-1: Using ep0 maxpacket: 16
[  193.550669][ T5877] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.649974][ T5877] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  193.691365][ T5877] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  193.741577][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.785934][ T5877] usb 2-1: Product: syz
[  193.790159][ T5877] usb 2-1: Manufacturer: syz
[  193.849723][ T5877] usb 2-1: SerialNumber: syz
[  194.174815][ T5877] usb 2-1: 0:2 : does not exist
[  194.282447][ T5877] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  194.400539][ T5877] usb 2-1: USB disconnect, device number 8
[  194.584279][ T6669] udevd[6669]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  194.608872][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  194.622504][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  195.398866][ T6765] overlayfs: failed to resolve 'upper': -2
[  195.546595][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  195.556640][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  195.564647][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  195.572725][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  195.580080][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  195.587739][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  195.711802][  T987] hsr_slave_0: left promiscuous mode
[  195.722461][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  195.737773][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  195.745920][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  195.755242][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  195.763003][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  195.770297][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  195.831688][  T987] hsr_slave_1: left promiscuous mode
[  195.891140][  T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.929162][  T987] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.005617][  T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.035454][  T987] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.100188][  T987] bridge_slave_1: left allmulticast mode
[  196.127951][  T987] bridge_slave_1: left promiscuous mode
[  196.152127][  T987] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.176733][  T987] bridge_slave_0: left allmulticast mode
[  196.184628][  T987] bridge_slave_0: left promiscuous mode
[  196.190326][  T987] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.219364][  T987] veth1_macvtap: left promiscuous mode
[  196.227809][  T987] veth0_macvtap: left promiscuous mode
[  196.235184][  T987] veth1_vlan: left promiscuous mode
[  196.241939][  T987] veth0_vlan: left promiscuous mode
[  196.864437][  T987] team0 (unregistering): Port device team_slave_1 removed
[  196.910731][  T987] team0 (unregistering): Port device team_slave_0 removed
[  196.959931][  T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.004385][  T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.331651][  T987] bond0 (unregistering): Released all slaves
[  197.614497][ T5782] Bluetooth: hci2: command tx timeout
[  197.669834][ T6621] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.852932][ T5782] Bluetooth: hci4: command tx timeout
[  199.882367][ T5782] Bluetooth: hci2: command tx timeout
[  200.889526][ T5782] Bluetooth: hci4: command tx timeout
[  201.605313][ T6799] FAULT_INJECTION: forcing a failure.
[  201.605313][ T6799] name failslab, interval 1, probability 0, space 0, times 0
[  201.684261][ T6799] CPU: 0 PID: 6799 Comm: syz.1.247 Not tainted syzkaller #0
[  201.691627][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  201.701691][ T6799] Call Trace:
[  201.704978][ T6799]  <TASK>
[  201.707945][ T6799]  dump_stack_lvl+0x18c/0x250
[  201.712642][ T6799]  ? show_regs_print_info+0x20/0x20
[  201.717859][ T6799]  ? load_image+0x420/0x420
[  201.722375][ T6799]  ? __might_sleep+0xe0/0xe0
[  201.726983][ T6799]  ? __lock_acquire+0x7d80/0x7d80
[  201.732020][ T6799]  should_fail_ex+0x394/0x4c0
[  201.736719][ T6799]  should_failslab+0x9/0x20
[  201.741284][ T6799]  slab_pre_alloc_hook+0x59/0x300
[  201.746330][ T6799]  ? d_instantiate+0x6f/0x90
[  201.750929][ T6799]  kmem_cache_alloc+0x5a/0x2c0
[  201.755730][ T6799]  ? alloc_empty_file+0x9e/0x1d0
[  201.760686][ T6799]  alloc_empty_file+0x9e/0x1d0
[  201.765458][ T6799]  alloc_file+0x5b/0x600
[  201.769717][ T6799]  alloc_file_pseudo+0x184/0x210
[  201.774668][ T6799]  ? fput+0x1a0/0x1a0
[  201.778661][ T6799]  anon_inode_getfile+0xc5/0x1a0
[  201.783617][ T6799]  init_listener+0x10f/0x1d0
[  201.788257][ T6799]  do_seccomp+0x93a/0xdc0
[  201.792630][ T6799]  ? prctl_set_seccomp+0x60/0x60
[  201.797580][ T6799]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  201.803583][ T6799]  ? lockdep_hardirqs_on+0x98/0x150
[  201.808791][ T6799]  do_syscall_64+0x55/0xb0
[  201.813214][ T6799]  ? clear_bhb_loop+0x40/0x90
[  201.817928][ T6799]  ? clear_bhb_loop+0x40/0x90
[  201.822624][ T6799]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  201.828531][ T6799] RIP: 0033:0x7f5cc2f9e159
[  201.832966][ T6799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.852577][ T6799] RSP: 002b:00007f5cc3da5028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  201.861003][ T6799] RAX: ffffffffffffffda RBX: 00007f5cc3225fa0 RCX: 00007f5cc2f9e159
[  201.868984][ T6799] RDX: 0000200000000040 RSI: 000000000000001d RDI: 0000000000000001
[  201.876958][ T6799] RBP: 00007f5cc303506b R08: 0000000000000000 R09: 0000000000000000
[  201.884934][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.892919][ T6799] R13: 00007f5cc3226038 R14: 00007f5cc3225fa0 R15: 00007ffd9dec2da8
[  201.900913][ T6799]  </TASK>
[  201.962499][ T5782] Bluetooth: hci2: command tx timeout
[  202.236878][  T987] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.357433][ T6771] chnl_net:caif_netlink_parms(): no params data found
[  202.446395][  T987] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.646648][ T6802] loop1: detected capacity change from 0 to 40427
[  202.688518][ T6802] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12
[  202.723233][  T987] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.754630][ T6802] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  202.804042][ T6802] F2FS-fs (loop1): Image doesn't support compression
[  202.810776][ T6802] F2FS-fs (loop1): heap/no_heap options were deprecated
[  202.883252][ T6802] F2FS-fs (loop1): invalid crc value
[  202.890559][  T987] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.979241][ T5782] Bluetooth: hci4: command tx timeout
[  203.016267][ T6621] veth0_vlan: entered promiscuous mode
[  203.052624][ T6766] chnl_net:caif_netlink_parms(): no params data found
[  203.137530][ T6621] veth1_vlan: entered promiscuous mode
[  203.212031][ T6802] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  203.229475][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.239523][ T6802] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  203.248236][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.267619][ T6771] bridge_slave_0: entered allmulticast mode
[  203.283200][ T6771] bridge_slave_0: entered promiscuous mode
[  203.356812][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.385555][ T6802] F2FS-fs (loop1): Stopped filesystem due to reason: 0
[  203.424100][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.431310][ T6771] bridge_slave_1: entered allmulticast mode
[  203.469481][ T6771] bridge_slave_1: entered promiscuous mode
[  203.698945][ T6621] veth0_macvtap: entered promiscuous mode
[  203.764528][ T6771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.806382][ T6771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.866698][ T6621] veth1_macvtap: entered promiscuous mode
[  204.021406][ T5782] Bluetooth: hci2: command tx timeout
[  204.151800][  T987] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.163830][ T6838] loop1: detected capacity change from 0 to 256
[  204.257212][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.297396][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.343410][ T6766] bridge_slave_0: entered allmulticast mode
[  204.350413][ T6766] bridge_slave_0: entered promiscuous mode
[  204.492179][  T987] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.554946][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.562127][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.598222][ T6766] bridge_slave_1: entered allmulticast mode
[  204.622077][ T6766] bridge_slave_1: entered promiscuous mode
[  204.675878][ T6771] team0: Port device team_slave_0 added
[  204.703541][ T6771] team0: Port device team_slave_1 added
[  204.715348][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.745863][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.775801][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.804416][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.843131][ T5909] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  204.862356][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.886521][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.912166][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.966375][  T987] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.052829][ T5909] usb 2-1: Using ep0 maxpacket: 16
[  205.058172][ T5782] Bluetooth: hci4: command tx timeout
[  205.092541][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.129083][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.140683][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  205.171857][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.189458][ T5909] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  205.198981][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.209654][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.222177][ T5909] usb 2-1: Product: syz
