last executing test programs:

1m42.272465111s ago: executing program 2 (id=3):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000e9ff00040000007d00000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1m42.018630212s ago: executing program 2 (id=7):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

1m41.235902649s ago: executing program 2 (id=8):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='7', 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)

1m39.306558021s ago: executing program 2 (id=13):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setresuid(0x0, 0x0, r1)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, <r3=>0x0}, 0x2092)
write$FUSE_INIT(r2, &(0x7f00000022c0)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x9, 0x0, 0x63b1811, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x100)

1m38.756339407s ago: executing program 32 (id=13):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setresuid(0x0, 0x0, r1)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, <r3=>0x0}, 0x2092)
write$FUSE_INIT(r2, &(0x7f00000022c0)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x9, 0x0, 0x63b1811, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x100)

1m19.236140048s ago: executing program 1 (id=67):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1m17.826055745s ago: executing program 1 (id=72):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000003c0)={[{@uid={'uid', 0x3d, 0xee00}}, {@utf8}, {}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@namecase}, {@discard}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@errors_continue}, {}]}, 0x1, 0x1535, &(0x7f0000001380)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)

1m17.363000717s ago: executing program 1 (id=74):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r1, &(0x7f0000000b00)='0\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0)
write(r2, &(0x7f0000000d00), 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000340)="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", 0xff)
write(0xffffffffffffffff, &(0x7f0000001100)='0\n', 0x2)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f0000001600)='usbip-vudc.0', 0xc)
close(r3)

1m16.307930647s ago: executing program 1 (id=76):
r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000300)={[{@noblock_validity}]}, 0x0, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==")
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
futimesat(r0, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000340)={{0x0, 0x2710}})

1m14.786801838s ago: executing program 1 (id=86):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r1, &(0x7f0000000b00)='0\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0)
write(r2, &(0x7f0000000d00), 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000340)="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", 0xff)
write(0xffffffffffffffff, &(0x7f0000001100)='0\n', 0x2)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f0000001600)='usbip-vudc.0', 0xc)
close(r3)

1m14.187890327s ago: executing program 1 (id=90):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100)
ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xfffffffd}}]}}, 0x0, 0x4e}, 0x20)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r3, 0x890b, &(0x7f0000000140)='\x00'/13)
bind$x25(r3, &(0x7f0000000080), 0x12)
connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000})
r5 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x68, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@]]/\']%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(({##Z*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ':&((-$[}\xa2(@+\'\x00'}]}]}]}]}, 0x68}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r5, 0x807c6406, &(0x7f0000002140)=""/29)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x0, 0x1}, 0x48)

1m13.615326254s ago: executing program 33 (id=90):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100)
ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xfffffffd}}]}}, 0x0, 0x4e}, 0x20)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r3, 0x890b, &(0x7f0000000140)='\x00'/13)
bind$x25(r3, &(0x7f0000000080), 0x12)
connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000})
r5 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x68, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@]]/\']%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(({##Z*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ':&((-$[}\xa2(@+\'\x00'}]}]}]}]}, 0x68}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r5, 0x807c6406, &(0x7f0000002140)=""/29)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x0, 0x1}, 0x48)

1m1.667137529s ago: executing program 3 (id=144):
syz_emit_ethernet(0x67, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x31, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @private1={0xfc, 0x1, '\x00', 0x3}, [], "d3"}}}}}}}, 0x0)
syz_usb_connect$uac2(0x2, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000081e04003040000102030109027e0003010e4004080b000201062003090400000001012000092401ff03091e00000c2403030304c702"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0})

58.86950356s ago: executing program 3 (id=149):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

58.130514485s ago: executing program 3 (id=153):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000500)={[{0xfffffbff, 0xa, 0x2, 0x0, 0x7, 0xb, 0x56, 0x56, 0xa2, 0x5, 0x0, 0x8, 0x9}, {0x1ff, 0x5, 0xc, 0xf7, 0x5, 0x4, 0x2, 0x3, 0x6, 0x3, 0x0, 0x2a, 0x478}, {0x0, 0x0, 0x4f, 0x80, 0x8, 0x8, 0x4, 0xff, 0x2, 0x60, 0x0, 0x4, 0x1}], 0x180})

56.902554513s ago: executing program 3 (id=158):
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB='uni_xlate=0,iocharset=ep866,errors=continue,utf8=0,shortname=mixed,shortname=win95,nonumtail=0,uni_xlate=1,iocharset=cp857,shortname=mixed,utf8=1,uni_xlate=0,shortname=win95,codepage=936,utf8=1,utf8=0,\x00'], 0xfd, 0x2a8, &(0x7f0000000580)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x1, 0x1505, &(0x7f0000002ac0)="$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")
r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)

55.593684965s ago: executing program 3 (id=164):
syz_open_procfs(0x0, 0x0)
timerfd_create(0x9, 0x80000)
gettid()
timer_create(0x1, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000180)={[{@usrquota}, {@min_batch_time}, {@nombcache}]}, 0x1, 0x4c0, &(0x7f0000000ac0)="$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")
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141a42, 0x15)

54.924673817s ago: executing program 3 (id=166):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

54.360819334s ago: executing program 34 (id=166):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.316070618s ago: executing program 5 (id=364):
syz_usb_connect(0x0, 0x495, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc6c994086124420804d0000000109028304010000000009046e0010ffffff000905081c08000902001411427e76ec46643fbcfdda95793befdb5f07b307250101890300090504000004"], 0x0)
syz_open_dev$hiddev(0x0, 0xfffffffffffffff7, 0x244400)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x3, 0x34, 0x0, 0x0)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000102505a2a44000000001010902440081010010000904005d1202060000052406000005242400000d240f01000000000000"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x75c, 0x10d840)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_connect(0x2, 0x24, 0x0, 0x0)

7.944132635s ago: executing program 4 (id=365):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[], 0x0)
syz_usb_ep_read(r1, 0x1, 0x0, 0x0)
syz_usb_ep_write(r1, 0x81, 0x19, &(0x7f0000000100)="900100"/25)
syz_usb_ep_write(r1, 0x81, 0x34, &(0x7f0000000300)="9101000000112233445500"/52)
syz_usb_ep_read(r1, 0x1, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)

7.566796493s ago: executing program 0 (id=367):
openat$ttynull(0xffffffffffffff9c, 0x0, 0x88102, 0x0)
unshare(0x400)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95)

6.514992963s ago: executing program 6 (id=372):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000b00)='0\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0)
write(r2, &(0x7f0000000d00), 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000340)="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", 0xff)
write(0xffffffffffffffff, &(0x7f0000001100)='0\n', 0x2)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f0000001600)='usbip-vudc.0', 0xc)
close(r3)

6.466755536s ago: executing program 5 (id=373):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1e9100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x2, 0x25000, 0x2000, &(0x7f0000732000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

6.278357734s ago: executing program 6 (id=374):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000400)="00df44100c76")

5.820623366s ago: executing program 5 (id=375):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000415000/0x3000)=nil, 0x3000, 0x1000009, 0x4010, 0xffffffffffffffff, 0x95832000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_DIRENT(r2, &(0x7f0000002340)=ANY=[@ANYBLOB="9801000000000000", @ANYRES64=r3, @ANYBLOB="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"], 0x198)
r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000003c0)={0x2e, 0x8, 0x1, "4a6535dffaa9779c16cc07f4e70156e42a022ece000000005000", 0x224f5747})
memfd_create(0x0, 0x0)
fsopen(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
ioprio_set$pid(0x2, 0x0, 0x0)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000002500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x2, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7e9b, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x151d, 0x8200, 0x2, 0x24}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x4, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)
r12 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00')
read$FUSE(r12, 0x0, 0x0)
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}}, 0x0)
socket(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r12, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'})
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000002700010028bd7000ffdbdf25070000003b8c6a12e450e408568856ee569b4516cbc4adb2dcf665702768ee3eb3f9337aacd983b7765f0b12fadf451977c101fdf932f8ed74a866581740"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004990)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.751047849s ago: executing program 0 (id=376):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x9, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0)

4.713413528s ago: executing program 5 (id=377):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b000100001000090433"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

4.207736762s ago: executing program 7 (id=379):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001a0)={'wlan1\x00', @ifru_flags})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0)
ioctl$sock_ifreq(r0, 0x8914, 0x0)

4.096154447s ago: executing program 6 (id=380):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x21e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c04a1010901a1007508950109308102c0c000"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x0, 0x30, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

3.909731266s ago: executing program 4 (id=381):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.61842102s ago: executing program 7 (id=382):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000840000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x241}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

3.40071114s ago: executing program 7 (id=383):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043)
r3 = dup(r1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4)
pipe2$9p(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$9p(r5, &(0x7f0000001100)="2d76b41cfadba8c9e82b39a58fade4a1e1c7ef34f18f9ee7ea705a387831c57c3f007c87ff6a6d56a0412772be538a3a9da7d06107b64274af1202839475620c45529c8e1e684c2118de638371951ba4ff979185630a5fad24e8eac0e002159a4516f523cc596c18dea7d58a7fc7d7c536f144c2a3cd4b3c32712d9df8e06635edabc3756f4574734399c629e21514de00ca9cb5db71b1fd95c571fc14e0935bce3b828d3e9544db3e5d6dd7711292bade41db1468879a5ae363c0e350a18c2c1846c9dab94e0c291de1075d427e6da02193277000e89a90b611024684514dfe42ba05afb12275bd2157f049f1e59c6e3e04bdf2af1558978fd730ff32ebc982e3cb15f90d5cc35615b22eb49384b70a36e914a8639cefcf00da4188df83be6fca2237eeed0bfac86e58d0ec211962bf22ee18dbbb0f33c591cba0e72e68de6eca4c96f29868bd2080c96f28b8e68c9a62efae50d8bdc9df9cfbf3350f4274da573ed3653f989ffddbb59f3f8c72a6b3bc7f705872d0309445e14781e888d8d1a5fb5de79c5ea573c3b0bdf4de2e4263635aab6732e3339450fceb7698309cc629ec4bff6fde7a01f182dca433a256e101d01ba88a6ff1e14d9dcaf7d8a6bce08534142561578702ded5cc1bae4bbc0d17d783729c78c1851e701cf55ae55cbe40cec2a6e60fc8db862dbebef6b8d224762518e8b2ad8c1f97bd13057d9103c55a806d5c747b4e4c68d39469a9cdc8b6d92ebd0ebc51a32371af555bfa64463122ed3055b244ca4c8ad98b9c8903fc70a3827c622bb1222e8ec47331797d592c7f0837e695e885e8e18ba748b1169318135af97b937a2fad5472590d10a356e7d2da2073cd17bd45669c65618baf849b4d15925da0dc40705ee26ce2b33b85a93651f4d264b723cc23644a94a200673b551690788c9cf637f926ba1da102172c23445cc10278fa28b81c55578e77d87151a8b423c5a5d0bfc3945028e16514837ffab181dd771ab456bde23e6b1c40830967492904622123b7ba477e1843102e0a2bb816cd6ab344135c0660d09842ca96b2e15561c551a4efefb55818da1b9208c6c7a414caf455f9510b1f2ee869bd43353b9dec4dc6cc6a49dbf1ab273a69d76c552d0ea4eb33d983b19ce04cb14473dcf2e006d5b9886de2cad58e6fa06aafa7406f12400ab9bd65f472636446dc104a1e31f4f2abdcfe94ba5cdb35ce9d4efd6ea2de3069ffae2fb4e1ed93616546f39285d4d78ead20bd35b721a51f4ebe84037f699ba4afc82ece8dfb15faa8974e2cb0e2987db498c34b78fc806e3287ec0928e14abc7701684f73032d9c791cd195357ecb579724ac51659a02512faf240ef3bc65a2ac7462d4dc9b8718d103ef5223520e0c60969e3ecac743eee57e664fe687aad5e5d474ae25ac5aa77489", 0x3f1)
splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
write$9p(r2, &(0x7f00000018c0)="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", 0x411)
write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411)
close_range(r0, 0xffffffffffffffff, 0x0)

3.340837383s ago: executing program 0 (id=384):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0)
write(r2, &(0x7f0000000d00), 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000340)="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", 0xff)
write(0xffffffffffffffff, &(0x7f0000001100)='0\n', 0x2)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f0000001600)='usbip-vudc.0', 0xc)
close(r3)

3.154664132s ago: executing program 0 (id=385):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1e9100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x2, 0x25000, 0x2000, &(0x7f0000732000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.061325796s ago: executing program 7 (id=386):
openat$ttynull(0xffffffffffffff9c, 0x0, 0x88102, 0x0)
unshare(0x400)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95)

2.76466887s ago: executing program 5 (id=387):
syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000180), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0)
write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35)

2.663881605s ago: executing program 4 (id=388):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@nogrpid}, {@nogrpid}, {@nomblk_io_submit}]}, 0x1, 0x51d, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0xfffffffffe000001})

1.572309516s ago: executing program 0 (id=389):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000300))

1.384313955s ago: executing program 5 (id=390):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010601020000402505a1a440000102030d0902"], 0x0)
syz_usb_disconnect(r1)
syz_usb_disconnect(r0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b0300000000000109022200010100803209040000010300000009211101000122170007058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write(r2, 0x81, 0x0, 0x0)
syz_usb_ep_write(r2, 0x81, 0x2, &(0x7f0000000000)="0200")
syz_usb_disconnect(r2)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)

1.246564362s ago: executing program 0 (id=391):
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"})
ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000080)={0x800, 0x4, 0xb, 0xb4e3, 0x10000, 0xa4})
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000030000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
r2 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d09", @ANYRESDEC=r1, @ANYRES16=r0], 0x0)
r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r3)
syz_usb_disconnect(r2)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000000)={0x0, 0x1, 0xb, 0x8, "2af15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"})
syz_open_dev$char_usb(0xc, 0xb4, 0x4)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)

1.222717233s ago: executing program 6 (id=392):
r0 = syz_usb_connect(0x5, 0x73, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0xaf, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc8, 0x0, 0x6})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14)

1.030216172s ago: executing program 4 (id=393):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000840000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x241}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)

