last executing test programs:

3m0.923786877s ago: executing program 2 (id=2414):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x10, 0x11, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
writev(r4, &(0x7f0000000b00)=[{0x0}, {&(0x7f00000001c0)="06000000", 0x4}], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2m58.574988536s ago: executing program 2 (id=2422):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@nogrpid}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f00000020c0)=ANY=[], 0x0)

2m56.176081955s ago: executing program 2 (id=2426):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x4)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0)

2m54.01032407s ago: executing program 2 (id=2432):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f0000000000)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b)
write(r0, &(0x7f0000000400)='p:mygroup/myeve', 0xf)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2m53.655404648s ago: executing program 2 (id=2435):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0xeeee8000, 0x50000, 0x8, 0x4, 0x4, 0xc, 0x3, 0xa, 0x0, 0x1, 0x7, 0x3}, {0x2, 0x200000, 0xd, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x10, 0x9, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x4, 0xe, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x8, 0xd, 0x79, 0x2d, 0x5, 0x8, 0xfc, 0x0, 0x1, 0xc5}, {0x5000, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x84}, {0x60000, 0x1, 0xc, 0x9, 0x0, 0x4, 0x10, 0x3, 0x9, 0x0, 0x82, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x25000, 0xedd8}, {0xffff1000, 0x17}, 0x60000006, 0x0, 0xd000, 0x100, 0x100000002, 0x0, 0x4, [0x6, 0x7, 0x4000000000000009, 0x2000000007]})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

2m53.276063198s ago: executing program 2 (id=2439):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0xfffffffffffffffa, 0xf1, 0x50, 0x16, 0xffffffffffffff24, 0x0, 0x29, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x6], 0x4, 0x43100})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x36000, 0xc000, 0x8, 0x8, 0xb, 0xe5, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x9000, 0x80a0000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0x26000, 0xc, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0x2000, 0xdddd0000, 0xe, 0x0, 0xb1, 0x8, 0xfd, 0xa0, 0x0, 0x31, 0x1, 0x7}, {0x0, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x1000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xe, 0x81}, {0xfec00000, 0x31}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m52.892756488s ago: executing program 32 (id=2439):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0xfffffffffffffffa, 0xf1, 0x50, 0x16, 0xffffffffffffff24, 0x0, 0x29, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x6], 0x4, 0x43100})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x36000, 0xc000, 0x8, 0x8, 0xb, 0xe5, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x9000, 0x80a0000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0x26000, 0xc, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0x2000, 0xdddd0000, 0xe, 0x0, 0xb1, 0x8, 0xfd, 0xa0, 0x0, 0x31, 0x1, 0x7}, {0x0, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x1000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xe, 0x81}, {0xfec00000, 0x31}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m48.884572388s ago: executing program 0 (id=2448):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
pipe(&(0x7f0000000500))
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}, 0xa0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m47.863530344s ago: executing program 0 (id=2451):
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044890}, 0x200480b8)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m46.651187944s ago: executing program 0 (id=2455):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0xeeee8000, 0x50000, 0x8, 0x4, 0x4, 0xc, 0x3, 0xa, 0x0, 0x1, 0x7, 0x3}, {0x2, 0x200000, 0xd, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x10, 0x9, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x4, 0xe, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x8, 0xd, 0x79, 0x2d, 0x5, 0x8, 0xfc, 0x0, 0x1, 0xc5}, {0x5000, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x84}, {0x60000, 0x1, 0xc, 0x9, 0x0, 0x4, 0x10, 0x3, 0x9, 0x0, 0x82, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x25000, 0xedd8}, {0xffff1000, 0x17}, 0x60000006, 0x0, 0xd000, 0x100, 0x100000002, 0x0, 0x4, [0x6, 0x7, 0x4000000000000009, 0x2000000007]})
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

2m46.376218691s ago: executing program 0 (id=2456):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f0000000000)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b)

2m46.096378218s ago: executing program 0 (id=2458):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
pipe(&(0x7f0000000500))
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, 0x0, 0xa0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m45.660048249s ago: executing program 0 (id=2459):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)
close(r5)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r3, 0x10}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)="8616035a26", 0x5}], 0x1}, 0x804)

2m45.030436405s ago: executing program 33 (id=2459):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)
close(r5)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r3, 0x10}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)="8616035a26", 0x5}], 0x1}, 0x804)

2m45.016589625s ago: executing program 3 (id=2461):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x7000000, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8, 0x20}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

2m44.83294872s ago: executing program 3 (id=2462):
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044890}, 0x200480b8)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m43.688970809s ago: executing program 3 (id=2464):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000890, &(0x7f0000000380)=ANY=[], 0x2, 0x552b, &(0x7f0000000640)="$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")
symlink(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='.\x02\x00')

2m42.657993315s ago: executing program 3 (id=2465):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f0000000000)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b)

2m42.06218333s ago: executing program 3 (id=2466):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
pipe(&(0x7f0000000500))
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, 0x0, 0xa0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m40.095900619s ago: executing program 3 (id=2468):
inotify_init1(0x80000)
r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000140)={0x0, 0x10, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m39.411419896s ago: executing program 34 (id=2468):
inotify_init1(0x80000)
r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000140)={0x0, 0x10, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m7.468370376s ago: executing program 1 (id=2524):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
pipe(&(0x7f0000000500))
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0xa0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m6.735853844s ago: executing program 1 (id=2528):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000003c0)="e3ff00000002224a0021b7bf8ff0524cf0", 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m6.236165627s ago: executing program 1 (id=2533):
socket$inet6(0xa, 0x2, 0x0)
syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
r1 = io_uring_setup(0x895, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m5.746846329s ago: executing program 1 (id=2535):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f0000000000)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2m5.279080411s ago: executing program 1 (id=2536):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}})

2m4.821764712s ago: executing program 1 (id=2538):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="080006003629"], 0x24}}, 0x0)

2m3.916275025s ago: executing program 35 (id=2538):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="080006003629"], 0x24}}, 0x0)

1m54.495522511s ago: executing program 4 (id=2561):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
pipe(&(0x7f0000000500))
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0xa0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m53.916227266s ago: executing program 4 (id=2564):
r0 = socket$kcm(0xa, 0x2, 0x73)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x2, 0x4})
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3", 0xfe0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x11, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)

1m53.672705962s ago: executing program 4 (id=2565):
socket$inet6(0xa, 0x2, 0x0)
syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
r1 = io_uring_setup(0x895, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m53.190124844s ago: executing program 4 (id=2566):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f0000000000)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b)
write(r0, &(0x7f0000000400)='p:mygroup/myeve', 0xf)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1m52.766845585s ago: executing program 4 (id=2567):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r1 = openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0)
prctl$PR_MCE_KILL(0x23, 0x8, 0x7fffffffeffe)
ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f00000001c0)={0x1, 0x2, 0x3ff, 0x2, 0x2})
clock_gettime(0x0, &(0x7f0000000080))
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x7]}, 0x8)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x39, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "54cefc", 0x3, 0x2f, 0x1, @local, @local, {[], "b760c2"}}}}}, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r6, &(0x7f0000000a00)="c7", 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f00000000c0)=0x400, 0x4)
recvmmsg(r2, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0)

1m52.1429362s ago: executing program 4 (id=2568):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

1m51.35159664s ago: executing program 36 (id=2568):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

8.596709535s ago: executing program 7 (id=2817):
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_open_dev$evdev(&(0x7f0000000080), 0x191b8629, 0x2a2a02)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
setpriority(0x0, 0x0, 0x200002a14b56)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
socket$inet_udp(0x2, 0x2, 0x0)
munmap(&(0x7f000063b000/0x2000)=nil, 0x2000)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x4000054)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, 0x0, 0x0)
close(0x3)
getitimer(0x1, &(0x7f0000001980))
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))

7.19011556s ago: executing program 6 (id=2825):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x20, 0x3a, 0x505, 0x201, 0x0, {0x1, 0x1}, [@generic="0f00010070d871566b"]}, 0x20}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x10, 0x11, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
writev(r4, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

7.164067281s ago: executing program 7 (id=2826):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040))

7.099495982s ago: executing program 5 (id=2827):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000340)=ANY=[], 0x0, 0x24a, &(0x7f0000000680)="$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")
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)

6.598953805s ago: executing program 7 (id=2829):
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0)
pipe2$9p(0x0, 0x800)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6.37289266s ago: executing program 6 (id=2830):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f00000000c0)=0x400, 0x4)
recvmmsg(r0, &(0x7f0000006700), 0x0, 0x10162, 0x0)

6.320523002s ago: executing program 7 (id=2831):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc880)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r1, 0x0, 0x0, 0x5b, 0x0)