[  205.226894][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.236950][ T5909] usb 2-1: Manufacturer: syz
[  205.241552][ T5909] usb 2-1: SerialNumber: syz
[  205.252583][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.275989][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.291935][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.321626][  T987] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.345736][ T6766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.364128][ T6771] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.371139][ T6771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.408289][ T6771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.474829][ T6766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.493103][ T5909] usb 2-1: 0:2 : does not exist
[  205.520679][ T5909] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  205.553290][ T6771] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.587624][ T5909] usb 2-1: USB disconnect, device number 9
[  205.610107][ T6771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.671708][ T6853] udevd[6853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  205.709621][ T6771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.757156][ T6621] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.774554][ T6621] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.788036][ T6621] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.797890][ T6621] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.891594][ T6766] team0: Port device team_slave_0 added
[  205.958778][ T6766] team0: Port device team_slave_1 added
[  206.067460][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.096863][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.129738][ T6766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.237372][ T6771] hsr_slave_0: entered promiscuous mode
[  206.250716][ T6771] hsr_slave_1: entered promiscuous mode
[  206.258180][ T6771] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.269468][ T6771] Cannot create hsr debugfs directory
[  206.278998][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.290035][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.323426][ T6766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.586927][ T6859] loop1: detected capacity change from 0 to 1024
[  206.712878][ T6859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  206.801698][ T6859] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.875820][ T6859] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.250: lblock 3 mapped to illegal pblock 3 (length 3)
[  206.955516][ T6859] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  207.014763][ T6859] EXT4-fs (loop1): This should not happen!! Data will be lost
[  207.014763][ T6859] 
[  207.117348][ T3480] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:10: lblock 8 mapped to illegal pblock 8 (length 8)
[  207.172132][ T3480] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  207.226637][ T3480] EXT4-fs (loop1): This should not happen!! Data will be lost
[  207.226637][ T3480] 
[  207.256848][ T6766] hsr_slave_0: entered promiscuous mode
[  207.276324][ T6859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  207.296367][ T6766] hsr_slave_1: entered promiscuous mode
[  207.317481][ T6766] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  207.385651][ T6766] Cannot create hsr debugfs directory
[  207.539380][ T6873] loop1: detected capacity change from 0 to 1024
[  207.584705][ T6873] EXT4-fs: Ignoring removed orlov option
[  207.638945][ T6873] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  213.522964][ T5788] Bluetooth: hci1: command 0x0406 tx timeout
[  216.538967][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.616778][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.616823][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.671729][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.940334][ T6771] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  217.979220][ T6771] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  218.033471][ T6771] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  218.078810][  T987] hsr_slave_0: left promiscuous mode
[  218.111292][  T987] hsr_slave_1: left promiscuous mode
[  218.136554][ T6906] loop5: detected capacity change from 0 to 512
[  218.146388][  T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.184109][ T6906] EXT4-fs (loop5): Test dummy encryption mode enabled
[  218.194146][  T987] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.231823][  T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.263324][ T6906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.290143][  T987] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.346899][  T987] bridge_slave_1: left allmulticast mode
[  218.385882][  T987] bridge_slave_1: left promiscuous mode
[  218.411997][  T987] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.430374][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.458209][  T987] bridge_slave_0: left allmulticast mode
[  218.484917][  T987] bridge_slave_0: left promiscuous mode
[  218.524959][  T987] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.627330][ T6915] loop5: detected capacity change from 0 to 256
[  218.637151][  T987] hsr_slave_0: left promiscuous mode
[  218.670068][  T987] hsr_slave_1: left promiscuous mode
[  218.714451][  T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.757507][  T987] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.778909][ T6915] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  218.816186][  T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.838007][ T6915] FAT-fs (loop5): Filesystem has been set read-only
[  218.844976][  T987] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.860739][ T6915] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  218.876885][  T987] bridge_slave_1: left allmulticast mode
[  218.883118][  T987] bridge_slave_1: left promiscuous mode
[  218.888798][  T987] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.898704][ T6915] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  218.918663][   T28] audit: type=1800 audit(1790934215.515:3): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.256" name="file1" dev="loop5" ino=1048606 res=0 errno=0
[  218.944842][  T987] bridge_slave_0: left allmulticast mode
[  218.952431][ T6915] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[  218.970139][  T987] bridge_slave_0: left promiscuous mode
[  218.980532][  T987] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.034963][  T987] veth1_macvtap: left promiscuous mode
[  219.040564][  T987] veth0_macvtap: left promiscuous mode
[  219.049419][  T987] veth1_vlan: left promiscuous mode
[  219.056277][  T987] veth0_vlan: left promiscuous mode
[  219.066429][  T987] veth1_macvtap: left promiscuous mode
[  219.072002][  T987] veth0_macvtap: left promiscuous mode
[  219.080292][  T987] veth1_vlan: left promiscuous mode
[  219.089226][  T987] veth0_vlan: left promiscuous mode
[  219.503677][ T5877] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  219.706793][ T5877] usb 6-1: Using ep0 maxpacket: 8
[  219.736356][ T5877] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.751960][ T5877] usb 6-1: too many endpoints for config 1 interface 1 altsetting 0: 253, using maximum allowed: 30
[  219.780706][ T5877] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  219.826648][ T5877] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  219.850302][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.869316][ T5877] usb 6-1: Product: syz
[  219.883176][ T5877] usb 6-1: Manufacturer: syz
[  219.898388][ T5877] usb 6-1: SerialNumber: syz
[  220.095585][  T987] team0 (unregistering): Port device team_slave_1 removed
[  220.169915][  T987] team0 (unregistering): Port device team_slave_0 removed
[  220.222005][  T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.287473][  T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.501588][ T5877] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  226.612350][ T5877] usb 6-1: clock source 0 is not valid, cannot use
[  226.652337][ T5877] usb 6-1: 1:1: cannot get freq (v2/v3): err -32
[  226.694308][ T5877] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  226.755461][ T5877] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  226.811671][ T5877] snd-usb-audio: probe of 6-1:1.1 failed with error -22
[  228.274883][ T5877] snd-usb-audio: probe of 6-1:1.2 failed with error -22
[  228.342733][ T5877] usb 6-1: USB disconnect, device number 2
[  228.402669][ T6920] udevd[6920]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  228.880785][  T987] bond0 (unregistering): Released all slaves
[  229.992778][  T987] team0 (unregistering): Port device team_slave_1 removed
[  230.059027][  T987] team0 (unregistering): Port device team_slave_0 removed
[  230.109610][  T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.165632][  T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.519564][  T987] bond0 (unregistering): Released all slaves
[  230.631864][ T6771] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  230.784457][ T6766] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  230.843380][ T6766] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  230.890418][ T6766] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  230.988068][ T6766] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  231.396088][ T6771] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.580020][ T6771] 8021q: adding VLAN 0 to HW filter on device team0