774.492114ms ago: executing program 4 (id=394):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa)
write$P9_RUNLINKAT(r4, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))

599.959302ms ago: executing program 7 (id=395):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0)
write(r2, &(0x7f0000000d00), 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000340)="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", 0xff)
write(0xffffffffffffffff, &(0x7f0000001100)='0\n', 0x2)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f0000001600)='usbip-vudc.0', 0xc)
close(r3)

537.463645ms ago: executing program 6 (id=396):
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0xd000, 0x0, 0x0}, {0xffffffff, 0x0, 0x0}]})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x3, 0x0, @empty}}}, 0x108)
r3 = socket(0x80000000000000a, 0x2, 0x0)
syz_read_part_table(0x5c2, &(0x7f0000000000)="$eJzs2z1oU2sYB/AnavCil+vi5GQdnFwURzOoJFFRCNEu4qCgiBi4EEGIECjoYDO0NEPp2KUUsvRjapqhw6Wlhc6ldOil0KHTpV0KXZpL6Xv39vYDhN8PDg/v+/7Pec4znPEEv7QL8U+3281ERPfy8e/ubeULT2+WHpZfRWTiTUT0/PXH1MFJJiX+e+qttF5P67HRK53+nSfZ1trL3dtv5xsX0nlfuq6Ot3tPPBxnbiK3cO37j2pxoJb7tFqsb/5cWX4xuZ0vt583mlPPso/fp9xiqpdS/RK1+Baf411UohIfonpK/UdaG3f3bxRbMx8f7BU6g3P3Uq50wjmP2v9rz9DrZv3Rnenrw/drs0vlrYuHucr/+LoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh/E7mFa99/VIsDtdyn1WJ98+fK8ovJ7Xy5/bzRnHqWffw+5RZTvZTql6jFt/gc76ISlfgQ1VPqP9LauLt/o9ia+fhgr9AZnLuXcqUTznnU/l97hl4364/uTF8fvl+bXSpvXTzMVS6f0QsAAAAAAAAAAAAAAAAAAABAROQLT2+WHpZfRWTiTUT8+fvczMF+N/3vnkm5W6mup/2x0Sud/p0n2dbay93bb+cbf6f9vt8i+iLi6ni799yH4dj+DQAA///B9JXf")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
ioctl$BLKPG(r4, 0x1269, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x20003)
r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r5, 0xe)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x29, @remote, 0x4e23, 0x0, 'lc\x00', 0x22, 0x3, 0x3f}, 0x2c)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108)

286.326307ms ago: executing program 4 (id=397):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d"], 0x0)
syz_usb_connect(0x0, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202020040dd04058000000102030109024900010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f5543707"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x5, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x55, 0x4d, 0x3e, 0x20, 0xbfd, 0x111, 0xad03, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4}}]}}, 0x0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000120001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="f6ffd1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x43, &(0x7f00000000c0))
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x44, &(0x7f0000001080)={[{0x3d, 0x4e00, "55361d2b560a57179f6b96424ed17bbc68cbdc2b32c0f9d733301d05d33747c6bc49cedefe48211a28792ee6bbaabfe0ca71725e962b5ab196a0f4ccee"}]})
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x4, 0xb, 0x6, "04000004", "02012000"}}, 0x0}, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d60000000000090502026b"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000200), 0xf3, 0x6180)
ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000500)=""/211)
syz_usb_connect$cdc_ncm(0x0, 0xae, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x2, 0x1, 0x2, 0x20, 0xfa, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "fccc0f"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x8, 0x8, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0xa}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x256b}, @country_functional={0xa, 0x24, 0x7, 0x8, 0x9, [0x5, 0x3]}, @country_functional={0x12, 0x24, 0x7, 0x1, 0xfffa, [0x5, 0x5, 0x401, 0x6, 0x200, 0x7f]}, @dmm={0x7, 0x24, 0x14, 0x0, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x228, 0xff, 0x9, 0xb5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7, 0xc, 0x7, 0x40, 0x8}, 0x15, &(0x7f0000000140)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xea, 0x1, 0xdf9, 0xf000, 0x8000, [0x0]}]}, 0x3, [{0x2, &(0x7f0000000240)=@string={0x2}}, {0x0, 0x0}, {0x87, &(0x7f0000000280)=@string={0x87, 0x3, "3f2a07a90195f835d15bffde99c7adf7f90e2b7ad94eb98ea9f1a4b50f760462043695d410eec4e03c81f2afe49625d2e1785ded42af1d4bd4b206d570551b3f3392b5b14d68056fb50de1ac2928835230ffc512158125afb1785a7aa27a6b8621c58d12520245ae09ea9b530736db3fc4cd0b27f2994b1996366064e3ba4bbca4385b526c"}}]})

275.698427ms ago: executing program 7 (id=398):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0x4, 0x10}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0xc8a1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