6.260160014s ago: executing program 5 (id=2832):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@oldalloc}, {@norecovery}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000a40)=ANY=[], 0x278)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1527, &(0x7f0000002c40)="$eJzs3Au4TtXWOPAx5pyLTdKb5D7HHIs3uUySJJdUckmSJElyS5IkSRISm9ySkITck9xDcgvJ/U5yT5IjSZKQ3JL5f3Q56ul8nb7/6XzOc/b4Pc989hzvWnO+Y+6x3v2utd6991dt+1eqU7l8LWaGfwn+9CUVAFIAoBcAXAYAEQCUyFIiy/ntGTSm/mtPIv5a90662BmIi0nqn7ZJ/dM2qX/aJvVP26T+aZvUP22T+qdtUn8h0rKNk3NeLi3tNrn/n5bJ+/9/kf1FRny2psiV7f4XQ6T+aZvUP22T+qch0e8fkvqnbVL/tE3q/9/vlj/YJvX/L5Xy53aT+guRlv39XvDZEMJ/wP3ov7ql/91nHL/cgr74uf0ntIt8+AkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESCNOhQsMAPzSv9h5CSGEEEIIIYQQ4q8T0l/sDIQQQgghhBBCCPHvh6BAg4EI0kF6SIEMkBEugUxwKWSGyyABl0MWuAKywpWQDbJDDsgJuSA35AELBA4YYsgL+SAJV0F+uBoKQEEoBIXBQxEoCtdAMbgWisN1UAKuh5JwA5SC0lAGysKNUA5ugpvhFigPt0IFqAiVoDLcBlXgdqgKd0A1uBOqw11QA+6GmnAP1IJ7oTbcB3XgfqgLD0A9qA8NoCE0+v8a/yx0hOegE3SGVOgCXeF56AbdoQf0hF7wAvSGF6EPvAR9oR/0h5dhALwCA+FVGASDYQi8BkNhGAyHETASRsFoeB3GwBswFt6EcTAeJsBEmASTYQq8BVNhGkyHt2EGvAMzYRbMhjkwF96FeTAfFsB7sBDeh0WwGJbAUlgGy2EFrIRVsBrWwFpYB+thA3wAG+FD2ASbYQtshW2wHXZAetgJH8Mu+AR2w6f/y/EnYQd89Kvx7RAQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jALJgFs2JWzIbZMAfmwFyYC/NgHiQkZGTMi3kxiUnMj/mxABbAQlgIPXosikWxGF6LxbE4lsASWBJLYiksjaWxLJbFclgOb8absTyWxwpYASthJbwNb8PbsSpWxWpYDatjdayBNbAm1sRaWAtrY22sg3WwLtbFelgPG2ADbISNsDE2xibYBJtiU2yGzbA5NscW2AJbYktsha2wNbbGNtgG22JbbIftsT0+i8/ic/gcdsYKqgt2xa7YDbthD+yJPfEF7I0v4ov4EvbFftgfX8aX8RUciCdwEA7GITgEy6lhOBxHIKtROBpH4xgcg2NxLI7D8TgeJ+IknIxTcApOxWk4Dd/GGfgOvoOzcBbOwbk4F+fhfFyAC3AhnsRFuBiX4FJchstxGa7EVbgS1+BaXIPrEc1Pr9APcTNuxq24FbfjdvwIP8KP8WPsi7txN+7BPbgX9+I+3If7cT8ewAN4EA/iITyEh/EwHsGjeAyP4nE8jifwJJ7CU3gGz+BZfDrXF7W3F1zdF9R5RhmVTqVTKSpFZVQZVSaVSWVWmVVCJVQWlUVlVVlVNpVN5VA5VC6VS+VReRQpUqxilVflVUmVVPlVflVAFVCFVCHllVdFVVFVTBVTxVVxVUJdr0qqG1QpVVo97MuqsqpG9NPqyqvyqoKqqCqpyqqyqqKqqKqqqqqmqqnqqrqqoe5WNVUX7IH3qvOVqaP6YV3VH+up+qqBaqhewQdVYzUQm6iHVVP1iBqMg7C5auxbqMdVSzUcW6kn1Qh8SrVRo7Cteka1U+1VB/Ws6qia+E6qsxqHXVRXNRG7qe6qh+qppmJFdb5ildRLqq/qp/qrl9UcfEUNVK+qQWqwGqJeU0PVMDVcjVAj1Sg1Wr2uxqg31Fj1phqnxqsJaqKapCarKeotNVVNU9PV22qGekfNVLPUbDVHzVXvqnlqvlqg3lML1ftqkVqslqilaplarlaolWqVWq3WqLVqnVqvNqgP1Eb1odqkNqstaqvaprarHeojtVN9rHapT9Ru9anao/6m9qrP1D71udqvvlAH1JfqoPpKHVJfq8PqG3VEHVXH1LfquPpOnVAn1Sl1Wp1R36uz6gd1TgUFGrXSWhsd6XQ6vU7RGXRGfYnOpC/VmfVlOqEv11n0FTqrvlJn09l1Dp1T59K5dR5tNWmnWcc6r86nk/oqnV9frQvogrqQLqy9LqKL6mt0MX2tLq6v0yX09bqkvkGX0qV1GV1W36jL6Zv0zfoWXV7fqivoirqSrqxv01X07bqqvkNX03fq6vouXUPfrWvqe3Qtfa+ure/TdfT9uq5+QNfT9XUD3VA30g/qxvoh3eT80aQf0c30o7q5fky30I/rlvoJ3Uo/qVvrp3Qb/bRuq5/R7XR73UH/oM/poDvpzjpVd9Fd9fO6m+6ue+ieupd+QffWL+o++iXdV/fT/fXLeoB+RQ/Ur+pBerAeol/TQ/UwPVyP0CP1KD1av67H6Df0WP2mHqfH6wl6op6kJ+seP880/U+Mf+MfjO/z47N/oDfqD/UmvVlv0Vv1Nr1d79A79E69U+/Su/RuvVvv0Xv0Xr1X79P79H69Xx/QB/RBfVAf0of0YX1YH9FH9Wn9rT6uv9Mn9El9Up/WZ/QZffbn7wEYNMpoY0xk0pn0JsVkMBnNJSaTudRkNpeZhLncZDFXmKzmSpPNZDc5TE6Ty+Q2eYw1ZJxhE5u8Jp9JmqtMfnO1KWAKmkKmsPGmiClqrvmXx/+z/BqZRqaxaWyamCamqWlqmplmprlpblqYFqalaWlamVamtWlt2pg2pq1pa9qZdqaD6WA6mo6mk+lkUk2q6WqeN91Md9PD9DS9zAumt+lt+pg+pq/pa/qb/maAGWAGmoFmkBlkhpghZqgZaoab4WakGWlGm9FmjBljxpqxZpwZZyaYCWaSmWSmmClmqplqppvpZoaZYWaamWa2mW3mmrlmnplnFpgFZqFZaBaZxWaxWWqWmuVmuVlpVprVZrVZa9aa9Wa9WWQ2mo1mk9lktpgtZpvZZnaYHWan2Wl2mV1mt9lt9pg9Zq/Za/aZfWa/2W8OmAPmoDloDplD5rA5bI6YI+aYOWaOm+PmhDlhTplT5ow5Y86as+acOXf+tC9SkYpMZKJ0UbooJUqJMkYZo0xRpihzlDlKRIkoS5QlyhpdGWWLskc5opxRrih3lCeyEUUu4iiO8kb5omR0VZQ/ujoqEBWMCkWFIx8ViYpG10TFomuj4tF1UYno+qhkdENUKiodlYnKRjdG5aKbopujW6Ly0a1RhajiL59DRbdHVaM7omrRnVH16K6oRnR3VDO6J6oV3RvVju6L6kT3R3WjB6J6Uf2oQdQwavRn548qRZWj26Iqfzh/CCeyP+Q72c421XaxXe3ztpvtbnvYnraXfcH2ti/aPvYl29f2s/3ty3aAfcUOtK/aQXawHWJfs0PtMDvcjrAj7Sg72r5ux9g37Fj7ph1nx9sJdqKdZCfbKfYtO9VOs9Pt23aGfcfOtLPsbDvHzrXv2nl2vl1g37ML7ft2kV1sl9ildpldblfYlXaVXW3X2LV2nV1vN9gP7Eb7od1kN9stdqvdZrfbHfYju9N+bHfZT+xu+6ndY/9m99rP7D743O63X9gD9kt70H5lD9mv7WH7jT1ij9pj9lt73H5nT9iT9pQ9bc/Y7+1Z+4M9Z8P5k/vzb+9kyFA6SkcplEIZKSNlokyUmTJTghKUhbJQVspK2Sgb5aAclItyUR7KQ+cxMeWlvJSkJOWn/FSAClAhKkSePBWlolSMilFxKk4lqASVpJJUikpRGSpDN9KNdBPdRLfQLXQr3UoVqSJVpspUhapQVapK1agaVafqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB41oAbUiBpRY2pMTagJNaWm1IyaUXNqTi2oBbWkltSKWlFrak1tqA21pbbUjtpRB+pAHakjdTrdiVIplbpSV+pG3agH9aBe1It6U2/qQ32oL/Wl/tSfBtAAGkgDaRANpiH0Gg2lYTScRtBIGkWjaTSNoTE0lsbSOBpHE2gCTaJJNIWm0FSaStNpOs2gGTSTZtJsmk1zaS7No3m0gBbQQlpIi2gRLaEltIyW0QpaQatoFa2hNbSO1tEG2kAbaSNt0ptoC22hbbSNdtAO2kk7aRftot20m/bQHtpLe2kf7aP9tJ8O0AE6SAfpEB2iw3SYjtAROkbH6DgdpxN0gk7RKTpD39NZ+oHOUaAUpyCju8Rlcpe6zO4yl+IyuF/HOVxOl8vldnmcddlc9t/E5Jwr4Aq6Qq6w866IK+qu+V1cypV2ZVxZd6Mr525yN/8uruJud1XdHa6au9NVdrf9Jq7u7nI13P2upnvA1XL1XW3X0NVx97u67gFXz9V3DVxD18w96pq7x1wL97hr6Z74XTzPzXer3Gq3xq11O93H7pQ77Q66r9wZ973r5Dq7Xu4F19u96Pq4l1zfav1+G7t+boh7zQ11w9xwN8KNdKN+F09wE90kN9lNcW+5qW7a7+K57l03wy1wM90sN9vN+TE+n9MC955b6N53i9xit8QtdcvccrfCrfx7rkvderfBfeB2uI/cJrfZbXFb3Ta3/cf4/Dp2uU/cbvepO+C+dHvdZ26fO+T2uy9+jM+v75D72h1237gj7qg75r51x9137oQ7+eP6z6/9W/eDO+eCA0ZWrNlwxOk4PadwBs7Il3AmvpQz82Wc4Ms5C1/BWflKzsbZOQfn5Fycm/OwZWLHzDHn5Xyc5Ks4P1/NBbggF+LC7LkIF+VruBhfy8X5Oi7B13NJvoFLcWkuw2X5Ri7HN/HNBrg838oVuCJX4sp8G1fh27kq38HV+E6uzndxDb6ba/I9XIvv5dp8H/9yN6Me1+cG3JAb8YPcmB/iJvwwN+VHuBk/ys35MW7Bj3NLfoJb8ZPcmp/iNvw0t+VnuB235w78LHfk57gTd+ZU7sJd+Xnuxt25B/fkXvwC9+YXuQ+/xH25H/fnl3kAv8ID+VUexIN5CL/GQ3kYD+cRPJJH8Wh+ncfwGzyW3+RxPJ4n8ESexJN5Cr/FU3kaT+e3eQa/wzNnZAbgOTyX3+V5PJ8X8Hu8kN/nRbyYl/BSXsbLeQWv5FW8mtfwWl7H63kDf8Ab+UPexJt5C2/lbbydd/BHvJM/5l38Ce/mT3kP/4338me8jz/n/fwFH+Av+SB/xYf4az7M3/ARPsrH+Fs+zt/xCT7Jp/g0n+Hv+Sz/wOc4MMQYq1jHJo7idHH6OCXOEGeML4kzxZfGmePL4kR8eZwlviLOGl8ZZ4uzxzninHGuOHecJ7YxxS7mOI7zxvniZHxVnD++Oi4QF4wLxYVjHxeJi8bXxMXia+Pi8XVxifj6uGR8Q1wqLh3ff2fZ+Ma4XHxTfHN8S1w+vjWuEFeMK8WV49viKvHtcdX4jrhafGdcPL4rrhHfHdeM74lrxffGteP74jrx/XHd+IG4Xlw/bhA3jBvFD8aN44fiJvHDcdP4kbhZ/GjcPH4sbhE/HreMn/in21PjLnHX+Pn4+TiEO/Ts5Jzk3OS7yXnJ+ckFyfeSC5PvJxclFyeXJJcmlyWXJ1ckVyZXJVcn1yTXJtcl1yc3JD9IhlA5PXj0ymtvfOTT+fQ+xWfwGf0lPpO/1Gf2l/mEv9xn8Vf4rP5Kn81n9zl8Tp/L5/Z5vPXknWcf+7w+n0/6q3x+f7Uv4Av6Qr6w976IL+ob+ka+kW/sH/JN/MO+qX/EP+If9Y/6x/xj/nHf0j/hW/knfWv/lG/jn/ZP+2d8O9/ed/DP+o7+Od/Jd/apPtV39V19N9/N9/A90v38IvJ9fB/f1/f1/X1/P8AP8AP9QD/ID/JD/BA/1A/1w/1wP9KP9KP9aD/Gj/Fj/Vg/zo/zE/wEP8lP8lP8FD/VT/XT/XQ/o8AMP9PP9LP9bD/Xz/Xz/Dy/wC/wC/1Cv8gv8kv8Er/ML/Mr/Aq/yq/ya/wav86v8xv8Br/Rb/Sb/Ca/xW/x2/w2v8Pv8Dv9Tr/L7/K7/W6/x+/xe/1ev89/7vf7L/wB/6U/6L/yh/zX/rD/xh/xR/0x/60/7r/zJ/xJf8qf9mf89/6s/8Gf88GPTryeGJN4IzE28WZiXGJ8YkJiYmJSYnJiSuKtxNTEtMT0xNuJGYl3EjMTsxKzEykA8G5iXmJ+YkHivcTCxPuJRYnFiSWJpYllieWJEHJvikPekC8kw1Uhf7g6FAgFQ6FQOPhQJBQN14Ri4dpQPFwXSoTrQ8lwQygVSocy4YFQL9QPDULD0Cg8GBqHh0KT8HBoGh4JzcKjoXl4LLQIj4eW4YnQKjwZWoenQpvwdGgbngntQvvQITwbOobnQqfQOaSGLqFreD50C91Dj9Az9AovhN7hxdAnvBT6hn6hf3g5DAivhIHh1TAoDA5DwmthaBgWhocRYWQYFUaH18OYDG+EseHNMC6MDxPCxDApTA5TwlthapgWpoe3w4zwTpgZZoXZYU6YG94N88L8sCC8FxaG98OisDgsCUvDsrA8rAgrw6qwOqwJa8O6sD5sCB+EjeHDsClsDlvC1rAtbA87wkdhZ/g47AqfhN3h04A/HX2p+8LnYX/4IhwIX4aD4atwKHwdDodvwpFwNBwL34bj4btwIpwMp8LpcCZ8H86GH8I5+Zs1IYQQQog/Zey+P97e5R88pn5u53UFgEs359z/6+0GANZl+6nfXeVqlgCAxzu3vfeXVqFCamrqz/su0hDlmwUAiQvjf7wM+TleDE3hUWgBD0Oxf5hfd9X+DP/B/HgkhOT1ABl/Neb8efwv8YX5r/0f5n/wkSHzSsansvx2/rM/n2+ezz85C6BAvgtjMsCF+ML8xf+H+bM3/qP8F2nI8NlogCa/GpMJLsQX5i8KD8ET0OI3ewohhBBCCCGEED/prsq0/ifXnz9en+f66XeRf3w4Pfw9/qfX50IIIYQQQgghhLj4nmrf4bEHW7R4uLV0pJMWOhkA4D8gjX9HJ+UvnfBi/2QSQgghhBBC/NUunPRf7EyEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQoi06//i/5Nd7DUKIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQF9v/CwAA//+JSyoS")
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1084, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x3ffff)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}})
fallocate(r0, 0x11, 0x0, 0x5345)

6.080498358s ago: executing program 6 (id=2834):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$loop(0x0, 0x4, 0x80000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
capset(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
nanosleep(0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x7}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)

6.00049346s ago: executing program 7 (id=2835):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r2, 0x25, 0x4, @val=@tcx}, 0x1c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200c580000008001b0000000000"], 0x28}}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r1, 0x4, r1}, 0x10)

5.652273479s ago: executing program 6 (id=2837):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='utf8=1,shortname=win95,nfs=nostale=lower,sys_immutable,utf8=1,utf8=1,uid=\x00'/86, @ANYRESHEX=0xee00, @ANYBLOB=',rodir,utf8=0,time_offset=0x0000000000000503,shortname=lower,uni_xlate=1,\x00'], 0x0, 0x2c6, &(0x7f0000002b40)="$eJzs3cFqE1scx/FfkzZJW9pkUS7cC5d7uHdz3QxtfIIgLYgBpTaiLoSpnWjImIRMjETEdufW5yguXSmoL9CNO/fipgiCmwriSJOZNi2pTUviVPP9QJnTOfM/50zPpPwTZk62rz+9Vy56VtFuKJYyikkb2pEyu6XAWLCNtcsJddvQuenP7/6+euPmpVw+v7hszFJu5XzWGDP7z6sHj579+6Yxfe357MuktjK3tj9l32/9sfXn9reVsPWqZJvVarVhr7qOWSt5ZcuYK65je44pVTyn3jBd9UW3Wqu1jF1Zm5mq1R3PM3alZcpOyzSqplFvGfuOXaoYy7LMzJRGTfzEEYXN5WU7N5TBIAqTvXbW6zk73rOysPkzBgUAAM6WqPL/uyXPlDxTqXbye+mI/D+mE+T/0kjn/6dVi3oAGKrd/H8seP0eRP4PAAAAAAAAAAAAAAAAAAAAAMCvYMf3077vp8Nt+JOUlJIU/h71ODEczP9o63pwLyW5T5qFZqGz7dTniirJlaP5Celr+3oIdMpLF/OL86Yto9fuevCs4EazEFcyjA9lescvdOLNbnzQ//q6JjTV3X9Wac31js/2iG8WEvr/Pz8Z9OzIUlpvb6sqV2vt63o//vGCMRcu5w/FT7aPO9LY8OYEAAAAAIBBs8yezMH3v53VJC3LhMuGHKrv7Nz/fEDpYz4fOPT+elx/jUd33gAAAAAAjBIvobLtuk7daz383Qvh9x8MpEEp6tNJ9XvwuKRgz4shjSe8G2KgLcd6NDjRZxfxH87yF/+Y8I/SwdfF3KmnOzHgP7j6nveg4Mf3rtUP9/ufpqj+IwEAAAAYljDp53Z2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACi09cqYrMqh8efasWyffFozhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4G74HAAD//3PUC8M=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032cbd7000fedbdf2500000002140002"], 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0xa, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x4, 0x3, 0x0, 0x5, 0x4, 0x80000, 0x5, 0x3c5b, 0x1, 0x26, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x806, 0x7fff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0x40c8, 0xf9, 0xe, 0x82c0, 0xffffffff, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x1c, 0xb94, 0x7, 0x7fff, 0x401c000, 0x3fe, 0x403, 0x200006, 0x3, 0x9, 0x5, 0x3, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x78, 0x9, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x9, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0xd, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x1, 0x5, 0x5, 0x4000000, 0x1eb, 0x6, 0x401, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x8000, 0x402, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000008, 0x1c2, 0x1000, 0xa2, 0x7, 0xe9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x40, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x1, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0x2, 0x5, 0x2, 0x5, 0x3, 0xfffffffc, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0x0, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x0, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x1ff, 0xffff3441, 0x4]}, 0x45c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3.832523334s ago: executing program 8 (id=2838):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000001200)=0xd0, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000100)}, 0x10)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

3.529472862s ago: executing program 5 (id=2839):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x20, 0x3a, 0x505, 0x201, 0x0, {0x1, 0x1}, [@generic="0f00010070d871566b"]}, 0x20}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x10, 0x11, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
writev(r4, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

3.365347036s ago: executing program 6 (id=2840):
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0)
pipe2$9p(0x0, 0x800)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.713046392s ago: executing program 8 (id=2841):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x1, 0x7})
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b081000418e00000004fcff", 0x58}], 0x1)

2.590519935s ago: executing program 5 (id=2842):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000700)={0x20, 0x6, 0x6, "3d27175a24bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.4201719s ago: executing program 8 (id=2843):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f00000000c0)=0x400, 0x4)
recvmmsg(r0, &(0x7f0000006700), 0x0, 0x10162, 0x0)

2.330780982s ago: executing program 8 (id=2844):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc880)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000000), 0x0, 0x5b, 0x0)

578.353786ms ago: executing program 6 (id=2845):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@mblk_io_submit}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@sysvgroups}, {@grpid}, {@noquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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")

488.282978ms ago: executing program 8 (id=2846):
clock_gettime(0x2, &(0x7f00000002c0)={<r0=>0x0, <r1=>0x0})
setitimer(0x0, &(0x7f0000000080)={{0x77359400}, {r0, r1/1000+60000}}, 0x0)
r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
close(r2)
r3 = inotify_init1(0x800)
fcntl$setstatus(r2, 0x4, 0x2c00)
r4 = gettid()
fcntl$setown(r2, 0x8, r4)
fcntl$setsig(r3, 0xa, 0xe)
inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
rmdir(&(0x7f0000000100)='./control\x00')
openat$hwrng(0xffffffffffffff9c, 0x0, 0x80380, 0x0)

453.351789ms ago: executing program 7 (id=2847):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28001, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000001a40)={{}, "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"})
ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

402.786701ms ago: executing program 5 (id=2848):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000003e00)={r0, &(0x7f0000002d80), 0x0}, 0x20)

136.724387ms ago: executing program 8 (id=2849):
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}})