[  231.643698][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.650852][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.755588][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.762773][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.850660][ T6766] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.974072][ T6766] 8021q: adding VLAN 0 to HW filter on device team0
[  232.015322][ T6771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  232.067463][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.074626][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.149233][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.156428][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.731135][ T6771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.980137][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.622530][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  233.783688][ T6771] veth0_vlan: entered promiscuous mode
[  233.846980][ T6771] veth1_vlan: entered promiscuous mode
[  233.853097][    T9] usb 6-1: Using ep0 maxpacket: 16
[  233.879097][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.938492][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  234.010709][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  234.027315][ T6771] veth0_macvtap: entered promiscuous mode
[  234.047117][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.081407][ T6771] veth1_macvtap: entered promiscuous mode
[  234.107344][    T9] usb 6-1: Product: syz
[  234.111535][    T9] usb 6-1: Manufacturer: syz
[  234.154230][    T9] usb 6-1: SerialNumber: syz
[  234.225315][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.279044][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.322351][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.365276][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.421033][ T6771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.452684][    T9] usb 6-1: 0:2 : does not exist
[  234.474068][    T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  234.487255][ T6766] veth0_vlan: entered promiscuous mode
[  234.538946][ T6766] veth1_vlan: entered promiscuous mode
[  234.576042][    T9] usb 6-1: USB disconnect, device number 3
[  234.594446][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.647823][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.671125][ T6934] udevd[6934]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  234.706027][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.728366][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.770542][ T6771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.812078][ T6771] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.851774][ T6771] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.894339][ T6771] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.913641][ T6771] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.026463][ T6766] veth0_macvtap: entered promiscuous mode
[  235.090004][ T6766] veth1_macvtap: entered promiscuous mode
[  235.228988][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.294938][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.344710][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.392258][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.402111][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.496776][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.550180][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.660519][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.707811][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.785271][ T7016] 
@0Ù: renamed from bond_slave_1 (while UP)
[  235.936908][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.936926][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.936935][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.936945][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.936953][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.936962][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.938034][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.986018][ T6766] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.986080][ T6766] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.986117][ T6766] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.986137][ T6766] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.177811][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.177845][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.358287][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.358303][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.475938][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.475953][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.663387][ T7025] syzkaller0: entered promiscuous mode
[  236.663405][ T7025] syzkaller0: entered allmulticast mode
[  240.989038][ T7042] overlayfs: failed to resolve 'lower2': -2
[  241.439179][ T7054] netlink: 48 bytes leftover after parsing attributes in process `syz.6.272'.
[  241.487053][ T7054] loop6: detected capacity change from 0 to 128
[  241.569984][ T7054] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  241.570039][ T7054] FAT-fs (loop6): Filesystem has been set read-only
[  241.574185][ T7054] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  241.574206][ T7054] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  241.574221][ T7054] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  241.574253][ T7054] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  241.574269][ T7054] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  241.574285][ T7054] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  241.574300][ T7054] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  241.574316][ T7054] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  241.574335][ T7054] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  241.575619][   T28] audit: type=1800 audit(1790934238.175:4): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.272" name="file2" dev="loop6" ino=1048613 res=0 errno=0
[  241.862430][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  242.042411][    T9] usb 2-1: Using ep0 maxpacket: 16
[  242.044585][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  242.044621][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  242.046347][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  242.046367][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.046381][    T9] usb 2-1: Product: syz
[  242.046392][    T9] usb 2-1: Manufacturer: syz
[  242.046403][    T9] usb 2-1: SerialNumber: syz
[  242.296505][    T9] usb 2-1: 0:2 : does not exist
[  242.314292][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  242.383746][    T9] usb 2-1: USB disconnect, device number 10
[  242.480581][ T6934] udevd[6934]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  242.535647][ T7066] loop7: detected capacity change from 0 to 40427
[  242.592519][ T7066] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64)
[  242.592560][ T7066] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  242.595850][ T7066] F2FS-fs (loop7): Unrecognized mount option "whint_mode=user-based" or missing value
[  242.941794][ T7075] syzkaller0: entered promiscuous mode
[  242.941811][ T7075] syzkaller0: entered allmulticast mode
[  247.437282][ T7099] overlayfs: failed to resolve 'lower2': -2
[  247.791168][ T7105] loop7: detected capacity change from 0 to 512
[  247.853364][ T7105] EXT4-fs (loop7): Test dummy encryption mode enabled
[  247.860192][ T7105] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  248.010659][ T7105] EXT4-fs error (device loop7): ext4_orphan_get:1434: comm syz.7.283: bad orphan inode 131083
[  248.036916][ T7111] loop5: detected capacity change from 0 to 256
[  248.103489][ T7111] exfat: Deprecated parameter 'namecase'
[  248.133100][ T7105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.180643][ T7111] exfat: Deprecated parameter 'namecase'
[  248.288848][ T7111] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  249.589191][ T7117] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  249.622417][   T28] audit: type=1326 audit(1790934246.205:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1aad9e159 code=0x7ffc0000
[  249.838652][ T6771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.896306][   T28] audit: type=1326 audit(1790934246.245:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff1aad9e159 code=0x7ffc0000
[  250.085754][   T28] audit: type=1326 audit(1790934246.245:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1aad9e159 code=0x7ffc0000
[  250.240995][   T28] audit: type=1326 audit(1790934246.245:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff1aad9e159 code=0x7ffc0000
[  250.403492][   T28] audit: type=1326 audit(1790934246.245:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1aad9e159 code=0x7ffc0000
[  250.485796][ T7137] syzkaller0: entered promiscuous mode
[  250.518023][ T7137] syzkaller0: entered allmulticast mode
[  250.576849][   T28] audit: type=1326 audit(1790934246.245:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ff1aad9e159 code=0x7ffc0000
[  250.754937][   T28] audit: type=1326 audit(1790934246.245:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1aad9e159 code=0x7ffc0000
[  250.924865][   T28] audit: type=1326 audit(1790934246.255:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7ff1aad9e159 code=0x7ffc0000
[  251.111041][   T28] audit: type=1326 audit(1790934246.295:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1aad9e159 code=0x7ffc0000
[  251.271142][ T7150] overlayfs: failed to resolve 'lower2': -2
[  251.300124][   T28] audit: type=1326 audit(1790934246.295:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1aad9e159 code=0x7ffc0000
[  251.506961][ T7158] loop6: detected capacity change from 0 to 16
[  251.621690][ T7158] erofs: (device loop6): mounted with root inode @ nid 36.