0s ago: executing program 6 (id=399):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
chdir(0x0)
unshare(0x20000400)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
getpeername$inet(r2, 0x0, &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.821940][ T4274] Bluetooth: hci0: command 0x0409 tx timeout
[   87.883676][ T4465] loop4: detected capacity change from 0 to 2048
[   87.992077][ T4465] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   88.114560][ T4463] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   88.144240][ T4463] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   88.171719][ T4463] EXT4-fs (loop4): This should not happen!! Data will be lost
[   88.171719][ T4463] 
[   88.183292][ T4463] EXT4-fs (loop4): Total free blocks count 0
[   88.189323][ T4463] EXT4-fs (loop4): Free/Dirty block details
[   88.195842][ T4463] EXT4-fs (loop4): free_blocks=4096
[   88.201086][ T4463] EXT4-fs (loop4): dirty_blocks=64
[   88.206739][ T4463] EXT4-fs (loop4): Block reservation details
[   88.213830][ T4463] EXT4-fs (loop4): i_reserved_data_blocks=4
[   88.287580][ T4279] EXT4-fs (loop1): unmounting filesystem.
[   88.299532][ T4424] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[   88.432469][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.457240][ T4436] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.477034][ T4436] device bridge_slave_0 entered promiscuous mode
[   88.521138][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.542796][ T4436] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.554283][ T4436] device bridge_slave_1 entered promiscuous mode
[   88.751784][ T4318] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   88.796806][ T4436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.848437][ T4480] loop0: detected capacity change from 0 to 2048
[   88.872310][ T4436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.931769][ T4318] usb 5-1: device descriptor read/64, error -71
[   88.968731][ T4480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   88.979837][   T11] device hsr_slave_0 left promiscuous mode
[   89.047133][   T11] device hsr_slave_1 left promiscuous mode
[   89.050767][ T4480] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   89.077555][ T4480] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   89.100465][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.115818][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.126380][ T4480] EXT4-fs (loop0): This should not happen!! Data will be lost
[   89.126380][ T4480] 
[   89.157363][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.185427][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.193202][ T4480] EXT4-fs (loop0): Total free blocks count 0
[   89.199257][ T4480] EXT4-fs (loop0): Free/Dirty block details
[   89.211621][ T4318] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   89.221676][   T11] device bridge_slave_1 left promiscuous mode
[   89.232357][ T4480] EXT4-fs (loop0): free_blocks=4096
[   89.236234][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.237879][ T4480] EXT4-fs (loop0): dirty_blocks=64
[   89.284992][   T11] device bridge_slave_0 left promiscuous mode
[   89.302820][ T4480] EXT4-fs (loop0): Block reservation details
[   89.305021][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.317038][ T4480] EXT4-fs (loop0): i_reserved_data_blocks=4
[   89.372340][ T4318] usb 5-1: device descriptor read/64, error -71
[   89.420298][   T11] device veth1_macvtap left promiscuous mode
[   89.445941][   T11] device veth0_macvtap left promiscuous mode
[   89.452646][ T4479] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[   89.466031][   T11] device veth1_vlan left promiscuous mode
[   89.486478][   T11] device veth0_vlan left promiscuous mode
[   89.502889][ T4318] usb usb5-port1: attempt power cycle
[   89.554505][ T4477] loop1: detected capacity change from 0 to 40427
[   89.603684][ T4477] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   89.648233][ T4477] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   89.738938][ T4477] F2FS-fs (loop1): Found nat_bits in checkpoint
[   89.901804][ T4274] Bluetooth: hci0: command 0x041b tx timeout
[   89.921913][ T4318] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   89.962434][ T4477] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   89.969555][ T4477] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   89.972238][ T4318] usb 5-1: device descriptor read/8, error -71
[   90.281711][ T4318] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   90.397633][ T4512] input: syz0 as /devices/virtual/input/input8
[   90.404239][ T4512] input: failed to attach handler leds to device input8, error: -6
[   90.490114][ T4318] usb 5-1: device descriptor read/8, error -71
[   90.832765][ T4318] usb usb5-port1: unable to enumerate USB device
[   91.230799][ T4477] syz.1.24: attempt to access beyond end of device
[   91.230799][ T4477] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   91.412343][ T4353] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   91.462734][   T47] kworker/u4:3: attempt to access beyond end of device
[   91.462734][   T47] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427
[   91.614828][ T4353] usb 4-1: unable to get BOS descriptor or descriptor too short
[   91.628851][ T4353] usb 4-1: not running at top speed; connect to a high speed hub
[   91.658768][ T4353] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.681634][ T4353] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[   91.728660][ T4353] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   91.750229][ T4353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.771580][ T4353] usb 4-1: Product: syz
[   91.775822][ T4353] usb 4-1: Manufacturer: syz
[   91.780534][ T4353] usb 4-1: SerialNumber: syz
[   91.892941][ T4523] loop4: detected capacity change from 0 to 2048
[   91.972186][ T4523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   91.982641][ T4274] Bluetooth: hci0: command 0x040f tx timeout
[   92.017954][ T4353] usb 4-1: USB disconnect, device number 3
[   92.221225][ T4522] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   92.280619][ T4522] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   92.311612][ T4522] EXT4-fs (loop4): This should not happen!! Data will be lost
[   92.311612][ T4522] 
[   92.341618][ T4522] EXT4-fs (loop4): Total free blocks count 0
[   92.351959][ T4522] EXT4-fs (loop4): Free/Dirty block details
[   92.366216][   T11] team0 (unregistering): Port device team_slave_1 removed
[   92.368126][ T4522] EXT4-fs (loop4): free_blocks=4096
[   92.393142][ T4522] EXT4-fs (loop4): dirty_blocks=64
[   92.398334][ T4522] EXT4-fs (loop4): Block reservation details
[   92.404825][ T4522] EXT4-fs (loop4): i_reserved_data_blocks=4
[   92.444651][ T4514] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[   92.476206][   T11] team0 (unregistering): Port device team_slave_0 removed
[   92.649723][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.065191][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.051607][ T4274] Bluetooth: hci0: command 0x0419 tx timeout
[   95.176812][   T11] bond0 (unregistering): Released all slaves
[   95.289294][ T4436] team0: Port device team_slave_0 added
[   95.296054][ T4510] tipc: Started in network mode
[   95.300982][ T4510] tipc: Node identity 4, cluster identity 4711
[   95.307249][ T4510] tipc: Node number set to 4
[   95.439448][ T4436] team0: Port device team_slave_1 added
[   95.531561][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[   95.646878][ T4436] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.665833][ T4436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.731868][ T4318] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   95.779593][ T4436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.837878][ T4436] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.854189][ T4436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.901656][ T4318] usb 5-1: device descriptor read/64, error -71
[   95.911353][ T4436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.930719][ T4645] netlink: 165 bytes leftover after parsing attributes in process `syz.0.44'.
[   96.007773][ T4436] device hsr_slave_0 entered promiscuous mode
[   96.035437][ T4436] device hsr_slave_1 entered promiscuous mode
[   96.062332][ T4436] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.088656][ T4436] Cannot create hsr debugfs directory
[   96.171738][ T4318] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   96.229272][ T4649] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   96.346413][ T4318] usb 5-1: device descriptor read/64, error -71
[   96.473470][ T4318] usb usb5-port1: attempt power cycle
[   96.574273][ T4436] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   96.614446][ T4436] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   96.683931][ T4436] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   96.722839][ T4436] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   96.895046][ T4318] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   96.942507][ T4318] usb 5-1: device descriptor read/8, error -71
[   96.980320][ T4436] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.066210][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.082387][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.130513][ T4436] 8021q: adding VLAN 0 to HW filter on device team0
[   97.192588][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   97.220239][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   97.229431][ T4670] CUSE: unknown device info "n��|�zQC*�"
[   97.235366][ T4318] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   97.244293][ T4670] CUSE: unknown device info "G2���a"�� V��|�#�y�S�io�L�����8�9�I��ܥѮ�Ç�[�<^�Q��>�nHw���'0KV�,��${\�d�
+"
[   97.258833][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.266027][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.276088][ T4318] usb 5-1: device descriptor read/8, error -71
[   97.292895][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   97.301323][ T4670] CUSE: unknown device info "����"
[   97.307110][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   97.315476][ T4670] CUSE: unknown device info "�L�P����t|%��I���O���Ku	G���Ǫ|�Q�U˜Dv�F��,*p�(o9�{u���[�赨���gI�P��YV"
[   97.331062][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   97.340318][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.347494][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.357127][ T4670] CUSE: DEVNAME unspecified
[   97.380501][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   97.391666][    T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   97.402397][ T4318] usb usb5-port1: unable to enumerate USB device
[   97.415252][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   97.450338][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   97.465907][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   97.484927][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   97.522178][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   97.540644][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   97.561861][   T26] audit: type=1326 audit(1789423022.165:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4668 comm="syz.0.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85c019e159 code=0x0
[   97.593602][    T7] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[   97.606494][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   97.611698][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.646093][ T4436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   97.673582][    T7] usb 4-1: config 0 descriptor??
[   97.716546][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   97.739499][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   97.757617][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   97.797452][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   97.808123][ T4684] input: syz0 as /devices/virtual/input/input9
[   97.852906][ T4684] input: failed to attach handler leds to device input9, error: -6
[   98.138453][    T7] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[   98.167693][    T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[   98.198759][    T7] [drm:udl_init] *ERROR* Selecting channel failed
[   98.260746][    T7] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[   98.278577][    T7] [drm] Initialized udl on minor 2
[   98.293176][    T7] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   98.319600][    T7] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[   98.344222][    T7] usb 4-1: USB disconnect, device number 4
[   98.353686][ T4322] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[   98.374561][ T4322] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[   98.415289][ T4322] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[   98.560513][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   98.624060][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   98.691182][ T4436] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.208645][ T4712] IPVS: set_ctl: invalid protocol: 135 172.20.20.50:20000
[   99.290804][ T4689] loop1: detected capacity change from 0 to 40427
[   99.326174][ T4689] F2FS-fs (loop1): Corrupted extension count (327717 + 1 > 64)
[   99.376352][ T4689] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   99.477086][ T4689] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff
[   99.535084][   T22] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[   99.563334][ T4689] F2FS-fs (loop1): invalid crc value
[   99.565950][ T4719] loop3: detected capacity change from 0 to 512
[   99.596677][ T4689] F2FS-fs (loop1): Found nat_bits in checkpoint
[   99.620777][ T4719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   99.655160][ T4719] System zones: 1-12
[   99.759301][   T22] usb 5-1: config 0 has an invalid interface number: 205 but max is 0
[   99.769878][ T4719] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.61: missing EA_INODE flag
[   99.882046][ T4719] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.61: error while reading EA inode 12 err=-117
[   99.936572][ T4689] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   99.959547][ T4689] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  100.093246][ T4719] EXT4-fs (loop3): 1 orphan inode deleted
[  100.214774][ T4719] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  100.570079][   T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  100.580338][   T22] usb 5-1: config 0 has no interface number 0
[  100.601592][   T22] usb 5-1: config 0 interface 205 has no altsetting 0
[  100.808196][   T22] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  100.817602][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.825967][   T22] usb 5-1: Product: syz
[  100.830269][   T22] usb 5-1: Manufacturer: syz
[  100.835264][   T22] usb 5-1: SerialNumber: syz
[  100.903097][ T4736] 9pnet_fd: Insufficient options for proto=fd
[  101.081593][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  101.091524][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  101.101524][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  101.111522][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  101.121520][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  101.131522][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  101.141522][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  101.151525][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  101.161523][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  101.333546][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  101.405759][   T22] usb 5-1: config 0 descriptor??
[  101.454150][   T22] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  101.548313][   T22] dvb-usb: bulk message failed: -22 (3/0)
[  101.583789][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  101.613357][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  101.624913][   T22] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  101.643208][ T4739] input: syz0 as /devices/virtual/input/input10
[  101.649682][ T4739] input: failed to attach handler leds to device input10, error: -6
[  101.670565][ T4742] xt_connbytes: Forcing CT accounting to be enabled
[  101.699492][   T22] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  101.710198][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  101.723877][ T4742] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  101.753002][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  101.767046][   T22] usb 5-1: media controller created
[  101.794342][   T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  101.808445][ T4436] device veth0_vlan entered promiscuous mode
[  101.826395][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  101.847389][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  101.897871][ T4436] device veth1_vlan entered promiscuous mode
[  101.922253][   T22] dvb-usb: bulk message failed: -22 (6/0)
[  101.957890][   T22] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  102.027857][   T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11
[  102.068676][ T4747] CUSE: unknown device info "n��|�zQC*�"
[  102.081281][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  102.091867][   T22] dvb-usb: schedule remote query interval to 150 msecs.
[  102.108981][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  102.122396][ T4747] CUSE: unknown device info "G2���a"�� V��|�#�y�S�io�L�����8�9�I��ܥѮ�Ç�[�<^�Q��>�nHw���'0KV�,��${\�d�
+"
[  102.135086][   T22] dvb-usb: bulk message failed: -22 (3/0)
[  102.144331][ T4747] CUSE: unknown device info "����"
[  102.150085][ T4747] CUSE: unknown device info "�L�P����t|%��I���O���Ku	G���Ǫ|�Q�U˜Dv�F��,*p�(o9�{u���[�赨���gI�P��YV"
[  102.159177][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  102.172148][   T22] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  102.178400][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  102.199365][ T4747] CUSE: DEVNAME unspecified
[  102.202099][ T4436] device veth0_macvtap entered promiscuous mode
[  102.225094][ T4436] device veth1_macvtap entered promiscuous mode
[  102.245276][   T22] usb 5-1: USB disconnect, device number 10
[  102.268347][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.338059][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.348616][   T26] audit: type=1326 audit(1789423026.955:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.3.65" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41d799e159 code=0x0
[  102.372007][ T4322] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  102.445365][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.488215][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.506384][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.523922][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.545582][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.551590][ T4322] usb 1-1: device descriptor read/64, error -71
[  102.559732][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.629961][ T4436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.643677][   T22] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  102.664696][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  102.708515][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  102.744141][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  102.775378][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  102.793486][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.812191][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.823753][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.834729][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.844796][ T4322] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  102.883075][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.942297][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.962073][ T4436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.986490][ T4436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.011783][ T4322] usb 1-1: device descriptor read/64, error -71