0s ago: executing program 5 (id=2850):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x20, 0x3a, 0x505, 0x201, 0x0, {0x1, 0x1}, [@generic="0f00010070d871566b"]}, 0x20}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x10, 0x11, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
writev(r4, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

es for control 1 (id 2)
[  567.305646][  T788] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  567.364572][T10699] udevd[10699]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  567.422165][ T1135] team0 (unregistering): Port device team_slave_1 removed
[  567.474382][ T1135] team0 (unregistering): Port device team_slave_0 removed
[  567.519955][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  567.564843][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  567.885907][ T1135] bond0 (unregistering): Released all slaves
[  567.963851][T14161] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2424'.
[  568.018634][   T51] Bluetooth: hci1: command tx timeout
[  568.181726][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.434412][T14092] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  568.445754][T14092] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  568.486335][T14092] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  568.521358][T14092] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  568.682672][ T1135] IPVS: stop unused estimator thread 0...
[  568.718297][ T5411] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  568.747085][T14092] 8021q: adding VLAN 0 to HW filter on device bond0
[  568.802151][T14092] 8021q: adding VLAN 0 to HW filter on device team0
[  568.843156][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.850521][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  568.882323][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.889538][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  568.923544][ T5411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  568.957803][T14092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  568.968568][T14092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  568.973068][ T5411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  569.012013][ T5411] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  569.026017][ T5411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.057709][ T5411] usb 3-1: config 0 descriptor??
[  569.203428][ T5849] usb 2-1: USB disconnect, device number 34
[  569.414089][T14092] 8021q: adding VLAN 0 to HW filter on device batadv0
[  569.545237][T14092] veth0_vlan: entered promiscuous mode
[  569.564791][T14092] veth1_vlan: entered promiscuous mode
[  569.617469][T14092] veth0_macvtap: entered promiscuous mode
[  569.640179][T14092] veth1_macvtap: entered promiscuous mode
[  569.677856][T14092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  569.689412][T14092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.700570][T14092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  569.711877][T14092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.722744][T14092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  569.733835][T14092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.761668][ T5411] usbhid 3-1:0.0: can't add hid device: -71
[  569.772426][T14092] batman_adv: batadv0: Interface activated: batadv_slave_0
[  569.780812][ T5411] usbhid: probe of 3-1:0.0 failed with error -71
[  569.793792][ T5411] usb 3-1: USB disconnect, device number 36
[  569.804876][T14092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  569.826352][T14092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.850240][T14092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  569.877604][T14092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.891916][T14092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  569.904021][T14092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.920082][T14092] batman_adv: batadv0: Interface activated: batadv_slave_1
[  569.940469][T14092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  569.975959][T14092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  569.986196][T14092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  569.995160][T14092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  570.098767][   T51] Bluetooth: hci1: command tx timeout
[  570.122593][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  570.132133][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.170511][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  570.208573][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.566709][T14213] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2433'.
[  571.141945][ T1135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.261363][ T1135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.429342][ T1135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.872841][T13644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  572.886779][T13644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  572.899789][T13644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  572.908827][T13644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  572.916650][T13644] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  572.925463][T13644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  574.488204][    C0] sched: RT throttling activated
[  574.979262][T13644] Bluetooth: hci0: command tx timeout
[  576.738328][T11598] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  576.945812][T11598] usb 4-1: unable to get BOS descriptor or descriptor too short
[  576.972822][T11598] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  576.998232][T11598] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  577.025383][T11598] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  577.038199][T11598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.056469][T11598] usb 4-1: Product: syz
[  577.061940][T13644] Bluetooth: hci0: command tx timeout
[  577.067860][T11598] usb 4-1: Manufacturer: syz
[  577.072994][T11598] usb 4-1: SerialNumber: syz
[  577.095876][T11598] usb 4-1: selecting invalid altsetting 1
[  577.114389][T11598] usb 4-1: unit 6 not found!
[  577.156001][ T1135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.103046][T14241] chnl_net:caif_netlink_parms(): no params data found
[  578.149050][T11598] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  578.169775][T11598] usb 4-1: USB disconnect, device number 30
[  578.217541][T10699] udevd[10699]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  579.030082][T14241] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.058932][T14241] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.067212][T14241] bridge_slave_0: entered allmulticast mode
[  579.109734][T14241] bridge_slave_0: entered promiscuous mode
[  579.142759][T13644] Bluetooth: hci0: command tx timeout
[  579.359315][T14241] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.366486][T14241] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.389141][T14241] bridge_slave_1: entered allmulticast mode
[  579.412737][T14241] bridge_slave_1: entered promiscuous mode
[  579.448765][T14315] xt_bpf: check failed: parse error
[  579.583602][T14241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  579.676547][T14241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  579.821360][T14241] team0: Port device team_slave_0 added
[  580.039118][T14241] team0: Port device team_slave_1 added
[  580.192968][T14241] batman_adv: batadv0: Adding interface: batadv_slave_0
[  580.218228][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  580.273558][T14241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  580.301704][ T1135] hsr_slave_0: left promiscuous mode
[  580.314731][ T1135] hsr_slave_1: left promiscuous mode
[  580.332415][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  580.348351][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  580.366768][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  580.378215][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  580.404633][ T1135] bond0: left allmulticast mode
[  580.417904][ T1135] bond_slave_0: left allmulticast mode
[  580.435091][ T1135] bond_slave_1: left allmulticast mode
[  580.453106][ T1135] bond0: left promiscuous mode
[  580.468061][ T1135] bond_slave_0: left promiscuous mode
[  580.479001][ T1135] bond_slave_1: left promiscuous mode
[  580.493610][ T1135] bridge0: port 3(bond0) entered disabled state
[  580.515023][ T1135] bridge_slave_1: left allmulticast mode
[  580.532099][ T1135] bridge_slave_1: left promiscuous mode
[  580.541292][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  580.552641][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  580.558325][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.564798][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  580.575053][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  580.597068][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  580.605317][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  580.640446][ T1135] bridge_slave_0: left allmulticast mode
[  580.646167][ T1135] bridge_slave_0: left promiscuous mode
[  580.678646][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.766035][ T1135] veth1_macvtap: left promiscuous mode
[  580.775430][ T1135] veth0_macvtap: left promiscuous mode
[  580.783916][ T1135] veth1_vlan: left promiscuous mode
[  580.792733][ T1135] veth0_vlan: left promiscuous mode
[  581.218332][   T51] Bluetooth: hci0: command tx timeout
[  581.302927][T14337] loop3: detected capacity change from 0 to 40427
[  581.345192][T14337] F2FS-fs (loop3): invalid crc value
[  581.350554][ T1135] bond11 (unregistering): Released all slaves
[  581.369477][T14337] F2FS-fs (loop3): Found nat_bits in checkpoint
[  581.479952][T14337] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  581.581496][ T1135] bond10 (unregistering): Released all slaves
[  581.584298][T14342] f2fs_ckpt-7:3: attempt to access beyond end of device
[  581.584298][T14342] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  581.604415][T14342] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  581.782933][ T1135] bond9 (unregistering): Released all slaves
[  581.956126][ T1135] bond8 (unregistering): Released all slaves
[  582.151877][ T1135] bond7 (unregistering): Released all slaves
[  582.359293][ T1135] bond6 (unregistering): Released all slaves
[  582.477469][ T1135] bond5 (unregistering): Released all slaves
[  582.614135][ T1135] bond4 (unregistering): Released all slaves
[  582.631525][ T1135] bond3 (unregistering): Released all slaves
[  582.648762][ T1135] bond2 (unregistering): Released all slaves
[  582.658441][   T51] Bluetooth: hci3: command tx timeout
[  582.687375][ T1135] bond1 (unregistering): Released all slaves
[  583.154088][ T1135] team0 (unregistering): Port device team_slave_1 removed
[  583.198107][ T1135] team0 (unregistering): Port device team_slave_0 removed
[  583.249129][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  583.295850][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  583.601745][ T1135] bond0 (unregistering): Released all slaves
[  583.709336][T14326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2463'.
[  583.719293][T14241] batman_adv: batadv0: Adding interface: batadv_slave_1
[  583.726287][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  583.752806][T14241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  584.073136][T14241] hsr_slave_0: entered promiscuous mode
[  584.085945][T14241] hsr_slave_1: entered promiscuous mode
[  584.092477][T14241] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  584.100455][T14241] Cannot create hsr debugfs directory
[  584.288258][T11598] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  584.495623][T11598] usb 2-1: unable to get BOS descriptor or descriptor too short
[  584.525718][T11598] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  584.557773][ T1135] IPVS: stop unused estimator thread 0...
[  584.578920][T11598] usb 2-1: New USB device found, idVendor=0499, idProduct=1020, bcdDevice= 0.40
[  584.588020][T11598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.633178][T11598] usb 2-1: Product: syz
[  584.637505][T11598] usb 2-1: Manufacturer: syz
[  584.658755][T11598] usb 2-1: SerialNumber: syz
[  584.738814][   T51] Bluetooth: hci3: command tx timeout
[  584.767917][T14241] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  584.779249][T14241] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  584.790570][T14241] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  584.896469][ T1135] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.932482][T11598] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  584.948720][T14241] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  584.959062][T11598] snd-usb-audio: probe of 2-1:1.0 failed with error -2
[  584.984896][T14334] chnl_net:caif_netlink_parms(): no params data found
[  584.995287][T11598] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  585.028832][T11598] snd-usb-audio: probe of 2-1:1.1 failed with error -2
[  585.051728][T11598] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  585.059994][ T1135] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.134178][T11598] snd-usb-audio: probe of 2-1:1.2 failed with error -2
[  585.158914][T11598] usb 2-1: USB disconnect, device number 35
[  585.237724][T10699] udevd[10699]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  585.291029][ T1135] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.439058][ T1135] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.584222][T14241] 8021q: adding VLAN 0 to HW filter on device bond0
[  585.627268][T14334] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.649424][T14334] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.656713][T14334] bridge_slave_0: entered allmulticast mode
[  585.664821][T14334] bridge_slave_0: entered promiscuous mode
[  585.675145][T14334] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.682621][T14334] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.690143][T14334] bridge_slave_1: entered allmulticast mode
[  585.697596][T14334] bridge_slave_1: entered promiscuous mode
[  585.734168][T13644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  585.744351][T13644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  585.753548][T13644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  585.762813][T13644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  585.776487][T13644] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  585.785377][T13644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  585.840166][T14241] 8021q: adding VLAN 0 to HW filter on device team0
[  585.901966][T14334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  585.951450][T14334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  586.066191][T14334] team0: Port device team_slave_0 added
[  586.089681][T14245] bridge0: port 1(bridge_slave_0) entered blocking state
[  586.096869][T14245] bridge0: port 1(bridge_slave_0) entered forwarding state
[  586.142849][T14334] team0: Port device team_slave_1 added
[  586.233749][T14334] batman_adv: batadv0: Adding interface: batadv_slave_0
[  586.241521][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.274469][T14334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  586.289376][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  586.296526][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  586.399782][ T1135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.439687][T14334] batman_adv: batadv0: Adding interface: batadv_slave_1
[  586.450607][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.483427][T14334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  586.528015][ T1135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.648770][ T1135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.692082][T14334] hsr_slave_0: entered promiscuous mode
[  586.716165][T14334] hsr_slave_1: entered promiscuous mode
[  586.730744][T14334] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  586.756097][T14334] Cannot create hsr debugfs directory
[  586.819741][T13644] Bluetooth: hci3: command tx timeout
[  586.835794][ T1135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.428532][T14371] chnl_net:caif_netlink_parms(): no params data found
[  587.609278][T14404] dyndbg: bad flag-op , at start of Gƒ¥ì«ó»z[díJªh‹
[  587.616602][T14404] dyndbg: flags parse failed
[  587.723026][ T5848] smpboot: CPU 1 is now offline
[  587.858644][T13644] Bluetooth: hci1: command tx timeout
[  588.187766][T14241] 8021q: adding VLAN 0 to HW filter on device batadv0
[  588.346905][T14334] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  588.556336][T14334] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  588.582214][T14334] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  588.737394][T14334] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  588.832564][T14371] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.876233][T14371] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.898642][T13644] Bluetooth: hci3: command tx timeout
[  588.918936][T14371] bridge_slave_0: entered allmulticast mode
[  588.925892][T14371] bridge_slave_0: entered promiscuous mode
[  588.970282][T14371] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.977404][T14371] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.028818][T14371] bridge_slave_1: entered allmulticast mode
[  589.055815][T14371] bridge_slave_1: entered promiscuous mode
[  589.814410][T14371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  589.899920][T14371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  589.941978][T13644] Bluetooth: hci1: command tx timeout
[  590.103887][T14371] team0: Port device team_slave_0 added
[  590.177451][T14371] team0: Port device team_slave_1 added
[  590.305885][T14371] batman_adv: batadv0: Adding interface: batadv_slave_0
[  590.316379][T14371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  590.357033][T14371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  590.374569][T14371] batman_adv: batadv0: Adding interface: batadv_slave_1
[  590.382020][T14371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  590.412927][T14371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  590.448646][T14241] veth0_vlan: entered promiscuous mode
[  590.495156][T14442] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  590.508820][T14442] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  590.534243][T14334] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.550936][T14442] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  590.572126][T14442] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  590.591088][T14334] 8021q: adding VLAN 0 to HW filter on device team0
[  590.613334][T14442] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  590.646048][ T1135] hsr_slave_0: left promiscuous mode
[  590.652690][T14442] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  590.667372][ T1135] hsr_slave_1: left promiscuous mode
[  590.676891][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  590.688464][T14442] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  590.697235][T14442] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  590.703348][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  590.717494][T14442] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  590.724112][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  590.740776][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  590.747982][T14442] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  590.759004][ T1135] bridge_slave_1: left allmulticast mode
[  590.764715][ T1135] bridge_slave_1: left promiscuous mode
[  590.770619][T14442] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  590.781529][T14442] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  590.790658][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.816257][ T1135] bridge_slave_0: left allmulticast mode