[  251.734452][ T7158] erofs: (device loop6): z_erofs_readahead: readahead error at folio 3 @ nid 89
[  251.805982][ T7158] syz.6.293: attempt to access beyond end of device
[  251.805982][ T7158] loop6: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  251.915433][ T7158] erofs: (device loop6): z_erofs_readahead: readahead error at folio 4 @ nid 89
[  251.972722][ T7158] syz.6.293: attempt to access beyond end of device
[  251.972722][ T7158] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16
[  252.050629][ T7158] syz.6.293: attempt to access beyond end of device
[  252.050629][ T7158] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  252.173901][    T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  252.271942][ T7158] syz.6.293 (7158) used greatest stack depth: 19336 bytes left
[  252.336363][ T7170] loop5: detected capacity change from 0 to 512
[  252.373149][ T7170] EXT4-fs: Ignoring removed nobh option
[  252.398996][    T8] usb 8-1: Using ep0 maxpacket: 16
[  252.436256][    T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.485356][    T8] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  252.522908][ T7170] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #3: comm syz.5.297: corrupted inode contents
[  252.572588][    T8] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  252.621193][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.641976][ T7170] EXT4-fs (loop5): Remounting filesystem read-only
[  252.684937][    T8] usb 8-1: Product: syz
[  252.689137][    T8] usb 8-1: Manufacturer: syz
[  252.719358][ T7170] EXT4-fs (loop5): 1 truncate cleaned up
[  252.750487][    T8] usb 8-1: SerialNumber: syz
[  252.757795][ T7170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.850915][ T7170] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.022500][    T8] usb 8-1: 0:2 : does not exist
[  253.077265][    T8] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  253.119143][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.177913][    T8] usb 8-1: USB disconnect, device number 2
[  253.290762][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  253.334756][ T7186] syzkaller0: entered promiscuous mode
[  253.360979][ T7186] syzkaller0: entered allmulticast mode
[  253.402160][ T7192] loop5: detected capacity change from 0 to 1024
[  253.409493][ T7192] EXT4-fs: Ignoring removed orlov option
[  253.426286][ T7192] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  256.366787][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  256.373816][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  257.205904][ T7198] overlayfs: failed to resolve 'lower2': -2
[  257.466786][ T7205] loop5: detected capacity change from 0 to 4096
[  257.525055][ T7205] EXT4-fs: inline encryption not supported
[  257.530970][ T7205] EXT4-fs: Ignoring removed i_version option
[  257.638020][ T7205] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  257.713682][ T7205] EXT4-fs (loop5): Test dummy encryption mode enabled
[  260.382356][ T7205] EXT4-fs: error -4 creating inode table initialization thread
[  261.803440][ T7205] EXT4-fs (loop5): mount failed
[  263.400521][ T7221] loop6: detected capacity change from 0 to 1024
[  263.407996][ T7221] EXT4-fs: Ignoring removed orlov option
[  263.432369][ T7221] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  267.542334][ T5877] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  267.600819][ T7242] overlayfs: failed to resolve 'lower2': -2
[  267.782449][ T5877] usb 7-1: Using ep0 maxpacket: 16
[  267.824700][ T5877] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  267.899079][ T5877] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  268.002507][ T5877] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  268.062289][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.110787][ T5877] usb 7-1: Product: syz
[  268.130343][ T5877] usb 7-1: Manufacturer: syz
[  268.182323][ T5877] usb 7-1: SerialNumber: syz
[  269.593896][ T5877] usb 7-1: 0:2 : does not exist
[  269.610870][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  269.620119][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  269.628008][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  269.668745][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  269.676342][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  269.683799][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  269.763438][ T5877] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  269.875616][ T5877] usb 7-1: USB disconnect, device number 2
[  271.324557][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  271.630551][ T7269] loop6: detected capacity change from 0 to 1024
[  271.639677][ T7269] EXT4-fs: Ignoring removed orlov option
[  271.719803][ T7269] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  271.772289][ T5782] Bluetooth: hci3: command tx timeout
[  274.372436][ T5782] Bluetooth: hci3: command tx timeout
[  276.254884][ T7255] chnl_net:caif_netlink_parms(): no params data found
[  276.358852][ T7285] loop6: detected capacity change from 0 to 512
[  276.418975][ T5782] Bluetooth: hci3: command tx timeout
[  276.429748][ T7286] overlayfs: failed to resolve 'lower2': -2
[  276.523091][ T7285] FAT-fs (loop6): Directory bread(block 199916) failed
[  276.633487][ T7285] FAT-fs (loop6): Directory bread(block 199917) failed
[  277.986477][ T7285] FAT-fs (loop6): Directory bread(block 199918) failed
[  278.112321][ T7285] FAT-fs (loop6): Directory bread(block 199919) failed
[  278.182689][ T7285] FAT-fs (loop6): Directory bread(block 199920) failed
[  278.189626][ T7285] FAT-fs (loop6): Directory bread(block 199921) failed
[  278.298531][ T7285] FAT-fs (loop6): Directory bread(block 199922) failed
[  278.307351][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.371528][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.382800][ T7285] FAT-fs (loop6): Directory bread(block 199923) failed
[  279.382341][ T5782] Bluetooth: hci3: command tx timeout
[  279.802655][ T7255] bridge_slave_0: entered allmulticast mode
[  279.809670][ T7255] bridge_slave_0: entered promiscuous mode
[  279.906738][ T7305] loop7: detected capacity change from 0 to 512
[  280.028905][ T7305] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  280.088582][ T7089] bridge0: port 3(syz_tun) entered disabled state
[  280.130558][ T7305] EXT4-fs (loop7): 1 truncate cleaned up
[  280.168703][ T7309] loop5: detected capacity change from 0 to 512
[  280.175996][ T7305] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.207887][ T7309] EXT4-fs: Ignoring removed mblk_io_submit option
[  280.253927][ T7309] EXT4-fs: Ignoring removed bh option
[  280.281874][ T7311] loop6: detected capacity change from 0 to 512
[  280.291252][ T7309] ext4: Unknown parameter 'noacl'
[  280.350346][ T7311] EXT4-fs: Ignoring removed nobh option
[  280.401969][ T7082] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  280.416098][ T7089] syz_tun (unregistering): left allmulticast mode
[  280.468071][ T7313] EXT4-fs error (device loop7): ext4_find_dest_de:2117: inode #2: block 13: comm syz.7.328: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  280.489215][ T7089] syz_tun (unregistering): left promiscuous mode
[  282.393784][ T7089] bridge0: port 3(syz_tun) entered disabled state
[  283.373477][ T7311] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  283.373810][ T7311] EXT4-fs: failed to create workqueue
[  283.983066][ T7311] EXT4-fs (loop6): mount failed
[  283.998149][ T7313] EXT4-fs (loop7): Remounting filesystem read-only
[  284.218945][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.259211][ T6771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.285625][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.326474][ T7255] bridge_slave_1: entered allmulticast mode
[  284.393324][ T7255] bridge_slave_1: entered promiscuous mode
[  284.696781][ T3480] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.712774][ T5877] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  284.741407][ T7255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.773104][ T7324] syzkaller0: entered promiscuous mode
[  284.778625][ T7324] syzkaller0: entered allmulticast mode
[  284.841056][ T3480] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.884240][ T7255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.904252][ T5877] usb 7-1: Using ep0 maxpacket: 16
[  284.936883][ T5877] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.992667][ T5877] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  285.037647][ T5877] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  285.091350][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.128161][ T3480] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.150202][ T5877] usb 7-1: Product: syz
[  285.167854][ T5877] usb 7-1: Manufacturer: syz
[  285.194455][ T5877] usb 7-1: SerialNumber: syz
[  285.261860][ T7336] loop7: detected capacity change from 0 to 256
[  285.369755][ T3480] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.388032][ T7336] exFAT-fs (loop7): Invalid boot checksum (boot checksum : 0x111902d0, checksum : 0x1119abd0)
[  285.427442][ T7336] exFAT-fs (loop7): invalid boot region
[  285.470700][ T5877] usb 7-1: 0:2 : does not exist
[  285.486755][ T7336] exFAT-fs (loop7): failed to recognize exfat type
[  285.511889][ T7255] team0: Port device team_slave_0 added
[  285.531519][ T5877] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  285.574371][ T7255] team0: Port device team_slave_1 added
[  285.673416][ T5877] usb 7-1: USB disconnect, device number 3
[  285.795799][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.833899][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  285.870305][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.009209][ T7255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.075613][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.114965][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.227158][ T5909] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  286.265240][ T7255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.736053][ T5909] usb 6-1: Using ep0 maxpacket: 16