[  103.030040][ T4436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.055338][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  103.076757][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  103.123002][ T4436] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.156269][ T4436] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.158801][ T4322] usb usb1-port1: attempt power cycle
[  103.165372][   T22] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  103.191831][ T4436] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.207820][ T4436] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.366166][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.381761][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.408006][   T22] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  103.417745][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  103.438411][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.460934][ T4606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.479190][ T4606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.483339][   T22] usb 5-1: config 0 descriptor??
[  103.505290][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  103.557167][ T4776] process 'syz.3.71' launched './file0' with NULL argv: empty string added
[  103.591650][ T4322] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  103.652439][ T4322] usb 1-1: device descriptor read/8, error -71
[  103.686769][ T4779] loop1: detected capacity change from 0 to 256
[  103.710493][ T4779] exfat: Deprecated parameter 'utf8'
[  103.722928][ T4779] exfat: Deprecated parameter 'namecase'
[  103.730927][ T4779] exfat: Deprecated parameter 'namecase'
[  103.772702][ T4779] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  103.875282][   T26] audit: type=1800 audit(1789423028.485:4): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.72" name="file2" dev="loop1" ino=1048598 res=0 errno=0
[  103.927414][ T4322] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  103.975315][   T22] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  103.995602][   T22] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  104.003069][ T4322] usb 1-1: device descriptor read/8, error -71
[  104.050545][   T22] [drm:udl_init] *ERROR* Selecting channel failed
[  104.111452][   T22] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[  104.121866][ T4322] usb usb1-port1: unable to enumerate USB device
[  104.151446][   T22] [drm] Initialized udl on minor 2
[  104.997577][   T22] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  105.006215][   T22] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  105.017120][   T22] usb 5-1: USB disconnect, device number 11
[  105.031100][ T4273] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  105.042894][ T4273] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  105.050982][ T4273] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  105.547555][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.557152][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.192020][ T4808] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.199255][ T4808] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.206845][ T4808] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.213962][ T4808] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.258880][ T4804] loop1: detected capacity change from 0 to 4096
[  106.275728][ T4806] loop0: detected capacity change from 0 to 2048
[  106.306302][ T4804] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  106.321962][ T4808] device bridge0 entered promiscuous mode
[  106.331060][ T4806] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  106.782767][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  106.843979][ T4282] EXT4-fs (loop0): unmounting filesystem.
[  107.051868][    T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  107.243608][    T7] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  107.280663][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.337819][    T7] usb 4-1: config 0 descriptor??
[  107.368936][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.450117][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  107.621883][ T4352] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  107.673616][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.755770][    T7] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  107.786958][    T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  107.807988][    T7] [drm:udl_init] *ERROR* Selecting channel failed
[  107.830310][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.841104][ T4352] usb 1-1: Using ep0 maxpacket: 8
[  107.850035][ T4352] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  107.864918][    T7] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  107.873610][ T4352] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  107.886670][    T7] [drm] Initialized udl on minor 2
[  107.893647][ T4352] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  107.906310][    T7] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  107.917279][ T4848] cgroup: noprefix used incorrectly
[  107.923738][    T7] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  107.930415][ T4352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.941739][    T7] usb 4-1: USB disconnect, device number 5
[  107.959278][ T4353] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  107.970185][ T4353] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  108.005788][ T4353] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  108.058186][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.433807][   T11] tipc: Left network mode
[  108.780638][ T4862] loop3: detected capacity change from 0 to 2048
[  108.877963][ T4862] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  109.027396][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  109.039364][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  109.050977][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  109.059960][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  109.068342][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  109.077247][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  109.349769][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  110.029114][ T4871] chnl_net:caif_netlink_parms(): no params data found
[  110.342505][   T11] device hsr_slave_0 left promiscuous mode
[  110.350446][   T11] device hsr_slave_1 left promiscuous mode
[  110.417948][   T22] usb 1-1: USB disconnect, device number 7
[  110.425625][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.457937][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.502937][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.540985][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.567764][   T11] device bridge_slave_1 left promiscuous mode
[  110.581835][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.667996][   T11] device bridge_slave_0 left promiscuous mode
[  110.681637][ T4273] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  110.707654][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.074250][   T11] device veth1_macvtap left promiscuous mode
[  111.146376][   T11] device veth0_macvtap left promiscuous mode
[  111.172447][ T4286] Bluetooth: hci2: command 0x0409 tx timeout
[  111.217243][   T11] device veth1_vlan left promiscuous mode
[  111.273221][   T11] device veth0_vlan left promiscuous mode
[  111.553767][ T4909] loop5: detected capacity change from 0 to 2048
[  111.594182][ T4273] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  111.611534][ T4273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.641345][ T4273] usb 5-1: config 0 descriptor??
[  111.663341][ T4909] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  111.727760][ T4896] loop3: detected capacity change from 0 to 40427
[  111.808922][ T4896] F2FS-fs (loop3): invalid crc value
[  111.870999][ T4896] F2FS-fs (loop3): Found nat_bits in checkpoint
[  111.994087][ T4436] EXT4-fs (loop5): unmounting filesystem.
[  111.998883][ T4896] F2FS-fs (loop3): Start checkpoint disabled!
[  112.040319][ T4896] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  112.080241][ T4273] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  112.090197][ T4273] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  112.099919][ T4273] [drm:udl_init] *ERROR* Selecting channel failed
[  112.187205][ T4273] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[  112.210920][ T4273] [drm] Initialized udl on minor 2
[  112.228065][ T4273] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  112.258151][ T4273] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  112.267654][ T4273] usb 5-1: USB disconnect, device number 12
[  112.287293][ T4515] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  112.322307][ T4515] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  112.351687][ T4515] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  112.415660][ T4594] kworker/u4:22: attempt to access beyond end of device
[  112.415660][ T4594] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  112.851222][ T4924] kvm: pic: level sensitive irq not supported
[  112.851455][ T4924] kvm: pic: non byte read
[  112.882154][ T4924] kvm: pic: level sensitive irq not supported
[  112.882241][ T4924] kvm: pic: non byte read
[  113.017893][   T11] team0 (unregistering): Port device team_slave_1 removed
[  113.154880][   T11] team0 (unregistering): Port device team_slave_0 removed
[  113.251682][ T4286] Bluetooth: hci2: command 0x041b tx timeout
[  113.276489][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.385846][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.571972][ T4322] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  113.788392][ T4322] usb 5-1: Using ep0 maxpacket: 8
[  113.864202][ T4322] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  113.881615][ T4322] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  113.906109][ T4322] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  113.918098][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.255749][ T4941] loop3: detected capacity change from 0 to 2048
[  114.305437][   T11] bond0 (unregistering): Released all slaves
[  114.348456][ T4941] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  114.379917][ T4940] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  114.440856][ T4936] netlink: 32 bytes leftover after parsing attributes in process `syz.5.116'.
[  114.450579][ T4936] netlink: 32 bytes leftover after parsing attributes in process `syz.5.116'.
[  114.614446][ T4871] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.640422][ T4871] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.648863][ T4871] device bridge_slave_0 entered promiscuous mode
[  114.723728][ T4871] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.765603][ T4871] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.783925][ T4871] device bridge_slave_1 entered promiscuous mode
[  114.914417][ T4871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.946007][ T4871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.959203][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  115.016037][ T4959] loop5: detected capacity change from 0 to 256
[  115.026368][ T4960] loop0: detected capacity change from 0 to 256
[  115.036463][ T4871] team0: Port device team_slave_0 added
[  115.059069][ T4871] team0: Port device team_slave_1 added
[  115.083686][ T4959] exfat: Deprecated parameter 'utf8'
[  115.089131][ T4959] exfat: Deprecated parameter 'namecase'
[  115.145781][ T4959] exfat: Deprecated parameter 'utf8'
[  115.187048][ T4871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.211580][ T4871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.222390][ T4959] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  115.237554][    C1] vkms_vblank_simulate: vblank timer overrun
[  115.298841][ T4964] CUSE: unknown device info "n��|�zQC*�"
[  115.318139][ T4964] CUSE: unknown device info "G2���a"�� V��|�#�y�S�io�L�����8�9�I��ܥѮ�Ç�[�<^�Q��>�nHw���'0KV�,��${\�d�
+"
[  115.331681][ T4274] Bluetooth: hci2: command 0x040f tx timeout
[  115.340770][ T4871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.351655][ T4964] CUSE: unknown device info "����"
[  115.351670][ T4964] CUSE: unknown device info "�L�P����t|%��I���O���Ku	G���Ǫ|�Q�U˜Dv�F��,*p�(o9�{u���[�赨���gI�P��YV"
[  115.351681][ T4964] CUSE: DEVNAME unspecified
[  115.392848][ T4871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.399854][ T4871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.425864][    C1] vkms_vblank_simulate: vblank timer overrun
[  115.529885][   T26] audit: type=1326 audit(1789423040.135:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.3.123" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41d799e159 code=0x0
[  115.565170][ T4970] loop0: detected capacity change from 0 to 512
[  115.570037][ T4871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.669144][ T4970] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  115.739017][ T4970] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.858709][ T4871] device hsr_slave_0 entered promiscuous mode
[  115.885913][ T4871] device hsr_slave_1 entered promiscuous mode
[  115.899260][ T4970] EXT4-fs error (device loop0): ext4_find_dest_de:2117: inode #2: block 3: comm syz.0.124: bad entry in directory: inode out of bounds - offset=60, inode=327695, rec_len=16, size=2048 fake=0
[  115.921097][ T4871] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.931019][ T4871] Cannot create hsr debugfs directory
[  116.044228][ T4282] EXT4-fs (loop0): unmounting filesystem.
[  116.416955][ T4353] usb 5-1: USB disconnect, device number 13
[  116.536881][ T4871] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  116.600378][ T4871] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  116.662526][ T4871] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  116.715576][ T4871] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  116.808604][ T4979] netlink: 67 bytes leftover after parsing attributes in process `syz.5.125'.
[  116.851763][ T4322] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  116.860197][ T4979] IPv6: NLM_F_REPLACE set, but no existing node found!
[  116.980943][ T4995] serio: Serial port ptm1
[  117.027789][ T4997] netlink: 48 bytes leftover after parsing attributes in process `syz.4.130'.
[  117.076208][ T4871] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.078438][ T4322] usb 4-1: unable to get BOS descriptor or descriptor too short
[  117.113507][ T4322] usb 4-1: not running at top speed; connect to a high speed hub
[  117.137997][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  117.152551][ T4322] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  117.182683][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  117.193340][ T4871] 8021q: adding VLAN 0 to HW filter on device team0
[  117.212451][ T4322] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  117.227813][ T4322] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  117.237125][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  117.252301][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  117.271717][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.292439][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.299642][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.311223][ T4322] usb 4-1: Product: syz
[  117.318102][ T4322] usb 4-1: Manufacturer: syz
[  117.325121][ T4322] usb 4-1: SerialNumber: syz
[  117.339436][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  117.374660][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  117.387017][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  117.405462][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.412701][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.421714][ T4274] Bluetooth: hci2: command 0x0419 tx timeout
[  117.430914][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  117.817728][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  117.872868][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  118.029178][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  118.171254][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  118.242497][ T4322] usb 4-1: 0:1 : does not exist
[  118.273679][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  118.295813][ T4322] usb 4-1: USB disconnect, device number 6
[  118.376821][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  118.429858][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  118.480387][ T5007] tipc: Started in network mode
[  118.485428][ T5007] tipc: Node identity 4, cluster identity 4711
[  118.491724][ T5007] tipc: Node number set to 4
[  118.507448][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  118.528926][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  118.548117][ T5007] input: syz0 as /devices/virtual/input/input12
[  118.554665][ T5007] input: failed to attach handler leds to device input12, error: -6
[  118.578108][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  118.632320][ T5011] CUSE: unknown device info "n��|�zQC*�"
[  118.640300][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  118.660623][ T5011] CUSE: unknown device info "G2���a"�� V��|�#�y�S�io�L�����8�9�I��ܥѮ�Ç�[�<^�Q��>�nHw���'0KV�,��${\�d�
+"
[  118.709738][ T5011] CUSE: unknown device info "����"
[  118.722978][ T5018] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.730608][ T5018] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.731604][ T5011] CUSE: unknown device info "�L�P����t|%��I���O���Ku	G���Ǫ|�Q�U˜Dv�F��,*p�(o9�{u���[�赨���gI�P��YV"
[  118.805919][ T5011] CUSE: DEVNAME unspecified
[  118.841250][ T5020] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.848627][ T5020] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.856235][ T5020] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.863447][ T5020] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.941859][ T5020] device bridge0 entered promiscuous mode
[  119.022995][   T26] audit: type=1326 audit(1789423043.635:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5008 comm="syz.3.136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41d799e159 code=0x0
[  119.152024][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  119.167942][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  119.200821][ T4871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.498169][ T5040] netlink: 2 bytes leftover after parsing attributes in process `syz.0.139'.
[  119.593651][ T5042] loop3: detected capacity change from 0 to 256
[  119.596732][ T5039] loop4: detected capacity change from 0 to 2048
[  119.742647][ T5039] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  119.824718][ T5038] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  120.288080][   T22] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  120.357004][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  120.481593][ T4515] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  120.500138][   T22] usb 4-1: unable to get BOS descriptor or descriptor too short
[  120.518177][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  120.529148][   T22] usb 4-1: not running at top speed; connect to a high speed hub