[  590.830369][ T1135] bridge_slave_0: left promiscuous mode
[  590.845988][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.875601][ T1135] hsr_slave_0: left promiscuous mode
[  590.899283][ T1135] hsr_slave_1: left promiscuous mode
[  590.907839][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  590.928023][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  591.009606][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  591.026945][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  591.069807][ T1135] bridge_slave_1: left allmulticast mode
[  591.075491][ T1135] bridge_slave_1: left promiscuous mode
[  591.095688][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.122997][ T1135] bridge_slave_0: left allmulticast mode
[  591.137408][ T1135] bridge_slave_0: left promiscuous mode
[  591.163457][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.260739][ T1135] veth1_macvtap: left promiscuous mode
[  591.272572][ T1135] veth0_macvtap: left promiscuous mode
[  591.293410][ T1135] veth1_vlan: left promiscuous mode
[  591.299577][ T1135] veth0_vlan: left promiscuous mode
[  591.316516][ T1135] veth1_macvtap: left promiscuous mode
[  591.328581][ T1135] veth0_macvtap: left promiscuous mode
[  591.343771][ T1135] veth1_vlan: left promiscuous mode
[  591.363983][ T1135] veth0_vlan: left promiscuous mode
[  591.861193][T13644] Bluetooth: hci2: command 0x0c1a tx timeout
[  592.579065][T13644] Bluetooth: hci0: command 0x0c1a tx timeout
[  592.743922][T13644] Bluetooth: hci3: command 0x0c1a tx timeout
[  592.818680][T13644] Bluetooth: hci1: command 0x0419 tx timeout
[  592.913999][ T1135] team0 (unregistering): Port device team_slave_1 removed
[  592.995474][ T1135] team0 (unregistering): Port device team_slave_0 removed
[  593.082908][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  593.143062][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  593.552074][ T1135] bond0 (unregistering): Released all slaves
[  593.945649][T13644] Bluetooth: hci2: command 0x0c1a tx timeout
[  594.215012][ T1135] team0 (unregistering): Port device team_slave_1 removed
[  594.266919][ T1135] team0 (unregistering): Port device team_slave_0 removed
[  594.320893][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  594.374878][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  594.659632][T13644] Bluetooth: hci0: command 0x0c1a tx timeout
[  594.767545][ T1135] bond0 (unregistering): Released all slaves
[  594.818292][T13644] Bluetooth: hci3: command 0x0c1a tx timeout
[  594.896726][T14241] veth1_vlan: entered promiscuous mode
[  594.902629][T13644] Bluetooth: hci1: command 0x0419 tx timeout
[  594.929312][T14464] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2484'.
[  595.003804][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.010966][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state
[  595.156747][T14371] hsr_slave_0: entered promiscuous mode
[  595.180939][T14371] hsr_slave_1: entered promiscuous mode
[  595.200682][T14371] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  595.238280][T14371] Cannot create hsr debugfs directory
[  595.327917][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.335069][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state
[  595.419655][T14241] veth0_macvtap: entered promiscuous mode
[  595.530394][T14241] veth1_macvtap: entered promiscuous mode
[  595.585942][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  595.647083][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.098044][T13644] Bluetooth: hci2: command 0x0c1a tx timeout
[  597.104150][T13644] Bluetooth: hci0: command 0x0c1a tx timeout
[  597.110319][T13644] Bluetooth: hci3: command 0x0c1a tx timeout
[  597.116327][T13644] Bluetooth: hci1: command 0x0419 tx timeout
[  597.156232][T14241] batman_adv: batadv0: Interface activated: batadv_slave_0
[  597.284891][T14482] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.294871][T14482] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.443749][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  597.493202][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.552732][T14241] batman_adv: batadv0: Interface activated: batadv_slave_1
[  597.626511][T14241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  597.661042][T14241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  597.689466][T14241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  597.733216][T14241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  598.349767][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.357627][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.604502][T14245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.654396][T14245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.792224][T14371] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  598.827550][T14371] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  598.897516][T14334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  599.039553][T14371] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  599.109409][T14371] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  599.146127][T13646] Bluetooth: hci1: command 0x0419 tx timeout
[  599.217966][T14506] netlink: 30 bytes leftover after parsing attributes in process `syz.4.2440'.
[  599.567385][T14371] 8021q: adding VLAN 0 to HW filter on device bond0
[  601.272967][T14371] 8021q: adding VLAN 0 to HW filter on device team0
[  601.355711][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.362904][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  601.402447][T14520] loop4: detected capacity change from 0 to 128
[  601.481696][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.488943][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.524729][T14520] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  601.630458][T14520] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  601.984256][   T27] audit: type=1326 audit(1787942863.419:26927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.4.2490" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae8b59e159 code=0x0
[  602.037342][T14334] veth0_vlan: entered promiscuous mode
[  602.192317][T14334] veth1_vlan: entered promiscuous mode
[  602.351110][T14334] veth0_macvtap: entered promiscuous mode
[  602.394307][T14334] veth1_macvtap: entered promiscuous mode
[  602.522834][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  602.585022][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.620924][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  602.662220][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.689676][T14334] batman_adv: batadv0: Interface activated: batadv_slave_0
[  602.735923][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  602.789160][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.822160][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  602.853161][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.880189][T14334] batman_adv: batadv0: Interface activated: batadv_slave_1
[  602.926787][T14371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  602.954398][T14334] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  602.987962][T14334] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  603.017333][T14334] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  603.045746][T14529] loop1: detected capacity change from 0 to 40427
[  603.058096][T14334] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.110727][T14529] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  603.177039][T14529] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  603.224935][T14529] F2FS-fs (loop1): invalid crc value
[  603.299027][T14529] F2FS-fs (loop1): Found nat_bits in checkpoint
[  603.551493][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.591761][T14529] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  603.607054][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.649997][T14529] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  603.760019][T14241] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  603.799024][T13976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.861003][T13976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  604.322740][T14371] veth0_vlan: entered promiscuous mode
[  604.425230][T14371] veth1_vlan: entered promiscuous mode
[  604.623861][T14371] veth0_macvtap: entered promiscuous mode
[  604.690739][T14371] veth1_macvtap: entered promiscuous mode
[  608.360938][T14371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  608.467578][T14371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.534667][T14371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  608.624664][T14371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.728183][T14371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  608.804174][T14371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.879750][T14371] batman_adv: batadv0: Interface activated: batadv_slave_0
[  609.003721][T14371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  609.063444][T14371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.103838][T14371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  609.142381][T14371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.182807][T14371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  609.226253][T14371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  609.268023][T14371] batman_adv: batadv0: Interface activated: batadv_slave_1
[  609.308292][    T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  609.373001][T14371] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  609.418074][T14371] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  609.442786][T14371] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  609.476969][T14371] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  609.510829][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  609.554118][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  609.623241][    T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  609.694228][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.762353][    T9] usb 2-1: config 0 descriptor??
[  609.799342][T13976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  609.873854][T13976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  610.028363][T14245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  610.095340][T14245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  610.275725][    T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  610.336014][    T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  610.390626][    T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  610.465124][    T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  610.536402][    T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  610.591315][    T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  610.652226][    T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  610.709888][    T9] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  610.868721][    T9] cp2112 0003:10C4:EA90.000E: Part Number: 0x00 Device Version: 0x00
[  610.972255][    T9] cp2112 0003:10C4:EA90.000E: error requesting SMBus config
[  611.022760][    T9] cp2112: probe of 0003:10C4:EA90.000E failed with error -5
[  611.559246][T14627] fuse: Unknown parameter 'defcontext'
[  613.372488][ T5849] usb 2-1: USB disconnect, device number 36
[  613.661251][T14640] loop4: detected capacity change from 0 to 256
[  613.668069][T14638] Illegal XDP return value 4294967274 on prog  (id 16) dev syz_tun, expect packet loss!
[  614.421155][T14660] loop1: detected capacity change from 0 to 256
[  614.563318][T14660] =======================================================
[  614.563318][T14660] WARNING: The mand mount option has been deprecated and
[  614.563318][T14660]          and is ignored by this kernel. Remove the mand
[  614.563318][T14660]          option from the mount to silence this warning.
[  614.563318][T14660] =======================================================
[  614.622498][T14664] loop6: detected capacity change from 0 to 256
[  614.660674][T14664] exfat: Deprecated parameter 'utf8'
[  614.818734][T14220] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  614.879991][T14664] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  614.938560][T14668] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2516'.
[  615.018311][T14660] exfat: Unknown parameter 'Ûבj'
[  615.025042][T14245] bond0: (slave bond_slave_0): interface is now down
[  615.041080][T14220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  615.085398][T14245] bond0: (slave bond_slave_1): interface is now down
[  615.102820][T14220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  615.146838][T14245] bond0: now running without any active interface!
[  615.198882][T14220] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  615.277430][T14220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.351197][T14220] usb 5-1: config 0 descriptor??
[  615.767391][T14220] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  615.814393][T14220] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  615.842834][T14683] 9pnet_fd: Insufficient options for proto=fd
[  615.851243][T14220] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  615.884893][T14220] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  615.921652][T14220] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  615.931419][ T5411] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  615.998266][T14220] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  616.044045][T14220] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[  616.084877][T14220] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  616.164182][ T5411] usb 7-1: config 127 has an invalid interface number: 24 but max is 0
[  616.196007][ T5411] usb 7-1: config 127 has no interface number 0
[  616.243555][T14220] cp2112 0003:10C4:EA90.000F: Part Number: 0x00 Device Version: 0x00
[  616.272915][ T5411] usb 7-1: New USB device found, idVendor=0300, idProduct=8cfc, bcdDevice= 0.2c
[  616.320261][T14220] cp2112 0003:10C4:EA90.000F: error requesting SMBus config
[  616.328230][ T5411] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.336253][ T5411] usb 7-1: Product: syz
[  616.389825][T14220] cp2112: probe of 0003:10C4:EA90.000F failed with error -5
[  616.460046][ T5411] usb 7-1: Manufacturer: syz
[  616.497476][ T5411] usb 7-1: SerialNumber: syz
[  616.749794][   T27] audit: type=1326 audit(1787942878.209:26928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14693 comm="syz.1.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977499e159 code=0x7ffc0000
[  616.802704][ T5411] usb-storage 7-1:127.24: USB Mass Storage device detected
[  616.893975][   T27] audit: type=1326 audit(1787942878.239:26929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14693 comm="syz.1.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977499e159 code=0x7ffc0000
[  616.986795][ T5411] usb 7-1: USB disconnect, device number 2
[  617.124616][   T27] audit: type=1326 audit(1787942878.239:26930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14693 comm="syz.1.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977499e159 code=0x7ffc0000
[  617.245291][   T27] audit: type=1326 audit(1787942878.239:26931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14693 comm="syz.1.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f977499e159 code=0x7ffc0000
[  617.406488][   T27] audit: type=1326 audit(1787942878.239:26932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14693 comm="syz.1.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977499e159 code=0x7ffc0000
[  617.585674][T14717] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2526'.
[  617.611707][   T27] audit: type=1326 audit(1787942878.239:26933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14693 comm="syz.1.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f977499e159 code=0x7ffc0000
[  617.818506][   T27] audit: type=1326 audit(1787942878.239:26934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14693 comm="syz.1.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f977499e159 code=0x7ffc0000
[  618.002685][T14220] usb 5-1: USB disconnect, device number 2
[  618.244165][T14730] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2531'.
[  618.304416][T14730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2531'.
[  618.356201][T14730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2531'.
[  618.434345][   T27] audit: type=1326 audit(1787942879.889:26935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.1.2533" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977499e159 code=0x7ffc0000
[  618.613902][   T27] audit: type=1326 audit(1787942879.919:26936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.1.2533" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977499e159 code=0x7ffc0000
[  618.825807][   T27] audit: type=1326 audit(1787942879.919:26937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.1.2533" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977499e159 code=0x7ffc0000
[  619.906360][ T1135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.291334][ T1135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.555296][ T1135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.627886][T14768] loop4: detected capacity change from 0 to 1024
[  620.695678][T14768] EXT4-fs: inline encryption not supported
[  620.853807][ T1135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.930832][T14768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  621.024926][T14768] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  621.229008][T14220] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  621.253274][T14768] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.2540: Freeing blocks not in datazone - block = 0, count = 16
[  621.462215][T14781] loop5: detected capacity change from 0 to 1024
[  621.499651][T14220] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  621.536254][T14781] ext4: Unknown parameter 'nouser_xattr'
[  621.565797][T14220] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  621.639297][T14241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  621.648542][T14220] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  621.657584][T14220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.821790][T14220] usb 7-1: config 0 descriptor??
[  622.146536][T14787] ALSA: mixer_oss: invalid OSS volume ''
[  622.171204][T13644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  622.186367][T13644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  622.195336][T13644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  622.206550][T13644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  622.220590][T13644] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  622.227982][T13644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  622.266546][T14787] ALSA: mixer_oss: invalid OSS volume 'qO'
[  622.301917][T14220] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  622.349937][T14220] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  622.356921][T14220] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  622.433344][T14220] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  622.472185][T14220] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  622.507880][T14220] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  622.558290][T14220] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  622.596970][T14220] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[  622.722451][T14220] cp2112 0003:10C4:EA90.0010: error requesting version
[  622.783212][T14220] cp2112: probe of 0003:10C4:EA90.0010 failed with error -5
[  624.258206][T13644] Bluetooth: hci2: command tx timeout
[  624.267441][ T1135] hsr_slave_0: left promiscuous mode