[  287.770220][ T7255] hsr_slave_0: entered promiscuous mode
[  287.784543][ T5909] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  287.824995][ T5909] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  287.864106][ T7255] hsr_slave_1: entered promiscuous mode
[  287.922699][ T5909] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  287.940463][ T7255] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  287.970766][ T7255] Cannot create hsr debugfs directory
[  287.976653][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.016531][ T5909] usb 6-1: Product: syz
[  288.020822][ T5909] usb 6-1: Manufacturer: syz
[  288.026469][ T7361] Zero length message leads to an empty skb
[  288.073377][ T5909] usb 6-1: SerialNumber: syz
[  288.188358][ T7361] loop7: detected capacity change from 0 to 512
[  288.337066][ T5909] usb 6-1: 0:2 : does not exist
[  288.400692][ T5909] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  288.543715][ T5909] usb 6-1: USB disconnect, device number 4
[  288.641170][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  288.764412][ T7369] loop6: detected capacity change from 0 to 128
[  288.870702][ T7114] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  288.897845][ T7363] loop7: detected capacity change from 0 to 512
[  290.282943][ T7371] loop6: detected capacity change from 0 to 512
[  290.310406][ T7371] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  290.357374][ T7371] EXT4-fs (loop6): 1 truncate cleaned up
[  290.364150][ T7371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.383079][ T7371] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.341: bg 0: block 4: invalid block bitmap
[  290.443396][ T7363] __quota_error: 60 callbacks suppressed
[  290.443407][ T7363] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=1
[  290.644320][ T7363] EXT4-fs warning (device loop7): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  290.724113][ T6766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.788358][ T7363] EXT4-fs (loop7): mount failed
[  294.878144][ T5782] Bluetooth: hci0: command 0x0406 tx timeout
[  295.001935][ T7396] loop6: detected capacity change from 0 to 1024
[  295.044308][ T7396] EXT4-fs: Ignoring removed bh option
[  295.129624][ T7396] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  295.200578][ T7396] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.542987][    T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  295.601116][ T5909] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  295.758108][    T9] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  295.794271][    T9] usb 7-1: config 0 has no interface number 0
[  295.802516][ T5909] usb 6-1: Using ep0 maxpacket: 16
[  295.831551][ T5909] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  295.847360][    T9] usb 7-1: config 0 interface 41 has no altsetting 0
[  295.891917][ T5909] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  295.907414][    T9] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  295.948672][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.973604][ T5909] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  296.007034][    T9] usb 7-1: Product: syz
[  296.021458][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.042292][    T9] usb 7-1: Manufacturer: syz
[  296.046906][    T9] usb 7-1: SerialNumber: syz
[  296.081988][ T7255] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  296.092596][ T5909] usb 6-1: Product: syz
[  296.096823][ T5909] usb 6-1: Manufacturer: syz
[  296.118193][    T9] usb 7-1: config 0 descriptor??
[  296.135810][ T7255] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  296.148449][ T5909] usb 6-1: SerialNumber: syz
[  296.215522][ T3480] hsr_slave_0: left promiscuous mode
[  296.236339][ T3480] hsr_slave_1: left promiscuous mode
[  296.256496][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  296.281454][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_0
[  296.304106][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  296.329919][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_1
[  296.351797][ T3480] bridge_slave_1: left allmulticast mode
[  296.382469][ T3480] bridge_slave_1: left promiscuous mode
[  296.389161][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.437087][ T5909] usb 6-1: 0:2 : does not exist
[  296.459497][ T5909] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  296.473862][ T3480] bridge_slave_0: left allmulticast mode
[  296.503401][ T3480] bridge_slave_0: left promiscuous mode
[  296.540238][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.571655][    T9] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  296.584172][ T5909] usb 6-1: USB disconnect, device number 5
[  296.620390][    T9] CoreChips: probe of 7-1:0.41 failed with error -71
[  296.654049][ T7399] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  296.704494][    T9] usb 7-1: USB disconnect, device number 4
[  296.717086][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  296.781783][ T3480] veth1_macvtap: left promiscuous mode
[  296.799287][ T3480] veth0_macvtap: left promiscuous mode
[  296.824285][ T3480] veth1_vlan: left promiscuous mode
[  296.848966][ T3480] veth0_vlan: left promiscuous mode
[  297.128510][ T6766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  297.888556][ T3480] team0 (unregistering): Port device team_slave_1 removed
[  297.941369][ T3480] team0 (unregistering): Port device team_slave_0 removed
[  297.972322][  T788] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  298.006865][ T3480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  298.059732][ T3480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  298.173829][  T788] usb 7-1: Using ep0 maxpacket: 16
[  298.189440][  T788] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  298.213365][  T788] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  298.239166][  T788] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  298.265240][  T788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.280483][  T788] usb 7-1: Product: syz
[  298.298525][  T788] usb 7-1: Manufacturer: syz
[  298.307417][  T788] usb 7-1: SerialNumber: syz
[  298.540630][  T788] usb 7-1: 0:2 : does not exist
[  298.566252][  T788] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  298.605894][ T3480] bond0 (unregistering): Released all slaves
[  298.629069][  T788] usb 7-1: USB disconnect, device number 5
[  298.681886][ T7415] udevd[7415]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  298.759259][ T7255] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  298.839523][ T7255] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  299.331486][ T7255] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.445610][ T7436] syzkaller0: entered promiscuous mode
[  299.451143][ T7436] syzkaller0: entered allmulticast mode
[  299.529603][ T7255] 8021q: adding VLAN 0 to HW filter on device team0
[  299.746277][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.753475][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.849041][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.856263][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.961149][ T7449] loop5: detected capacity change from 0 to 128
[  300.052528][ T5909] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  300.306439][ T5909] usb 8-1: config 8 has an invalid interface number: 163 but max is 0
[  300.345319][ T5909] usb 8-1: config 8 has no interface number 0
[  300.351465][ T5909] usb 8-1: config 8 interface 163 altsetting 125 bulk endpoint 0xD has invalid maxpacket 16
[  300.426900][ T5909] usb 8-1: config 8 interface 163 altsetting 125 endpoint 0xA has invalid maxpacket 1552, setting to 64
[  300.487325][ T5909] usb 8-1: config 8 interface 163 altsetting 125 bulk endpoint 0x7 has invalid maxpacket 1023
[  300.522359][    T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  300.562917][ T5909] usb 8-1: config 8 interface 163 altsetting 125 has a duplicate endpoint with address 0x7, skipping
[  300.626953][ T5909] usb 8-1: config 8 interface 163 altsetting 125 bulk endpoint 0x9 has invalid maxpacket 16
[  300.687189][ T5909] usb 8-1: config 8 interface 163 has no altsetting 0
[  300.726964][ T5909] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=12.f9
[  300.737363][    T9] usb 7-1: Using ep0 maxpacket: 16
[  300.766820][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  300.782415][ T5909] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.820291][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  300.838822][ T5909] usb 8-1: Product: syz
[  300.865014][ T5909] usb 8-1: Manufacturer: syz
[  300.869644][ T5909] usb 8-1: SerialNumber: syz
[  300.879983][ T7255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.912542][    T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  300.942036][ T7447] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  300.961380][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.997909][ T7447] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  301.025137][    T9] usb 7-1: Product: syz
[  301.029705][ T7447] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  301.049996][    T9] usb 7-1: Manufacturer: syz
[  301.075414][    T9] usb 7-1: SerialNumber: syz
[  301.298155][ T5909] radio-si470x 8-1:8.163: could not find interrupt in endpoint
[  301.322794][    T9] usb 7-1: 0:2 : does not exist
[  301.357401][    T9] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  301.367404][ T5909] radio-si470x: probe of 8-1:8.163 failed with error -5
[  301.434537][ T5909] radio-raremono 8-1:8.163: this is not Thanko's Raremono.