[  120.543239][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  120.554139][   T22] usb 4-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config
[  120.599175][   T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  120.662823][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  120.715188][ T4515] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.732326][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  120.747795][ T5035] loop5: detected capacity change from 0 to 40427
[  120.771693][   T22] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  120.793052][ T4515] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  120.886290][ T4871] device veth0_vlan entered promiscuous mode
[  120.924540][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.959622][ T5035] F2FS-fs (loop5): invalid crc value
[  120.974551][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  121.000692][ T4515] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  121.039076][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  121.062927][   T22] usb 4-1: Product: syz
[  121.104441][ T5035] F2FS-fs (loop5): Found nat_bits in checkpoint
[  121.129152][   T22] usb 4-1: Manufacturer: syz
[  121.158198][ T4515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.228415][   T22] usb 4-1: SerialNumber: syz
[  121.291564][ T4871] device veth1_vlan entered promiscuous mode
[  121.402400][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  121.424532][ T4515] cdc_acm: probe of 1-1:1.0 failed with error -22
[  121.466777][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  121.492792][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  121.501784][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  121.513540][ T4871] device veth0_macvtap entered promiscuous mode
[  121.560366][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  121.590361][ T4871] device veth1_macvtap entered promiscuous mode
[  121.644023][ T5035] F2FS-fs (loop5): Start checkpoint disabled!
[  121.772971][   T22] usb 4-1: 0:1 : does not exist
[  121.847197][   T22] usb 4-1: unit 2 not found!
[  122.016839][ T5035] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  122.448404][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.460634][   T22] usb 4-1: USB disconnect, device number 7
[  122.551237][ T4515] usb 1-1: USB disconnect, device number 8
[  122.570896][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.583158][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.614205][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.633547][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.645157][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.681713][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.692764][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.713309][ T4871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.731948][ T5080] tipc: Started in network mode
[  122.736871][ T5080] tipc: Node identity 4, cluster identity 4711
[  122.745341][ T5080] tipc: Node number set to 4
[  122.751207][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  122.770853][ T5080] input: syz0 as /devices/virtual/input/input13
[  122.777268][ T5080] input: failed to attach handler leds to device input13, error: -6
[  122.798978][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  122.812306][ T4761] udevd[4761]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  122.843644][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.867238][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.879616][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.896712][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.911007][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.929776][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.940711][ T4871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.958049][ T4871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.983368][ T4871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.994682][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  123.010950][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  123.041433][ T4871] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.066641][ T4871] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.078746][ T4871] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.094714][ T4871] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.239369][ T5091] VFS: file-max limit 0 reached
[  123.306646][ T4612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.333801][ T4612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.370829][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  123.434183][ T4592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.448590][ T4592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.497735][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  125.410070][ T5115] loop3: detected capacity change from 0 to 256
[  125.823621][ T4272] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  125.832783][ T4321] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  125.837818][ T5128] loop6: detected capacity change from 0 to 512
[  125.879827][ T4272] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  125.909514][ T5128] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  125.968968][ T5128] System zones: 1-12
[  125.985471][ T5128] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.162: missing EA_INODE flag
[  125.989055][ T5136] loop5: detected capacity change from 0 to 512
[  126.009476][ T5128] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.162: error while reading EA inode 12 err=-117
[  126.040972][ T5138] input: syz0 as /devices/virtual/input/input14
[  126.047543][ T5138] input: failed to attach handler leds to device input14, error: -6
[  126.056154][ T5128] EXT4-fs (loop6): 1 orphan inode deleted
[  126.065499][ T4321] usb 5-1: unable to get BOS descriptor or descriptor too short
[  126.082033][ T5128] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  126.091932][ T4321] usb 5-1: not running at top speed; connect to a high speed hub
[  126.112466][ T4321] usb 5-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config
[  126.123184][ T5136] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  126.141644][ T4321] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  126.162156][ T5136] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  126.174720][ T4321] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  126.253381][ T5136] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  126.361128][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.367069][ T5136] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  126.369609][ T4321] usb 5-1: Product: syz
[  126.381530][ T4321] usb 5-1: Manufacturer: syz
[  126.386248][ T4321] usb 5-1: SerialNumber: syz
[  126.402858][ T5136] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000]
[  126.420951][ T5136] EXT4-fs (loop5): failed to initialize system zone (-117)
[  126.439531][ T5136] EXT4-fs (loop5): mount failed
[  126.563776][ T4871] EXT4-fs (loop6): unmounting filesystem.
[  126.611153][ T4321] usb 5-1: 0:1 : does not exist
[  126.627344][ T4321] usb 5-1: unit 2 not found!
[  126.662260][ T4321] usb 5-1: USB disconnect, device number 14
[  126.926353][ T4612] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.019349][ T4761] udevd[4761]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.069952][ T4612] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.545080][ T4612] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.029593][ T4612] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.608064][ T4322] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  128.726205][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  128.748000][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  128.758414][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  128.776243][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  128.803386][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  128.811024][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.828105][ T4322] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  128.872242][ T4322] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  128.944950][ T4322] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  128.979220][ T4322] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  129.030137][ T4322] usb 7-1: Manufacturer: syz
[  129.060458][ T4322] usb 7-1: config 0 descriptor??
[  129.089494][ T4322] igorplugusb 7-1:0.0: incorrect number of endpoints
[  129.111670][ T4317] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  129.296869][ T5163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.301798][ T4317] usb 5-1: Using ep0 maxpacket: 8
[  129.330199][ T5163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.333107][ T4317] usb 5-1: unable to get BOS descriptor or descriptor too short
[  129.387636][ T4317] usb 5-1: config index 0 descriptor too short (expected 32864, got 96)
[  129.411049][ T4317] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  129.441875][ T4317] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  129.472288][ T4317] usb 5-1: string descriptor 0 read error: -22
[  129.478622][ T4317] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40
[  129.502833][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.558453][ T4317] usb 5-1: cannot find UAC_HEADER
[  129.644325][ T4317] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  129.677421][ T4400] udevd[4400]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.696936][ T5188] loop5: detected capacity change from 0 to 40427
[  129.720600][ T5188] F2FS-fs (loop5): Unrecognized mount option "whint_mode=fs-based" or missing value
[  129.887642][ T4321] usb 5-1: USB disconnect, device number 15
[  129.942098][ T4317] usb 7-1: USB disconnect, device number 2
[  130.199004][ T5173] chnl_net:caif_netlink_parms(): no params data found
[  130.851632][ T4286] Bluetooth: hci1: command 0x0409 tx timeout
[  131.311875][ T5218] loop4: detected capacity change from 0 to 512
[  131.341837][ T5218] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  131.380546][ T4612] device hsr_slave_0 left promiscuous mode
[  131.411279][ T5218] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.185: bg 0: block 5: invalid block bitmap
[  131.451647][ T4612] device hsr_slave_1 left promiscuous mode
[  131.522166][ T4612] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.529747][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.612871][ T4612] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.631781][ T5218] EXT4-fs (loop4): Remounting filesystem read-only
[  131.652724][ T5218] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  131.653676][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.697131][ T5218] EXT4-fs (loop4): Remounting filesystem read-only
[  131.726822][ T4612] device bridge_slave_1 left promiscuous mode
[  131.731783][ T5218] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.185: invalid indirect mapped block 3 (level 2)
[  131.746571][ T4612] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.763359][ T4612] device bridge_slave_0 left promiscuous mode
[  131.781044][ T4612] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.796381][ T5218] EXT4-fs (loop4): Remounting filesystem read-only
[  131.824383][ T5204] loop5: detected capacity change from 0 to 40427
[  131.833563][ T4612] device veth1_macvtap left promiscuous mode
[  131.837938][ T5218] EXT4-fs (loop4): 2 truncates cleaned up
[  131.839641][ T4612] device veth0_macvtap left promiscuous mode
[  131.868415][ T5218] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  131.873445][ T4612] device veth1_vlan left promiscuous mode
[  131.891042][ T5204] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[  131.927393][ T5204] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  131.961690][ T4612] device veth0_vlan left promiscuous mode
[  132.011147][ T5204] F2FS-fs (loop5): invalid crc value
[  132.035290][ T5204] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  132.112845][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  132.351321][ T5244] loop0: detected capacity change from 0 to 1024
[  132.413569][ T5244] =======================================================
[  132.413569][ T5244] WARNING: The mand mount option has been deprecated and
[  132.413569][ T5244]          and is ignored by this kernel. Remove the mand
[  132.413569][ T5244]          option from the mount to silence this warning.
[  132.413569][ T5244] =======================================================
[  132.454869][ T5204] F2FS-fs (loop5): Start checkpoint disabled!
[  132.504443][ T5204] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  132.543579][ T5244] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.193: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  132.546030][ T5204] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  132.573507][ T5244] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.193: couldn't read orphan inode 11 (err -117)
[  132.594792][ T4318] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  132.637497][ T5244] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  132.783699][ T4318] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  132.822938][ T4318] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  132.904413][ T4318] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  132.935760][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  132.936278][ T4286] Bluetooth: hci1: command 0x041b tx timeout
[  132.942143][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  132.954474][ T4318] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  132.973103][ T4318] usb 5-1: Manufacturer: syz
[  132.984792][ T4318] usb 5-1: config 0 descriptor??
[  133.002730][ T4318] igorplugusb 5-1:0.0: incorrect number of endpoints
[  133.053820][ T4614] kworker/u4:31: attempt to access beyond end of device
[  133.053820][ T4614] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  133.212501][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.231946][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.418342][ T5256] loop5: detected capacity change from 0 to 256
[  133.517939][ T5256] FAT-fs (loop5): Directory bread(block 64) failed
[  133.537341][ T5256] FAT-fs (loop5): Directory bread(block 65) failed
[  133.545038][ T5256] FAT-fs (loop5): Directory bread(block 66) failed
[  133.559360][ T5256] FAT-fs (loop5): Directory bread(block 67) failed
[  133.566186][ T5256] FAT-fs (loop5): Directory bread(block 68) failed
[  133.572824][ T5256] FAT-fs (loop5): Directory bread(block 69) failed
[  133.579542][ T5256] FAT-fs (loop5): Directory bread(block 70) failed
[  133.599518][ T5256] FAT-fs (loop5): Directory bread(block 71) failed
[  133.609262][ T5256] FAT-fs (loop5): Directory bread(block 72) failed
[  133.616642][ T5256] FAT-fs (loop5): Directory bread(block 73) failed
[  133.801380][    T7] usb 5-1: USB disconnect, device number 16
[  133.847118][ T4612] team0 (unregistering): Port device team_slave_1 removed
[  134.026416][ T4612] team0 (unregistering): Port device team_slave_0 removed
[  134.271803][ T5221] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set
[  134.420318][ T4612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.714495][ T4612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.015810][ T4286] Bluetooth: hci1: command 0x040f tx timeout
[  135.026454][ T4612] bond0 (unregistering): Released all slaves
[  135.149811][ T5234] tipc: Started in network mode
[  135.154869][ T5234] tipc: Node identity 4, cluster identity 4711
[  135.161058][ T5234] tipc: Node number set to 4
[  135.272085][ T5260] netlink: 9 bytes leftover after parsing attributes in process `syz.4.196'.
[  135.294530][ T4282] EXT4-fs (loop0): unmounting filesystem.
[  135.301168][ T5260] device gretap0 entered promiscuous mode
[  135.361981][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.389105][ T5173] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.411401][ T5268] CUSE: unknown device info "n��|�zQC*�"
[  135.430692][ T5173] device bridge_slave_0 entered promiscuous mode
[  135.470283][ T5268] CUSE: unknown device info "G2���a"�� V��|�#�y�S�io�L�����8�9�I��ܥѮ�Ç�[�<^�Q��>�nHw���'0KV�,��${\�d�
+"
[  135.480763][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.510534][ T5173] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.552647][ T5173] device bridge_slave_1 entered promiscuous mode
[  135.598866][ T5268] CUSE: unknown device info "����"
[  135.679464][ T5173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.744573][ T5268] CUSE: unknown device info "�L�P����t|%��I���O���Ku	G���Ǫ|�Q�U˜Dv�F��,*p�(o9�{u���[�赨���gI�P��YV"
[  135.756573][   T26] audit: type=1326 audit(1789423060.355:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.6.198" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64fb79e159 code=0x0
[  135.784431][ T5268] CUSE: DEVNAME unspecified
[  135.803392][ T5173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.068078][ T5173] team0: Port device team_slave_0 added
[  136.092567][ T5173] team0: Port device team_slave_1 added
[  136.218813][ T5173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.287414][ T5173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.434313][ T5173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.477783][ T5173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.497560][ T5173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.713934][ T5173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.726083][ T4353] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  136.946531][ T4353] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  137.003648][ T4353] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  137.091753][ T4286] Bluetooth: hci1: command 0x0419 tx timeout
[  137.223274][ T4353] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  137.449653][ T4353] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  137.491877][ T4353] usb 5-1: Manufacturer: syz
[  137.495400][ T5173] device hsr_slave_0 entered promiscuous mode
[  137.516881][ T5173] device hsr_slave_1 entered promiscuous mode
[  137.587392][ T4353] usb 5-1: config 0 descriptor??
[  137.643438][ T4353] igorplugusb 5-1:0.0: incorrect number of endpoints
[  137.685739][ T5310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'.
[  137.708830][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  137.837218][ T5296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.881801][ T5296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.121858][ T5173] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  138.228158][ T5173] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  138.247365][ T5173] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  138.298934][ T5173] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  138.486873][   T22] usb 5-1: USB disconnect, device number 17
[  138.583190][ T5173] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.636765][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  138.663514][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  138.702732][ T5173] 8021q: adding VLAN 0 to HW filter on device team0
[  138.777950][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  138.803740][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  138.828546][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.835937][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.882485][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  138.901106][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  138.953435][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  138.983578][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.990744][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.039944][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  139.042100][ T5336] CUSE: unknown device info "n��|�zQC*�"