[  624.325464][ T1135] hsr_slave_1: left promiscuous mode
[  624.363881][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  624.387916][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  624.413463][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  624.457380][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  624.495981][ T1135] bridge_slave_1: left allmulticast mode
[  624.520102][ T1135] bridge_slave_1: left promiscuous mode
[  624.553086][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.598523][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  624.604850][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  624.644549][ T1135] bridge_slave_0: left allmulticast mode
[  624.675194][T14220] usb 7-1: USB disconnect, device number 3
[  624.708277][ T1135] bridge_slave_0: left promiscuous mode
[  624.758312][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state
[  624.896061][T14839] loop6: detected capacity change from 0 to 512
[  625.007856][T14839] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.2552: inode has both inline data and extents flags
[  625.042233][ T1135] veth1_macvtap: left promiscuous mode
[  625.047804][ T1135] veth0_macvtap: left promiscuous mode
[  625.089654][T14839] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2552: couldn't read orphan inode 15 (err -117)
[  625.108407][ T1135] veth1_vlan: left promiscuous mode
[  625.127147][ T1135] veth0_vlan: left promiscuous mode
[  625.157382][T14839] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  625.431013][T14371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.638584][T14220] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  625.838174][T14220] usb 5-1: Using ep0 maxpacket: 32
[  625.848731][T14220] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  625.912618][T14220] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  625.940587][T14220] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  625.985941][T14220] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23
[  626.043884][T14220] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  626.073439][T14220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  626.097052][T14220] usb 5-1: SerialNumber: syz
[  626.130077][T14845] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  626.162847][T14845] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  626.187058][T14220] hub 5-1:1.0: bad descriptor, ignoring hub
[  626.213038][T14220] hub: probe of 5-1:1.0 failed with error -5
[  626.232231][T14220] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  626.342974][T13644] Bluetooth: hci2: command tx timeout
[  626.412024][T14220] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  626.490488][T14220] usb 5-1: USB disconnect, device number 3
[  626.802653][T13860] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  626.824329][ T1135] team0 (unregistering): Port device team_slave_1 removed
[  626.876250][ T1135] team0 (unregistering): Port device team_slave_0 removed
[  626.932226][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  627.001083][T13860] usb 6-1: Using ep0 maxpacket: 16
[  627.007844][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  627.034595][T13860] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  627.080483][T13860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.113590][T13860] usb 6-1: Product: syz
[  627.118944][T13860] usb 6-1: Manufacturer: syz
[  627.137303][T13860] usb 6-1: SerialNumber: syz
[  627.393734][T13860] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  627.442984][T13860] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  627.471563][T13860] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  627.529906][T13860] usb 6-1: media controller created
[  627.586403][T13860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  628.980555][T13644] Bluetooth: hci2: command tx timeout
[  629.203657][T13860] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5
[  629.387881][T13860] usb 6-1: USB disconnect, device number 2
[  629.675599][ T1135] bond0 (unregistering): Released all slaves
[  629.859624][T14847] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2554'.
[  629.923078][   T12] bond0: (slave bond_slave_0): interface is now down
[  629.972467][T14788] chnl_net:caif_netlink_parms(): no params data found
[  629.979423][   T12] bond0: (slave bond_slave_1): interface is now down
[  630.191542][   T12] bond0: (slave bond_slave_0): interface is now down
[  630.237030][   T12] bond0: (slave bond_slave_1): interface is now down
[  630.458853][T14245] bond0: (slave bond_slave_0): interface is now down
[  630.465577][T14245] bond0: (slave bond_slave_1): interface is now down
[  630.490576][T14788] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.506884][T14788] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.549806][T14788] bridge_slave_0: entered allmulticast mode
[  630.591241][T14788] bridge_slave_0: entered promiscuous mode
[  630.644152][T14788] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.689441][ T1137] bond0: (slave bond_slave_0): interface is now down
[  630.726825][T14788] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.757336][ T1137] bond0: (slave bond_slave_1): interface is now down
[  630.778315][T14788] bridge_slave_1: entered allmulticast mode
[  630.836564][T14788] bridge_slave_1: entered promiscuous mode
[  630.964155][   T12] bond0: (slave bond_slave_0): interface is now down
[  631.031921][   T12] bond0: (slave bond_slave_1): interface is now down
[  631.063174][T13644] Bluetooth: hci2: command tx timeout
[  631.216328][T14788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  631.236131][T13976] bond0: (slave bond_slave_0): interface is now down
[  631.283800][T13976] bond0: (slave bond_slave_1): interface is now down
[  631.351596][T14788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  631.469523][T13976] bond0: (slave bond_slave_0): interface is now down
[  631.523654][T13976] bond0: (slave bond_slave_1): interface is now down
[  631.680594][T14788] team0: Port device team_slave_0 added
[  631.721597][   T12] bond0: (slave bond_slave_0): interface is now down
[  631.779404][   T12] bond0: (slave bond_slave_1): interface is now down
[  631.865217][T14878] loop6: detected capacity change from 0 to 40427
[  631.959299][   T12] bond0: (slave bond_slave_0): interface is now down
[  631.966022][   T12] bond0: (slave bond_slave_1): interface is now down
[  631.992542][T14878] F2FS-fs (loop6): invalid crc value
[  632.016383][T14788] team0: Port device team_slave_1 added
[  632.189060][ T1137] bond0: (slave bond_slave_0): interface is now down
[  632.240920][ T1137] bond0: (slave bond_slave_1): interface is now down
[  632.382623][T14878] F2FS-fs (loop6): access invalid blkaddr:0
[  632.403877][T14878] CPU: 0 PID: 14878 Comm: syz.6.2563 Not tainted syzkaller #0
[  632.411377][T14878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  632.421447][T14878] Call Trace:
[  632.424728][T14878]  <TASK>
[  632.427663][T14878]  dump_stack_lvl+0x18c/0x250
[  632.432357][T14878]  ? show_regs_print_info+0x20/0x20
[  632.437576][T14878]  ? __up_read+0x2b8/0x6b0
[  632.442004][T14878]  ? __lock_acquire+0x7d80/0x7d80
[  632.447039][T14878]  f2fs_is_valid_blkaddr+0xe6c/0x15c0
[  632.452435][T14878]  sanity_check_extent_cache+0xfc/0x1f0
[  632.458012][T14878]  f2fs_iget+0x336f/0x47d0
[  632.462450][T14878]  f2fs_fill_super+0x4853/0x6b60
[  632.467437][T14878]  ? kill_f2fs_super+0x3f0/0x3f0
[  632.472385][T14878]  ? down_write+0x16e/0x200
[  632.476925][T14878]  ? down_read_killable+0x340/0x340
[  632.482141][T14878]  ? setup_bdev_super+0x559/0x660
[  632.487172][T14878]  ? setup_bdev_super+0x56b/0x660
[  632.492199][T14878]  mount_bdev+0x21c/0x2c0
[  632.496532][T14878]  ? kfree+0x31/0x1a0
[  632.500524][T14878]  ? kill_f2fs_super+0x3f0/0x3f0
[  632.505492][T14878]  ? get_tree_bdev+0x520/0x520
[  632.510271][T14878]  ? vfs_parse_fs_param+0x420/0x420
[  632.515585][T14878]  legacy_get_tree+0xea/0x180
[  632.520291][T14878]  ? trace_raw_output_f2fs__rw_end+0x110/0x110
[  632.526457][T14878]  vfs_get_tree+0x8c/0x280
[  632.530879][T14878]  do_new_mount+0x24a/0xa40
[  632.535396][T14878]  __se_sys_mount+0x2e7/0x3d0
[  632.540084][T14878]  ? __x64_sys_mount+0xc0/0xc0
[  632.544857][T14878]  ? lockdep_hardirqs_on+0x98/0x150
[  632.550065][T14878]  ? __x64_sys_mount+0x20/0xc0
[  632.554839][T14878]  do_syscall_64+0x55/0xb0
[  632.559258][T14878]  ? clear_bhb_loop+0x40/0x90
[  632.563940][T14878]  ? clear_bhb_loop+0x40/0x90
[  632.568627][T14878]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  632.574526][T14878] RIP: 0033:0x7f21f379f3ca
[  632.578943][T14878] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  632.598551][T14878] RSP: 002b:00007f21f4737e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  632.606968][T14878] RAX: ffffffffffffffda RBX: 00007f21f4737ee0 RCX: 00007f21f379f3ca
[  632.614947][T14878] RDX: 0000200000000140 RSI: 0000200000000000 RDI: 00007f21f4737ea0
[  632.622960][T14878] RBP: 0000200000000140 R08: 00007f21f4737ee0 R09: 000000000000000a
[  632.630949][T14878] R10: 000000000000000a R11: 0000000000000246 R12: 0000200000000000
[  632.638923][T14878] R13: 00007f21f4737ea0 R14: 000000000000553e R15: 0000200000001480
[  632.646918][T14878]  </TASK>
[  632.828618][T13976] bond0: (slave bond_slave_0): interface is now down
[  632.835341][T13976] bond0: (slave bond_slave_1): interface is now down
[  633.049194][T13976] bond0: (slave bond_slave_0): interface is now down
[  633.055919][T13976] bond0: (slave bond_slave_1): interface is now down
[  633.215535][T14788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  633.226843][T14788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  633.259039][ T3421] bond0: (slave bond_slave_0): interface is now down
[  633.265738][ T3421] bond0: (slave bond_slave_1): interface is now down
[  633.304411][T14788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  633.363958][T14788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  633.377109][T14878] F2FS-fs (loop6): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 24244] is incorrect, run fsck to fix
[  633.418682][T14788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  633.451006][ T3421] bond0: (slave bond_slave_0): interface is now down
[  633.457729][ T3421] bond0: (slave bond_slave_1): interface is now down
[  633.477614][T14878] F2FS-fs (loop6): Failed to read root inode
[  633.554028][T14788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  633.639960][T14245] bond0: (slave bond_slave_0): interface is now down
[  633.681355][T14245] bond0: (slave bond_slave_1): interface is now down
[  633.773563][ T1135] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.825017][T13646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  633.854748][T13646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  633.868386][ T3421] bond0: (slave bond_slave_0): interface is now down
[  633.875088][ T3421] bond0: (slave bond_slave_1): interface is now down
[  633.884922][T13646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  633.897780][T13646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  633.910160][T13646] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  633.917438][T13646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  634.097778][ T1135] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.122336][ T1137] bond0: (slave bond_slave_0): interface is now down
[  634.153079][ T1137] bond0: (slave bond_slave_1): interface is now down
[  634.201121][ T1137] bond0: now running without any active interface!
[  634.215022][T14788] hsr_slave_0: entered promiscuous mode
[  634.259527][T14788] hsr_slave_1: entered promiscuous mode
[  634.407120][ T1135] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.463559][T14923] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2570'.
[  634.614282][ T1135] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.928170][ T5848] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  635.130098][ T5848] usb 7-1: config 127 has an invalid interface number: 24 but max is 0
[  635.188495][ T5848] usb 7-1: config 127 has no interface number 0
[  635.236574][ T5848] usb 7-1: New USB device found, idVendor=0300, idProduct=8cfc, bcdDevice= 0.2c
[  635.285485][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.331980][ T5848] usb 7-1: Product: syz
[  635.372983][ T5848] usb 7-1: Manufacturer: syz
[  635.377619][ T5848] usb 7-1: SerialNumber: syz
[  635.664779][ T5848] usb-storage 7-1:127.24: USB Mass Storage device detected
[  635.780688][ T5848] usb 7-1: USB disconnect, device number 4
[  635.859087][T14788] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  636.012689][T14788] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  636.020790][T13646] Bluetooth: hci0: command tx timeout
[  636.059683][T14788] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  636.367023][T14788] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  636.856592][T14913] chnl_net:caif_netlink_parms(): no params data found
[  637.159017][T14548] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  637.400531][T14548] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  637.437317][T14548] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  637.486661][T14548] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  637.546308][T14548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.571326][ T1135] hsr_slave_0: left promiscuous mode
[  637.585017][T14548] usb 6-1: Product: syz
[  637.610077][T14548] usb 6-1: Manufacturer: syz
[  637.614701][T14548] usb 6-1: SerialNumber: syz
[  637.621672][ T1135] hsr_slave_1: left promiscuous mode
[  637.652815][T14548] usb 6-1: config 0 descriptor??
[  637.659210][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  637.694530][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  637.707269][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  637.717821][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  637.726518][ T1135] bridge_slave_1: left allmulticast mode
[  637.735112][ T1135] bridge_slave_1: left promiscuous mode
[  637.742706][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.754500][ T1135] bridge_slave_0: left allmulticast mode
[  637.763125][ T1135] bridge_slave_0: left promiscuous mode
[  637.783774][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.835913][ T1135] veth1_macvtap: left promiscuous mode
[  637.856059][ T1135] veth0_macvtap: left promiscuous mode
[  637.866037][ T1135] veth1_vlan: left promiscuous mode
[  637.884343][ T1135] veth0_vlan: left promiscuous mode
[  638.106889][T13646] Bluetooth: hci0: command tx timeout
[  638.230008][ T5848] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  638.433222][ T5848] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  638.463942][ T5848] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  638.486702][ T5848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.519623][ T5848] usb 7-1: config 0 descriptor??
[  638.736324][   T27] kauditd_printk_skb: 7 callbacks suppressed
[  638.736334][   T27] audit: type=1804 audit(1787942900.189:26945): pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2577" name="bus" dev="ramfs" ino=88678 res=1 errno=0
[  638.843096][ T1135] team0 (unregistering): Port device team_slave_1 removed
[  638.850720][   T27] audit: type=1804 audit(1787942900.189:26946): pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2577" name="bus" dev="ramfs" ino=88678 res=1 errno=0
[  639.006608][T14220] usb 6-1: USB disconnect, device number 3
[  639.073258][ T1135] team0 (unregistering): Port device team_slave_0 removed
[  639.308610][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  639.494772][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  640.185184][T13646] Bluetooth: hci0: command tx timeout
[  640.299453][ T5848] usbhid 7-1:0.0: can't add hid device: -71
[  640.330928][ T5848] usbhid: probe of 7-1:0.0 failed with error -71
[  640.366878][ T5848] usb 7-1: USB disconnect, device number 5
[  641.540320][ T1135] bond0 (unregistering): Released all slaves
[  641.863314][T14788] 8021q: adding VLAN 0 to HW filter on device bond0
[  641.953977][T14913] bridge0: port 1(bridge_slave_0) entered blocking state
[  642.024189][T14913] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.047851][T14913] bridge_slave_0: entered allmulticast mode
[  642.098366][T14913] bridge_slave_0: entered promiscuous mode
[  642.163170][T14913] bridge0: port 2(bridge_slave_1) entered blocking state
[  642.207977][T14913] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.237349][T14913] bridge_slave_1: entered allmulticast mode
[  642.258330][T13646] Bluetooth: hci0: command tx timeout
[  642.287427][T14913] bridge_slave_1: entered promiscuous mode
[  642.349910][T14788] 8021q: adding VLAN 0 to HW filter on device team0
[  642.397264][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  642.404455][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  642.511278][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  642.518448][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  642.684075][T14913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  642.801412][T14913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  642.986838][T14913] team0: Port device team_slave_0 added
[  643.033955][T14913] team0: Port device team_slave_1 added
[  643.204168][T14788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  643.244768][T14992] loop5: detected capacity change from 0 to 40427
[  643.258303][T14788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  643.301604][T14992] F2FS-fs (loop5): invalid crc value
[  643.330055][T14913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  643.337017][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  643.410806][T14992] F2FS-fs (loop5): Found nat_bits in checkpoint
[  643.521189][T14913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  643.585956][T14992] F2FS-fs (loop5): Start checkpoint disabled!
[  643.598450][T14913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  643.605432][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  643.737905][T14992] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  643.818260][T14913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  643.838237][T14548] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  644.050220][T14548] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  644.068808][T14913] hsr_slave_0: entered promiscuous mode
[  644.083470][T14548] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  644.109167][T14913] hsr_slave_1: entered promiscuous mode
[  644.121663][T14913] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  644.144253][T14548] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  644.163622][T14548] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.171977][T14913] Cannot create hsr debugfs directory
[  644.205744][T14548] usb 7-1: Product: syz
[  644.226736][T14548] usb 7-1: Manufacturer: syz
[  644.254188][T14548] usb 7-1: SerialNumber: syz
[  644.295794][T14548] usb 7-1: config 0 descriptor??
[  644.405573][T14788] 8021q: adding VLAN 0 to HW filter on device batadv0
[  644.612709][ T1137] kworker/u4:7: attempt to access beyond end of device
[  644.612709][ T1137] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  644.682508][ T1137] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  644.940909][T14913] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  644.992659][T14913] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  645.047449][T14913] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  645.121573][T14913] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  645.501563][T14913] 8021q: adding VLAN 0 to HW filter on device bond0
[  645.595884][T14913] 8021q: adding VLAN 0 to HW filter on device team0
[  645.665156][T14548] usb 7-1: USB disconnect, device number 6
[  645.674391][T14788] veth0_vlan: entered promiscuous mode