[  301.458629][    T9] usb 7-1: USB disconnect, device number 6
[  301.490621][ T5909] usbhid 8-1:8.163: couldn't find an input interrupt endpoint
[  301.548770][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  301.584535][ T5909] usb 8-1: USB disconnect, device number 4
[  302.038250][ T7255] veth0_vlan: entered promiscuous mode
[  302.062991][ T7488] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1.
[  302.133552][ T7255] veth1_vlan: entered promiscuous mode
[  303.534680][ T7491] syzkaller0: entered promiscuous mode
[  303.555655][ T7491] syzkaller0: entered allmulticast mode
[  303.780081][ T7255] veth0_macvtap: entered promiscuous mode
[  303.824749][ T7255] veth1_macvtap: entered promiscuous mode
[  303.868784][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.946506][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.990009][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.000833][  T788] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  304.038280][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.074744][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.112702][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.158111][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.166887][ T7502] loop6: detected capacity change from 0 to 40427
[  304.215268][  T788] usb 8-1: Using ep0 maxpacket: 16
[  304.228949][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.243331][ T7502] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64)
[  304.268610][  T788] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  304.294004][ T7502] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  304.322287][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.337858][  T788] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  304.364356][ T7502] F2FS-fs (loop6): invalid crc value
[  304.393407][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.422320][  T788] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  304.462998][  T788] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.472681][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.525115][  T788] usb 8-1: Product: syz
[  304.529324][  T788] usb 8-1: Manufacturer: syz
[  304.549295][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.594328][  T788] usb 8-1: SerialNumber: syz
[  304.624874][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.691457][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.755201][ T7518] loop5: detected capacity change from 0 to 256
[  304.794013][ T7502] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  304.834997][ T7255] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.852580][ T7502] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  304.865897][  T788] usb 8-1: 0:2 : does not exist
[  304.910741][ T7255] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.931759][  T788] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  304.971904][ T7255] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.006532][ T7255] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.038327][  T788] usb 8-1: USB disconnect, device number 5
[  305.138111][ T7415] udevd[7415]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  305.414032][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.475444][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.578158][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.651340][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.312382][ T7535] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  307.842867][  T788] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  308.026802][ T7535] ip6erspan0: entered allmulticast mode
[  309.022934][  T788] usb 6-1: Using ep0 maxpacket: 16
[  309.058380][  T788] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  311.805927][ T7544] loop8: detected capacity change from 0 to 16
[  311.882416][  T788] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  311.931003][ T7544] erofs: (device loop8): mounted with root inode @ nid 36.
[  312.060634][  T788] usb 6-1: string descriptor 0 read error: -71
[  312.178452][  T788] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  312.223137][ T7551] syzkaller0: entered promiscuous mode
[  312.228646][ T7551] syzkaller0: entered allmulticast mode
[  312.255483][  T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.342991][  T788] usb 6-1: can't set config #1, error -71
[  312.422757][  T788] usb 6-1: USB disconnect, device number 6
[  313.898676][ T7569] netlink: 48 bytes leftover after parsing attributes in process `syz.8.379'.
[  314.523558][  T788] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  314.728728][  T788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  314.742350][ T1199] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  314.770245][  T788] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  314.805466][  T788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  314.856261][  T788] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  314.898664][  T788] usb 8-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  314.925530][  T788] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.952299][ T1199] usb 9-1: Using ep0 maxpacket: 16
[  314.968504][  T788] usb 8-1: Product: syz
[  314.989251][  T788] usb 8-1: Manufacturer: syz
[  314.994091][ T1199] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  315.019665][  T788] usb 8-1: SerialNumber: syz
[  315.038105][ T1199] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  315.059521][  T788] usb 8-1: config 0 descriptor??
[  315.093551][  T788] ums-isd200 8-1:0.0: USB Mass Storage device detected
[  315.110884][ T1199] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  315.144418][ T1199] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.175608][ T1199] usb 9-1: Product: syz
[  315.202292][ T1199] usb 9-1: Manufacturer: syz
[  315.209636][ T1199] usb 9-1: SerialNumber: syz
[  315.322103][  T788] ums-isd200: probe of 8-1:0.0 failed with error -22
[  315.477305][ T1199] usb 9-1: 0:2 : does not exist
[  315.542299][ T1199] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  315.599662][ T7577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.652866][ T1199] usb 9-1: USB disconnect, device number 2
[  315.662417][ T7577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.992505][ T5876] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  316.195506][ T5876] usb 7-1: Using ep0 maxpacket: 16
[  316.222571][ T5876] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  316.243722][  T788] usb 8-1: USB disconnect, device number 6
[  316.294353][ T5876] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  318.232665][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  318.238976][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  319.858314][ T5876] usb 7-1: string descriptor 0 read error: -71
[  319.912346][ T5876] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  319.921414][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.021404][ T7622] syzkaller0: entered promiscuous mode
[  320.050787][ T5876] usb 7-1: can't set config #1, error -71
[  320.069059][ T7622] syzkaller0: entered allmulticast mode
[  320.103647][ T5876] usb 7-1: USB disconnect, device number 7
[  320.130535][ T7630] netlink: 48 bytes leftover after parsing attributes in process `syz.6.393'.
[  320.254258][ T5779] Bluetooth: hci2: command 0x0406 tx timeout
[  320.260388][ T5788] Bluetooth: hci4: command 0x0406 tx timeout
[  320.423000][ T7637] binder: 7635:7637 ioctl c0306201 200000000000 returned -14
[  320.882460][ T5876] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  320.994887][ T1199] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  321.082322][ T5876] usb 9-1: Using ep0 maxpacket: 16
[  321.106556][ T5876] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  321.147264][ T5876] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  321.203324][ T5876] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  321.213005][ T1199] usb 7-1: Using ep0 maxpacket: 16
[  321.252515][ T5876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.263043][ T1199] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  321.300159][ T5876] usb 9-1: Product: syz
[  321.312776][ T1199] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  321.325848][ T5876] usb 9-1: Manufacturer: syz
[  321.330459][ T5876] usb 9-1: SerialNumber: syz
[  321.359765][ T1199] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  321.391704][ T7666] syzkaller0: entered promiscuous mode
[  321.410636][ T1199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.429193][ T7666] syzkaller0: entered allmulticast mode
[  321.448610][ T1199] usb 7-1: Product: syz
[  321.472556][ T1199] usb 7-1: Manufacturer: syz
[  321.512418][ T1199] usb 7-1: SerialNumber: syz
[  321.599299][ T7670] loop7: detected capacity change from 0 to 2048
[  321.623287][ T5876] usb 9-1: 0:2 : does not exist
[  321.664017][ T5876] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  321.707691][ T7670] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.793537][ T5876] usb 9-1: USB disconnect, device number 3
[  321.799707][ T1199] usb 7-1: 0:2 : does not exist
[  321.841294][ T7670] EXT4-fs (loop7): shut down requested (1)
[  321.895139][ T1199] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  321.918574][ T7677] syz.5.409 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  322.023659][ T1199] usb 7-1: USB disconnect, device number 8
[  322.075431][ T7680] binder: 7676:7680 ioctl c0306201 0 returned -14
[  322.082950][ T7553] udevd[7553]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  322.147685][ T7675] udevd[7675]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  322.167173][ T7670] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.187337][ T7681] loop5: detected capacity change from 0 to 256
[  322.519915][ T7685] loop7: detected capacity change from 0 to 512
[  322.588837][ T7685] EXT4-fs: Ignoring removed mblk_io_submit option
[  322.740558][ T7685] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.818147][ T7685] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.922528][ T1199] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  322.997022][ T6771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.133168][ T1199] usb 7-1: Using ep0 maxpacket: 8
[  323.158428][ T1199] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  323.195580][ T1199] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  323.258977][ T1199] usb 7-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  323.290010][ T1199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.335720][ T1199] usb 7-1: Product: syz
[  323.371373][ T1199] usb 7-1: Manufacturer: syz
[  323.400652][ T1199] usb 7-1: SerialNumber: syz
[  323.417982][ T7708] mmap: syz.5.416 (7708) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  323.506175][ T7710] syzkaller0: entered promiscuous mode
[  323.546738][ T7710] syzkaller0: entered allmulticast mode
[  323.616104][ T7714] loop8: detected capacity change from 0 to 1024
[  323.670295][ T1199] usb 7-1: unit 6 not found!