[  139.064361][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  139.081368][ T5336] CUSE: unknown device info "G2���a"�� V��|�#�y�S�io�L�����8�9�I��ܥѮ�Ç�[�<^�Q��>�nHw���'0KV�,��${\�d�
+"
[  139.111390][ T5336] CUSE: unknown device info "����"
[  139.111757][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  139.150221][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  139.162626][ T5336] CUSE: unknown device info "�L�P����t|%��I���O���Ku	G���Ǫ|�Q�U˜Dv�F��,*p�(o9�{u���[�赨���gI�P��YV"
[  139.174204][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  139.208869][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  139.251862][ T5336] CUSE: DEVNAME unspecified
[  139.258830][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  139.292829][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  139.318387][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  139.342436][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  139.382437][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  139.407388][   T26] audit: type=1326 audit(1789423064.015:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.5.216" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c9619e159 code=0x0
[  139.446822][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  140.201673][ T4318] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  140.243585][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.220'.
[  140.286112][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  140.304428][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  140.344534][ T5173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.401994][ T4318] usb 1-1: Using ep0 maxpacket: 8
[  140.418575][ T4318] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  140.444881][ T4318] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  140.482743][ T4318] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  140.519005][ T4318] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  140.560938][ T4318] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  140.623161][ T4318] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  140.653551][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.706841][ T4318] usbtmc 1-1:16.0: bulk endpoints not found
[  140.707565][ T5341] loop6: detected capacity change from 0 to 40427
[  140.768977][ T5341] F2FS-fs (loop6): invalid crc value
[  140.820938][ T5341] F2FS-fs (loop6): Found nat_bits in checkpoint
[  141.031731][ T5341] F2FS-fs (loop6): Start checkpoint disabled!
[  141.089030][ T5341] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  141.132921][ T4318] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  141.301610][ T4318] usb 6-1: device descriptor read/64, error -71
[  141.471166][   T47] kworker/u4:3: attempt to access beyond end of device
[  141.471166][   T47] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  141.581715][ T4318] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  141.616929][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  141.636737][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  141.679760][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  141.706162][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  141.743773][ T5173] device veth0_vlan entered promiscuous mode
[  141.754331][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  141.761798][ T4318] usb 6-1: device descriptor read/64, error -71
[  141.770473][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  141.792844][ T5173] device veth1_vlan entered promiscuous mode
[  141.850515][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  141.860684][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  141.876799][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  141.888236][ T4318] usb usb6-port1: attempt power cycle
[  141.899246][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  141.919250][ T5173] device veth0_macvtap entered promiscuous mode
[  141.938654][ T5173] device veth1_macvtap entered promiscuous mode
[  141.995601][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.034142][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.058617][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.074154][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.084830][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.099613][ T5387] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  142.114650][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.126941][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.141844][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.158312][ T5387] loop6: detected capacity change from 0 to 512
[  142.166277][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.178766][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  142.197204][ T5387] EXT4-fs: Invalid want_extra_isize 1
[  142.217232][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  142.250986][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  142.290210][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  142.321678][ T4318] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  142.339230][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.358859][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.382302][ T4318] usb 6-1: device descriptor read/8, error -71
[  142.397498][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.448936][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.479540][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.504984][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.564689][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.584642][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.596521][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.616160][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  142.648021][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  142.656866][ T4318] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  142.674739][ T5173] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.690316][ T5173] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.692681][ T4318] usb 6-1: device descriptor read/8, error -71
[  142.716791][ T5173] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.727764][ T5173] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.832086][ T4318] usb usb6-port1: unable to enumerate USB device
[  142.891778][    T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  142.914108][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.942098][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.953469][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  143.023646][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.048542][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.065990][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  143.076546][   T14] usb 1-1: USB disconnect, device number 9
[  143.094253][    T7] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  143.124228][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.188035][    T7] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  143.227377][    T7] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  143.246416][    T7] usb 7-1: Manufacturer: syz
[  143.282752][    T7] usb 7-1: config 0 descriptor??
[  143.294301][ T5413] loop0: detected capacity change from 0 to 1024
[  143.403496][ T5413] EXT4-fs: Ignoring removed orlov option
[  143.519314][ T5413] EXT4-fs: Ignoring removed bh option
[  143.640095][ T5413] EXT4-fs: Ignoring removed bh option
[  144.030125][ T5413] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  144.270765][ T5426] CUSE: unknown device info "n��|�zQC*�"
[  144.277803][ T5426] CUSE: unknown device info "G2���a"�� V��|�#�y�S�io�L�����8�9�I��ܥѮ�Ç�[�<^�Q��>�nHw���'0KV�,��${\�d�
+"
[  144.416268][ T5426] CUSE: unknown device info "����"
[  144.452068][    T7] rc_core: IR keymap rc-hauppauge not found
[  144.458063][    T7] Registered IR keymap rc-empty
[  144.461658][ T5426] CUSE: unknown device info "�L�P����t|%��I���O���Ku	G���Ǫ|�Q�U˜Dv�F��,*p�(o9�{u���[�赨���gI�P��YV"
[  144.479099][    T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  144.504308][    T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input17
[  144.625657][ T4282] EXT4-fs (loop0): unmounting filesystem.
[  144.742617][    T7] usb 7-1: USB disconnect, device number 3
[  144.753032][ T5426] CUSE: DEVNAME unspecified
[  144.827888][ T5432] loop6: detected capacity change from 0 to 4096
[  144.835194][ T5432] EXT4-fs: inline encryption not supported
[  144.967260][   T26] audit: type=1326 audit(1789423069.575:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5425 comm="syz.7.228" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bf2f9e159 code=0x0
[  145.141781][ T4515] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  145.252016][ T5446] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  145.333991][ T4515] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  145.357326][ T5446] loop4: detected capacity change from 0 to 512
[  145.363940][ T4515] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.398083][ T4515] usb 6-1: config 0 descriptor??
[  145.417444][ T5446] EXT4-fs: Invalid want_extra_isize 1
[  145.735480][ T5432] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  145.744080][ T5432] EXT4-fs (loop6): Test dummy encryption mode enabled
[  145.764391][ T5432] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  145.772733][ T5432] System zones: 0-5
[  145.825774][ T5432] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #4: comm syz.6.230: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 7(4), depth 0(0)
[  145.844064][ T5432] EXT4-fs (loop6): Remounting filesystem read-only
[  145.850679][ T5432] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.230: Bad quota inode: 4, type: 1
[  145.862228][ T5432] EXT4-fs (loop6): Remounting filesystem read-only
[  145.868806][ T5432] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  145.885726][ T5432] EXT4-fs (loop6): mount failed
[  145.898401][ T4515] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  145.906834][ T4515] [drm] Initialized udl on minor 2
[  146.053499][ T4515] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  146.081749][ T4515] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  146.109289][ T4515] usb 6-1: USB disconnect, device number 6
[  146.162498][ T4321] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  146.174801][ T4321] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  146.201458][ T4321] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  146.901657][ T4515] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  146.964641][ T5493] loop5: detected capacity change from 0 to 512
[  146.972282][ T5493] EXT4-fs: Ignoring removed nobh option
[  146.977903][ T5493] ext4: Unknown parameter 'nouser_xattr'
[  147.097097][ T4515] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[  147.110478][ T4515] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.179650][ T4515] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  147.211707][ T4515] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  147.219801][ T4515] usb 8-1: Manufacturer: syz
[  147.235123][ T4515] usb 8-1: config 0 descriptor??
[  147.423351][ T5501] loop4: detected capacity change from 0 to 4096
[  147.459732][ T5501] EXT4-fs: inline encryption not supported
[  147.501290][ T5501] EXT4-fs (loop4): Test dummy encryption mode enabled
[  147.508604][ T4515] rc_core: IR keymap rc-hauppauge not found
[  147.520570][ T4515] Registered IR keymap rc-empty
[  147.536898][ T4515] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  147.565168][ T5501] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  147.586567][ T4515] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input18
[  147.607646][ T5501] System zones: 0-5
[  147.707172][ T5501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  147.926945][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  147.974046][ T4321] usb 8-1: USB disconnect, device number 2
[  148.498981][ T5535] loop4: detected capacity change from 0 to 512
[  148.540294][ T5535] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  148.553097][ T5535] System zones: 1-12
[  148.571956][ T5535] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.256: missing EA_INODE flag
[  148.583957][ T4321] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  148.593121][ T5535] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.256: error while reading EA inode 12 err=-117
[  148.658441][ T5535] EXT4-fs (loop4): 1 orphan inode deleted
[  148.708446][ T5535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  148.799100][ T4321] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  148.822591][ T4321] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.857319][ T4321] usb 8-1: config 0 descriptor??
[  149.313435][ T4321] [drm] Initialized udl 0.0.1 20120220 for 8-1:0.0 on minor 2
[  149.344619][ T4321] [drm] Initialized udl on minor 2
[  149.526651][ T4321] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  149.537448][ T4321] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  149.574944][ T4321] usb 8-1: USB disconnect, device number 3
[  149.593213][   T22] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  149.612851][   T22] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  149.621149][   T22] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  149.859583][ T5540] loop6: detected capacity change from 0 to 40427
[  149.903064][ T5540] F2FS-fs (loop6): Corrupted extension count (327717 + 1 > 64)
[  149.927668][ T5540] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  149.946086][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  149.956247][ T5540] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3ffff
[  149.975281][ T5540] F2FS-fs (loop6): invalid crc value
[  150.048948][ T5540] F2FS-fs (loop6): Found nat_bits in checkpoint
[  150.075174][ T5560] pit: kvm: requested 25142 ns i8254 timer period limited to 200000 ns
[  150.138293][ T5560] pit: kvm: requested 142476 ns i8254 timer period limited to 200000 ns
[  150.177675][ T5560] pit: kvm: requested 139123 ns i8254 timer period limited to 200000 ns
[  150.216408][ T5560] pit: kvm: requested 102247 ns i8254 timer period limited to 200000 ns
[  150.236987][ T5560] pit: kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  150.253033][ T5540] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  150.260242][ T5560] pit: kvm: requested 116495 ns i8254 timer period limited to 200000 ns
[  150.260354][ T5540] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  150.281630][ T5560] pit: kvm: requested 25980 ns i8254 timer period limited to 200000 ns
[  150.305367][ T5560] pit: kvm: requested 25142 ns i8254 timer period limited to 200000 ns
[  150.337629][ T5560] pit: kvm: requested 142476 ns i8254 timer period limited to 200000 ns
[  150.401565][ T5560] pit: kvm: requested 139123 ns i8254 timer period limited to 200000 ns
[  150.441726][ T4321] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  150.496394][   T26] audit: type=1804 audit(1789423075.102:10): pid=5540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.258" name="/newroot/17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop6" ino=16 res=1 errno=0
[  150.549060][ T5564] f2fs_ckpt-7:6: attempt to access beyond end of device
[  150.549060][ T5564] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  150.654431][ T4321] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  150.680992][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.724457][ T4321] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  150.733828][ T4321] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  150.742276][ T4321] usb 5-1: Manufacturer: syz
[  150.761249][ T4321] usb 5-1: config 0 descriptor??
[  151.031559][ T4321] rc_core: IR keymap rc-hauppauge not found
[  151.037543][ T4321] Registered IR keymap rc-empty
[  151.063670][ T4321] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  151.112129][ T4321] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19
[  151.506146][ T5598] loop7: detected capacity change from 0 to 512
[  151.660096][ T5598] EXT4-fs: Ignoring removed nomblk_io_submit option
[  151.992992][ T5598] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  152.078011][    T7] usb 5-1: USB disconnect, device number 18
[  152.205525][ T5598] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  152.470004][ T5610] loop6: detected capacity change from 0 to 512
[  152.565015][ T5610] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  152.616790][ T5610] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  152.785234][ T5620] Invalid argument reading file caps for ./file0
[  152.873697][ T5173] EXT4-fs (loop7): unmounting filesystem.
[  153.023780][ T5623] loop0: detected capacity change from 0 to 256
[  153.325972][ T5623] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  153.336855][ T5623] FAT-fs (loop0): Filesystem has been set read-only
[  153.344821][ T5623] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  153.355029][ T5623] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  153.368193][ T5623] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[  153.379365][   T26] audit: type=1800 audit(1789423077.982:11): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.279" name="file1" dev="loop0" ino=1048618 res=0 errno=0
[  153.434305][ T4871] EXT4-fs (loop6): unmounting filesystem.
[  153.801774][   T22] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  154.037280][   T22] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  154.099759][   T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.244257][   T22] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  154.336828][ T5647] IPv6: NLM_F_REPLACE set, but no existing node found!
[  154.355592][   T22] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  154.440726][   T22] usb 5-1: Manufacturer: syz
[  154.501359][   T22] usb 5-1: config 0 descriptor??
[  154.581693][ T4353] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  154.712723][ T5656] loop5: detected capacity change from 0 to 512
[  154.743130][ T5656] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.286: missing EA_INODE flag
[  154.757519][ T5639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.773895][ T4353] usb 7-1: unable to get BOS descriptor or descriptor too short
[  154.792094][ T5639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.803303][ T4353] usb 7-1: not running at top speed; connect to a high speed hub
[  154.822839][ T4353] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.837656][ T4353] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  154.850303][ T4353] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  154.869916][ T4353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.894051][ T4353] usb 7-1: Product: syz
[  154.898289][ T4353] usb 7-1: Manufacturer: syz
[  154.914923][ T4353] usb 7-1: SerialNumber: syz
[  154.922012][ T5656] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.286: error while reading EA inode 2 err=-117
[  154.962634][ T5656] EXT4-fs (loop5): 1 orphan inode deleted
[  154.980553][ T5656] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  154.991573][   T22] rc_core: IR keymap rc-hauppauge not found
[  155.005969][   T22] Registered IR keymap rc-empty
[  155.023453][   T22] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  155.067584][   T22] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20
[  155.158764][ T4353] usb 7-1: 0:1 : does not exist
[  155.175160][ T4353] usb 7-1: unit 2 not found!
[  155.272014][ T4353] usb 7-1: USB disconnect, device number 4