[  645.767742][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  645.774896][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  645.869953][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  645.877100][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  645.986080][T14788] veth1_vlan: entered promiscuous mode
[  646.124255][T14788] veth0_macvtap: entered promiscuous mode
[  646.217720][T14788] veth1_macvtap: entered promiscuous mode
[  646.246574][T14913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  646.337332][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  646.425620][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  646.461111][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  646.530800][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  646.571936][T14788] batman_adv: batadv0: Interface activated: batadv_slave_0
[  646.675870][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  646.753351][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  646.813007][T14788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  646.873309][T14788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  646.951953][T14788] batman_adv: batadv0: Interface activated: batadv_slave_1
[  647.034055][T14788] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  647.086309][T14788] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  647.120298][T14788] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  647.149555][T14788] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  647.496649][T14913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  647.586993][T14245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  647.620139][T14245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  647.715924][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  647.769161][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  647.788756][  T789] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  648.019481][  T789] usb 6-1: config 127 has an invalid interface number: 24 but max is 0
[  648.072573][  T789] usb 6-1: config 127 has no interface number 0
[  648.146763][  T789] usb 6-1: New USB device found, idVendor=0300, idProduct=8cfc, bcdDevice= 0.2c
[  648.201741][  T789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.233438][  T789] usb 6-1: Product: syz
[  648.237643][  T789] usb 6-1: Manufacturer: syz
[  648.283355][  T789] usb 6-1: SerialNumber: syz
[  648.429656][T13860] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  648.567325][  T789] usb-storage 6-1:127.24: USB Mass Storage device detected
[  648.660077][T13860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  648.681748][T14913] veth0_vlan: entered promiscuous mode
[  648.712149][  T789] usb 6-1: USB disconnect, device number 4
[  648.741826][T13860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  648.767936][T14913] veth1_vlan: entered promiscuous mode
[  648.807367][T13860] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  648.877311][T13860] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.934982][T14913] veth0_macvtap: entered promiscuous mode
[  648.942541][T13860] usb 8-1: config 0 descriptor??
[  649.022224][T14913] veth1_macvtap: entered promiscuous mode
[  649.107174][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.204528][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.254108][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.317037][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.368853][T13860] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0
[  649.375932][T13860] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0
[  649.395847][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.450912][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.461237][T13860] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0
[  649.501435][T13860] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0
[  649.519850][T14913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  649.556985][T13860] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0
[  649.606622][T13860] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0
[  649.628350][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.662159][T13860] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0
[  649.681235][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.707192][T13860] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0
[  649.759691][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.823668][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.874322][T13860] cp2112 0003:10C4:EA90.0011: Part Number: 0x00 Device Version: 0x00
[  649.893567][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.938853][T13860] cp2112 0003:10C4:EA90.0011: error requesting SMBus config
[  649.983834][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  650.008591][T13860] cp2112: probe of 0003:10C4:EA90.0011 failed with error -5
[  650.058021][T14913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  650.149539][T14913] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  650.197087][T14913] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  650.232996][T14913] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  650.262096][T14913] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  650.472319][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.518454][  T789] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  650.527938][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.635757][T14245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.681650][T14245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.732929][  T789] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  650.792618][  T789] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  650.842810][  T789] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  650.893874][  T789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.946221][  T789] usb 7-1: Product: syz
[  650.983191][  T789] usb 7-1: Manufacturer: syz
[  651.012263][  T789] usb 7-1: SerialNumber: syz
[  651.042670][  T789] usb 7-1: config 0 descriptor??
[  651.348328][T14548] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  651.558227][T14548] usb 9-1: Using ep0 maxpacket: 16
[  651.588963][T13860] usb 8-1: USB disconnect, device number 2
[  651.622456][T14548] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  651.685970][T14548] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.733768][T14548] usb 9-1: Product: syz
[  651.759779][T14548] usb 9-1: Manufacturer: syz
[  651.764411][T14548] usb 9-1: SerialNumber: syz
[  652.021634][T14548] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  652.090209][T14548] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  652.180278][T14548] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  652.231359][T14548] usb 9-1: media controller created
[  652.323121][T14548] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  652.393717][T15072] usb 7-1: USB disconnect, device number 7
[  652.649528][T14548] dvb_usb_gl861: probe of 9-1:157.0 failed with error -5
[  653.041459][T15072] usb 9-1: USB disconnect, device number 2
[  653.698848][T14548] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  653.934240][T14548] usb 8-1: config 127 has an invalid interface number: 24 but max is 0
[  653.957930][T14548] usb 8-1: config 127 has no interface number 0
[  653.997355][T14548] usb 8-1: New USB device found, idVendor=0300, idProduct=8cfc, bcdDevice= 0.2c
[  654.055459][T14548] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.105985][T14548] usb 8-1: Product: syz
[  654.136323][T14548] usb 8-1: Manufacturer: syz
[  654.172642][T14548] usb 8-1: SerialNumber: syz
[  654.484197][T14548] usb-storage 8-1:127.24: USB Mass Storage device detected
[  654.568570][T15072] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  654.623197][T14548] usb 8-1: USB disconnect, device number 3
[  654.802477][T15072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  654.843932][T15072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  654.886578][T15072] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  654.926192][T15072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.992546][T15072] usb 7-1: config 0 descriptor??
[  655.465390][T15072] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[  655.507887][T15072] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[  655.549783][T15072] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[  655.591774][T15072] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[  655.631063][T15072] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[  655.681764][T15072] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[  655.728779][T15072] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[  655.779677][T15072] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[  655.947508][T15072] cp2112 0003:10C4:EA90.0012: Part Number: 0x00 Device Version: 0x00
[  656.010330][T15072] cp2112 0003:10C4:EA90.0012: error requesting SMBus config
[  656.074728][T15072] cp2112: probe of 0003:10C4:EA90.0012 failed with error -5
[  656.788456][T14548] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  657.001722][T14548] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  657.057853][T14548] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  657.120898][T14548] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  657.158380][T14548] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.187569][T15195] loop5: detected capacity change from 0 to 512
[  657.223088][T14548] usb 8-1: Product: syz
[  657.240827][T14548] usb 8-1: Manufacturer: syz
[  657.278763][T15195] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  657.290516][T14548] usb 8-1: SerialNumber: syz
[  657.333554][T14548] usb 8-1: config 0 descriptor??
[  657.345057][T15195] System zones: 0-2, 18-18, 34-35
[  657.410024][T15195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  657.486789][T15195] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  657.670950][T14548] usb 7-1: USB disconnect, device number 8
[  657.885023][T15208] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  657.921544][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  658.228413][T13860] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  658.451332][T13860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  658.501783][T13860] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  658.553930][T13860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.606547][T13860] usb 9-1: config 0 descriptor??
[  658.706900][T15072] usb 8-1: USB disconnect, device number 4
[  658.859130][   T27] audit: type=1804 audit(1787942920.319:26947): pid=15211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2610" name="bus" dev="ramfs" ino=90251 res=1 errno=0
[  659.445017][T15238] loop6: detected capacity change from 0 to 1024
[  659.514131][T15238] EXT4-fs: Ignoring removed bh option
[  659.594105][T15238] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  659.694483][T15238] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  659.815971][T15238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  660.188365][T14371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  660.405131][T15250] fuse: Bad value for 'fd'
[  660.428457][  T789] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  660.475280][T15250] loop7: detected capacity change from 0 to 512
[  660.532809][T15250] EXT4-fs: Ignoring removed nobh option
[  660.627974][T15250] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  660.679112][  T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  660.772952][T15250] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  660.784952][  T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  660.854641][  T789] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  660.864492][T15250] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  660.919189][  T789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.960486][T15250] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002]
[  660.977777][  T789] usb 6-1: config 0 descriptor??
[  661.004605][T15250] System zones: 1-12
[  661.038043][T15250] EXT4-fs (loop7): orphan cleanup on readonly fs
[  661.045822][T13860] usbhid 9-1:0.0: can't add hid device: -71
[  661.069295][T13860] usbhid: probe of 9-1:0.0 failed with error -71
[  661.106075][T15250] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:512: comm syz.7.2619: Block bitmap for bg 0 marked uninitialized
[  661.133780][T13860] usb 9-1: USB disconnect, device number 3
[  661.158512][T14548] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  661.221043][T15250] EXT4-fs (loop7): Remounting filesystem read-only
[  661.255653][T15250] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  661.314808][T15250] EXT4-fs (loop7): 1 truncate cleaned up
[  661.343251][T15250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  661.393781][T14548] usb 7-1: Using ep0 maxpacket: 16
[  661.442330][  T789] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  661.469757][T14548] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  661.511687][  T789] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  661.538350][T14548] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.571754][  T789] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  661.592738][T14548] usb 7-1: Product: syz
[  661.596922][T14548] usb 7-1: Manufacturer: syz
[  661.628398][  T789] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  661.670034][T14548] usb 7-1: SerialNumber: syz
[  661.675821][  T789] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  661.731300][  T789] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  661.791305][  T789] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  661.857155][  T789] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  661.920564][T14548] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  662.005438][T14548] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  662.030267][  T789] cp2112 0003:10C4:EA90.0013: Part Number: 0x00 Device Version: 0x00
[  662.104648][  T789] cp2112 0003:10C4:EA90.0013: error requesting SMBus config
[  662.140196][T14548] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  662.177174][  T789] cp2112: probe of 0003:10C4:EA90.0013 failed with error -5
[  662.204899][T14548] usb 7-1: media controller created
[  662.337260][T14548] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  662.628675][T14548] dvb_usb_gl861: probe of 7-1:157.0 failed with error -5
[  662.809721][T14548] usb 7-1: USB disconnect, device number 9
[  663.421420][T14788] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  663.638253][T14548] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  667.449631][T13860] usb 6-1: USB disconnect, device number 5
[  667.502720][T14548] usb 9-1: device descriptor read/all, error -71
[  669.279622][  T789] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  669.513435][  T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  669.555645][  T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  669.609057][  T789] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  669.667899][  T789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.678718][ T5848] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  669.733445][  T789] usb 6-1: config 0 descriptor??
[  669.898268][ T5848] usb 8-1: Using ep0 maxpacket: 16
[  669.926833][ T5848] usb 8-1: config 0 has no interfaces?
[  669.954253][ T5848] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  669.999843][ T5848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  670.054272][ T5848] usb 8-1: SerialNumber: syz
[  670.091014][ T5848] usb 8-1: config 0 descriptor??
[  670.201215][  T789] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  670.240563][  T789] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  670.275713][  T789] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  670.318942][  T789] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  670.358260][  T789] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  670.398586][T14548] usb 8-1: USB disconnect, device number 5
[  670.424387][  T789] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  670.460095][  T789] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  670.507512][  T789] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  670.652335][  T789] cp2112 0003:10C4:EA90.0014: Part Number: 0x00 Device Version: 0x00
[  670.703236][T15311] loop8: detected capacity change from 0 to 40427
[  670.746759][  T789] cp2112 0003:10C4:EA90.0014: error requesting SMBus config
[  670.776786][T15311] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  670.816643][  T789] cp2112: probe of 0003:10C4:EA90.0014 failed with error -5
[  670.840888][T15311] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  670.928363][T15311] F2FS-fs (loop8): Found nat_bits in checkpoint
[  671.229826][T15339] loop7: detected capacity change from 0 to 512
[  671.265982][T15311] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  671.405427][T15311] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  671.888645][   T27] audit: type=1804 audit(1787942933.339:26948): pid=15311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2629" name="/newroot/10/bus/bus" dev="loop8" ino=10 res=1 errno=0
[  672.463813][T14548] usb 6-1: USB disconnect, device number 6
[  672.480889][ T5848] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  672.558415][T15347] syz.8.2629: attempt to access beyond end of device
[  672.558415][T15347] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  672.734835][ T5848] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  672.782090][ T5848] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  672.830298][ T5848] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  672.886487][ T5848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.935584][ T5848] usb 8-1: config 0 descriptor??
[  673.058250][T14548] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  673.279854][T14548] usb 6-1: Using ep0 maxpacket: 16
[  673.315609][T14548] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  673.367286][T14548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.396436][ T5848] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0
[  673.424907][T14548] usb 6-1: Product: syz
[  673.448197][ T5848] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0
[  673.455507][T14548] usb 6-1: Manufacturer: syz
[  673.489964][T14548] usb 6-1: SerialNumber: syz
[  673.509056][ T5848] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0
[  673.546492][ T5848] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0
[  673.602503][ T5848] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0
[  673.663817][ T5848] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0
[  673.706291][ T5848] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0
[  673.734755][T14548] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  673.761187][ T5848] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0
[  673.802931][T14548] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  673.856594][T14548] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  673.905308][ T5848] cp2112 0003:10C4:EA90.0015: Part Number: 0x00 Device Version: 0x00
[  673.913784][  T789] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  673.929131][T14548] usb 6-1: media controller created
[  673.957843][ T5848] cp2112 0003:10C4:EA90.0015: error requesting SMBus config
[  674.017256][ T5848] cp2112: probe of 0003:10C4:EA90.0015 failed with error -5
[  674.055196][T14548] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  674.132752][  T789] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  674.180909][  T789] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  674.261910][  T789] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  674.301232][T14548] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5