[  323.700007][ T7714] EXT4-fs (loop8): blocks per group (131072) and clusters per group (8192) inconsistent
[  323.779900][ T1199] usb 7-1: USB disconnect, device number 9
[  323.893625][ T7675] udevd[7675]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  325.652469][  T788] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  327.094520][ T7731] input: syz0 as /devices/virtual/input/input6
[  327.111483][ T1199] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  327.142271][  T788] usb 8-1: Using ep0 maxpacket: 16
[  327.263573][  T788] usb 8-1: device descriptor read/all, error -71
[  327.372359][ T1199] usb 9-1: Using ep0 maxpacket: 16
[  327.408052][ T1199] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  327.472285][ T1199] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  327.485828][ T7739] loop6: detected capacity change from 0 to 1024
[  327.545299][ T1199] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  327.556062][ T7739] EXT4-fs: Mount option(s) incompatible with ext3
[  327.599893][ T1199] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.658560][   T28] audit: type=1326 audit(1790934324.245:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.6.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25fbf9e159 code=0x0
[  327.683506][ T1199] usb 9-1: Product: syz
[  327.687701][ T1199] usb 9-1: Manufacturer: syz
[  327.776019][ T7743] syzkaller0: entered promiscuous mode
[  327.795644][ T1199] usb 9-1: SerialNumber: syz
[  327.811076][ T7743] syzkaller0: entered allmulticast mode
[  328.051318][ T1199] usb 9-1: 0:2 : does not exist
[  328.081908][ T1199] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  328.158102][ T1199] usb 9-1: USB disconnect, device number 4
[  328.213105][  T788] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  328.248331][ T7675] udevd[7675]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  328.444227][  T788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  328.464737][ T7759] loop6: detected capacity change from 0 to 512
[  328.478932][  T788] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  328.534559][ T7759] ------------[ cut here ]------------
[  328.541242][ T7759] EA inode 11 i_nlink=0
[  328.551193][  T788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  328.595890][ T7759] WARNING: CPU: 0 PID: 7759 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0
[  328.606277][ T7759] Modules linked in:
[  328.610200][ T7759] CPU: 0 PID: 7759 Comm: syz.6.430 Not tainted syzkaller #0
[  328.617667][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  328.627788][ T7759] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0
[  328.634445][ T7759] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 91 f5 98 ff 49 8b 34 24 48 c7 c7 60 df de 8a 44 89 fa e8 5e 2d 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 d8 27 4a 08
[  328.655361][ T7759] RSP: 0018:ffffc900049f7360 EFLAGS: 00010246
[  328.661443][ T7759] RAX: f05d1ef0bcc86e00 RBX: ffff88805b82c0a8 RCX: 0000000000080000
[  328.669699][ T7759] RDX: ffffc9000bba9000 RSI: 00000000000183bb RDI: 00000000000183bc
[  328.677740][ T7759] RBP: ffffc900049f7450 R08: ffff8880b8e28c53 R09: 1ffff110171c518a
[  328.685771][ T7759] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88805b82bf00
[  328.694042][ T7759] R13: ffffc900049f73c0 R14: dffffc0000000000 R15: 0000000000000000
[  328.702027][ T7759] FS:  00007f25fcd826c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  328.710993][ T7759] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  328.717806][ T7759] CR2: 00007ffde3c4f278 CR3: 000000005f318000 CR4: 00000000003506f0
[  328.725821][ T7759] Call Trace:
[  328.729105][ T7759]  <TASK>
[  328.732045][ T7759]  ? ext4_xattr_list_entries+0x3d0/0x3d0
[  328.737747][ T7759]  ? __ext4_journal_ensure_credits+0x30/0x450
[  328.745133][ T7759]  ext4_xattr_inode_dec_ref_all+0x9bb/0x1030
[  328.751148][ T7759]  ? ext4_xattr_delete_inode+0xd00/0xd00
[  328.756989][ T7759]  ? __ext4_journal_ensure_credits+0x450/0x450
[  328.763192][ T7759]  ext4_xattr_delete_inode+0xb3b/0xd00
[  328.768747][ T7759]  ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0
[  328.774912][ T7759]  ? __ext4_mark_inode_dirty+0x50d/0x720
[  328.780569][ T7759]  ext4_evict_inode+0xa88/0xe70
[  328.785476][ T7759]  ? evict+0x482/0x8a0
[  328.789562][ T7759]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  328.795523][ T7759]  ? do_raw_spin_unlock+0x121/0x230
[  328.800737][ T7759]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  328.806701][ T7759]  evict+0x4b7/0x8a0
[  328.810608][ T7759]  ? __lock_acquire+0x7d80/0x7d80
[  328.815707][ T7759]  ? proc_nr_inodes+0x230/0x230
[  328.820567][ T7759]  ? do_raw_spin_unlock+0x121/0x230
[  328.825799][ T7759]  ? _raw_spin_unlock+0x28/0x40
[  328.830671][ T7759]  ext4_orphan_cleanup+0xdff/0x1650
[  328.835926][ T7759]  ? ext4_orphan_file_block_trigger+0x440/0x440
[  328.842213][ T7759]  ? ext4_orphan_del+0xc90/0xc90
[  328.848256][ T7759]  ? ext4_register_li_request+0x182/0x930
[  328.854204][ T7759]  ? errseq_check_and_advance+0x66/0x120
[  328.859864][ T7759]  ext4_fill_super+0x5fb5/0x6870
[  328.864897][ T7759]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  328.871165][ T7759]  ? __might_sleep+0xe0/0xe0
[  328.875838][ T7759]  ? read_lock_is_recursive+0x20/0x20
[  328.881223][ T7759]  ? snprintf+0xe9/0x140
[  328.885711][ T7759]  ? down_read_killable+0x340/0x340
[  328.890922][ T7759]  ? setup_bdev_super+0x56b/0x660
[  328.896029][ T7759]  get_tree_bdev+0x3e5/0x520
[  328.900656][ T7759]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  328.906953][ T7759]  ? setup_bdev_super+0x660/0x660
[  328.911991][ T7759]  ? apparmor_capable+0x137/0x1a0
[  328.917074][ T7759]  ? bpf_lsm_capable+0x9/0x10
[  328.921760][ T7759]  ? security_capable+0x89/0xb0
[  328.926664][ T7759]  vfs_get_tree+0x8c/0x280
[  328.931105][ T7759]  do_new_mount+0x24a/0xa40
[  328.935682][ T7759]  __se_sys_mount+0x2e7/0x3d0
[  328.940375][ T7759]  ? __x64_sys_mount+0xc0/0xc0
[  328.945177][ T7759]  ? lockdep_hardirqs_on+0x98/0x150
[  328.951493][ T7759]  ? __x64_sys_mount+0x20/0xc0
[  328.956489][ T7759]  do_syscall_64+0x55/0xb0