[  155.360132][ T4761] udevd[4761]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  155.378222][ T4436] EXT4-fs (loop5): unmounting filesystem.
[  155.477829][   T22] usb 5-1: USB disconnect, device number 19
[  155.549653][ T5672] loop0: detected capacity change from 0 to 8192
[  155.631943][ T5672] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  156.014147][ T5689] loop5: detected capacity change from 0 to 1024
[  156.049013][ T5689] EXT4-fs: Ignoring removed orlov option
[  156.106695][ T5689] EXT4-fs: Ignoring removed bh option
[  156.246479][ T5689] EXT4-fs: Ignoring removed bh option
[  156.923926][ T5689] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  157.263444][ T4436] EXT4-fs (loop5): unmounting filesystem.
[  157.377518][   T26] audit: type=1326 audit(1789423081.982:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5706 comm="syz.6.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64fb79e159 code=0x0
[  157.491704][ T4352] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  157.591542][ T4353] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  157.691704][ T4352] usb 8-1: Using ep0 maxpacket: 8
[  157.699201][ T4352] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  157.719854][ T4352] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  157.752992][ T4352] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  157.791542][ T4353] usb 1-1: Using ep0 maxpacket: 8
[  157.796931][ T4352] usb 8-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  157.817413][ T4353] usb 1-1: unable to get BOS descriptor or descriptor too short
[  157.842002][ T4352] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  157.855974][ T4353] usb 1-1: unable to read config index 0 descriptor/start: -71
[  157.865507][ T4353] usb 1-1: can't read configurations, error -71
[  157.891871][ T4352] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  157.911417][ T4352] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.944396][ T4352] usbtmc 8-1:16.0: bulk endpoints not found
[  159.502008][ T5738] loop6: detected capacity change from 0 to 512
[  159.569495][ T5738] EXT4-fs (loop6): 1 truncate cleaned up
[  159.575627][ T5738] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  159.661637][ T4353] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  159.704572][   T26] audit: type=1800 audit(1789423084.312:13): pid=5738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.306" name="file1" dev="loop6" ino=13 res=0 errno=0
[  159.738304][ T5738] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.306: bg 0: block 465: padding at end of block bitmap is not set
[  159.782061][ T5738] EXT4-fs (loop6): Remounting filesystem read-only
[  159.796505][ T5738] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  159.825475][ T5738] EXT4-fs (loop6): Remounting filesystem read-only
[  159.833143][ T5738] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.306: invalid indirect mapped block 234881024 (level 0)
[  159.851123][ T5738] EXT4-fs (loop6): Remounting filesystem read-only
[  159.863889][ T4353] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  159.886007][ T4353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.907892][ T4353] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  159.922822][ T4353] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  159.941209][ T4353] usb 1-1: Manufacturer: syz
[  159.960303][ T4353] usb 1-1: config 0 descriptor??
[  160.002074][ T4871] EXT4-fs (loop6): unmounting filesystem.
[  160.091563][ T4352] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  160.187644][ T5735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.288723][ T4352] usb 6-1: unable to get BOS descriptor or descriptor too short
[  160.348942][ T4352] usb 6-1: not running at top speed; connect to a high speed hub
[  160.389196][ T5735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.497236][ T4352] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.551567][ T4353] rc_core: IR keymap rc-hauppauge not found
[  160.557596][ T4353] Registered IR keymap rc-empty
[  160.680728][ T4353] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  160.694013][ T4352] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.853585][ T4352] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  160.920243][ T4353] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21
[  161.006381][ T4352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.070890][ T4352] usb 6-1: Product: syz
[  161.103522][ T5764] IPv6: NLM_F_REPLACE set, but no existing node found!
[  161.151248][ T4352] usb 6-1: Manufacturer: syz
[  161.161718][ T4352] usb 6-1: SerialNumber: syz
[  161.181712][ T4353] usb 8-1: USB disconnect, device number 4
[  161.256860][ T4321] usb 1-1: USB disconnect, device number 12
[  161.443319][ T5776] loop0: detected capacity change from 0 to 256
[  161.449324][ T4352] usb 6-1: 0:1 : does not exist
[  161.475776][ T4352] usb 6-1: unit 2 not found!
[  161.489816][ T5776] exfat: Deprecated parameter 'utf8'
[  161.519640][ T5776] exfat: Deprecated parameter 'utf8'
[  161.548212][ T5776] exfat: Deprecated parameter 'utf8'
[  161.571329][ T4352] usb 6-1: USB disconnect, device number 7
[  161.620824][ T4761] udevd[4761]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.641721][ T5776] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  161.993504][ T5788] netlink: 24 bytes leftover after parsing attributes in process `syz.7.320'.
[  162.086573][ T5788] netlink: 4 bytes leftover after parsing attributes in process `syz.7.320'.
[  162.381599][ T4353] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  164.151634][ T4353] usb 5-1: Using ep0 maxpacket: 8
[  164.213036][ T4353] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  164.221295][ T4353] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  164.231852][ T4353] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  164.241826][ T4353] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  164.252829][ T4353] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  164.266020][ T4353] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  164.271680][ T4321] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  164.275189][ T4353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.314887][ T4353] usbtmc 5-1:16.0: bulk endpoints not found
[  164.524522][ T4321] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  164.543456][ T4321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.639805][ T5817] loop6: detected capacity change from 0 to 512
[  164.646228][ T4321] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  164.683451][ T4321] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  164.707333][ T4321] usb 6-1: Manufacturer: syz
[  164.713676][ T5817] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.330: iget: bad extended attribute block 134217728
[  164.749277][ T4321] usb 6-1: config 0 descriptor??
[  164.757991][ T5817] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.330: couldn't read orphan inode 15 (err -117)
[  164.831048][ T5817] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  164.895981][   T26] audit: type=1800 audit(1789423089.502:14): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.330" name="file0" dev="loop6" ino=13 res=0 errno=0
[  164.897507][ T5817] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.330: invalid indirect mapped block 234881024 (level 0)
[  164.953438][ T5817] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.330: invalid indirect mapped block 768 (level 1)
[  164.972104][ T5799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.000586][   T26] audit: type=1326 audit(1789423089.542:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.7.329" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bf2f9e159 code=0x0
[  165.058805][ T5799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.091655][ T4321] rc_core: IR keymap rc-hauppauge not found
[  165.097760][ T4321] Registered IR keymap rc-empty
[  165.120491][ T4321] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  165.178098][ T4321] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input22
[  166.085527][    T7] usb 6-1: USB disconnect, device number 8
[  166.106176][ T4353] usb 5-1: USB disconnect, device number 20
[  166.156782][ T4871] EXT4-fs (loop6): unmounting filesystem.
[  166.298354][ T5842] loop5: detected capacity change from 0 to 512
[  166.299380][ T5842] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  166.681805][    T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  167.003680][    T7] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.224088][    T7] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.426447][    T7] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  167.555395][    T7] usb 1-1: config 0 interface 0 has no altsetting 0
[  167.593586][    T7] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  167.641604][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.690940][    T7] usb 1-1: config 0 descriptor??
[  168.561677][    T7] samsung 0003:0419:0600.0003: unbalanced collection at end of report description
[  168.572004][    T7] samsung 0003:0419:0600.0003: parse failed
[  168.591552][    T7] samsung: probe of 0003:0419:0600.0003 failed with error -22
[  168.759653][    T7] usb 1-1: USB disconnect, device number 13
[  168.897327][ T5879] CUSE: unknown device info "n��|�zQC*�"
[  168.922541][ T5879] CUSE: unknown device info "G2���a"�� V��|�#�y�S�io�L�����8�9�I��ܥѮ�Ç�[�<^�Q��>�nHw���'0KV�,��${\�d�
+"
[  168.963054][ T5879] CUSE: unknown device info "����"
[  168.971809][ T4515] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  168.988167][ T5879] CUSE: unknown device info "�L�P����t|%��I���O���Ku	G���Ǫ|�Q�U˜Dv�F��,*p�(o9�{u���[�赨���gI�P��YV"
[  169.006782][ T5879] CUSE: DEVNAME unspecified
[  169.011514][ T5885] capability: warning: `syz.4.346' uses deprecated v2 capabilities in a way that may be insecure
[  169.089378][   T26] audit: type=1326 audit(1789423093.692:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.6.344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64fb79e159 code=0x0
[  169.163286][ T4515] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  169.191007][ T4515] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.221920][ T4515] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  169.251585][ T4515] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  169.259654][ T4515] usb 6-1: Manufacturer: syz
[  169.285042][ T4515] usb 6-1: config 0 descriptor??
[  169.451673][ T4515] rc_core: IR keymap rc-hauppauge not found
[  169.460236][ T4515] Registered IR keymap rc-empty
[  169.479698][ T4515] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  169.508098][ T5873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.528597][ T4515] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23
[  169.591705][  T126] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  170.353378][ T5873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.582238][  T126] usb 5-1: unable to get BOS descriptor or descriptor too short
[  170.608075][  T126] usb 5-1: not running at top speed; connect to a high speed hub
[  170.627743][  T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.651603][  T126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  170.681426][  T126] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  170.704353][  T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.734675][  T126] usb 5-1: Product: syz
[  170.754688][  T126] usb 5-1: Manufacturer: syz
[  170.780890][  T126] usb 5-1: SerialNumber: syz
[  171.131179][  T126] usb 5-1: 0:1 : does not exist
[  171.243134][  T126] usb 5-1: unit 2 not found!
[  171.741950][  T126] usb 5-1: USB disconnect, device number 21
[  171.900770][ T4318] usb 6-1: USB disconnect, device number 9
[  172.123993][ T4370] udevd[4370]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  172.424145][ T5936] loop5: detected capacity change from 0 to 512
[  172.483011][ T5936] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  172.523609][ T5936] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  172.583734][ T5936] EXT4-fs (loop5): 1 truncate cleaned up
[  172.592891][ T5936] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  172.649161][ T5945] CUSE: unknown device info "n��|�zQC*�"
[  172.661666][ T4318] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  172.668267][ T5945] CUSE: unknown device info "G2���a"�� V��|�#�y�S�io�L�����8�9�I��ܥѮ�Ç�[�<^�Q��>�nHw���'0KV�,��${\�d�
+"
[  172.740072][ T5945] CUSE: unknown device info "����"
[  172.755786][ T5945] CUSE: unknown device info "�L�P����t|%��I���O���Ku	G���Ǫ|�Q�U˜Dv�F��,*p�(o9�{u���[�赨���gI�P��YV"
[  172.779226][  T126] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  172.789316][ T5945] CUSE: DEVNAME unspecified
[  172.883652][ T4318] usb 7-1: Using ep0 maxpacket: 16
[  172.893443][ T4318] usb 7-1: unable to get BOS descriptor or descriptor too short
[  172.913755][ T4318] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.926662][   T26] audit: type=1326 audit(1789423097.532:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.4.363" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74c8b9e159 code=0x0
[  172.974833][ T4318] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  172.984126][  T126] usb 8-1: Using ep0 maxpacket: 8
[  172.994246][  T126] usb 8-1: unable to get BOS descriptor or descriptor too short
[  173.039240][  T126] usb 8-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=7e.1c
[  173.054419][ T4318] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40
[  173.081563][  T126] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.092166][ T4318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.110248][  T126] usb 8-1: Product: syz
[  173.114857][ T4318] usb 7-1: Product: syz
[  173.116880][ T4436] EXT4-fs (loop5): unmounting filesystem.
[  173.121268][  T126] usb 8-1: Manufacturer: syz
[  173.129749][ T4318] usb 7-1: Manufacturer: syz
[  173.137808][ T4318] usb 7-1: SerialNumber: syz
[  173.144839][  T126] usb 8-1: SerialNumber: syz
[  173.388673][  T126] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[  173.401792][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.410418][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.425516][  T126] pwc: send_video_command error -71
[  173.439973][  T126] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  173.476476][  T126] Philips webcam: probe of 8-1:6.0 failed with error -71
[  173.510466][  T126] usb 8-1: USB disconnect, device number 5
[  173.531551][ T4353] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  173.702986][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'.
[  173.740895][ T4353] usb 6-1: config 0 has an invalid interface number: 110 but max is 0
[  173.742358][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.764849][ T4353] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.780556][ T4353] usb 6-1: config 0 has no interface number 0
[  173.791346][ T4353] usb 6-1: config 0 interface 110 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  173.809999][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.814035][ T4353] usb 6-1: config 0 interface 110 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16
[  173.843439][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.866829][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.878539][ T4353] usb 6-1: New USB device found, idVendor=1286, idProduct=2044, bcdDevice=4d.80
[  173.899563][ T4318] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  173.901604][ T4353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.920616][ T4318] usb 7-1: 0:2 : does not exist
[  173.959976][ T4353] usb 6-1: config 0 descriptor??
[  174.011567][ T4515] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  174.091843][ T4318] usb 7-1: USB disconnect, device number 5
[  174.209016][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.229010][ T4515] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  174.245792][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.256469][ T4515] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  174.276618][ T4515] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  174.277203][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.288024][ T4515] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.316459][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.327587][ T4515] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  174.336888][ T4515] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  174.345338][ T4515] usb 5-1: Product: syz
[  174.349664][ T4515] usb 5-1: Manufacturer: syz
[  174.380859][    T7] usb 6-1: USB disconnect, device number 10
[  174.383659][ T4515] cdc_wdm 5-1:1.0: skipping garbage
[  174.409261][ T4515] cdc_wdm 5-1:1.0: skipping garbage
[  174.455502][ T4515] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  174.461629][  T126] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  174.470585][ T4515] cdc_wdm 5-1:1.0: Unknown control protocol
[  174.479594][ T4400] udevd[4400]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  174.620265][ T4515] usb 5-1: USB disconnect, device number 22
[  174.703412][  T126] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  174.729483][  T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.749448][  T126] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  174.767148][  T126] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  174.776947][  T126] usb 1-1: Manufacturer: syz
[  174.794406][  T126] usb 1-1: config 0 descriptor??
[  174.941681][  T126] rc_core: IR keymap rc-hauppauge not found
[  174.947913][  T126] Registered IR keymap rc-empty
[  174.981333][  T126] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  175.003664][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.015022][  T126] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input24
[  175.026280][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.061792][ T4318] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  175.168611][ T5993] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  175.241702][ T4515] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  175.303493][ T4318] usb 8-1: config 0 has an invalid interface number: 214 but max is 0
[  175.312455][ T4318] usb 8-1: config 0 has no interface number 0
[  175.318669][ T4318] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  175.330888][ T4318] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  175.343931][ T4318] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  175.366885][ T4318] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  175.375303][ T4318] usb 8-1: Manufacturer: syz
[  175.380302][ T4318] usb 8-1: SerialNumber: syz
[  175.402930][ T4318] usb 8-1: config 0 descriptor??
[  175.454312][ T4515] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  175.463976][ T4515] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.475262][ T4515] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  175.485681][ T4515] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.501676][ T4353] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  175.509309][ T4515] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  175.529425][ T4515] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  175.539572][ T4515] usb 5-1: Product: syz
[  175.549753][ T4515] usb 5-1: Manufacturer: syz
[  175.584563][ T4515] cdc_wdm 5-1:1.0: skipping garbage
[  175.589877][ T4515] cdc_wdm 5-1:1.0: skipping garbage
[  175.629110][    T7] usb 1-1: USB disconnect, device number 14
[  175.634603][ T4515] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  175.641383][ T4515] cdc_wdm 5-1:1.0: Unknown control protocol
[  175.695672][ T4353] usb 7-1: Using ep0 maxpacket: 16