[  674.317759][  T789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.366173][  T789] usb 7-1: Product: syz
[  674.404051][  T789] usb 7-1: Manufacturer: syz
[  674.448310][  T789] usb 7-1: SerialNumber: syz
[  674.479235][  T789] usb 7-1: config 0 descriptor??
[  674.600872][  T789] usb 6-1: USB disconnect, device number 7
[  674.938008][T15369] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3234285568 (51748569088 ns) > initial count (202142848 ns). Using initial count to start timer.
[  675.317013][T15378] xt_hashlimit: size too large, truncated to 1048576
[  675.652456][ T5849] usb 8-1: USB disconnect, device number 6
[  675.938458][ T5411] usb 7-1: USB disconnect, device number 10
[  676.769501][T14220] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  677.031239][T14220] usb 7-1: config 0 has no interfaces?
[  677.053508][T14220] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  677.111968][T14220] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  677.154365][T14220] usb 7-1: Manufacturer: syz
[  677.170285][T15072] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  677.210723][T14220] usb 7-1: config 0 descriptor??
[  677.399775][T15072] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  677.466320][T14548] usb 7-1: USB disconnect, device number 11
[  677.474744][T15072] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  677.536283][T15072] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.585486][T15072] usb 8-1: config 0 descriptor??
[  678.362382][T15417] loop6: detected capacity change from 0 to 512
[  681.464979][T15072] usbhid 8-1:0.0: can't add hid device: -71
[  681.517814][T15072] usbhid: probe of 8-1:0.0 failed with error -71
[  681.600714][T15072] usb 8-1: USB disconnect, device number 7
[  683.634280][T15474] loop7: detected capacity change from 0 to 1024
[  683.745619][T15474] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  683.829353][T15474] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  683.880515][T15072] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  683.964239][T15472] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #15: comm syz.7.2656: lblock 0 mapped to illegal pblock 0 (length 1)
[  684.038270][T15481] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  684.069694][T15472] EXT4-fs (loop7): Remounting filesystem read-only
[  684.119684][T15072] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  684.152154][T15481] EXT4-fs (loop7): Remounting filesystem read-only
[  684.188855][T15072] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  684.252032][T14788] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  684.274407][T15072] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  684.305605][T15072] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.368463][T15072] usb 9-1: Product: syz
[  684.372655][T15072] usb 9-1: Manufacturer: syz
[  684.452418][T15072] usb 9-1: SerialNumber: syz
[  684.494398][T15072] usb 9-1: config 0 descriptor??
[  685.398368][ T5411] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  685.649901][ T5411] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  685.680501][ T5411] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  685.717684][ T5411] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.755000][ T5411] usb 8-1: config 0 descriptor??
[  685.884146][T14548] usb 9-1: USB disconnect, device number 6
[  686.021807][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  686.028520][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  688.235163][ T5411] usbhid 8-1:0.0: can't add hid device: -71
[  688.287678][ T5411] usbhid: probe of 8-1:0.0 failed with error -71
[  688.356299][ T5411] usb 8-1: USB disconnect, device number 8
[  688.388471][T15072] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  688.638797][T15072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  688.697302][T15072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  688.778720][T15072] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  688.833253][T15072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.886953][T15072] usb 6-1: config 0 descriptor??
[  689.333512][T15072] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[  689.387300][T15072] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[  689.434588][T15072] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[  689.474092][T15072] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[  689.511088][T15072] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[  689.568289][T15072] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[  689.616413][T15072] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[  689.686127][T15072] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  689.839923][T15072] cp2112 0003:10C4:EA90.0016: Part Number: 0x00 Device Version: 0x00
[  691.409673][T15072] cp2112 0003:10C4:EA90.0016: error requesting SMBus config
[  691.509073][T15072] cp2112: probe of 0003:10C4:EA90.0016 failed with error -71
[  691.617413][T15072] usb 6-1: USB disconnect, device number 8
[  692.658399][  T789] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  692.890985][  T789] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  692.934664][  T789] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  692.985797][  T789] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.030645][  T789] usb 8-1: config 0 descriptor??
[  695.468956][T15072] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  695.525946][  T789] usbhid 8-1:0.0: can't add hid device: -71
[  695.555483][  T789] usbhid: probe of 8-1:0.0 failed with error -71
[  695.616596][  T789] usb 8-1: USB disconnect, device number 9
[  695.729664][T15072] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  695.787822][T15072] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  695.854012][T15072] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  695.928920][T15072] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.005487][T15072] usb 9-1: config 0 descriptor??
[  696.447577][T15656] loop6: detected capacity change from 0 to 128
[  696.475788][T15072] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[  696.500479][T15656] FAT-fs (loop6): Unrecognized mount option "nfs=nostale=lower" or missing value
[  696.534028][T15072] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[  696.582398][T15072] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[  696.641138][T15072] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[  696.705070][T15072] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[  696.778971][T15072] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[  696.843183][T15072] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[  696.918281][T15072] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0
[  698.547894][T15072] cp2112 0003:10C4:EA90.0017: error requesting version
[  698.609023][T15072] cp2112: probe of 0003:10C4:EA90.0017 failed with error -71
[  698.710028][T15072] usb 9-1: USB disconnect, device number 7
[  698.799058][ T5411] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  699.008206][ T5411] usb 7-1: Using ep0 maxpacket: 32
[  699.030344][ T5411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  699.099764][ T5411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  699.159320][ T5411] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  699.215763][ T5411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.250197][ T5411] usb 7-1: config 0 descriptor??
[  699.440866][  T789] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  699.683082][  T789] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  699.710185][ T5411] savu 0003:1E7D:2D5A.0018: item fetching failed at offset 6/8
[  699.734118][  T789] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  699.750741][ T5411] savu 0003:1E7D:2D5A.0018: parse failed
[  699.785084][ T5411] savu: probe of 0003:1E7D:2D5A.0018 failed with error -22
[  699.797065][  T789] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.834029][  T789] usb 9-1: config 0 descriptor??
[  699.868889][T15072] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  699.959864][ T5411] usb 7-1: USB disconnect, device number 12
[  700.075649][   T27] audit: type=1804 audit(1787942961.529:26949): pid=15677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2699" name="bus" dev="ramfs" ino=93474 res=1 errno=0
[  700.121425][T15072] usb 6-1: Using ep0 maxpacket: 16
[  700.181864][T15072] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  700.201869][T15072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.261568][T15072] usb 6-1: Product: syz
[  700.292419][T15072] usb 6-1: Manufacturer: syz
[  700.297102][T15072] usb 6-1: SerialNumber: syz
[  700.423872][T15696] ALSA: mixer_oss: invalid OSS volume ''
[  700.456147][T15696] ALSA: mixer_oss: invalid OSS volume 'qO'
[  700.482245][T15696] ALSA: mixer_oss: invalid OSS volume '˜ÁG˜Ö…|&+Ú¹g‰Á^Àù'
[  700.607517][T15072] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  700.710494][T15072] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  700.819487][T15072] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  700.877948][T15072] usb 6-1: media controller created
[  700.970949][T15704] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2704'.
[  700.997999][T15072] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  701.424831][T15072] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5
[  701.760446][T14548] usb 6-1: USB disconnect, device number 9
[  701.881657][T15717] loop7: detected capacity change from 0 to 128
[  701.920853][T15717] FAT-fs (loop7): Unrecognized mount option "nfs=nostale=lower" or missing value
[  702.108175][ T5411] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  702.292890][  T789] usbhid 9-1:0.0: can't add hid device: -71
[  702.351521][  T789] usbhid: probe of 9-1:0.0 failed with error -71
[  702.360452][ T5411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  702.442388][ T5411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  702.468694][  T789] usb 9-1: USB disconnect, device number 8
[  702.549943][ T5411] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  702.628199][ T5411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.697719][ T5411] usb 7-1: config 0 descriptor??
[  703.154921][ T5411] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  703.215232][ T5411] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  703.295001][ T5411] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  703.342950][ T5411] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  703.382924][T15736] ALSA: mixer_oss: invalid OSS volume ''
[  703.419713][ T5411] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  703.428969][T15736] ALSA: mixer_oss: invalid OSS volume 'qO'
[  703.487986][T15736] ALSA: mixer_oss: invalid OSS volume '˜ÁG˜Ö…|&+Ú¹g‰Á^Àù'
[  703.495631][ T5411] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  703.529764][ T5411] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  703.627602][ T5411] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[  703.815374][ T5411] cp2112 0003:10C4:EA90.0019: Part Number: 0x00 Device Version: 0x00
[  703.886104][ T5411] cp2112 0003:10C4:EA90.0019: error requesting SMBus config
[  703.968819][ T5411] cp2112: probe of 0003:10C4:EA90.0019 failed with error -5
[  704.091443][T15755] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2715'.
[  704.878633][  T789] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  705.082970][  T789] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  705.129546][  T789] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  705.152594][  T789] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.176774][  T789] usb 9-1: config 0 descriptor??
[  705.378423][ T5411] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  705.416564][   T27] audit: type=1804 audit(1787942966.869:26950): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2717" name="bus" dev="ramfs" ino=93837 res=1 errno=0
[  705.531392][T14548] usb 7-1: USB disconnect, device number 13
[  705.648215][ T5411] usb 8-1: Using ep0 maxpacket: 16
[  705.680116][ T5411] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  705.750111][ T5411] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.831072][ T5411] usb 8-1: Product: syz
[  705.867268][ T5411] usb 8-1: Manufacturer: syz
[  705.896371][ T5411] usb 8-1: SerialNumber: syz
[  706.152586][ T5411] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  706.257159][ T5411] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  706.273015][T15790] ALSA: mixer_oss: invalid OSS volume ''
[  706.307681][T15790] ALSA: mixer_oss: invalid OSS volume 'qO'
[  706.337059][ T5411] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  706.361516][T15790] ALSA: mixer_oss: invalid OSS volume '˜ÁG˜Ö…|&+Ú¹g‰Á^Àùˆeðê¡À'
[  706.414653][ T5411] usb 8-1: media controller created
[  706.560043][ T5411] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  706.981031][ T5411] dvb_usb_gl861: probe of 8-1:157.0 failed with error -5
[  707.071205][T15806] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2725'.
[  707.098248][ T5411] usb 8-1: USB disconnect, device number 10
[  709.186309][  T789] usbhid 9-1:0.0: can't add hid device: -71
[  709.248464][  T789] usbhid: probe of 9-1:0.0 failed with error -71
[  709.328603][  T789] usb 9-1: USB disconnect, device number 9
[  709.381476][T15822] x_tables: duplicate underflow at hook 2
[  709.880303][T15831] ALSA: mixer_oss: invalid OSS volume ''
[  709.904870][T15831] ALSA: mixer_oss: invalid OSS volume 'qO'
[  709.945156][T15831] ALSA: mixer_oss: invalid OSS volume '˜ÁG˜Ö…|&+Ú¹g‰Á^Àùˆeðê¡À'
[  711.984548][T15836] loop8: detected capacity change from 0 to 8192
[  712.480277][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2739'.
[  712.658249][  T789] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  712.899789][  T789] usb 8-1: Using ep0 maxpacket: 16
[  712.947532][T15866] ALSA: mixer_oss: invalid OSS volume ''
[  712.971648][  T789] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  712.991761][T15866] ALSA: mixer_oss: invalid OSS volume 'qO'
[  713.013168][  T789] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.028505][T15866] ALSA: mixer_oss: invalid OSS volume '˜ÁG˜Ö…|&+Ú¹g‰Á^Àùˆeðê¡À'
[  713.066941][  T789] usb 8-1: Product: syz
[  713.121503][  T789] usb 8-1: Manufacturer: syz
[  713.126145][  T789] usb 8-1: SerialNumber: syz
[  713.384416][  T789] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  713.462298][  T789] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  713.534757][  T789] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  713.628213][  T789] usb 8-1: media controller created
[  713.715729][  T789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  714.081247][  T789] dvb_usb_gl861: probe of 8-1:157.0 failed with error -5
[  714.285373][T15072] usb 8-1: USB disconnect, device number 11
[  714.977381][T15875] loop5: detected capacity change from 0 to 40427
[  715.052784][T15875] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  715.124701][T15875] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  715.202781][T15875] F2FS-fs (loop5): invalid crc value
[  715.266519][T15875] F2FS-fs (loop5): Found nat_bits in checkpoint
[  715.494790][T15875] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  715.533809][T15875] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  715.588556][ T5411] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  715.798428][ T5411] usb 9-1: Using ep0 maxpacket: 16
[  715.819616][ T5411] usb 9-1: unable to get BOS descriptor or descriptor too short
[  715.860209][ T5411] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  715.938383][ T5411] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  715.989997][ T5411] usb 9-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30
[  716.083849][ T5411] usb 9-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  716.201653][ T5411] usb 9-1: config 1 interface 1 has no altsetting 2
[  716.230949][T15915] ALSA: mixer_oss: invalid OSS volume ''
[  716.242586][ T5411] usb 9-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40
[  716.273098][T15915] ALSA: mixer_oss: invalid OSS volume 'qO'
[  716.285422][ T5411] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.314374][T15915] ALSA: mixer_oss: invalid OSS volume '˜ÁG˜Ö…|&+Ú¹g‰Á^Àùˆeðê¡ÀÎ'
[  716.341351][ T5411] usb 9-1: Product: syz
[  716.371798][ T5411] usb 9-1: Manufacturer: syz
[  716.399055][ T5411] usb 9-1: SerialNumber: syz
[  716.686171][ T5411] usb 9-1: 1:1 : format type 0 is detected, processed as PCM
[  716.686215][ T5411] usb 9-1: 1:1 : sample bitwidth 249 in over sample bytes 4
[  716.686244][ T5411] usb 9-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  716.770078][ T5411] usb 9-1: failed to enable PITCH for EP 0x1
[  716.771959][ T5411] usb 9-1: unit 3 not found!
[  716.906925][ T5411] usb 9-1: USB disconnect, device number 10
[  716.981129][T14578] udevd[14578]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  718.012350][T15952] ALSA: mixer_oss: invalid OSS volume ''
[  718.028426][ T5411] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  718.056622][T15952] ALSA: mixer_oss: invalid OSS volume 'qO'
[  718.092939][T15952] ALSA: mixer_oss: invalid OSS volume '˜ÁG˜Ö…|&+Ú¹g‰Á^Àùˆeðê¡ÀÎ'
[  718.229775][ T5411] usb 7-1: config 127 has an invalid interface number: 24 but max is 0
[  718.289397][ T5411] usb 7-1: config 127 has no interface number 0
[  718.345591][ T5411] usb 7-1: New USB device found, idVendor=0300, idProduct=8cfc, bcdDevice= 0.2c
[  718.390807][ T5411] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.435639][T15956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  718.443358][T15956] IPv6: NLM_F_CREATE should be set when creating new route
[  718.462444][ T5411] usb 7-1: Product: syz
[  718.480164][ T5411] usb 7-1: Manufacturer: syz
[  718.500685][ T5411] usb 7-1: SerialNumber: syz
[  718.799697][ T5411] usb-storage 7-1:127.24: USB Mass Storage device detected
[  718.939225][ T5411] usb 7-1: USB disconnect, device number 14
[  719.126727][T15935] loop5: detected capacity change from 0 to 40427
[  719.198115][T15935] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  719.281236][T15935] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  719.426481][T15935] F2FS-fs (loop5): Found nat_bits in checkpoint
[  719.757063][T15935] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  719.810000][T15982] overlayfs: failed to resolve './bus': -2
[  719.838253][T15935] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  719.872948][T15985] loop6: detected capacity change from 0 to 128
[  719.949199][T15985] FAT-fs (loop6): Unrecognized mount option "nfs=nostale=lower" or missing value
[  720.089867][T15985] fuse: Bad value for 'fd'
[  720.126316][T15988] ALSA: mixer_oss: invalid OSS volume ''
[  720.157772][T15988] ALSA: mixer_oss: invalid OSS volume 'qO'
[  720.214839][T15988] ALSA: mixer_oss: invalid OSS volume '˜ÁG˜Ö…|&+Ú¹g‰Á^Àùˆeðê¡ÀÎ'
[  721.398408][T14548] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  721.634227][T14548] usb 7-1: config 127 has an invalid interface number: 24 but max is 0
[  721.673734][T14548] usb 7-1: config 127 has no interface number 0
[  721.729134][T14548] usb 7-1: New USB device found, idVendor=0300, idProduct=8cfc, bcdDevice= 0.2c
[  721.798517][T14548] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.866225][T14548] usb 7-1: Product: syz
[  721.885591][T14548] usb 7-1: Manufacturer: syz
[  721.930323][T14548] usb 7-1: SerialNumber: syz
[  722.019028][  T789] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  722.262720][  T789] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  722.302315][T14548] usb-storage 7-1:127.24: USB Mass Storage device detected
[  722.344796][  T789] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  722.424719][  T789] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.482406][T14548] usb 7-1: USB disconnect, device number 15
[  722.510462][  T789] usb 9-1: config 0 descriptor??