[  328.960916][ T7759]  ? clear_bhb_loop+0x40/0x90
[  328.965654][ T7759]  ? clear_bhb_loop+0x40/0x90
[  328.970345][ T7759]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  328.977791][ T7759] RIP: 0033:0x7f25fbf9f3ca
[  328.982564][ T7759] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  329.002255][ T7759] RSP: 002b:00007f25fcd81e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  329.010676][ T7759] RAX: ffffffffffffffda RBX: 00007f25fcd81ee0 RCX: 00007f25fbf9f3ca
[  329.018686][ T7759] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f25fcd81ea0
[  329.026714][ T7759] RBP: 0000200000000180 R08: 00007f25fcd81ee0 R09: 0000000000000000
[  329.034736][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  329.042738][ T7759] R13: 00007f25fcd81ea0 R14: 000000000000048d R15: 000000000000002c
[  329.051904][ T7759]  </TASK>
[  329.055094][ T7759] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  329.062377][ T7759] CPU: 0 PID: 7759 Comm: syz.6.430 Not tainted syzkaller #0
[  329.069674][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  329.079751][ T7759] Call Trace:
[  329.083032][ T7759]  <TASK>
[  329.085965][ T7759]  dump_stack_lvl+0x18c/0x250
[  329.090658][ T7759]  ? show_regs_print_info+0x20/0x20
[  329.095864][ T7759]  ? load_image+0x420/0x420
[  329.100379][ T7759]  panic+0x2ca/0x720
[  329.104280][ T7759]  ? bpf_jit_dump+0xd0/0xd0
[  329.108799][ T7759]  __warn+0x2e0/0x470
[  329.112779][ T7759]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  329.118780][ T7759]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  329.124757][ T7759]  report_bug+0x2be/0x4f0
[  329.129101][ T7759]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  329.135075][ T7759]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  329.141057][ T7759]  ? ext4_xattr_inode_update_ref+0x574/0x5d0
[  329.147039][ T7759]  handle_bug+0xcf/0x120
[  329.151288][ T7759]  exc_invalid_op+0x1a/0x50
[  329.155791][ T7759]  asm_exc_invalid_op+0x1a/0x20
[  329.160643][ T7759] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0
[  329.167229][ T7759] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 91 f5 98 ff 49 8b 34 24 48 c7 c7 60 df de 8a 44 89 fa e8 5e 2d 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 d8 27 4a 08
[  329.186836][ T7759] RSP: 0018:ffffc900049f7360 EFLAGS: 00010246
[  329.192918][ T7759] RAX: f05d1ef0bcc86e00 RBX: ffff88805b82c0a8 RCX: 0000000000080000
[  329.200889][ T7759] RDX: ffffc9000bba9000 RSI: 00000000000183bb RDI: 00000000000183bc
[  329.208852][ T7759] RBP: ffffc900049f7450 R08: ffff8880b8e28c53 R09: 1ffff110171c518a
[  329.216846][ T7759] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88805b82bf00
[  329.224836][ T7759] R13: ffffc900049f73c0 R14: dffffc0000000000 R15: 0000000000000000
[  329.232826][ T7759]  ? ext4_xattr_list_entries+0x3d0/0x3d0
[  329.238465][ T7759]  ? __ext4_journal_ensure_credits+0x30/0x450
[  329.244540][ T7759]  ext4_xattr_inode_dec_ref_all+0x9bb/0x1030
[  329.250538][ T7759]  ? ext4_xattr_delete_inode+0xd00/0xd00
[  329.256183][ T7759]  ? __ext4_journal_ensure_credits+0x450/0x450
[  329.262375][ T7759]  ext4_xattr_delete_inode+0xb3b/0xd00
[  329.267863][ T7759]  ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0
[  329.273954][ T7759]  ? __ext4_mark_inode_dirty+0x50d/0x720
[  329.279617][ T7759]  ext4_evict_inode+0xa88/0xe70
[  329.284479][ T7759]  ? evict+0x482/0x8a0
[  329.288550][ T7759]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  329.294452][ T7759]  ? do_raw_spin_unlock+0x121/0x230
[  329.299662][ T7759]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  329.305564][ T7759]  evict+0x4b7/0x8a0
[  329.309474][ T7759]  ? __lock_acquire+0x7d80/0x7d80
[  329.314504][ T7759]  ? proc_nr_inodes+0x230/0x230
[  329.319361][ T7759]  ? do_raw_spin_unlock+0x121/0x230
[  329.324589][ T7759]  ? _raw_spin_unlock+0x28/0x40
[  329.329449][ T7759]  ext4_orphan_cleanup+0xdff/0x1650
[  329.334653][ T7759]  ? ext4_orphan_file_block_trigger+0x440/0x440
[  329.340899][ T7759]  ? ext4_orphan_del+0xc90/0xc90
[  329.345840][ T7759]  ? ext4_register_li_request+0x182/0x930
[  329.351573][ T7759]  ? errseq_check_and_advance+0x66/0x120
[  329.357213][ T7759]  ext4_fill_super+0x5fb5/0x6870
[  329.362173][ T7759]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  329.368415][ T7759]  ? __might_sleep+0xe0/0xe0
[  329.373024][ T7759]  ? read_lock_is_recursive+0x20/0x20
[  329.378414][ T7759]  ? snprintf+0xe9/0x140
[  329.382665][ T7759]  ? down_read_killable+0x340/0x340
[  329.387864][ T7759]  ? setup_bdev_super+0x56b/0x660
[  329.392890][ T7759]  get_tree_bdev+0x3e5/0x520
[  329.397476][ T7759]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  329.403715][ T7759]  ? setup_bdev_super+0x660/0x660
[  329.408739][ T7759]  ? apparmor_capable+0x137/0x1a0
[  329.413854][ T7759]  ? bpf_lsm_capable+0x9/0x10
[  329.418524][ T7759]  ? security_capable+0x89/0xb0
[  329.423379][ T7759]  vfs_get_tree+0x8c/0x280
[  329.427815][ T7759]  do_new_mount+0x24a/0xa40
[  329.432327][ T7759]  __se_sys_mount+0x2e7/0x3d0
[  329.437009][ T7759]  ? __x64_sys_mount+0xc0/0xc0
[  329.441793][ T7759]  ? lockdep_hardirqs_on+0x98/0x150
[  329.446995][ T7759]  ? __x64_sys_mount+0x20/0xc0
[  329.451760][ T7759]  do_syscall_64+0x55/0xb0
[  329.456180][ T7759]  ? clear_bhb_loop+0x40/0x90
[  329.460872][ T7759]  ? clear_bhb_loop+0x40/0x90
[  329.465556][ T7759]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  329.471449][ T7759] RIP: 0033:0x7f25fbf9f3ca
[  329.475872][ T7759] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  329.495474][ T7759] RSP: 002b:00007f25fcd81e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  329.503889][ T7759] RAX: ffffffffffffffda RBX: 00007f25fcd81ee0 RCX: 00007f25fbf9f3ca
[  329.511862][ T7759] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f25fcd81ea0
[  329.519845][ T7759] RBP: 0000200000000180 R08: 00007f25fcd81ee0 R09: 0000000000000000
[  329.527816][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  329.535785][ T7759] R13: 00007f25fcd81ea0 R14: 000000000000048d R15: 000000000000002c
[  329.543766][ T7759]  </TASK>
[  329.546868][ T7759] Kernel Offset: disabled
[  329.551275][ T7759] Rebooting in 86400 seconds..