[  175.724305][ T4353] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.758818][ T4353] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  175.771339][ T4353] usb 7-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[  175.787400][ T4353] usb 7-1: Manufacturer: syz
[  175.809405][ T4353] usb 7-1: config 0 descriptor??
[  175.834356][ T6007] CUSE: unknown device info "n��|�zQC*�"
[  175.840459][ T6007] CUSE: unknown device info "G2���a"�� V��|�#�y�S�io�L�����8�9�I��ܥѮ�Ç�[�<^�Q��>�nHw���'0KV�,��${\�d�
+"
[  175.860739][ T6007] CUSE: unknown device info "����"
[  175.866540][ T6007] CUSE: unknown device info "�L�P����t|%��I���O���Ku	G���Ǫ|�Q�U˜Dv�F��,*p�(o9�{u���[�赨���gI�P��YV"
[  175.889419][ T6007] CUSE: DEVNAME unspecified
[  176.012708][   T26] audit: type=1326 audit(1789423100.622:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.5.375" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c9619e159 code=0x0
[  176.043992][ T4318] input: syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.214/input/input25
[  176.166979][    T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  176.265473][ T4318] usb 8-1: USB disconnect, device number 6
[  176.279591][ T4353] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:041E:3100.0004/input/input26
[  176.373668][    T7] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.393495][ T4353] creative-sb0540 0003:041E:3100.0004: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[  176.409347][    T7] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024
[  176.432003][    T7] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  176.491293][    T7] usb 1-1: config 0 interface 0 has no altsetting 0
[  176.516703][    C0] creative-sb0540 0003:041E:3100.0004: Could not get a key for main_code 916E
[  176.537605][    T7] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  176.561642][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.611069][    T7] usb 1-1: config 0 descriptor??
[  176.647845][ T6006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  176.722170][ T4318] usb 7-1: USB disconnect, device number 6
[  177.088752][    T7] input: HID 0079:0006 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0079:0006.0005/input/input27
[  177.121800][ T4353] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  177.218190][    T7] dragonrise 0003:0079:0006.0005: input,hidraw0: USB HID v0.00 Joystick [HID 0079:0006] on usb-dummy_hcd.0-1/input0
[  177.258730][    T7] dragonrise 0003:0079:0006.0005: not enough values in the field
[  177.285771][    T7] dragonrise 0003:0079:0006.0005: force feedback init failed
[  177.314604][ T4353] usb 6-1: Using ep0 maxpacket: 32
[  177.338954][ T4353] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  177.361032][ T4353] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.378888][ T4353] usb 6-1: config 0 has no interface number 0
[  177.412459][ T4353] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  177.433589][ T4353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.438008][ T4515] usb 5-1: USB disconnect, device number 23
[  177.442532][ T4353] usb 6-1: Product: syz
[  177.452692][ T4353] usb 6-1: Manufacturer: syz
[  177.480671][ T4353] usb 6-1: SerialNumber: syz
[  177.512516][ T4353] usb 6-1: config 0 descriptor??
[  177.539050][ T4353] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  177.561994][    T7] usb 1-1: USB disconnect, device number 15
[  177.745860][ T4353] usb 6-1: qt2_setup_urbs - submit read urb failed -8
[  177.760696][ T4353] quatech2: probe of 6-1:0.51 failed with error -8
[  177.771641][ T4352] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  177.899188][ T6051] fido_id[6051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  177.951712][ T4352] usb 7-1: Using ep0 maxpacket: 16
[  177.979384][ T4352] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  178.055524][ T4352] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  178.079664][ T4352] usb 7-1: config 0 interface 0 has no altsetting 0
[  178.103894][ T4352] usb 7-1: New USB device found, idVendor=05ac, idProduct=021e, bcdDevice= 0.00
[  178.166489][ T4352] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.184890][ T4353] usb 6-1: USB disconnect, device number 11
[  178.204381][ T4352] usb 7-1: config 0 descriptor??
[  178.550274][ T6070] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  178.626534][ T4352] apple 0003:05AC:021E.0006: unknown main item tag 0x0
[  178.638088][ T4352] apple 0003:05AC:021E.0006: unknown main item tag 0x0
[  178.654985][ T4352] apple 0003:05AC:021E.0006: unknown main item tag 0x0
[  178.682810][ T4352] apple 0003:05AC:021E.0006: unknown main item tag 0x0
[  178.708333][ T4352] apple 0003:05AC:021E.0006: unknown main item tag 0x0
[  178.732586][ T4352] apple 0003:05AC:021E.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:021e] on usb-dummy_hcd.6-1/input0
[  178.744834][ T4353] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  178.939405][ T4353] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[  178.995563][ T4353] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.164723][ T4353] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  179.361335][ T4353] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  179.605402][ T4353] usb 8-1: Manufacturer: syz
[  179.781415][ T4353] usb 8-1: config 0 descriptor??
[  179.832564][ T6085] loop4: detected capacity change from 0 to 512
[  179.839775][ T6085] EXT4-fs: Ignoring removed nomblk_io_submit option
[  179.861050][ T4352] usb 7-1: USB disconnect, device number 7
[  180.062972][ T6074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.085381][ T6080] fido_id[6080]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  180.137343][ T6074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.164521][ T6085] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  180.206411][ T6085] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  180.331668][ T4353] rc_core: IR keymap rc-hauppauge not found
[  180.345794][ T4353] Registered IR keymap rc-empty
[  180.351419][ T4353] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  180.408309][ T4353] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input28
[  180.421692][ T4515] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  180.433086][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  180.461735][   T22] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  180.614989][ T4515] usb 1-1: Using ep0 maxpacket: 8
[  180.622993][ T4515] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.657342][ T4515] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping
[  180.669203][   T22] usb 6-1: too many configurations: 13, using maximum allowed: 8
[  180.689808][   T22] usb 6-1: config 0 has no interfaces?
[  180.709166][   T22] usb 6-1: config 0 has no interfaces?
[  180.716887][ T4515] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  180.732812][   T22] usb 6-1: config 0 has no interfaces?
[  180.761549][ T4515] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  180.775307][   T22] usb 6-1: config 0 has no interfaces?
[  180.782041][   T22] usb 6-1: config 0 has no interfaces?
[  180.792511][ T4352] usb 8-1: USB disconnect, device number 7
[  180.807987][ T4515] usb 1-1: Product: syz
[  180.813871][   T22] usb 6-1: config 0 has no interfaces?
[  180.821160][ T4515] usb 1-1: Manufacturer: syz
[  180.832268][   T22] usb 6-1: config 0 has no interfaces?
[  180.841738][ T4515] usb 1-1: SerialNumber: syz
[  180.858041][   T22] usb 6-1: config 0 has no interfaces?
[  180.870620][ T4515] usb 1-1: config 0 descriptor??
[  180.891079][   T22] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  180.918626][ T4515] imon_raw 1-1:0.0: IR endpoint missing
[  180.931774][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.960432][   T22] usb 6-1: Product: syz
[  180.970565][   T22] usb 6-1: Manufacturer: syz
[  180.981794][   T22] usb 6-1: SerialNumber: syz
[  181.002016][   T22] usb 6-1: config 0 descriptor??
[  181.108039][ T6117] loop6: detected capacity change from 0 to 2048
[  181.135261][ T6097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.162397][ T6097] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.201197][ T6117] Alternate GPT is invalid, using primary GPT.
[  181.225816][ T6097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.235952][ T6117]  loop6: p1 p2 p3
[  181.245622][   T22] usb 6-1: USB disconnect, device number 12
[  181.251943][ T6117] loop6: partition table partially beyond EOD, truncated
[  181.256358][ T6097] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.409816][ T6123] netlink: 24 bytes leftover after parsing attributes in process `syz.7.398'.
[  181.439467][ T6123] ------------[ cut here ]------------
[  181.445160][ T6123] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16)
[  181.497083][ T6123] WARNING: CPU: 0 PID: 6123 at net/sched/cls_u32.c:853 u32_change+0x1da2/0x2740
[  181.506391][ T6123] Modules linked in:
[  181.510326][ T6123] CPU: 0 PID: 6123 Comm: syz.7.398 Not tainted syzkaller #0
[  181.517828][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  181.528090][ T6123] RIP: 0010:u32_change+0x1da2/0x2740
[  181.534045][ T6123] Code: f9 eb 59 e8 a0 09 19 f9 c6 05 a2 25 a3 05 01 b9 10 00 00 00 48 c7 c7 60 10 8f 8b 4c 89 fe 48 c7 c2 e0 10 8f 8b e8 5e 90 e4 f8 <0f> 0b e9 ee ee ff ff e8 72 09 19 f9 eb 24 e8 6b 09 19 f9 c6 05 fb
[  181.553906][ T6123] RSP: 0018:ffffc90004116e60 EFLAGS: 00010246
[  181.560027][ T6123] RAX: dd207717e8e65300 RBX: ffff888018a69c00 RCX: 0000000000080000
[  181.568093][ T6123] RDX: ffffc90005a79000 RSI: 00000000000062af RDI: 00000000000062b0
[  181.576153][ T6123] RBP: ffffc90004116ff8 R08: ffffc90004116ae7 R09: 1ffff92000822d5c
[  181.584222][ T6123] R10: dffffc0000000000 R11: fffff52000822d5d R12: ffff888018a690e0
[  181.592889][ T6123] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000020
[  181.600900][ T6123] FS:  00007f1bf3e926c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  181.609927][ T6123] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  181.616608][ T6123] CR2: 00007fdc62166000 CR3: 000000005577a000 CR4: 00000000003506f0
[  181.624678][ T6123] DR0: ffffffffffffffff DR1: 0000000000000003 DR2: 0000000000000083
[  181.632735][ T6123] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  181.640798][ T6123] Call Trace:
[  181.644163][ T6123]  <TASK>
[  181.647150][ T6123]  ? u32_get+0x370/0x370
[  181.651507][ T6123]  ? u32_get+0x370/0x370
[  181.655804][ T6123]  tc_new_tfilter+0x1368/0x1970
[  181.660707][ T6123]  ? ____kasan_slab_free+0x126/0x1f0
[  181.666092][ T6123]  ? slab_free_freelist_hook+0x133/0x1b0
[  181.668207][ T6057] udevd[6057]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  181.671859][ T6123]  ? tcf_proto_signal_destroying+0x240/0x240
[  181.671904][ T6123]  ? rcu_read_unlock+0x8c/0xa0
[  181.671938][ T6123]  ? tcf_proto_signal_destroying+0x240/0x240
[  181.671966][ T6123]  ? tcf_proto_signal_destroying+0x240/0x240
[  181.671990][ T6123]  rtnetlink_rcv_msg+0x8b2/0xfb0
[  181.672014][ T6123]  ? rtnetlink_rcv_msg+0x220/0xfb0
[  181.672041][ T6123]  ? rtnetlink_bind+0x80/0x80
[  181.672060][ T6123]  ? __local_bh_enable_ip+0x136/0x1c0
[  181.672082][ T6123]  ? lockdep_hardirqs_on+0x94/0x140
[  181.672109][ T6123]  ? __local_bh_enable_ip+0x136/0x1c0
[  181.727285][ T6061] udevd[6061]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  181.730256][ T6123]  ? _local_bh_enable+0xa0/0xa0
[  181.730293][ T6123]  ? __dev_queue_xmit+0x281/0x3810
[  181.730319][ T6123]  ? __dev_queue_xmit+0x281/0x3810
[  181.760723][ T6123]  ? __dev_queue_xmit+0x1d84/0x3810
[  181.766029][ T6123]  ? __dev_queue_xmit+0x281/0x3810
[  181.771213][ T6123]  ? ref_tracker_free+0x682/0x830
[  181.776350][ T6123]  ? refcount_inc+0x70/0x70
[  181.780903][ T6123]  ? memcpy+0x3c/0x60
[  181.784974][ T6123]  ? __copy_skb_header+0x3ba/0x4f0
[  181.790136][ T6123]  ? __skb_clone+0x446/0x6c0
[  181.794818][ T6123]  netlink_rcv_skb+0x1ef/0x440
[  181.799626][ T6123]  ? rtnetlink_bind+0x80/0x80
[  181.804395][ T6123]  ? netlink_ack+0x1160/0x1160
[  181.809210][ T6123]  ? netlink_deliver_tap+0x2e/0x1b0
[  181.814496][ T6123]  netlink_unicast+0x7ad/0x920
[  181.819313][ T6123]  netlink_sendmsg+0x8ad/0xbd0
[  181.820974][ T4400] udevd[4400]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  181.824152][ T6123]  ? netlink_getsockopt+0x550/0x550
[  181.824183][ T6123]  ? apparmor_socket_sendmsg+0x8a/0x330
[  181.824215][ T6123]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  181.824237][ T6123]  ? security_socket_sendmsg+0x7c/0xa0
[  181.824263][ T6123]  ? netlink_getsockopt+0x550/0x550
[  181.824288][ T6123]  ____sys_sendmsg+0x5ed/0x9a0
[  181.824318][ T6123]  ? __sys_sendmsg_sock+0x30/0x30
[  181.824337][ T6123]  ? __import_iovec+0x306/0x510
[  181.867210][  T126] usb 1-1: USB disconnect, device number 16
[  181.870999][ T6123]  ? import_iovec+0x6f/0xa0
[  181.871041][ T6123]  ___sys_sendmsg+0x2a2/0x360
[  181.871065][ T6123]  ? preempt_schedule+0xbc/0xd0
[  181.896085][ T6123]  ? __sys_sendmsg+0x2a0/0x2a0
[  181.900974][ T6123]  __sys_sendmmsg+0x2c3/0x510
[  181.905756][ T6123]  ? __ia32_sys_sendmsg+0x80/0x80
[  181.910835][ T6123]  ? __ia32_sys_get_robust_list+0x100/0x100
[  181.916858][ T6123]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  181.922953][ T6123]  ? lock_chain_count+0x20/0x20
[  181.927867][ T6123]  __x64_sys_sendmmsg+0x9c/0xb0
[  181.932847][ T6123]  do_syscall_64+0x4c/0xa0
[  181.937311][ T6123]  ? clear_bhb_loop+0x60/0xb0
[  181.942269][ T6123]  ? clear_bhb_loop+0x60/0xb0
[  181.947000][ T6123]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  181.953083][ T6123] RIP: 0033:0x7f1bf2f9e159
[  181.957538][ T6123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.977257][ T6123] RSP: 002b:00007f1bf3e92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  181.984553][   T22] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  181.985755][ T6123] RAX: ffffffffffffffda RBX: 00007f1bf3225fa0 RCX: 00007f1bf2f9e159
[  182.001334][ T6123] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004
[  182.009417][ T6123] RBP: 00007f1bf303503b R08: 0000000000000000 R09: 0000000000000000
[  182.017480][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.025639][ T6123] R13: 00007f1bf3226038 R14: 00007f1bf3225fa0 R15: 00007ffcd14477c8
[  182.033705][ T6123]  </TASK>
[  182.036765][ T6123] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  182.044147][ T6123] CPU: 0 PID: 6123 Comm: syz.7.398 Not tainted syzkaller #0
[  182.051463][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  182.061543][ T6123] Call Trace:
[  182.064830][ T6123]  <TASK>
[  182.067776][ T6123]  dump_stack_lvl+0x188/0x24e
[  182.072467][ T6123]  ? memcpy+0x3c/0x60
[  182.076495][ T6123]  ? show_regs_print_info+0x12/0x12
[  182.081704][ T6123]  ? load_image+0x410/0x410
[  182.086245][ T6123]  panic+0x2d3/0x710
[  182.090240][ T6123]  ? bpf_jit_dump+0xd0/0xd0
[  182.094777][ T6123]  __warn+0x2f8/0x4f0
[  182.098775][ T6123]  ? u32_change+0x1da2/0x2740
[  182.103467][ T6123]  ? u32_change+0x1da2/0x2740
[  182.108161][ T6123]  report_bug+0x2ba/0x4f0
[  182.112584][ T6123]  ? u32_change+0x1da2/0x2740
[  182.117297][ T6123]  handle_bug+0x3a/0x70
[  182.121463][ T6123]  exc_invalid_op+0x16/0x40
[  182.125985][ T6123]  asm_exc_invalid_op+0x16/0x20
[  182.130838][ T6123] RIP: 0010:u32_change+0x1da2/0x2740
[  182.136136][ T6123] Code: f9 eb 59 e8 a0 09 19 f9 c6 05 a2 25 a3 05 01 b9 10 00 00 00 48 c7 c7 60 10 8f 8b 4c 89 fe 48 c7 c2 e0 10 8f 8b e8 5e 90 e4 f8 <0f> 0b e9 ee ee ff ff e8 72 09 19 f9 eb 24 e8 6b 09 19 f9 c6 05 fb
[  182.155756][ T6123] RSP: 0018:ffffc90004116e60 EFLAGS: 00010246
[  182.161832][ T6123] RAX: dd207717e8e65300 RBX: ffff888018a69c00 RCX: 0000000000080000
[  182.169809][ T6123] RDX: ffffc90005a79000 RSI: 00000000000062af RDI: 00000000000062b0
[  182.177787][ T6123] RBP: ffffc90004116ff8 R08: ffffc90004116ae7 R09: 1ffff92000822d5c
[  182.185772][ T6123] R10: dffffc0000000000 R11: fffff52000822d5d R12: ffff888018a690e0
[  182.193755][ T6123] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000020
[  182.201786][ T6123]  ? u32_get+0x370/0x370
[  182.206055][ T6123]  ? u32_get+0x370/0x370
[  182.210309][ T6123]  tc_new_tfilter+0x1368/0x1970
[  182.215176][ T6123]  ? ____kasan_slab_free+0x126/0x1f0
[  182.220471][ T6123]  ? slab_free_freelist_hook+0x133/0x1b0
[  182.226129][ T6123]  ? tcf_proto_signal_destroying+0x240/0x240
[  182.232129][ T6123]  ? rcu_read_unlock+0x8c/0xa0
[  182.236927][ T6123]  ? tcf_proto_signal_destroying+0x240/0x240
[  182.242918][ T6123]  ? tcf_proto_signal_destroying+0x240/0x240
[  182.248904][ T6123]  rtnetlink_rcv_msg+0x8b2/0xfb0
[  182.253849][ T6123]  ? rtnetlink_rcv_msg+0x220/0xfb0
[  182.258968][ T6123]  ? rtnetlink_bind+0x80/0x80
[  182.263648][ T6123]  ? __local_bh_enable_ip+0x136/0x1c0
[  182.269025][ T6123]  ? lockdep_hardirqs_on+0x94/0x140
[  182.274256][ T6123]  ? __local_bh_enable_ip+0x136/0x1c0
[  182.279636][ T6123]  ? _local_bh_enable+0xa0/0xa0
[  182.284495][ T6123]  ? __dev_queue_xmit+0x281/0x3810
[  182.289635][ T6123]  ? __dev_queue_xmit+0x281/0x3810
[  182.294764][ T6123]  ? __dev_queue_xmit+0x1d84/0x3810
[  182.299974][ T6123]  ? __dev_queue_xmit+0x281/0x3810
[  182.305099][ T6123]  ? ref_tracker_free+0x682/0x830
[  182.310135][ T6123]  ? refcount_inc+0x70/0x70
[  182.314646][ T6123]  ? memcpy+0x3c/0x60
[  182.318634][ T6123]  ? __copy_skb_header+0x3ba/0x4f0
[  182.323758][ T6123]  ? __skb_clone+0x446/0x6c0
[  182.328356][ T6123]  netlink_rcv_skb+0x1ef/0x440
[  182.333133][ T6123]  ? rtnetlink_bind+0x80/0x80
[  182.337819][ T6123]  ? netlink_ack+0x1160/0x1160
[  182.342605][ T6123]  ? netlink_deliver_tap+0x2e/0x1b0
[  182.347815][ T6123]  netlink_unicast+0x7ad/0x920
[  182.352778][ T6123]  netlink_sendmsg+0x8ad/0xbd0
[  182.357578][ T6123]  ? netlink_getsockopt+0x550/0x550
[  182.362783][ T6123]  ? apparmor_socket_sendmsg+0x8a/0x330
[  182.368342][ T6123]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  182.373635][ T6123]  ? security_socket_sendmsg+0x7c/0xa0
[  182.379102][ T6123]  ? netlink_getsockopt+0x550/0x550
[  182.384313][ T6123]  ____sys_sendmsg+0x5ed/0x9a0
[  182.389087][ T6123]  ? __sys_sendmsg_sock+0x30/0x30
[  182.394118][ T6123]  ? __import_iovec+0x306/0x510
[  182.398985][ T6123]  ? import_iovec+0x6f/0xa0
[  182.403500][ T6123]  ___sys_sendmsg+0x2a2/0x360
[  182.408359][ T6123]  ? preempt_schedule+0xbc/0xd0
[  182.413219][ T6123]  ? __sys_sendmsg+0x2a0/0x2a0
[  182.418024][ T6123]  __sys_sendmmsg+0x2c3/0x510
[  182.422712][ T6123]  ? __ia32_sys_sendmsg+0x80/0x80
[  182.427757][ T6123]  ? __ia32_sys_get_robust_list+0x100/0x100
[  182.433667][ T6123]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  182.439659][ T6123]  ? lock_chain_count+0x20/0x20
[  182.444524][ T6123]  __x64_sys_sendmmsg+0x9c/0xb0
[  182.449381][ T6123]  do_syscall_64+0x4c/0xa0
[  182.453802][ T6123]  ? clear_bhb_loop+0x60/0xb0
[  182.458490][ T6123]  ? clear_bhb_loop+0x60/0xb0
[  182.463174][ T6123]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  182.469081][ T6123] RIP: 0033:0x7f1bf2f9e159
[  182.473679][ T6123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.493293][ T6123] RSP: 002b:00007f1bf3e92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  182.501714][ T6123] RAX: ffffffffffffffda RBX: 00007f1bf3225fa0 RCX: 00007f1bf2f9e159
[  182.509697][ T6123] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004
[  182.517672][ T6123] RBP: 00007f1bf303503b R08: 0000000000000000 R09: 0000000000000000
[  182.525647][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.533734][ T6123] R13: 00007f1bf3226038 R14: 00007f1bf3225fa0 R15: 00007ffcd14477c8
[  182.541861][ T6123]  </TASK>
[  182.545020][ T6123] Kernel Offset: disabled
[  182.549347][ T6123] Rebooting in 86400 seconds..