[  723.448619][ T5411] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  723.511816][T16062] loop5: detected capacity change from 0 to 128
[  723.571683][T16062] FAT-fs (loop5): Unrecognized mount option "nfs=nostale=lower" or missing value
[  723.670512][ T5411] usb 7-1: Using ep0 maxpacket: 16
[  723.700116][T16062] fuse: Bad value for 'fd'
[  723.718573][ T5411] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  723.727663][ T5411] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.847564][ T5411] usb 7-1: Product: syz
[  723.908944][ T5411] usb 7-1: Manufacturer: syz
[  723.942685][ T5411] usb 7-1: SerialNumber: syz
[  724.095126][T16064] ALSA: mixer_oss: invalid OSS volume ''
[  724.131716][T16064] ALSA: mixer_oss: invalid OSS volume 'qO'
[  724.173591][T16064] ALSA: mixer_oss: invalid OSS volume '˜ÁG˜Ö…|&+Ú¹g‰Á^Àùˆeðê¡ÀΗ'
[  724.219719][ T5411] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  724.304215][ T5411] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  724.392358][ T5411] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  724.484737][ T5411] usb 7-1: media controller created
[  724.602606][ T5411] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  724.809681][  T789] usbhid 9-1:0.0: can't add hid device: -71
[  724.879407][  T789] usbhid: probe of 9-1:0.0 failed with error -71
[  724.923660][ T5411] dvb_usb_gl861: probe of 7-1:157.0 failed with error -5
[  724.981759][  T789] usb 9-1: USB disconnect, device number 11
[  725.091185][ T5849] usb 7-1: USB disconnect, device number 16
[  725.308268][ T5411] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  725.522480][ T5411] usb 6-1: Using ep0 maxpacket: 32
[  725.563346][ T5411] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  725.603287][ T5411] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  725.649696][ T5411] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  725.717441][ T5411] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  725.778451][ T5411] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  725.856120][ T5411] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  725.946777][T16098] loop7: detected capacity change from 0 to 256
[  725.968227][ T5411] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  726.010406][ T5411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.084854][ T5411] usb 6-1: config 0 descriptor??
[  726.278487][ T5849] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  726.372237][ T5411] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  726.435438][T16098] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  726.458854][ T5411] usb 6-1: USB disconnect, device number 10
[  726.500893][ T5411] usblp0: removed
[  726.526630][ T5849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  726.589986][ T5849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  726.649130][ T5849] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  726.694183][ T5849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.782703][ T5849] usb 9-1: config 0 descriptor??
[  726.918270][ T5411] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  727.160302][ T5411] usb 6-1: Using ep0 maxpacket: 32
[  727.210519][ T5849] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0
[  727.234921][ T5411] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  727.294248][ T5849] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0
[  727.318231][ T5411] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  727.369605][ T5849] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0
[  727.387697][ T5411] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  727.423647][ T5849] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0
[  727.455670][ T5411] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  727.485907][ T5849] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0
[  727.547640][ T5411] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  727.557514][ T5849] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0
[  727.567699][T16122] loop6: detected capacity change from 0 to 128
[  727.609912][T16122] FAT-fs (loop6): Unrecognized mount option "nfs=nostale=lower" or missing value
[  727.635058][ T5849] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0
[  727.644621][ T5411] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  727.723867][ T5849] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0
[  727.797751][ T5411] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  727.808743][T16122] fuse: Bad value for 'fd'
[  727.913084][ T5411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.940506][ T5849] cp2112 0003:10C4:EA90.001A: Part Number: 0x00 Device Version: 0x00
[  728.019790][ T5411] usb 6-1: config 0 descriptor??
[  728.119297][ T5411] usb 6-1: can't set config #0, error -71
[  728.184925][ T5411] usb 6-1: USB disconnect, device number 11
[  728.312246][ T5849] cp2112 0003:10C4:EA90.001A: error reading lock byte: -71
[  728.407794][ T5849] usb 9-1: USB disconnect, device number 12
[  728.696644][T16147] ALSA: mixer_oss: invalid OSS volume ''
[  728.736665][T16147] ALSA: mixer_oss: invalid OSS volume 'qO'
[  728.794504][T16147] ALSA: mixer_oss: invalid OSS volume '˜ÁG˜Ö…|&+Ú¹g‰Á^Àùˆeðê¡ÀΗ'
[  728.851982][T16150] loop5: detected capacity change from 0 to 512
[  730.950934][T15072] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  730.998330][T16171] loop7: detected capacity change from 0 to 128
[  731.017437][T16171] FAT-fs (loop7): Unrecognized mount option "nfs=nostale=lower" or missing value
[  731.176908][T15072] usb 6-1: Using ep0 maxpacket: 16
[  731.251142][T15072] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  731.307299][T15072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.355948][T15072] usb 6-1: Product: syz
[  731.396416][T15072] usb 6-1: Manufacturer: syz
[  731.426731][T15072] usb 6-1: SerialNumber: syz
[  732.851179][T15072] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  732.939422][T15072] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  733.050053][T15072] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  733.115026][T15072] usb 6-1: media controller created
[  733.250128][T15072] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  733.549423][T15072] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5
[  733.809815][ T5411] usb 6-1: USB disconnect, device number 12
[  734.122711][T16199] loop6: detected capacity change from 0 to 512
[  735.430712][T16224] ALSA: mixer_oss: invalid OSS volume ''
[  735.478276][T16224] ALSA: mixer_oss: invalid OSS volume 'qO'
[  735.509945][T16224] ALSA: mixer_oss: invalid OSS volume '˜ÁG˜Ö…|&+Ú¹g‰Á^Àùˆeðê¡ÀΗ'
[  737.414344][T16276] loop5: detected capacity change from 0 to 16
[  737.544389][T16276] erofs: (device loop5): mounted with root inode @ nid 36.
[  737.684676][T16276] syz.5.2827: attempt to access beyond end of device
[  737.684676][T16276] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  737.815275][T16276] syz.5.2827: attempt to access beyond end of device
[  737.815275][T16276] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  738.437129][T16299] loop5: detected capacity change from 0 to 2048
[  738.604887][T16299] EXT4-fs: Ignoring removed oldalloc option
[  738.630010][T16305] loop8: detected capacity change from 0 to 512
[  738.739226][T16299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  738.804535][T15356] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  740.307801][T16315] x_tables: duplicate underflow at hook 2
[  740.331635][T16312] loop6: detected capacity change from 0 to 128
[  740.405594][T16312] FAT-fs (loop6): Unrecognized mount option "nfs=nostale=lower" or missing value
[  740.903575][T15626] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  740.995024][T15626] EXT4-fs (loop5): Remounting filesystem read-only
[  741.027306][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  741.628394][T16304] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.635974][T16304] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.161250][T14548] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  742.358822][T14548] usb 6-1: Using ep0 maxpacket: 16
[  742.373361][T14548] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  742.384012][T14548] usb 6-1: config 0 has no interface number 0
[  742.405115][T14548] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  742.441201][T14548] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  742.467066][T14548] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  742.489721][T14548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.531544][T14548] usb 6-1: Product: syz
[  742.536583][T14548] usb 6-1: Manufacturer: syz
[  742.559324][T14548] usb 6-1: SerialNumber: syz
[  742.576008][T14548] usb 6-1: config 0 descriptor??
[  742.600724][T16337] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  742.616620][T16337] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  742.671875][T16304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  742.744419][T16304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  742.844741][T16337] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  742.866127][T16337] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  743.092217][T14548] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  743.295398][T14548] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  743.325871][T14548] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  743.352800][T14548] asix: probe of 6-1:0.34 failed with error -71
[  743.382465][T14548] usb 6-1: USB disconnect, device number 13
[  743.483147][T16304] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  743.495009][T16304] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  743.506114][T16304] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  743.516937][T16304] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  743.972613][T16348] loop6: detected capacity change from 0 to 512
[  744.039123][T16348] EXT4-fs: Ignoring removed mblk_io_submit option
[  744.120608][T16348] EXT4-fs (loop6): Test dummy encryption mode enabled
[  744.350269][T16348] ------------[ cut here ]------------
[  744.356154][T16348] EA inode 11 i_nlink=0
[  744.356388][T16348] WARNING: CPU: 0 PID: 16348 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0
[  744.370904][T16348] Modules linked in:
[  744.374798][T16348] CPU: 0 PID: 16348 Comm: syz.6.2845 Not tainted syzkaller #0
[  744.382331][T16348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  744.392525][T16348] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0
[  744.399216][T16348] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 61 f0 98 ff 49 8b 34 24 48 c7 c7 20 dd de 8a 44 89 fa e8 3e 3f 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 78 99 48 08
[  744.418935][T16348] RSP: 0018:ffffc9000b11f220 EFLAGS: 00010246
[  744.425020][T16348] RAX: 04919cb297055600 RBX: ffff88802cd12ca8 RCX: 0000000000080000
[  744.433225][T16348] RDX: ffffc90016388000 RSI: 0000000000046ab4 RDI: 0000000000046ab5
[  744.442167][T16348] RBP: ffffc9000b11f310 R08: ffff8880b8e28c53 R09: 1ffff110171c518a
[  744.450565][T16348] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88802cd12b00
[  744.458687][T16348] R13: ffffc9000b11f280 R14: dffffc0000000000 R15: 0000000000000000
[  744.466763][T16348] FS:  00007f21f47386c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  744.475756][T16348] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  744.482585][T16348] CR2: 00007f9db7d58000 CR3: 000000005aa06000 CR4: 00000000003526f0
[  744.490737][T16348] Call Trace:
[  744.494025][T16348]  <TASK>
[  744.496969][T16348]  ? ext4_xattr_list_entries+0x3d0/0x3d0
[  744.503058][T16348]  ? ext4_xattr_inode_iget+0x3f5/0x5d0
[  744.508672][T16348]  ext4_xattr_set_entry+0xcc9/0x1ee0
[  744.513994][T16348]  ext4_xattr_ibody_set+0x262/0x700
[  744.519271][T16348]  ext4_expand_extra_isize_ea+0x13b8/0x1ea0
[  744.525227][T16348]  __ext4_expand_extra_isize+0x306/0x400
[  744.530961][T16348]  __ext4_mark_inode_dirty+0x458/0x6d0
[  744.536461][T16348]  ext4_evict_inode+0x7dd/0xe70
[  744.542295][T16348]  ? evict+0x482/0x8a0
[  744.546483][T16348]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  744.552576][T16348]  ? do_raw_spin_unlock+0x121/0x230
[  744.557805][T16348]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  744.563797][T16348]  evict+0x4b7/0x8a0
[  744.567715][T16348]  ? __lock_acquire+0x7d80/0x7d80
[  744.572837][T16348]  ? proc_nr_inodes+0x230/0x230
[  744.577732][T16348]  ? do_raw_spin_unlock+0x121/0x230
[  744.583371][T16348]  ? _raw_spin_unlock+0x28/0x40
[  744.588330][T16348]  ext4_orphan_cleanup+0xc33/0x1470
[  744.593557][T16348]  ? ext4_orphan_del+0xc90/0xc90
[  744.598549][T16348]  ? ext4_register_li_request+0x182/0x930
[  744.604279][T16348]  ? errseq_check_and_advance+0x66/0x120
[  744.609952][T16348]  ext4_fill_super+0x5fb5/0x6870
[  744.615010][T16348]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  744.621369][T16348]  ? __might_sleep+0xe0/0xe0
[  744.625983][T16348]  ? read_lock_is_recursive+0x20/0x20
[  744.631442][T16348]  ? snprintf+0xe9/0x140
[  744.635723][T16348]  ? down_read_killable+0x340/0x340
[  744.641188][T16348]  ? setup_bdev_super+0x56b/0x660
[  744.647190][T16348]  get_tree_bdev+0x3e5/0x520
[  744.652055][T16348]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  744.658537][T16348]  ? setup_bdev_super+0x660/0x660
[  744.663581][T16348]  ? apparmor_capable+0x137/0x1a0
[  744.668658][T16348]  ? bpf_lsm_capable+0x9/0x10
[  744.673352][T16348]  ? security_capable+0x89/0xb0
[  744.678288][T16348]  vfs_get_tree+0x8c/0x280
[  744.682720][T16348]  do_new_mount+0x24a/0xa40
[  744.687237][T16348]  __se_sys_mount+0x2e7/0x3d0
[  744.691954][T16348]  ? __x64_sys_mount+0xc0/0xc0
[  744.696730][T16348]  ? lockdep_hardirqs_on+0x98/0x150
[  744.701982][T16348]  ? __x64_sys_mount+0x20/0xc0
[  744.706761][T16348]  do_syscall_64+0x55/0xb0
[  744.711210][T16348]  ? clear_bhb_loop+0x40/0x90
[  744.715915][T16348]  ? clear_bhb_loop+0x40/0x90
[  744.720667][T16348]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  744.726578][T16348] RIP: 0033:0x7f21f379f3ca
[  744.731051][T16348] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  744.751837][T16348] RSP: 002b:00007f21f4737e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  744.760424][T16348] RAX: ffffffffffffffda RBX: 00007f21f4737ee0 RCX: 00007f21f379f3ca
[  744.768451][T16348] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 00007f21f4737ea0
[  744.776433][T16348] RBP: 0000200000000240 R08: 00007f21f4737ee0 R09: 0000000000000000
[  744.784434][T16348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  744.792465][T16348] R13: 00007f21f4737ea0 R14: 000000000000047a R15: 0000200000000300
[  744.800488][T16348]  </TASK>
[  744.803513][T16348] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  744.810803][T16348] CPU: 0 PID: 16348 Comm: syz.6.2845 Not tainted syzkaller #0
[  744.818268][T16348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  744.828332][T16348] Call Trace:
[  744.831643][T16348]  <TASK>
[  744.834596][T16348]  dump_stack_lvl+0x18c/0x250
[  744.839292][T16348]  ? show_regs_print_info+0x20/0x20
[  744.844495][T16348]  ? load_image+0x420/0x420
[  744.849014][T16348]  panic+0x2ca/0x720
[  744.852939][T16348]  ? bpf_jit_dump+0xd0/0xd0
[  744.857514][T16348]  __warn+0x2e0/0x470
[  744.861543][T16348]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  744.867560][T16348]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  744.873552][T16348]  report_bug+0x2be/0x4f0
[  744.877892][T16348]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  744.883885][T16348]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  744.889872][T16348]  ? ext4_xattr_inode_update_ref+0x574/0x5d0
[  744.895862][T16348]  handle_bug+0xcf/0x120
[  744.900139][T16348]  exc_invalid_op+0x1a/0x50
[  744.904649][T16348]  asm_exc_invalid_op+0x1a/0x20
[  744.909520][T16348] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0
[  744.916125][T16348] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 61 f0 98 ff 49 8b 34 24 48 c7 c7 20 dd de 8a 44 89 fa e8 3e 3f 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 78 99 48 08
[  744.935738][T16348] RSP: 0018:ffffc9000b11f220 EFLAGS: 00010246
[  744.941825][T16348] RAX: 04919cb297055600 RBX: ffff88802cd12ca8 RCX: 0000000000080000
[  744.949814][T16348] RDX: ffffc90016388000 RSI: 0000000000046ab4 RDI: 0000000000046ab5
[  744.957803][T16348] RBP: ffffc9000b11f310 R08: ffff8880b8e28c53 R09: 1ffff110171c518a
[  744.965787][T16348] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88802cd12b00
[  744.973764][T16348] R13: ffffc9000b11f280 R14: dffffc0000000000 R15: 0000000000000000
[  744.981764][T16348]  ? ext4_xattr_list_entries+0x3d0/0x3d0
[  744.987418][T16348]  ? ext4_xattr_inode_iget+0x3f5/0x5d0
[  744.992891][T16348]  ext4_xattr_set_entry+0xcc9/0x1ee0
[  744.998308][T16348]  ext4_xattr_ibody_set+0x262/0x700
[  745.003537][T16348]  ext4_expand_extra_isize_ea+0x13b8/0x1ea0
[  745.009490][T16348]  __ext4_expand_extra_isize+0x306/0x400
[  745.015145][T16348]  __ext4_mark_inode_dirty+0x458/0x6d0
[  745.020619][T16348]  ext4_evict_inode+0x7dd/0xe70
[  745.025482][T16348]  ? evict+0x482/0x8a0
[  745.029572][T16348]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  745.035474][T16348]  ? do_raw_spin_unlock+0x121/0x230
[  745.040689][T16348]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  745.046597][T16348]  evict+0x4b7/0x8a0
[  745.050501][T16348]  ? __lock_acquire+0x7d80/0x7d80
[  745.055535][T16348]  ? proc_nr_inodes+0x230/0x230
[  745.060397][T16348]  ? do_raw_spin_unlock+0x121/0x230
[  745.065606][T16348]  ? _raw_spin_unlock+0x28/0x40
[  745.070464][T16348]  ext4_orphan_cleanup+0xc33/0x1470
[  745.075676][T16348]  ? ext4_orphan_del+0xc90/0xc90
[  745.080620][T16348]  ? ext4_register_li_request+0x182/0x930
[  745.086343][T16348]  ? errseq_check_and_advance+0x66/0x120
[  745.091999][T16348]  ext4_fill_super+0x5fb5/0x6870
[  745.096977][T16348]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  745.103250][T16348]  ? __might_sleep+0xe0/0xe0
[  745.107856][T16348]  ? read_lock_is_recursive+0x20/0x20
[  745.113249][T16348]  ? snprintf+0xe9/0x140
[  745.117639][T16348]  ? down_read_killable+0x340/0x340
[  745.122874][T16348]  ? setup_bdev_super+0x56b/0x660
[  745.127912][T16348]  get_tree_bdev+0x3e5/0x520
[  745.132511][T16348]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  745.138774][T16348]  ? setup_bdev_super+0x660/0x660
[  745.143846][T16348]  ? apparmor_capable+0x137/0x1a0
[  745.148871][T16348]  ? bpf_lsm_capable+0x9/0x10
[  745.153571][T16348]  ? security_capable+0x89/0xb0
[  745.158429][T16348]  vfs_get_tree+0x8c/0x280
[  745.162880][T16348]  do_new_mount+0x24a/0xa40
[  745.167429][T16348]  __se_sys_mount+0x2e7/0x3d0
[  745.172120][T16348]  ? __x64_sys_mount+0xc0/0xc0
[  745.176913][T16348]  ? lockdep_hardirqs_on+0x98/0x150
[  745.182133][T16348]  ? __x64_sys_mount+0x20/0xc0
[  745.186919][T16348]  do_syscall_64+0x55/0xb0
[  745.191348][T16348]  ? clear_bhb_loop+0x40/0x90
[  745.196052][T16348]  ? clear_bhb_loop+0x40/0x90
[  745.200741][T16348]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  745.206644][T16348] RIP: 0033:0x7f21f379f3ca
[  745.211058][T16348] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  745.230659][T16348] RSP: 002b:00007f21f4737e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  745.239072][T16348] RAX: ffffffffffffffda RBX: 00007f21f4737ee0 RCX: 00007f21f379f3ca
[  745.247047][T16348] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 00007f21f4737ea0
[  745.255117][T16348] RBP: 0000200000000240 R08: 00007f21f4737ee0 R09: 0000000000000000
[  745.263174][T16348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  745.271154][T16348] R13: 00007f21f4737ea0 R14: 000000000000047a R15: 0000200000000300
[  745.279134][T16348]  </TASK>
[  745.282226][T16348] Kernel Offset: disabled
[  745.286691][T16348] Rebooting in 86400 seconds..